This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft File: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json) Hash identifier: +7mOthjoTssVnzboKaP9+RIwVwUTDAxaUbWIlI1/bts= Subject key identifier: D2:67:20:09:1A:61:37:E2:24:F6:85:3D:92:AC:DA:2D:66:FF:20:72 Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD Certificate issuer: /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd Certificate serial: 019B2E8B350ACEC2EB98B48A29C124A62087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft Manifest number: 04B6 Signing time: Wed 17 Dec 2025 23:00:33 +0000 Manifest this update: Wed 17 Dec 2025 23:00:33 +0000 Manifest next update: Thu 18 Dec 2025 23:00:33 +0000 Files and hashes: 1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: C5w4wyR1i0AySxR2Rn6HdTLVl+B+2NPWHJghHFeDshs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:35:0a:ce:c2:eb:98:b4:8a:29:c1:24:a6:20:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd Validity Not Before: Dec 17 23:00:33 2025 GMT Not After : Dec 18 23:00:33 2025 GMT Subject: CN=d26720091a6137e224f6853d92acda2d66ff2072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:c1:cd:8a:41:49:a4:ac:08:2e:4a:47:2b: 99:93:e3:9a:14:72:29:ee:7b:81:f3:af:68:84:c3: 33:8a:aa:05:c1:be:9b:c6:41:4f:d5:f3:e9:ed:f2: 1a:c5:8b:20:c2:5b:65:3f:42:a0:fd:86:8d:7e:c6: be:30:3b:d1:ea:8b:78:93:8f:7f:70:7b:37:b7:ec: 71:2d:11:4b:1b:65:e1:fe:10:8c:46:19:79:cc:8e: 51:b3:73:14:a2:28:37:39:10:21:2d:74:58:b8:c1: d6:e3:b3:ee:d6:f0:b8:60:f5:3c:3e:ee:8f:dd:e6: e5:dc:14:7a:58:39:2b:29:5d:0b:2e:5c:5f:89:b7: 81:fd:bc:b4:bd:1f:97:33:c6:1d:18:c0:bf:90:4e: ad:2d:b8:64:8c:d1:86:6a:6a:2e:25:c9:cc:e2:1b: 09:30:c9:49:bb:91:5d:77:2c:0c:ff:9b:37:3e:42: 23:a0:5f:45:37:32:5c:1c:f0:82:b0:6f:46:24:28: e7:84:3d:b7:bf:29:38:4d:1e:e9:86:3e:46:3b:93: ed:4b:b4:11:ad:52:11:14:f8:72:87:93:a6:f9:15: 90:22:e2:f6:08:97:4e:d1:bc:95:49:bf:48:f9:2d: 64:48:95:ae:b5:89:bb:3e:ed:02:ce:08:4d:0d:6a: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:67:20:09:1A:61:37:E2:24:F6:85:3D:92:AC:DA:2D:66:FF:20:72 X509v3 Authority Key Identifier: keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f2:d5:c1:96:8a:c2:ab:af:e1:ba:5f:f6:0c:ca:27:d6:85: 1f:b6:f1:ba:5b:0b:08:00:89:39:34:b7:68:d3:3c:a9:d7:cb: 6d:a5:fd:88:ac:83:0e:d0:e0:2d:a9:82:67:4b:29:4a:dc:ac: 4e:1c:db:46:7f:aa:9e:ca:1b:33:ba:2d:f0:a7:58:c2:56:48: 36:49:c3:c3:e7:4c:fa:db:af:a8:33:74:7e:63:42:50:29:1b: e8:bd:f1:ce:1f:ca:8b:57:59:7d:58:e9:d2:4a:00:4d:fe:d5: db:24:01:ae:e6:fd:4f:3c:97:1d:d4:33:04:b1:86:18:32:e9: 00:37:7c:e9:35:82:3a:eb:6e:43:c9:a5:09:e5:18:98:e8:9a: 83:68:1c:8f:16:f1:9c:98:53:b5:14:4a:61:51:67:82:df:ee: 18:e2:61:86:eb:bf:db:0d:36:34:b1:b5:30:c2:ef:a2:51:9a: 0e:92:d7:b2:6e:54:86:23:51:f4:8c:68:8a:70:25:79:83:50: 5f:41:1d:2f:4f:0b:e3:54:f0:df:61:fc:0d:fd:a0:98:1b:09: 81:8e:f6:ac:a8:fe:ce:a5:d1:9c:17:9e:d8:55:06:35:0b:08: 49:84:65:7e:bf:d3:17:68:2f:dd:a8:c4:b5:95:9d:d7:46:26: 5b:27:95:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuizUKzsLrmLSKKcEkpiCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTExNDRlZGM4YzdiYjJkZGU1MmJlYzFlMmZkOGU3YWYx M2IxZGQwHhcNMjUxMjE3MjMwMDMzWhcNMjUxMjE4MjMwMDMzWjAzMTEwLwYDVQQD EyhkMjY3MjAwOTFhNjEzN2UyMjRmNjg1M2Q5MmFjZGEyZDY2ZmYyMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ/BzYpBSaSsCC5KRyuZk+OaFHIp 7nuB869ohMMziqoFwb6bxkFP1fPp7fIaxYsgwltlP0Kg/YaNfsa+MDvR6ot4k49/ cHs3t+xxLRFLG2Xh/hCMRhl5zI5Rs3MUoig3ORAhLXRYuMHW47Pu1vC4YPU8Pu6P 3ebl3BR6WDkrKV0LLlxfibeB/by0vR+XM8YdGMC/kE6tLbhkjNGGamouJcnM4hsJ MMlJu5FddywM/5s3PkIjoF9FNzJcHPCCsG9GJCjnhD23vyk4TR7phj5GO5PtS7QR rVIRFPhyh5Om+RWQIuL2CJdO0byVSb9I+S1kSJWutYm7Pu0CzghNDWpRPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJnIAkaYTfiJPaFPZKs2i1m/yByMB8GA1UdIwQY MBaAFGThFE7cjHuy3eUr7B4v2OevE7HdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYt ODVkZWFhYjUwOTI3LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYtODVkZWFhYjUwOTI3 LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/LVwZaK wquv4bpf9gzKJ9aFH7bxulsLCACJOTS3aNM8qdfLbaX9iKyDDtDgLamCZ0spStys ThzbRn+qnsobM7ot8KdYwlZINknDw+dM+tuvqDN0fmNCUCkb6L3xzh/Ki1dZfVjp 0koATf7V2yQBrub9TzyXHdQzBLGGGDLpADd86TWCOutuQ8mlCeUYmOiag2gcjxbx nJhTtRRKYVFngt/uGOJhhuu/2w02NLG1MMLvolGaDpLXsm5UhiNR9IxoinAleYNQ X0EdL08L41Tw32H8Df2gmBsJgY72rKj+zqXRnBee2FUGNQsISYRlfr/TF2gv3ajE tZWd10YmWyeV8g== -----END CERTIFICATE-----Generated at Thu Dec 18 06:48:14 2025 by rpki-client