This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json) Hash identifier: CbV9vDRcqi6oX39+/YE4xlBeX/WaG2aSmjuEuIWG1qk= Subject key identifier: E3:05:F3:7B:52:5D:77:63:41:FC:D9:6F:AF:8E:2B:20:FC:E8:DD:27 Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a Certificate serial: 019B55994A864900DD3429AD75C82746D69D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft Manifest number: 1792 Signing time: Thu 25 Dec 2025 13:01:07 +0000 Manifest this update: Thu 25 Dec 2025 13:01:07 +0000 Manifest next update: Fri 26 Dec 2025 13:01:07 +0000 Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: lm345Ocaw/i/4dlLnW6Ra1dfwxGlxnR1IhwUffdhGgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:4a:86:49:00:dd:34:29:ad:75:c8:27:46:d6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a Validity Not Before: Dec 25 13:01:07 2025 GMT Not After : Dec 26 13:01:07 2025 GMT Subject: CN=e305f37b525d776341fcd96faf8e2b20fce8dd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:1d:1a:3a:95:50:ca:e9:0a:12:2b:9e:94: 57:cf:5e:dc:56:12:03:0f:be:04:44:ef:23:6e:a3: 07:9c:cc:87:f0:6c:90:aa:64:b9:a8:1f:f1:ed:bf: aa:4e:95:55:d9:55:25:86:fa:1e:90:f4:5b:63:fd: 63:5b:82:f5:fc:4a:82:ab:4e:a7:db:5c:e0:0f:a1: ed:ca:5e:7e:89:45:16:cb:5c:f5:16:f1:51:d4:d6: 44:26:30:66:e2:a0:68:fa:61:f4:3e:5c:b3:66:ab: e7:2a:6a:5b:81:65:a1:8f:91:c1:1b:83:f3:a4:58: 81:51:8d:62:e9:79:3c:dc:e5:ce:0f:eb:19:c4:38: 02:77:df:3c:25:87:09:ae:50:45:63:ab:32:5e:0f: 89:f6:8d:00:da:46:3d:75:ee:74:bb:12:b3:f4:a1: 77:7c:1c:52:ea:88:14:66:0e:7a:9d:f1:f0:13:30: 61:c1:8d:62:ca:3c:5e:67:79:69:cb:d3:43:14:c2: 19:ed:b0:cb:1a:0d:0e:38:98:2b:4b:d4:48:ee:34: 84:08:51:4b:0a:ea:33:11:4d:37:cd:bb:88:8a:4f: 22:50:e2:45:a2:a4:cc:67:c6:91:c4:9c:d5:c0:79: a4:82:1e:5a:71:56:b1:cd:f9:6a:de:07:85:eb:c4: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:05:F3:7B:52:5D:77:63:41:FC:D9:6F:AF:8E:2B:20:FC:E8:DD:27 X509v3 Authority Key Identifier: keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fe:e6:51:59:14:4c:b4:00:03:fc:30:18:be:68:19:00:c1: b9:23:98:b1:e4:91:23:8b:79:45:76:de:ee:ed:c9:d3:0d:94: 83:23:7b:54:eb:fe:4a:ad:ad:29:3a:a1:68:a4:d6:38:0b:02: 89:57:a2:80:07:44:91:9d:be:4b:bb:3c:33:0a:78:66:18:c9: 36:e5:84:e4:7f:ac:21:8b:38:dd:07:6f:33:8e:0a:df:a8:09: e8:fc:4c:4c:5d:0e:04:e7:cd:5d:1a:5b:fd:01:a1:91:dc:47: 75:e1:8d:93:9f:21:1c:f8:c3:52:64:92:bc:4b:ad:1e:b8:a8: b3:5f:1d:61:92:f1:43:12:df:cb:71:62:ed:fd:76:b6:b3:f6: f3:80:10:65:22:63:9a:89:ad:2f:d6:92:ee:b8:26:0a:de:1c: ca:1a:11:02:eb:33:17:1a:ee:82:f3:3b:5d:3c:b7:dc:69:8e: 59:56:92:45:6d:0e:75:ca:ba:ba:97:8a:eb:0e:99:13:ff:da: f2:df:df:74:1a:24:79:74:fa:d4:47:09:f7:fe:7e:7f:a7:16: 77:a7:44:5c:46:f6:33:82:95:8f:91:dd:52:c2:5a:6f:9f:b9: f4:16:1d:56:bf:82:85:5a:23:24:b2:47:a2:13:be:2b:f4:74: 6b:aa:0d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmUqGSQDdNCmtdcgnRtadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjNlMzY2MDZmYTUyYzNhNDcyMWM4Y2EwZmIzMzA5OTUz NDE5NWEwHhcNMjUxMjI1MTMwMTA3WhcNMjUxMjI2MTMwMTA3WjAzMTEwLwYDVQQD EyhlMzA1ZjM3YjUyNWQ3NzYzNDFmY2Q5NmZhZjhlMmIyMGZjZThkZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKsdGjqVUMrpChIrnpRXz17cVhID D74ERO8jbqMHnMyH8GyQqmS5qB/x7b+qTpVV2VUlhvoekPRbY/1jW4L1/EqCq06n 21zgD6Htyl5+iUUWy1z1FvFR1NZEJjBm4qBo+mH0PlyzZqvnKmpbgWWhj5HBG4Pz pFiBUY1i6Xk83OXOD+sZxDgCd988JYcJrlBFY6syXg+J9o0A2kY9de50uxKz9KF3 fBxS6ogUZg56nfHwEzBhwY1iyjxeZ3lpy9NDFMIZ7bDLGg0OOJgrS9RI7jSECFFL CuozEU03zbuIik8iUOJFoqTMZ8aRxJzVwHmkgh5acVaxzflq3geF68RYXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMF83tSXXdjQfzZb6+OKyD86N0nMB8GA1UdIwQY MBaAFGSz42YG+lLDpHIcjKD7MwmVNBlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUt MGUzODFiZDQxM2QzLzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUtMGUzODFiZDQxM2Qz LzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP7mUVkU TLQAA/wwGL5oGQDBuSOYseSRI4t5RXbe7u3J0w2UgyN7VOv+Sq2tKTqhaKTWOAsC iVeigAdEkZ2+S7s8Mwp4ZhjJNuWE5H+sIYs43QdvM44K36gJ6PxMTF0OBOfNXRpb /QGhkdxHdeGNk58hHPjDUmSSvEutHrios18dYZLxQxLfy3Fi7f12trP284AQZSJj momtL9aS7rgmCt4cyhoRAuszFxrugvM7XTy33GmOWVaSRW0Odcq6upeK6w6ZE//a 8t/fdBokeXT61EcJ9/5+f6cWd6dEXEb2M4KVj5HdUsJab5+59BYdVr+ChVojJLJH ohO+K/R0a6oN6w== -----END CERTIFICATE-----Generated at Thu Dec 25 22:12:35 2025 by rpki-client