This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json) Hash identifier: OWDVvFomcUzBc9np60H8n6Gl8si8k9N3ovbX89rcS8U= Subject key identifier: 1F:B2:8C:FD:0F:A0:03:48:87:47:B0:E3:84:DF:A9:72:79:F5:A4:F8 Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49 Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49 Certificate serial: 019B3DC7DC1C8ABF98190BF926A185FF0D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft Manifest number: 0A65 Signing time: Sat 20 Dec 2025 22:01:06 +0000 Manifest this update: Sat 20 Dec 2025 22:01:06 +0000 Manifest next update: Sun 21 Dec 2025 22:01:06 +0000 Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: Cvp1vkpwp2wM5rXDKIiuK36NIXiDp8Ql4JMsJqt+JHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:dc:1c:8a:bf:98:19:0b:f9:26:a1:85:ff:0d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49 Validity Not Before: Dec 20 22:01:06 2025 GMT Not After : Dec 21 22:01:06 2025 GMT Subject: CN=1fb28cfd0fa003488747b0e384dfa97279f5a4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:0b:03:5b:35:d8:3c:ec:d9:c5:27:29:ee: 9f:9a:3c:f2:71:d4:73:ec:fc:83:30:63:7a:ff:9c: ac:30:a0:c9:23:26:63:08:bf:e1:8a:2e:0c:f4:d5: 18:13:8a:17:3a:c3:5d:8e:ae:ba:68:b6:16:47:7c: 5d:33:b8:18:df:e1:41:5f:f1:aa:e8:13:42:e1:fb: a2:89:82:4a:df:35:c8:34:e5:83:69:d8:22:a3:00: ce:4b:9b:bf:bf:3a:8b:35:87:a9:ca:9e:16:9f:77: 4e:9e:24:00:b7:5b:a5:ea:35:7b:a1:9f:ba:8a:cc: bf:75:7d:5b:94:4a:5c:b0:4e:63:4b:88:ba:55:0e: e5:ea:f5:30:f8:74:08:24:d5:46:f7:ed:06:10:62: 24:43:90:6a:11:a8:1a:c4:1a:8a:9f:a8:fb:35:ba: 15:da:a0:e2:7a:84:50:be:3f:7c:71:df:d8:b9:42: 09:24:33:e6:77:a4:c4:76:6f:49:0f:f2:bd:84:c9: 13:4f:ae:80:97:c0:ba:72:5b:0f:3e:60:f9:3a:82: 7e:4d:02:ce:9b:5a:f0:04:16:15:bb:13:54:19:8e: e4:c3:10:37:f1:be:92:b4:52:74:13:ee:8d:f0:e3: b0:36:ef:41:45:cf:f7:39:0c:e2:96:50:f0:07:0b: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B2:8C:FD:0F:A0:03:48:87:47:B0:E3:84:DF:A9:72:79:F5:A4:F8 X509v3 Authority Key Identifier: keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3c:41:f0:66:a5:5d:bc:16:a2:a4:29:e5:0d:0d:1c:dc:42: 58:fd:04:ff:61:22:f5:5e:df:9d:41:9f:dc:10:31:23:84:d6: 2b:7f:db:e8:97:c8:90:28:81:75:98:78:d0:ba:9b:92:3a:2e: f3:0c:f1:8d:c4:8b:c5:5a:fa:ad:83:16:57:68:f8:74:50:c1: c0:8f:73:3b:24:3e:d6:b9:f5:45:20:03:78:de:f3:48:ff:34: ab:45:0f:3d:78:20:f8:bc:df:7b:7d:1b:53:c8:69:22:50:11: 16:0c:97:9d:b3:a7:46:07:43:2a:af:e3:70:3a:cd:d7:63:10: 66:81:1d:33:76:53:d1:fc:00:f9:77:05:bc:6f:38:e1:40:04: 7e:c9:58:3b:bb:c4:70:d1:42:0f:50:74:f6:5d:21:ce:95:17: ac:11:41:da:03:c4:96:b8:b2:79:02:2b:91:98:3a:bf:9d:7f: 86:75:a1:72:96:32:15:a4:96:89:af:14:5e:ce:dc:3a:d5:48: d7:57:e5:0c:bb:16:9f:09:69:da:51:9a:37:33:5c:d5:94:c9: 91:52:ba:69:eb:ad:95:b3:ff:f2:a4:0b:8d:87:e5:82:4f:4c: 3a:bd:dc:b3:f6:ab:3a:93:09:35:79:ea:93:04:c0:3b:c2:46: bf:1f:e9:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x9wcir+YGQv5JqGF/w1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmUzZDFmZmY5YmQ1NDc5YTEzMzBmODhmYTJlYzA3YzBl YWVjNDkwHhcNMjUxMjIwMjIwMTA2WhcNMjUxMjIxMjIwMTA2WjAzMTEwLwYDVQQD EygxZmIyOGNmZDBmYTAwMzQ4ODc0N2IwZTM4NGRmYTk3Mjc5ZjVhNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmycLA1s12Dzs2cUnKe6fmjzycdRz 7PyDMGN6/5ysMKDJIyZjCL/hii4M9NUYE4oXOsNdjq66aLYWR3xdM7gY3+FBX/Gq 6BNC4fuiiYJK3zXINOWDadgiowDOS5u/vzqLNYepyp4Wn3dOniQAt1ul6jV7oZ+6 isy/dX1blEpcsE5jS4i6VQ7l6vUw+HQIJNVG9+0GEGIkQ5BqEagaxBqKn6j7NboV 2qDieoRQvj98cd/YuUIJJDPmd6TEdm9JD/K9hMkTT66Al8C6clsPPmD5OoJ+TQLO m1rwBBYVuxNUGY7kwxA38b6StFJ0E+6N8OOwNu9BRc/3OQzillDwBwvKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+yjP0PoANIh0ew44TfqXJ59aT4MB8GA1UdIwQY MBaAFM8uPR//m9VHmhMw+I+i7AfA6uxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMt NTMxMjM1ZTU1YjIzLzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMtNTMxMjM1ZTU1YjIz LzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjxB8Gal XbwWoqQp5Q0NHNxCWP0E/2Ei9V7fnUGf3BAxI4TWK3/b6JfIkCiBdZh40Lqbkjou 8wzxjcSLxVr6rYMWV2j4dFDBwI9zOyQ+1rn1RSADeN7zSP80q0UPPXgg+Lzfe30b U8hpIlARFgyXnbOnRgdDKq/jcDrN12MQZoEdM3ZT0fwA+XcFvG844UAEfslYO7vE cNFCD1B09l0hzpUXrBFB2gPElriyeQIrkZg6v51/hnWhcpYyFaSWia8UXs7cOtVI 11flDLsWnwlp2lGaNzNc1ZTJkVK6aeutlbP/8qQLjYflgk9MOr3cs/arOpMJNXnq kwTAO8JGvx/pig== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:38 2025 by rpki-client