This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json) Hash identifier: TB4JhNCQ14gjv2rHyjeiYWz2CCTxKIYJnA1JXQ/nnjs= Subject key identifier: 25:94:4A:F7:F7:38:48:71:CE:80:30:EE:7E:4A:71:50:ED:AE:2D:9E Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d Certificate serial: 019B44384024D0394F998617A7C84FA03070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft Manifest number: 112D Signing time: Mon 22 Dec 2025 04:01:35 +0000 Manifest this update: Mon 22 Dec 2025 04:01:35 +0000 Manifest next update: Tue 23 Dec 2025 04:01:35 +0000 Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: DOwFYwLgiLgDBTnFmZwBUQ8T8Xe/eEVBFZG73qSv5FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:40:24:d0:39:4f:99:86:17:a7:c8:4f:a0:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d Validity Not Before: Dec 22 04:01:35 2025 GMT Not After : Dec 23 04:01:35 2025 GMT Subject: CN=25944af7f7384871ce8030ee7e4a7150edae2d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:01:34:99:17:3b:69:76:8e:d5:c5:d6:3b: d3:06:76:4c:bc:55:bd:10:b7:cd:50:4f:2e:1d:72: a1:d6:a5:79:f5:e3:59:28:c9:a9:ba:b2:e9:42:ad: b0:8b:02:6a:05:5b:71:ff:0e:d9:ca:2b:34:53:6b: e9:67:d0:5d:86:33:a4:5c:73:da:f2:86:36:aa:80: 13:13:4f:ff:f0:67:fb:d2:d9:0e:d4:79:1b:c6:b7: f8:c0:16:9b:dc:e8:05:25:f7:24:8e:56:dd:40:a0: 80:d0:64:37:6d:5f:d0:ab:28:dc:5a:71:90:20:11: 30:99:87:11:7a:7f:b7:11:71:af:e9:7b:91:78:bc: 14:1c:2e:31:2e:c2:4f:0c:4c:85:d4:9d:50:ef:60: 63:00:b2:82:39:52:74:a8:7e:e6:91:19:33:0e:b3: f6:df:5e:b5:99:64:88:03:d3:f9:f7:88:95:75:08: 71:40:00:fc:f5:96:05:74:8f:85:da:f1:3d:37:c5: 1b:07:a7:a7:94:5f:1c:0a:45:e6:ff:a7:fa:b4:89: 53:0d:44:fe:b8:25:04:50:ab:31:2c:eb:ec:59:46: 71:83:eb:d0:16:cc:8b:2f:6e:4d:f3:c8:f1:cd:f9: 93:de:96:43:34:9a:7e:0b:8a:d0:c3:67:d9:62:8b: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:94:4A:F7:F7:38:48:71:CE:80:30:EE:7E:4A:71:50:ED:AE:2D:9E X509v3 Authority Key Identifier: keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:21:c3:08:95:f9:98:69:07:4c:ab:cf:cb:73:38:bb:10:03: a9:80:3c:6e:26:b5:b6:84:11:a3:6f:21:2f:2c:c2:47:e0:9e: 68:d2:2d:bb:57:70:9e:63:5b:c4:6a:43:5b:59:8f:7a:c1:ed: fa:6b:c1:71:cd:be:54:45:fb:08:3a:d4:d8:0d:61:d5:08:31: 6d:f0:e2:94:5a:fd:3b:d7:fd:23:12:ae:9e:4e:bf:b7:3c:ea: a0:fd:f3:80:44:19:ad:31:2d:0e:92:a2:7b:fa:0d:90:dc:aa: 37:ce:8f:76:63:33:b0:9c:8a:30:49:a4:b9:81:57:56:94:84: 07:fe:d3:e2:dd:57:34:f5:5f:cc:ab:61:1d:61:e0:f5:e1:72: 7c:04:fa:77:08:17:ae:3f:30:99:62:60:38:dd:e9:27:8c:fd: db:8e:42:ab:48:0b:c7:02:77:a3:0f:81:e2:ed:d9:1e:4e:39: fc:d6:c4:f3:6f:08:98:13:07:85:1c:d3:44:95:0d:a0:1f:69: ec:a8:5d:d9:b2:75:b1:a1:0d:0c:d3:b3:81:f6:54:f2:f5:25: 37:e3:b1:df:64:62:85:24:13:35:85:e1:e6:41:5b:7d:02:39: ae:9c:74:27:27:6b:b3:9b:78:bd:e3:60:3a:b6:5c:ba:96:b3: 75:c0:38:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOEAk0DlPmYYXp8hPoDBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjBlODI0YzYyYTU5MjhhNjUwMjE0ZWYzM2U4Yzc3ZTdj MWZmOGQwHhcNMjUxMjIyMDQwMTM1WhcNMjUxMjIzMDQwMTM1WjAzMTEwLwYDVQQD EygyNTk0NGFmN2Y3Mzg0ODcxY2U4MDMwZWU3ZTRhNzE1MGVkYWUyZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vUBNJkXO2l2jtXF1jvTBnZMvFW9 ELfNUE8uHXKh1qV59eNZKMmpurLpQq2wiwJqBVtx/w7Zyis0U2vpZ9BdhjOkXHPa 8oY2qoATE0//8Gf70tkO1Hkbxrf4wBab3OgFJfckjlbdQKCA0GQ3bV/QqyjcWnGQ IBEwmYcRen+3EXGv6XuReLwUHC4xLsJPDEyF1J1Q72BjALKCOVJ0qH7mkRkzDrP2 3161mWSIA9P594iVdQhxQAD89ZYFdI+F2vE9N8UbB6enlF8cCkXm/6f6tIlTDUT+ uCUEUKsxLOvsWUZxg+vQFsyLL25N88jxzfmT3pZDNJp+C4rQw2fZYouOVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWUSvf3OEhxzoAw7n5KcVDtri2eMB8GA1UdIwQY MBaAFM3w6CTGKlkoplAhTvM+jHfnwf+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8yMjQ5NjctY2QxYi00NmY5LWE0NmUt MjU4M2FmMjM3ZTJjLzEvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8yMjQ5NjctY2QxYi00NmY5LWE0NmUtMjU4M2FmMjM3ZTJj LzEvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByHDCJX5 mGkHTKvPy3M4uxADqYA8bia1toQRo28hLyzCR+CeaNItu1dwnmNbxGpDW1mPesHt +mvBcc2+VEX7CDrU2A1h1QgxbfDilFr9O9f9IxKunk6/tzzqoP3zgEQZrTEtDpKi e/oNkNyqN86PdmMzsJyKMEmkuYFXVpSEB/7T4t1XNPVfzKthHWHg9eFyfAT6dwgX rj8wmWJgON3pJ4z9245Cq0gLxwJ3ow+B4u3ZHk45/NbE828ImBMHhRzTRJUNoB9p 7Khd2bJ1saENDNOzgfZU8vUlN+Ox32RihSQTNYXh5kFbfQI5rpx0Jydrs5t4veNg OrZcupazdcA46A== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:59 2025 by rpki-client