This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json) Hash identifier: kbe/oS//0tRBrPGYvNKS26qR/Q2W2QZEWII3TzxjC+Q= Subject key identifier: A5:DA:C8:97:95:66:24:FE:3A:CF:02:73:1A:A2:D2:20:F5:FE:F1:E5 Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe Certificate serial: 019B47019C0A42DA473480EB7FD479D25169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft Manifest number: 14F4 Signing time: Mon 22 Dec 2025 17:00:46 +0000 Manifest this update: Mon 22 Dec 2025 17:00:46 +0000 Manifest next update: Tue 23 Dec 2025 17:00:46 +0000 Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: gcaz0omYPR7nb2xsN7SgapeqNtp62shH7NQaDZHRtHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:9c:0a:42:da:47:34:80:eb:7f:d4:79:d2:51:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe Validity Not Before: Dec 22 17:00:46 2025 GMT Not After : Dec 23 17:00:46 2025 GMT Subject: CN=a5dac897956624fe3acf02731aa2d220f5fef1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:d1:f9:f8:e4:ba:2f:04:5b:3d:a4:a6:81: 04:83:ef:20:27:4b:c4:5b:a8:cb:a8:2f:07:60:03: 35:06:1a:ff:c9:7d:9b:f6:0a:fa:4b:8b:c2:42:4c: e6:ff:d6:64:d6:ab:2a:a1:69:27:19:77:c4:12:36: 8a:0d:40:79:57:3e:91:f9:67:5c:ae:5d:12:0e:8a: cb:e8:40:79:3f:69:e5:d5:57:42:2e:a7:f0:b1:37: 57:b6:b9:76:37:e6:25:87:bd:85:7a:0d:4c:be:e1: 2e:76:52:96:2d:78:3e:42:63:38:31:4e:a5:4a:49: 47:1e:a8:db:e5:43:c3:1a:f9:4e:bb:9a:c3:19:27: 3f:79:fa:10:d6:b8:d1:c9:90:e7:e4:c9:15:e4:94: ca:dc:13:08:d2:ec:ca:c1:2a:35:99:0a:fc:8a:f3: 16:fe:f4:8b:5a:d3:b5:65:82:cd:7a:0c:01:7c:a4: 13:ed:94:74:c2:44:cb:71:96:2b:5c:23:9a:7d:a6: b9:e8:d5:0d:4f:31:01:e3:7c:04:22:50:d1:a5:32: fc:c7:35:82:22:81:a1:3f:bf:ff:fc:a3:23:56:d9: 08:49:02:cc:bb:ac:24:1d:9f:89:7d:f7:7d:af:7d: b7:1c:6a:90:42:b2:3b:bc:eb:03:aa:bf:7e:61:4f: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DA:C8:97:95:66:24:FE:3A:CF:02:73:1A:A2:D2:20:F5:FE:F1:E5 X509v3 Authority Key Identifier: keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2e:a2:21:e4:28:96:89:01:f6:8c:6f:21:54:cb:c2:a2:b2: e3:bf:5f:2e:43:03:4c:12:6f:78:2d:cf:77:5b:22:e1:30:04: ee:94:a1:3f:8f:57:11:f0:7c:ac:c6:0d:1c:0f:06:18:14:c8: 11:45:fd:c6:ac:38:eb:cc:7e:12:5a:9d:fd:15:ae:39:d2:e5: e0:57:75:38:94:60:3d:43:73:e5:a5:74:f3:51:a7:3e:31:c0: 60:92:f2:12:12:27:e1:3d:f3:27:35:22:53:bf:1b:b7:7b:d5: 51:69:dc:1a:01:50:41:ef:20:e9:b9:be:ee:af:a9:66:bc:7d: 4f:6d:c7:d0:e0:c9:6b:2e:91:31:c6:b1:40:44:01:41:5f:94: 2c:ce:af:94:bc:3f:2d:15:0c:52:ba:b4:bb:6f:cd:c7:11:73: 7c:55:9e:fe:58:b9:46:e4:8d:66:60:27:10:15:33:b4:9f:0f: bd:ad:44:e6:c0:34:69:62:c7:73:a8:e3:70:8d:c2:6b:34:c2: 14:ec:25:ef:b6:e0:ce:2d:2c:1a:7b:40:58:34:48:18:1d:06: e2:84:03:bd:80:69:14:95:52:df:cd:31:54:da:9f:71:e9:41: e0:8a:d7:98:e5:8f:7f:ec:a2:88:42:6d:8a:b4:85:79:aa:a6: ef:66:9d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAZwKQtpHNIDrf9R50lFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTMzYjc5NGU1NTgwMmMxMDQ1YTg3NWYwMzNhYTBjYTc0 YTBmYmUwHhcNMjUxMjIyMTcwMDQ2WhcNMjUxMjIzMTcwMDQ2WjAzMTEwLwYDVQQD EyhhNWRhYzg5Nzk1NjYyNGZlM2FjZjAyNzMxYWEyZDIyMGY1ZmVmMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDfR+fjkui8EWz2kpoEEg+8gJ0vE W6jLqC8HYAM1Bhr/yX2b9gr6S4vCQkzm/9Zk1qsqoWknGXfEEjaKDUB5Vz6R+Wdc rl0SDorL6EB5P2nl1VdCLqfwsTdXtrl2N+Ylh72Feg1MvuEudlKWLXg+QmM4MU6l SklHHqjb5UPDGvlOu5rDGSc/efoQ1rjRyZDn5MkV5JTK3BMI0uzKwSo1mQr8ivMW /vSLWtO1ZYLNegwBfKQT7ZR0wkTLcZYrXCOafaa56NUNTzEB43wEIlDRpTL8xzWC IoGhP7///KMjVtkISQLMu6wkHZ+Jffd9r323HGqQQrI7vOsDqr9+YU89kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXayJeVZiT+Os8Ccxqi0iD1/vHlMB8GA1UdIwQY MBaAFGWTO3lOVYAsEEWodfAzqgynSg++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTct ZmE3NjQ1NzZiZDhlLzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTctZmE3NjQ1NzZiZDhl LzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC6iIeQo lokB9oxvIVTLwqKy479fLkMDTBJveC3Pd1si4TAE7pShP49XEfB8rMYNHA8GGBTI EUX9xqw468x+Elqd/RWuOdLl4Fd1OJRgPUNz5aV081GnPjHAYJLyEhIn4T3zJzUi U78bt3vVUWncGgFQQe8g6bm+7q+pZrx9T23H0ODJay6RMcaxQEQBQV+ULM6vlLw/ LRUMUrq0u2/NxxFzfFWe/li5RuSNZmAnEBUztJ8Pva1E5sA0aWLHc6jjcI3CazTC FOwl77bgzi0sGntAWDRIGB0G4oQDvYBpFJVS380xVNqfcelB4IrXmOWPf+yiiEJt irSFeaqm72ad3w== -----END CERTIFICATE-----Generated at Mon Dec 22 22:59:31 2025 by rpki-client