This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json) Hash identifier: RJGQJaITYww6aLJog3JH9LOfD56TzLlxxFnSE04OGsQ= Subject key identifier: 68:74:43:3F:8B:C9:64:EA:F5:5F:CF:7C:E6:98:6A:B2:FD:99:AA:FC Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21 Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21 Certificate serial: 019B6B44BC1A8F86192A0D188E13D37363E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 18:00:25 +0000 Manifest this update: Mon 29 Dec 2025 18:00:25 +0000 Manifest next update: Tue 30 Dec 2025 18:00:25 +0000 Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: QTFl6XFVqMWl8ME+Qfm7umrfKDw4ib8cKXtp4hjY95o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:44:bc:1a:8f:86:19:2a:0d:18:8e:13:d3:73:63:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21 Validity Not Before: Dec 29 18:00:25 2025 GMT Not After : Dec 30 18:00:25 2025 GMT Subject: CN=6874433f8bc964eaf55fcf7ce6986ab2fd99aafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:8a:4d:5f:5e:58:df:91:8b:47:53:d7:70: 41:fc:39:6e:b3:6d:e3:9c:cb:bd:91:0f:d4:ed:5c: 1d:0b:f8:51:93:52:54:9b:73:4e:77:0c:15:e2:6e: 01:1b:f2:72:97:d9:7b:a8:f8:4a:a4:5f:b6:81:0c: 20:8a:53:cb:14:d4:e6:f7:2b:4c:ee:26:8f:ed:4d: 71:0f:6b:05:bb:b7:41:30:ac:34:eb:8d:9d:5f:28: 61:29:f5:8d:4d:a5:bd:38:ed:97:3f:16:4b:2d:22: f4:bd:35:15:d7:b4:af:c8:b0:ae:7d:08:31:96:4e: d7:e3:8c:eb:f9:73:e1:8d:e5:1e:b2:0e:8e:8a:4c: de:c1:51:92:6a:08:93:33:fc:ad:1a:95:cd:07:2e: e2:60:4c:8e:00:9f:9a:95:68:69:7c:5e:af:38:50: 1f:ce:31:d0:24:b9:fe:9b:a4:90:f6:2f:e0:7e:4a: 3a:86:69:65:9d:f8:06:90:6a:61:f6:54:51:98:68: 94:20:b0:6d:59:26:fd:15:56:74:1c:e4:5d:60:ae: 54:8d:37:65:cc:e6:ac:e3:1e:ed:1c:82:d5:c7:15: 7d:20:4c:1e:0d:cd:a4:f7:5e:4d:f4:f0:47:a3:57: 32:e6:05:d1:60:09:6d:76:35:40:40:0b:1a:bf:e9: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:74:43:3F:8B:C9:64:EA:F5:5F:CF:7C:E6:98:6A:B2:FD:99:AA:FC X509v3 Authority Key Identifier: keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:3a:a9:46:08:87:33:6c:0c:14:e0:62:23:27:43:07:a7:31: 1b:32:04:44:f9:09:0e:15:9f:b4:9f:e9:48:d9:a7:e5:0b:8d: 41:6c:de:60:d9:59:b3:b6:ef:d3:90:e3:61:85:51:e2:f4:0e: 7b:8a:4f:73:cc:05:73:1f:3f:6e:1f:75:a0:4d:ac:2a:c8:dd: 0f:7f:27:d6:55:4c:c3:ae:7f:16:03:d7:ab:02:14:e4:cf:03: c6:f1:cf:ab:22:90:ed:ee:8e:0f:f3:e7:31:94:24:0c:f4:ea: a8:94:78:03:b5:2c:41:d5:0f:82:2d:53:8a:61:cb:ae:be:93: 0e:f0:04:e4:6e:f6:bf:d9:56:8c:a7:28:50:28:05:d5:ed:de: 83:a8:63:94:2e:63:2d:22:11:e1:28:28:5e:59:5a:59:ae:52: 83:ec:64:20:ae:ed:d2:73:f2:66:2b:c8:97:3c:ca:f6:ed:f8: 97:3b:94:09:41:62:fa:d6:4a:88:71:be:12:e5:2a:fa:dd:d0: 61:1e:82:75:00:88:29:7e:bd:92:82:ce:7a:a9:ef:99:d0:4e: 44:1b:88:0e:be:2d:13:7b:68:0b:43:27:78:dc:d1:44:1a:33: ac:6f:36:c0:c3:e0:bd:b4:98:21:04:83:67:3d:c8:f5:76:e3: 53:27:f4:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRLwaj4YZKg0YjhPTc2PjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYmVkZGI1YTllMmFiNTMzNDc0MTA4YjdjODAwZjgxMzJm MTBlMjEwHhcNMjUxMjI5MTgwMDI1WhcNMjUxMjMwMTgwMDI1WjAzMTEwLwYDVQQD Eyg2ODc0NDMzZjhiYzk2NGVhZjU1ZmNmN2NlNjk4NmFiMmZkOTlhYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaqKTV9eWN+Ri0dT13BB/Dlus23j nMu9kQ/U7VwdC/hRk1JUm3NOdwwV4m4BG/Jyl9l7qPhKpF+2gQwgilPLFNTm9ytM 7iaP7U1xD2sFu7dBMKw0642dXyhhKfWNTaW9OO2XPxZLLSL0vTUV17SvyLCufQgx lk7X44zr+XPhjeUesg6OikzewVGSagiTM/ytGpXNBy7iYEyOAJ+alWhpfF6vOFAf zjHQJLn+m6SQ9i/gfko6hmllnfgGkGph9lRRmGiUILBtWSb9FVZ0HORdYK5UjTdl zOas4x7tHILVxxV9IEweDc2k915N9PBHo1cy5gXRYAltdjVAQAsav+nq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh0Qz+LyWTq9V/PfOaYarL9mar8MB8GA1UdIwQY MBaAFM2+3bWp4qtTNHQQi3yAD4Ey8Q4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQt OWUxNDMzZjkzYjRlLzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQtOWUxNDMzZjkzYjRl LzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1jqpRgiH M2wMFOBiIydDB6cxGzIERPkJDhWftJ/pSNmn5QuNQWzeYNlZs7bv05DjYYVR4vQO e4pPc8wFcx8/bh91oE2sKsjdD38n1lVMw65/FgPXqwIU5M8DxvHPqyKQ7e6OD/Pn MZQkDPTqqJR4A7UsQdUPgi1TimHLrr6TDvAE5G72v9lWjKcoUCgF1e3eg6hjlC5j LSIR4SgoXllaWa5Sg+xkIK7t0nPyZivIlzzK9u34lzuUCUFi+tZKiHG+EuUq+t3Q YR6CdQCIKX69koLOeqnvmdBORBuIDr4tE3toC0MneNzRRBozrG82wMPgvbSYIQSD Zz3I9XbjUyf04g== -----END CERTIFICATE-----Generated at Tue Dec 30 00:20:08 2025 by rpki-client