This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json) Hash identifier: Gt9vxFUrov2D/kDhRCVty/lg6Lmnd+UxSdthynimBMM= Subject key identifier: 70:7A:59:C3:56:58:7B:76:CC:81:8E:CF:13:B6:37:0A:71:D3:46:54 Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262 Certificate serial: 019B6D6AC5B400F85BFE6C448BA14E04A6E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft Manifest number: 134A Signing time: Tue 30 Dec 2025 04:01:12 +0000 Manifest this update: Tue 30 Dec 2025 04:01:12 +0000 Manifest next update: Wed 31 Dec 2025 04:01:12 +0000 Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: D1r4qCDi7vLUT8ixBpsfGDKGwUze/x8zXM3rRd56zZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:c5:b4:00:f8:5b:fe:6c:44:8b:a1:4e:04:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262 Validity Not Before: Dec 30 04:01:12 2025 GMT Not After : Dec 31 04:01:12 2025 GMT Subject: CN=707a59c356587b76cc818ecf13b6370a71d34654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:36:9d:be:50:66:4b:30:d0:ac:f5:af:24: 0c:4d:f9:79:71:d4:62:11:94:1e:c1:cd:5f:4a:97: 92:af:37:a1:7a:27:b2:28:30:7c:a7:6f:9f:7b:1f: 33:1d:20:95:ef:3f:0d:8f:97:90:8c:05:f3:80:33: cb:f5:2e:8c:ac:45:50:46:d5:ac:ab:e8:70:0e:47: a3:76:16:e4:7a:23:73:ff:60:0c:f4:35:10:ee:45: 50:8f:c2:68:1f:78:59:a3:99:6d:42:52:42:37:f6: 47:9b:b0:dd:23:c4:b8:c5:33:da:f9:89:b8:8b:09: ed:ce:78:1e:d9:fb:d6:f6:ba:50:07:97:5f:1a:3f: 3f:34:a1:94:cc:ee:c4:0b:3c:95:46:7d:58:0b:78: e8:45:a4:a6:01:bf:cd:1f:e1:03:3f:b5:50:27:19: cf:ea:64:d5:2f:49:cc:02:9e:83:15:a0:16:46:c9: 41:3e:91:f4:7e:1b:0a:72:30:80:79:a8:e3:ea:7c: 9c:32:80:b5:81:d2:0b:bd:f9:25:07:57:b0:49:a5: 5e:2d:17:c4:82:1d:21:43:1d:b7:23:17:d0:dc:2c: 2b:6f:db:d7:ae:3c:a6:a5:c6:88:bf:ac:e5:39:86: 28:0f:c9:27:19:6e:fb:9c:db:ea:96:f0:e6:8f:fd: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7A:59:C3:56:58:7B:76:CC:81:8E:CF:13:B6:37:0A:71:D3:46:54 X509v3 Authority Key Identifier: keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:74:58:49:06:f0:48:0c:64:e6:95:70:9d:81:26:22:82:de: 69:ce:79:51:16:36:40:d2:69:24:6f:6f:5e:df:30:3d:e7:7a: 74:45:9e:fd:fb:c0:0d:59:5e:e2:83:3e:31:12:55:d9:7f:68: bf:35:9d:d1:13:3d:81:4b:84:bc:7b:e9:b0:67:60:96:f2:96: e7:73:28:3f:81:25:66:65:63:ae:eb:a2:71:30:00:83:27:ff: e8:40:6f:b9:d3:05:c8:f1:2a:81:ba:e7:7f:f4:96:73:ed:88: 01:50:16:44:37:fe:37:a8:95:29:91:7a:c8:ba:65:60:d9:0c: 82:e3:c8:43:8b:5c:c3:76:ca:dd:16:4d:98:3b:9a:a1:80:c5: 7e:3a:dc:6c:a5:10:5d:e6:3a:7f:a7:2b:a4:a9:b1:f7:b2:65: c3:9b:1d:38:b8:f4:38:c1:ad:73:38:76:db:82:ce:0f:cf:3a: 7a:82:9d:67:c8:04:d3:c2:6b:7c:f0:14:9c:30:c4:08:bf:ed: ab:d2:04:0e:a4:22:3e:25:32:f8:fc:f2:b7:7a:20:f6:96:9a: a2:69:fe:df:ff:83:ee:1a:c3:6d:0d:40:03:c7:4e:ad:d6:3a: ea:e2:3e:12:a2:a6:99:17:0a:b1:88:9e:1c:29:8f:f6:08:13: 3b:63:30:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttasW0APhb/mxEi6FOBKbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDJiMmY1NGNhMTcxOGNmZDM4MjkzMTExNDE1NjY2Y2Mz NGUyNjIwHhcNMjUxMjMwMDQwMTEyWhcNMjUxMjMxMDQwMTEyWjAzMTEwLwYDVQQD Eyg3MDdhNTljMzU2NTg3Yjc2Y2M4MThlY2YxM2I2MzcwYTcxZDM0NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIE2nb5QZksw0Kz1ryQMTfl5cdRi EZQewc1fSpeSrzeheieyKDB8p2+fex8zHSCV7z8Nj5eQjAXzgDPL9S6MrEVQRtWs q+hwDkejdhbkeiNz/2AM9DUQ7kVQj8JoH3hZo5ltQlJCN/ZHm7DdI8S4xTPa+Ym4 iwntznge2fvW9rpQB5dfGj8/NKGUzO7ECzyVRn1YC3joRaSmAb/NH+EDP7VQJxnP 6mTVL0nMAp6DFaAWRslBPpH0fhsKcjCAeajj6nycMoC1gdILvfklB1ewSaVeLRfE gh0hQx23IxfQ3Cwrb9vXrjympcaIv6zlOYYoD8knGW77nNvqlvDmj/2yuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB6WcNWWHt2zIGOzxO2Nwpx00ZUMB8GA1UdIwQY MBaAFGXSsvVMoXGM/TgpMRFBVmbMNOJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmIt ZWY2NWRjYmM3YzA5LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmItZWY2NWRjYmM3YzA5 LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxHRYSQbw SAxk5pVwnYEmIoLeac55URY2QNJpJG9vXt8wPed6dEWe/fvADVle4oM+MRJV2X9o vzWd0RM9gUuEvHvpsGdglvKW53MoP4ElZmVjruuicTAAgyf/6EBvudMFyPEqgbrn f/SWc+2IAVAWRDf+N6iVKZF6yLplYNkMguPIQ4tcw3bK3RZNmDuaoYDFfjrcbKUQ XeY6f6crpKmx97Jlw5sdOLj0OMGtczh224LOD886eoKdZ8gE08JrfPAUnDDECL/t q9IEDqQiPiUy+Pzyt3og9paaomn+3/+D7hrDbQ1AA8dOrdY66uI+EqKmmRcKsYie HCmP9ggTO2MwgQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:37 2025 by rpki-client