This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json) Hash identifier: RVhhR0T0LXohQw221ph1VQzIxMOAmHfwIhYfxwxXxoA= Subject key identifier: B1:52:F4:24:39:AF:E7:8D:28:00:70:4B:5C:89:60:26:DD:79:26:D4 Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8 Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8 Certificate serial: 019B5FAF18131031B3533C7EB5D4DBCA791A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft Manifest number: 02EE Signing time: Sat 27 Dec 2025 12:01:08 +0000 Manifest this update: Sat 27 Dec 2025 12:01:08 +0000 Manifest next update: Sun 28 Dec 2025 12:01:08 +0000 Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: FRG7BWEmnXRxuraJtAkfNaQO2BmcpRRCYMTY9Y3OkZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:18:13:10:31:b3:53:3c:7e:b5:d4:db:ca:79:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8 Validity Not Before: Dec 27 12:01:08 2025 GMT Not After : Dec 28 12:01:08 2025 GMT Subject: CN=b152f42439afe78d2800704b5c896026dd7926d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:35:44:24:97:df:ca:33:c0:b2:bb:9a:4f: 5a:68:3a:60:ac:40:d7:5f:c5:c9:9b:6f:1c:43:f1: 9c:f0:70:a9:72:c8:8a:d0:30:8e:1f:4b:e2:c2:51: f9:92:3a:02:15:b4:0a:96:23:e8:5b:c2:d9:fc:aa: ec:ce:04:ab:38:c2:42:10:b5:9a:d8:2a:f4:14:c1: 00:76:03:08:d5:da:f8:35:f6:04:da:33:dd:3a:79: 4a:db:b0:22:6b:dd:93:3c:a5:c4:b4:62:6f:c5:3a: 77:96:98:fb:83:87:7d:09:7e:e5:39:f0:4a:59:b8: e3:71:4a:08:94:ef:87:3b:f4:b0:61:fa:d9:a0:7f: aa:b0:65:23:b0:19:27:21:65:22:92:57:f1:42:15: 9c:5d:2b:90:2b:ad:f7:7d:79:6c:81:ca:13:29:f0: 1f:34:6e:f3:ab:7b:ed:2f:71:4b:2b:70:81:0e:30: bb:60:fe:b3:e6:de:c5:e4:09:d9:94:73:82:1d:6c: 2e:73:15:b0:b5:5e:cf:01:9b:06:f8:e7:e3:ce:16: f6:fd:9e:a9:eb:38:4d:24:32:39:fa:87:5d:45:bf: 86:2d:26:9e:c6:2f:94:51:55:c9:b5:24:f7:12:40: 2e:81:74:d2:ed:1a:2a:c1:cc:63:82:0c:ac:34:ad: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:52:F4:24:39:AF:E7:8D:28:00:70:4B:5C:89:60:26:DD:79:26:D4 X509v3 Authority Key Identifier: keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6f:f3:81:0a:e4:97:1f:24:17:50:a8:be:01:7d:29:5b:b3: ac:36:c6:8e:94:08:df:ff:15:16:64:64:3b:8e:c9:aa:22:b0: ae:9c:f4:8d:82:7b:6d:ad:d0:04:24:b1:0d:73:81:f7:c6:88: b8:f4:27:fb:6a:44:61:9e:3c:42:01:82:92:59:25:a5:1b:7c: e0:fd:e0:39:0d:de:32:ab:0a:eb:d2:56:f3:2e:6e:0b:10:db: 4c:50:94:21:48:3a:a0:54:27:ee:5f:ae:61:e2:d4:9f:0b:1a: 2f:23:b0:c0:8b:af:1d:ac:8d:7a:7a:d6:77:8d:e2:48:00:b8: 17:fd:4c:cc:5f:48:18:4a:10:42:f2:b5:02:5e:4e:98:98:05: 69:9d:9f:92:94:55:cf:bc:6e:3a:2e:f5:e7:17:f8:ce:87:5b: 29:f5:f6:73:b3:cd:f6:36:d6:f0:ce:8d:0b:9d:d0:42:01:6a: 15:c8:42:aa:c4:06:14:27:1e:94:0f:95:35:59:31:2c:d6:81: cc:24:f1:41:4e:d1:07:aa:50:3f:7b:51:b4:4d:d4:f8:9f:11: 22:6f:c2:2c:3a:1a:47:40:89:07:61:69:75:84:41:49:d4:6c: aa:56:52:52:0e:9b:c5:d3:4e:9d:79:78:c0:c6:34:11:9a:49: 2f:60:3e:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfrxgTEDGzUzx+tdTbynkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmU1MjEwOTNiYjg5ZGM3NjI1MGIyMjdmN2Y3ZmJhNjZl MjI4ZDgwHhcNMjUxMjI3MTIwMTA4WhcNMjUxMjI4MTIwMTA4WjAzMTEwLwYDVQQD EyhiMTUyZjQyNDM5YWZlNzhkMjgwMDcwNGI1Yzg5NjAyNmRkNzkyNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqps1RCSX38ozwLK7mk9aaDpgrEDX X8XJm28cQ/Gc8HCpcsiK0DCOH0viwlH5kjoCFbQKliPoW8LZ/KrszgSrOMJCELWa 2Cr0FMEAdgMI1dr4NfYE2jPdOnlK27Aia92TPKXEtGJvxTp3lpj7g4d9CX7lOfBK WbjjcUoIlO+HO/SwYfrZoH+qsGUjsBknIWUiklfxQhWcXSuQK633fXlsgcoTKfAf NG7zq3vtL3FLK3CBDjC7YP6z5t7F5AnZlHOCHWwucxWwtV7PAZsG+Ofjzhb2/Z6p 6zhNJDI5+oddRb+GLSaexi+UUVXJtST3EkAugXTS7RoqwcxjggysNK0RUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFS9CQ5r+eNKABwS1yJYCbdeSbUMB8GA1UdIwQY MBaAFGa+UhCTu4ncdiULIn9/f7pm4ijYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmY5YjMtZGUyYi00MWY1LWE5NDkt OTAwMzBkMDQwZmY3LzEvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zMmY5YjMtZGUyYi00MWY1LWE5NDktOTAwMzBkMDQwZmY3 LzEvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2/zgQrk lx8kF1CovgF9KVuzrDbGjpQI3/8VFmRkO47JqiKwrpz0jYJ7ba3QBCSxDXOB98aI uPQn+2pEYZ48QgGCklklpRt84P3gOQ3eMqsK69JW8y5uCxDbTFCUIUg6oFQn7l+u YeLUnwsaLyOwwIuvHayNenrWd43iSAC4F/1MzF9IGEoQQvK1Al5OmJgFaZ2fkpRV z7xuOi715xf4zodbKfX2c7PN9jbW8M6NC53QQgFqFchCqsQGFCcelA+VNVkxLNaB zCTxQU7RB6pQP3tRtE3U+J8RIm/CLDoaR0CJB2FpdYRBSdRsqlZSUg6bxdNOnXl4 wMY0EZpJL2A+9A== -----END CERTIFICATE-----Generated at Sat Dec 27 17:36:59 2025 by rpki-client