This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json) Hash identifier: OFWpZIoTs4faAQbSrVcQHJaNsilGLKeERwJ3Y9EZEE4= Subject key identifier: 38:57:A6:C1:A7:A3:90:7A:F9:C2:06:2F:61:D4:31:E9:29:AA:66:F6 Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5 Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5 Certificate serial: 019B2B1D82E2A30D60A6FA008CE2E5BD8047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft Manifest number: 092C Signing time: Wed 17 Dec 2025 07:01:52 +0000 Manifest this update: Wed 17 Dec 2025 07:01:52 +0000 Manifest next update: Thu 18 Dec 2025 07:01:52 +0000 Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: jtlqvIH02MmZNzCxvV+GeQ+4AVHUTErpBRG2g3+IByY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:82:e2:a3:0d:60:a6:fa:00:8c:e2:e5:bd:80:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5 Validity Not Before: Dec 17 07:01:52 2025 GMT Not After : Dec 18 07:01:52 2025 GMT Subject: CN=3857a6c1a7a3907af9c2062f61d431e929aa66f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:62:08:03:0a:f7:f4:b4:f5:e1:7b:be:ee: a9:fa:06:8b:ff:a0:22:ac:1e:69:c9:7a:19:43:4c: ff:a1:33:2b:0c:b1:55:bb:36:b9:92:70:6c:77:c2: 9b:34:88:6f:48:51:20:4c:6e:d5:37:00:36:e4:54: 8f:ad:4c:6c:1f:aa:bb:64:ec:23:a8:45:13:fb:ce: 2e:48:f1:5d:4e:d8:a7:45:f4:46:47:20:30:8e:f5: c5:c0:e6:28:b8:02:0f:58:91:2e:2f:42:87:43:59: 89:81:76:17:89:23:61:5e:6d:a5:b2:b1:83:3f:82: b8:0c:ec:d5:87:1a:63:dd:c5:02:a2:e3:8f:bf:9f: 18:5d:c6:67:55:fb:cb:47:af:7d:09:a9:fd:cc:ac: 19:9c:f5:c8:ec:8a:4d:7c:9c:cb:d5:69:79:54:0f: 1f:be:0f:b4:ed:0d:b5:4b:45:54:26:f5:41:e6:2a: bb:b4:2b:32:33:18:6f:e8:3f:c9:91:13:a8:41:5a: 38:de:f4:2e:33:aa:b6:b4:bd:cd:e3:f7:1d:7c:7d: 71:36:d2:41:22:c2:ca:3f:5d:5d:3c:a1:b5:59:94: 7d:65:c8:7b:7e:c9:e5:49:dc:4d:07:f1:58:0f:be: 1e:58:da:9d:28:a2:b2:ef:b8:83:4a:47:93:11:5d: fd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:57:A6:C1:A7:A3:90:7A:F9:C2:06:2F:61:D4:31:E9:29:AA:66:F6 X509v3 Authority Key Identifier: keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:46:61:41:88:30:84:c9:8c:2e:42:03:42:1e:0b:31:fa:43: 68:02:52:7a:1d:09:81:0a:dc:f1:d3:ed:3d:f8:30:a3:95:a3: 08:8e:fa:3a:b5:82:0a:d2:9c:8c:39:e7:ba:95:e3:cc:d6:e2: 69:45:87:6f:0e:e2:f9:49:d6:04:9d:6e:a0:e7:00:f7:0b:42: ac:43:b2:0c:c9:fb:b4:b0:6c:4e:e7:b6:12:6a:27:19:eb:c8: 12:d8:78:56:02:c4:50:9e:90:bb:90:26:25:72:b3:f4:91:03: 39:a2:37:f7:36:22:1e:f4:44:b1:c7:6a:a5:05:35:bb:95:1d: d8:79:a5:ba:9d:73:f8:e8:0f:da:19:f0:55:dc:48:e4:08:58: 81:79:40:dd:d8:eb:0a:48:28:d9:38:4f:5a:fa:de:89:75:85: a8:c5:77:ae:c8:83:e0:c9:de:5d:a7:f4:8e:35:57:32:ef:68: e3:61:56:51:26:3c:16:5b:10:55:e4:77:7e:c2:ee:69:75:61: f0:26:96:cb:4e:5d:b0:f7:2a:19:85:38:18:ec:78:ee:7e:8c: 58:9e:f2:1d:49:0a:e5:b6:2f:30:7f:6a:cd:39:aa:a2:e7:e8: a8:5a:b4:73:df:43:78:56:de:38:f5:5a:39:35:9f:97:4b:e9: 1a:dd:1d:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHYLiow1gpvoAjOLlvYBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTQ3NzVmZGFlZWM3YjBkNWM5MjcwODM5ODhkNTU1NzI3 YzIxYjUwHhcNMjUxMjE3MDcwMTUyWhcNMjUxMjE4MDcwMTUyWjAzMTEwLwYDVQQD EygzODU3YTZjMWE3YTM5MDdhZjljMjA2MmY2MWQ0MzFlOTI5YWE2NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH9iCAMK9/S09eF7vu6p+gaL/6Ai rB5pyXoZQ0z/oTMrDLFVuza5knBsd8KbNIhvSFEgTG7VNwA25FSPrUxsH6q7ZOwj qEUT+84uSPFdTtinRfRGRyAwjvXFwOYouAIPWJEuL0KHQ1mJgXYXiSNhXm2lsrGD P4K4DOzVhxpj3cUCouOPv58YXcZnVfvLR699Can9zKwZnPXI7IpNfJzL1Wl5VA8f vg+07Q21S0VUJvVB5iq7tCsyMxhv6D/JkROoQVo43vQuM6q2tL3N4/cdfH1xNtJB IsLKP11dPKG1WZR9Zch7fsnlSdxNB/FYD74eWNqdKKKy77iDSkeTEV39nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhXpsGno5B6+cIGL2HUMekpqmb2MB8GA1UdIwQY MBaAFGQUd1/a7sew1cknCDmI1VVyfCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUt NDc1NzI3YTAzZGQzLzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUtNDc1NzI3YTAzZGQz LzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUZhQYgw hMmMLkIDQh4LMfpDaAJSeh0JgQrc8dPtPfgwo5WjCI76OrWCCtKcjDnnupXjzNbi aUWHbw7i+UnWBJ1uoOcA9wtCrEOyDMn7tLBsTue2EmonGevIEth4VgLEUJ6Qu5Am JXKz9JEDOaI39zYiHvREscdqpQU1u5Ud2Hmlup1z+OgP2hnwVdxI5AhYgXlA3djr Ckgo2ThPWvreiXWFqMV3rsiD4MneXaf0jjVXMu9o42FWUSY8FlsQVeR3fsLuaXVh 8CaWy05dsPcqGYU4GOx47n6MWJ7yHUkK5bYvMH9qzTmqoufoqFq0c99DeFbeOPVa OTWfl0vpGt0dgg== -----END CERTIFICATE-----Generated at Wed Dec 17 11:18:45 2025 by rpki-client