This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json) Hash identifier: hmQgdXo2eLBgTR9MoZIkKDJaZWSMdBCDFloEP4o8od4= Subject key identifier: 23:01:C7:25:2F:5A:F1:9A:10:9A:F8:8D:30:26:25:65:FD:86:40:9D Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe Certificate serial: 019B657A6C685F0221312F31F459AC1105EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft Manifest number: 0891 Signing time: Sun 28 Dec 2025 15:01:20 +0000 Manifest this update: Sun 28 Dec 2025 15:01:20 +0000 Manifest next update: Mon 29 Dec 2025 15:01:20 +0000 Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: Aj767eD1BNigKckJfpZ+Ld0bcZhc5b/vktmsGNxLnu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:6c:68:5f:02:21:31:2f:31:f4:59:ac:11:05:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe Validity Not Before: Dec 28 15:01:20 2025 GMT Not After : Dec 29 15:01:20 2025 GMT Subject: CN=2301c7252f5af19a109af88d30262565fd86409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:7b:9b:2a:90:00:f2:1f:b0:10:6d:3a:3d: 6a:b9:21:7a:30:a0:7f:87:a5:a1:b5:be:3a:3c:5b: b6:80:60:42:58:db:b6:00:02:f5:f8:cc:1f:95:1b: 3e:60:69:62:dc:15:94:02:cb:e2:61:5b:c8:63:6a: 62:69:8d:72:88:db:8c:de:22:df:90:27:3c:75:30: 2e:07:f5:38:b6:3f:26:f4:0e:6c:40:b5:91:a5:8e: 83:26:b4:65:0d:92:b1:3d:95:7b:27:83:93:5f:d8: 49:66:05:8f:bc:86:bb:76:a1:e5:08:b8:96:46:62: 1f:b6:71:68:6d:b2:69:33:29:60:9c:0b:46:ed:94: ec:34:bf:37:d3:f6:a1:fd:f8:9f:fc:50:b9:76:1f: 38:c0:4c:f7:49:da:1c:a3:e8:ab:82:3e:c7:b0:89: 03:49:a6:c3:58:59:90:f2:a1:fe:16:61:c3:61:63: 9b:29:69:ba:31:82:43:64:e1:84:85:81:90:c0:f7: 7a:1f:03:ed:f0:f6:43:e4:a3:59:b3:6f:a8:b2:73: 26:0a:b9:dc:35:1f:e0:9e:7a:f3:43:57:c4:b5:2f: 84:87:dc:e1:78:82:1f:47:44:0b:86:2d:eb:d6:40: ba:40:1b:13:bb:d8:1b:ff:cc:e9:3f:32:8b:27:0f: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:C7:25:2F:5A:F1:9A:10:9A:F8:8D:30:26:25:65:FD:86:40:9D X509v3 Authority Key Identifier: keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:03:f5:ee:0b:7d:8c:bc:46:96:13:a2:54:13:11:3c:cb:3b: d6:f4:97:ac:93:af:f1:8a:a7:fa:e9:9f:b8:cf:c5:ad:f1:47: 89:53:f8:6c:33:55:6d:ac:22:07:66:3c:0c:40:8a:71:8d:a0: df:c8:7e:69:48:ab:56:09:4e:ec:3b:65:c2:b6:a7:33:1b:df: 24:7b:6e:9b:f5:fa:a2:b4:9b:6a:be:8d:51:95:19:47:c1:ea: ca:65:a9:c1:3a:f5:a9:d9:b4:c6:33:6c:67:d0:cf:ae:9b:42: 0a:1f:20:33:50:a1:00:8d:b1:90:d8:2b:63:85:9e:40:35:32: 96:fe:07:c8:d6:df:3f:77:d8:53:bc:99:59:d2:dd:74:8e:3c: da:d6:70:55:0b:e0:e0:fe:b1:71:37:4d:39:07:4c:2d:9a:4c: 2f:08:32:ce:19:a5:da:03:8b:09:fb:fd:02:14:a7:48:3b:53: cc:7b:5e:a7:87:43:af:7b:bc:00:ac:38:45:4a:74:4e:52:b9: ca:7c:0f:23:06:f0:34:87:56:7b:a5:85:00:42:33:1c:76:dd: 82:b5:eb:22:cf:30:5e:ae:87:18:39:95:ef:f4:71:07:ba:94: 86:39:c8:81:8b:4e:cc:f6:bb:fb:47:51:71:12:75:ea:40:68: da:65:e8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlemxoXwIhMS8x9FmsEQXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjEyYmQwNWZmOWM5MWFlMjIzOGYzMjkwMWNiYWFlMWMz MzcwZmUwHhcNMjUxMjI4MTUwMTIwWhcNMjUxMjI5MTUwMTIwWjAzMTEwLwYDVQQD EygyMzAxYzcyNTJmNWFmMTlhMTA5YWY4OGQzMDI2MjU2NWZkODY0MDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgx7myqQAPIfsBBtOj1quSF6MKB/ h6Whtb46PFu2gGBCWNu2AAL1+MwflRs+YGli3BWUAsviYVvIY2piaY1yiNuM3iLf kCc8dTAuB/U4tj8m9A5sQLWRpY6DJrRlDZKxPZV7J4OTX9hJZgWPvIa7dqHlCLiW RmIftnFobbJpMylgnAtG7ZTsNL830/ah/fif/FC5dh84wEz3Sdoco+irgj7HsIkD SabDWFmQ8qH+FmHDYWObKWm6MYJDZOGEhYGQwPd6HwPt8PZD5KNZs2+osnMmCrnc NR/gnnrzQ1fEtS+Eh9zheIIfR0QLhi3r1kC6QBsTu9gb/8zpPzKLJw8IpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMBxyUvWvGaEJr4jTAmJWX9hkCdMB8GA1UdIwQY MBaAFGbxK9Bf+cka4iOPMpAcuq4cM3D+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82MDUyOGMtYTNmYy00YzgwLTk1ZTEt ZjMzMmViMjljNjYwLzEvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82MDUyOGMtYTNmYy00YzgwLTk1ZTEtZjMzMmViMjljNjYw LzEvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAP17gt9 jLxGlhOiVBMRPMs71vSXrJOv8Yqn+umfuM/FrfFHiVP4bDNVbawiB2Y8DECKcY2g 38h+aUirVglO7DtlwranMxvfJHtum/X6orSbar6NUZUZR8HqymWpwTr1qdm0xjNs Z9DPrptCCh8gM1ChAI2xkNgrY4WeQDUylv4HyNbfP3fYU7yZWdLddI482tZwVQvg 4P6xcTdNOQdMLZpMLwgyzhml2gOLCfv9AhSnSDtTzHtep4dDr3u8AKw4RUp0TlK5 ynwPIwbwNIdWe6WFAEIzHHbdgrXrIs8wXq6HGDmV7/RxB7qUhjnIgYtOzPa7+0dR cRJ16kBo2mXoQw== -----END CERTIFICATE-----Generated at Mon Dec 29 00:56:38 2025 by rpki-client