This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft File: mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json) Hash identifier: r+4XpdNxmzAkj6aaRoEkkyQd9kt8RpFGm6eMiJn+Kss= Subject key identifier: 24:A7:98:96:D4:FB:FF:31:D7:E2:22:57:06:FC:D6:F5:7C:3A:4B:BA Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5 Certificate issuer: /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5 Certificate serial: 019B40C8D50543F4C76BB7D632491B3C92B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 12:01:02 +0000 Manifest this update: Sun 21 Dec 2025 12:01:02 +0000 Manifest next update: Mon 22 Dec 2025 12:01:02 +0000 Files and hashes: 1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: cGCsqEptuRJoPmffcvYUbI3JcAXPb7/YSj7bhHtD14Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:d5:05:43:f4:c7:6b:b7:d6:32:49:1b:3c:92:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5 Validity Not Before: Dec 21 12:01:02 2025 GMT Not After : Dec 22 12:01:02 2025 GMT Subject: CN=24a79896d4fbff31d7e2225706fcd6f57c3a4bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:82:e0:8b:8d:fa:a8:70:b2:b7:5d:c6:6c: d6:47:24:a6:ff:a8:64:95:eb:24:d4:69:a4:1e:b6: 1c:8c:91:f2:90:35:ca:17:bb:f7:6e:16:83:7e:1c: 95:7f:3f:23:0d:f0:8f:e1:31:62:af:65:ce:76:b1: de:e4:80:fc:a9:36:a9:fc:ff:b8:1f:85:56:2a:9e: ac:06:90:85:23:2c:eb:f9:08:b8:2a:ed:72:72:e1: 02:a3:92:18:76:64:04:2d:11:29:f3:28:98:74:ad: fe:76:b8:aa:2e:eb:d0:e3:05:6f:e1:ec:0d:40:c4: e4:eb:b4:bb:08:52:e1:62:8c:87:0b:95:22:69:72: 04:ce:56:71:60:09:61:0d:d9:c5:d2:48:2a:d1:27: db:9c:e8:ba:6d:8b:90:6b:49:7d:00:74:51:54:02: d5:d9:97:0e:3f:17:8f:49:f6:9e:81:6b:38:18:be: a3:6e:2b:81:af:e4:b2:0c:82:e0:4c:10:3f:b2:cb: 26:7e:b1:7b:24:97:37:be:d9:30:4b:9e:58:fa:15: fa:c6:4b:5a:f7:37:7a:9f:7e:37:62:8e:b2:d3:09: 85:b2:f3:80:50:ed:b9:5a:b3:89:9c:1d:e2:61:3f: 73:1a:fa:67:7c:bb:93:74:5e:36:55:e8:64:93:59: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A7:98:96:D4:FB:FF:31:D7:E2:22:57:06:FC:D6:F5:7C:3A:4B:BA X509v3 Authority Key Identifier: keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:37:b3:e5:c1:65:7c:f1:fc:e8:03:4b:98:ea:3a:66:06:20: b1:2c:3f:53:da:c3:c6:ab:fa:eb:5d:8c:3c:b0:74:84:8b:a8: f8:9f:64:2a:93:79:9c:f6:64:5b:da:23:6a:a9:c9:2f:28:50: 6e:70:3d:ef:d4:3f:7b:27:4c:5d:1a:8b:bc:84:65:31:5c:fa: 4e:48:ce:2e:d0:c3:de:db:af:c3:6f:9d:fd:27:81:08:27:d9: 69:94:73:19:4e:91:3d:d4:8a:ba:91:42:e4:73:f2:dd:db:ba: 12:83:43:d3:c9:d0:48:bc:d4:a8:57:40:fc:f6:bd:7a:ba:98: 4f:40:45:84:64:48:2b:d6:24:2b:50:8b:cf:54:e1:ef:dc:c9: 9d:3c:45:c3:cf:69:50:16:ea:ff:da:21:f1:17:0f:13:4e:a7: 97:e4:66:7f:e7:d5:18:52:af:6b:99:48:2f:80:75:ad:d5:c3: a7:65:6a:fa:33:a1:d9:1d:6c:d4:f2:01:bd:a9:1d:45:45:00: 2d:64:38:d2:e9:f7:75:53:df:de:17:00:b3:4e:ce:bf:96:00: 40:03:f5:83:b8:f4:f5:a1:c6:78:fe:8a:df:aa:5c:12:31:38: e4:07:aa:f3:1e:76:10:a2:05:1f:91:c3:29:08:56:d4:b5:60: f3:44:93:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyNUFQ/THa7fWMkkbPJKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTc5YzkzYTkyMmZiZjczNDkzYmU2YWQ2NWViM2JmZWJh Nzc3YzUwHhcNMjUxMjIxMTIwMTAyWhcNMjUxMjIyMTIwMTAyWjAzMTEwLwYDVQQD EygyNGE3OTg5NmQ0ZmJmZjMxZDdlMjIyNTcwNmZjZDZmNTdjM2E0YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgaC4IuN+qhwsrddxmzWRySm/6hk lesk1GmkHrYcjJHykDXKF7v3bhaDfhyVfz8jDfCP4TFir2XOdrHe5ID8qTap/P+4 H4VWKp6sBpCFIyzr+Qi4Ku1ycuECo5IYdmQELREp8yiYdK3+driqLuvQ4wVv4ewN QMTk67S7CFLhYoyHC5UiaXIEzlZxYAlhDdnF0kgq0SfbnOi6bYuQa0l9AHRRVALV 2ZcOPxePSfaegWs4GL6jbiuBr+SyDILgTBA/sssmfrF7JJc3vtkwS55Y+hX6xkta 9zd6n343Yo6y0wmFsvOAUO25WrOJnB3iYT9zGvpnfLuTdF42Vehkk1ngWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSnmJbU+/8x1+IiVwb81vV8Oku6MB8GA1UdIwQY MBaAFJmXnJOpIvv3NJO+atZes7/rp3fFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZGYxNzEtNWNjMy00YzZlLTgwOWQt YzA5MWRhNjg2OGM3LzEvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hZGYxNzEtNWNjMy00YzZlLTgwOWQtYzA5MWRhNjg2OGM3 LzEvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjez5cFl fPH86ANLmOo6ZgYgsSw/U9rDxqv6612MPLB0hIuo+J9kKpN5nPZkW9ojaqnJLyhQ bnA979Q/eydMXRqLvIRlMVz6TkjOLtDD3tuvw2+d/SeBCCfZaZRzGU6RPdSKupFC 5HPy3du6EoND08nQSLzUqFdA/Pa9erqYT0BFhGRIK9YkK1CLz1Th79zJnTxFw89p UBbq/9oh8RcPE06nl+Rmf+fVGFKva5lIL4B1rdXDp2Vq+jOh2R1s1PIBvakdRUUA LWQ40un3dVPf3hcAs07Ov5YAQAP1g7j09aHGeP6K36pcEjE45Aeq8x52EKIFH5HD KQhW1LVg80STZA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:55:56 2025 by rpki-client