This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json) Hash identifier: nNR1PeoxkAiEGeF7zMMHtFbByay6aBUkuI8D9Fqzo9c= Subject key identifier: E5:06:07:2B:F7:9B:7D:CB:DD:90:64:1A:69:FD:18:41:40:0B:61:8E Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e Certificate serial: 019B3A2203619EBD28648F6F2B8EDA571A00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft Manifest number: 06E8 Signing time: Sat 20 Dec 2025 05:01:06 +0000 Manifest this update: Sat 20 Dec 2025 05:01:06 +0000 Manifest next update: Sun 21 Dec 2025 05:01:06 +0000 Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: DV49hM7JSD34np/LUWfkL9H6PuwAfTqOXOL/lCsmtUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:03:61:9e:bd:28:64:8f:6f:2b:8e:da:57:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e Validity Not Before: Dec 20 05:01:06 2025 GMT Not After : Dec 21 05:01:06 2025 GMT Subject: CN=e506072bf79b7dcbdd90641a69fd1841400b618e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:63:34:a7:be:ef:58:d0:54:74:de:0f:b6: 9d:8c:86:14:e5:68:9f:f8:1f:00:32:8a:0e:b9:88: e7:00:dc:22:03:0f:59:06:8a:ca:2a:4f:1a:fc:94: 46:cc:95:27:51:dd:d0:4b:ee:6b:19:b5:2c:30:9a: 9b:6a:b2:61:ab:d4:c0:8b:1e:e5:22:ce:ff:60:2e: 11:d3:5d:4d:eb:04:71:82:0c:14:fb:44:58:66:18: d9:ad:10:09:c4:e3:d3:15:5f:55:d0:b5:4d:e1:d7: 67:fd:91:11:7e:c7:96:c5:49:43:72:e0:85:26:9a: 23:2f:c9:ba:0d:46:e3:8b:72:a4:0b:76:cb:18:38: 48:17:d6:25:7a:da:cc:36:0f:de:85:64:0c:69:39: 95:ae:d8:01:a2:4f:73:e8:10:25:d5:75:b1:cf:2a: ef:e3:f1:3c:53:ff:7e:06:98:c4:03:1c:a1:84:2b: b6:c9:79:bb:bf:dc:7a:6a:bf:16:c6:a5:c1:41:dc: 27:71:8b:9d:f0:76:e5:65:e5:dc:79:0d:b0:13:e9: bf:ab:73:0e:a6:4e:14:e6:b1:b9:80:88:42:c2:c5: ac:f5:57:66:68:32:66:64:ee:b9:97:1e:39:29:80: 3a:87:ae:fe:e1:5b:7a:a0:87:bc:02:58:a0:09:ab: 39:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:06:07:2B:F7:9B:7D:CB:DD:90:64:1A:69:FD:18:41:40:0B:61:8E X509v3 Authority Key Identifier: keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:da:71:fa:ac:58:1a:52:87:4e:ef:81:ef:ef:c1:9b:72:8f: 9b:76:49:b3:ec:03:1f:67:f1:34:22:47:74:6c:a8:a0:04:27: 11:ee:1d:7d:d6:88:63:8a:b3:fd:c1:a4:73:e7:40:95:fd:d5: 40:e2:c5:85:0b:59:43:4d:84:97:22:13:8b:f2:53:e1:ff:f0: fc:48:d3:de:e8:65:8a:f0:00:55:e9:02:82:58:42:d1:d8:9b: 6d:e1:1a:ec:d4:d5:f5:c8:d5:7e:8b:5b:b5:47:0d:17:46:91: 22:aa:95:c6:d7:90:0a:52:22:13:9e:54:60:dc:bd:fa:ef:d1: cf:d4:bf:fd:83:b8:ef:5a:4a:a1:60:7f:ab:5c:a6:14:3a:f1: ca:d5:07:fe:94:20:4b:83:fa:d8:bc:bf:e9:a3:8a:62:24:f6: 13:6b:4c:76:42:8e:33:ac:88:8a:78:e9:8d:ba:f1:22:2c:5f: 05:d3:d6:98:93:3a:1d:f4:99:a1:6a:d9:3a:bf:ae:0c:38:5e: 79:c4:72:9d:ab:c1:f8:77:0d:69:83:ba:49:9e:a3:07:de:cd: f7:74:70:6a:55:27:31:ca:f8:c1:5a:a3:5b:0d:fd:39:59:ec: 57:85:bc:db:d9:4b:8d:69:49:e6:d8:c7:e4:6f:51:91:98:cb: 0a:af:80:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IgNhnr0oZI9vK47aVxoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx Zjc2NGUwHhcNMjUxMjIwMDUwMTA2WhcNMjUxMjIxMDUwMTA2WjAzMTEwLwYDVQQD EyhlNTA2MDcyYmY3OWI3ZGNiZGQ5MDY0MWE2OWZkMTg0MTQwMGI2MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe1jNKe+71jQVHTeD7adjIYU5Wif +B8AMooOuYjnANwiAw9ZBorKKk8a/JRGzJUnUd3QS+5rGbUsMJqbarJhq9TAix7l Is7/YC4R011N6wRxggwU+0RYZhjZrRAJxOPTFV9V0LVN4ddn/ZERfseWxUlDcuCF JpojL8m6DUbji3KkC3bLGDhIF9YletrMNg/ehWQMaTmVrtgBok9z6BAl1XWxzyrv 4/E8U/9+BpjEAxyhhCu2yXm7v9x6ar8WxqXBQdwncYud8HblZeXceQ2wE+m/q3MO pk4U5rG5gIhCwsWs9VdmaDJmZO65lx45KYA6h67+4Vt6oIe8AligCas5cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUGByv3m33L3ZBkGmn9GEFAC2GOMB8GA1UdIwQY MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4 LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9px+qxY GlKHTu+B7+/Bm3KPm3ZJs+wDH2fxNCJHdGyooAQnEe4dfdaIY4qz/cGkc+dAlf3V QOLFhQtZQ02ElyITi/JT4f/w/EjT3uhlivAAVekCglhC0dibbeEa7NTV9cjVfotb tUcNF0aRIqqVxteQClIiE55UYNy9+u/Rz9S//YO471pKoWB/q1ymFDrxytUH/pQg S4P62Ly/6aOKYiT2E2tMdkKOM6yIinjpjbrxIixfBdPWmJM6HfSZoWrZOr+uDDhe ecRynavB+HcNaYO6SZ6jB97N93RwalUnMcr4wVqjWw39OVnsV4W829lLjWlJ5tjH 5G9RkZjLCq+AGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:53 2025 by rpki-client