This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft File: zfQLRgtIuPNm_sXKObMcOAxkWjI.mft (raw, json) Hash identifier: 79zTwvjW+oZv+6uASPvrk79fVA7UDz6UnXQMLDLrNGA= Subject key identifier: 3D:13:1A:12:EB:44:8C:E9:C1:6E:47:18:72:30:B4:96:47:23:85:84 Authority key identifier: CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32 Certificate issuer: /CN=cdf40b460b48b8f366fec5ca39b31c380c645a32 Certificate serial: 019B62422553B566DA69573B7B7830A5D1F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft Manifest number: 0262 Signing time: Sun 28 Dec 2025 00:01:00 +0000 Manifest this update: Sun 28 Dec 2025 00:01:00 +0000 Manifest next update: Mon 29 Dec 2025 00:01:00 +0000 Files and hashes: 1: zfQLRgtIuPNm_sXKObMcOAxkWjI.crl (hash: /9+DVJD+YoGVuzWUpUj7nJTCwnvLoh4DX6Ao4n8dm+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:25:53:b5:66:da:69:57:3b:7b:78:30:a5:d1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf40b460b48b8f366fec5ca39b31c380c645a32 Validity Not Before: Dec 28 00:01:00 2025 GMT Not After : Dec 29 00:01:00 2025 GMT Subject: CN=3d131a12eb448ce9c16e47187230b49647238584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:99:18:bf:fa:03:f0:3e:94:8d:f9:05:89: b0:2b:e0:3f:99:ef:21:65:20:db:89:e1:0d:41:91: a4:3e:30:b5:01:3d:8b:23:3b:e9:6a:b2:c5:58:8a: 3f:2c:d7:49:6b:d3:bf:3c:64:83:cf:c9:f4:4f:e9: fe:0d:d9:db:8c:b5:e8:7b:1c:1a:bc:9e:e1:4a:61: c7:08:4e:32:25:4c:3c:a4:f6:fc:10:a1:78:ad:92: c3:df:3e:be:4c:aa:62:65:24:2b:89:7e:34:9b:f8: dc:cd:b1:54:2b:1d:a5:18:f9:ec:ab:7e:da:9f:75: da:b5:1f:7a:3b:5a:f0:0a:fc:7a:92:57:ca:e5:32: 89:a7:94:98:e9:f5:40:92:06:7d:05:de:06:aa:51: 5a:6a:4c:d3:16:40:47:de:89:a7:78:76:d7:e7:5e: 5d:9a:a5:51:2d:58:82:28:07:fc:be:63:4f:6b:32: 83:f4:7b:dc:53:11:e1:9d:09:16:e3:82:9d:3b:00: 11:59:82:72:86:24:0b:25:b0:99:01:d1:f1:b1:18: 11:71:72:12:32:49:98:29:35:3c:a0:98:13:02:3d: 99:2b:1c:e2:7d:40:fe:a8:12:35:53:7c:b6:80:5b: bf:a9:0e:2e:60:81:7a:c0:06:a3:32:14:ac:58:3b: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:1A:12:EB:44:8C:E9:C1:6E:47:18:72:30:B4:96:47:23:85:84 X509v3 Authority Key Identifier: keyid:CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:78:01:ab:f8:29:a3:e9:36:db:6d:85:2b:30:f0:d5:31:04: dd:e8:3a:00:df:86:b5:da:20:5a:dc:26:bb:a2:39:0e:44:5f: 97:57:c5:fb:6c:a7:94:00:0a:2e:8d:d8:34:3f:02:5b:9d:fb: b8:8c:51:06:b1:32:5f:0c:be:f3:12:5e:a9:cc:79:03:b4:4c: 7b:60:bb:95:a9:c7:50:c0:29:c8:26:8d:92:c4:13:48:67:1f: d5:97:45:48:01:9c:e0:50:57:3a:08:4e:60:04:6d:98:97:b6: c0:97:01:00:e5:3f:ca:fe:bc:78:ae:89:f6:f7:3c:5e:7f:c2: c0:29:46:02:59:2f:8f:88:ba:11:e6:e7:38:37:27:18:ac:15: ff:8c:74:5d:24:61:d1:ba:b3:53:02:ef:cb:13:8e:9b:66:3c: 96:96:60:09:4c:a7:8a:5c:c7:52:6f:26:b1:9b:0c:01:ac:7e: 6d:4e:68:3b:25:8a:20:12:6e:f6:d2:6d:b1:35:1c:4c:7c:21: 5f:87:93:df:69:b3:69:3d:d8:ff:1f:f8:c0:f4:cc:ec:91:ef: ff:14:86:e6:e8:6a:1b:91:c3:e0:a7:ba:64:b8:c0:ec:c1:2d: 03:3e:7e:2c:11:f7:91:af:4f:4c:eb:41:ec:dd:dd:08:44:10: 14:49:7b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQiVTtWbaaVc7e3gwpdH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjQwYjQ2MGI0OGI4ZjM2NmZlYzVjYTM5YjMxYzM4MGM2 NDVhMzIwHhcNMjUxMjI4MDAwMTAwWhcNMjUxMjI5MDAwMTAwWjAzMTEwLwYDVQQD EygzZDEzMWExMmViNDQ4Y2U5YzE2ZTQ3MTg3MjMwYjQ5NjQ3MjM4NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZiZGL/6A/A+lI35BYmwK+A/me8h ZSDbieENQZGkPjC1AT2LIzvparLFWIo/LNdJa9O/PGSDz8n0T+n+DdnbjLXoexwa vJ7hSmHHCE4yJUw8pPb8EKF4rZLD3z6+TKpiZSQriX40m/jczbFUKx2lGPnsq37a n3XatR96O1rwCvx6klfK5TKJp5SY6fVAkgZ9Bd4GqlFaakzTFkBH3omneHbX515d mqVRLViCKAf8vmNPazKD9HvcUxHhnQkW44KdOwARWYJyhiQLJbCZAdHxsRgRcXIS MkmYKTU8oJgTAj2ZKxzifUD+qBI1U3y2gFu/qQ4uYIF6wAajMhSsWDtE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0TGhLrRIzpwW5HGHIwtJZHI4WEMB8GA1UdIwQY MBaAFM30C0YLSLjzZv7FyjmzHDgMZFoyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YWM1MGYtNDQ5MS00NGE1LTkwYmYt YTdlZjFkY2ZkNWYxLzEvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YWM1MGYtNDQ5MS00NGE1LTkwYmYtYTdlZjFkY2ZkNWYx LzEvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXgBq/gp o+k2222FKzDw1TEE3eg6AN+GtdogWtwmu6I5DkRfl1fF+2ynlAAKLo3YND8CW537 uIxRBrEyXwy+8xJeqcx5A7RMe2C7lanHUMApyCaNksQTSGcf1ZdFSAGc4FBXOghO YARtmJe2wJcBAOU/yv68eK6J9vc8Xn/CwClGAlkvj4i6EebnODcnGKwV/4x0XSRh 0bqzUwLvyxOOm2Y8lpZgCUynilzHUm8msZsMAax+bU5oOyWKIBJu9tJtsTUcTHwh X4eT32mzaT3Y/x/4wPTM7JHv/xSG5uhqG5HD4Ke6ZLjA7MEtAz5+LBH3ka9PTOtB 7N3dCEQQFEl7+A== -----END CERTIFICATE-----Generated at Sun Dec 28 09:43:12 2025 by rpki-client