This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json) Hash identifier: aqBiAWBCZGESTrSA2TbRQgyp+dzjgWsUhIUXB9Ga1Y0= Subject key identifier: 8D:F0:5F:89:A2:14:8F:89:84:18:A8:8F:E2:9E:59:57:85:F7:C1:DC Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32 Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732 Certificate serial: 019B4C95ABA010FD79DF3136A1F2D442B6E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft Manifest number: 03EE Signing time: Tue 23 Dec 2025 19:00:35 +0000 Manifest this update: Tue 23 Dec 2025 19:00:35 +0000 Manifest next update: Wed 24 Dec 2025 19:00:35 +0000 Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: B91eP+lV/cWgSrrzcoD1KEQlfnnihe9LqYE8PhtY/aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:ab:a0:10:fd:79:df:31:36:a1:f2:d4:42:b6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732 Validity Not Before: Dec 23 19:00:35 2025 GMT Not After : Dec 24 19:00:35 2025 GMT Subject: CN=8df05f89a2148f898418a88fe29e595785f7c1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:d1:92:8f:0e:46:88:20:49:dd:0c:b3:17: 08:75:48:9c:24:78:ff:f9:41:c0:39:73:62:90:1a: 7c:49:d8:ce:0d:1b:9f:b2:19:b4:e3:ce:69:62:c4: 88:66:8b:f6:1b:1a:f4:07:af:27:ec:1b:d6:03:00: 19:33:19:22:b1:7c:57:87:35:f7:db:c0:32:5c:3f: c0:76:a1:aa:ae:d3:e0:15:76:f6:8e:3b:0a:44:d2: 93:f1:ea:de:17:ba:ad:9b:ee:28:d8:b4:0d:e8:88: 23:4e:6f:85:09:ba:55:6e:bb:d4:b7:5e:1d:03:ec: e2:01:9c:02:0d:06:bd:5c:5f:d6:49:d7:d8:f4:59: ff:86:a6:70:36:de:3b:ad:df:11:05:36:b2:0d:e5: 08:5a:74:42:da:e0:69:e0:b1:18:25:46:62:67:99: 6d:59:63:8d:66:0a:2f:3c:46:e8:c3:4c:e0:cc:21: 24:0f:8d:7d:f3:b1:63:bd:ba:55:a7:ee:07:a4:04: 10:5f:fd:74:ee:9b:d6:42:cf:88:e4:fa:8e:c6:b6: 2b:2a:b2:61:b9:33:bf:3a:ba:01:a9:11:07:20:b1: dc:06:ed:d9:ba:4f:13:f0:ad:66:3f:fd:f9:4d:34: cb:4d:31:3a:19:e6:6d:96:51:1f:ed:22:79:5a:c4: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F0:5F:89:A2:14:8F:89:84:18:A8:8F:E2:9E:59:57:85:F7:C1:DC X509v3 Authority Key Identifier: keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fb:37:91:fa:d5:e4:0a:07:4c:19:a3:cd:f9:22:d8:57:00: 89:07:6f:0d:06:2f:12:b4:c9:ad:dc:a5:24:39:e6:40:55:5a: 88:77:70:07:34:74:db:37:a6:29:3e:85:1a:09:70:ce:0f:43: 89:e1:79:4a:9b:40:54:00:8c:5f:69:49:2f:1c:0d:3c:94:a8: 20:60:e4:0b:1c:a7:0d:8e:68:0b:49:7c:25:a8:74:52:0a:d4: 3a:14:e5:4b:93:d3:f3:ec:e4:82:b9:58:60:e2:3e:f1:48:63: 08:17:64:e6:4d:2f:b7:82:f5:b3:8a:b0:4f:0e:7f:29:41:a9: c1:c9:65:70:a5:b2:32:57:f8:31:7a:37:97:9f:3e:f4:ae:1e: 27:15:26:a4:4e:6b:0b:27:01:83:09:40:bb:b0:24:4a:2e:04: b6:4a:09:7d:e7:45:b5:af:02:07:5b:3d:42:09:be:32:86:b1: 11:78:ea:c9:7e:c3:42:cd:d5:38:ec:8a:99:fd:df:fa:06:b2: b6:7a:09:72:e1:1c:d5:32:7b:22:0e:23:fd:80:3f:9a:b8:c8: 20:44:a7:6c:fe:7b:18:47:1e:b9:04:32:16:19:17:ae:9d:28: f9:23:5d:27:5a:50:61:60:8b:90:d6:54:32:1d:81:cb:fb:ca: 1a:98:8e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlaugEP153zE2ofLUQrbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOTRlMDQ0Y2JlNWMzNTI5NWZhYmM0NDU4MDJkYTkwNTgx M2I3MzIwHhcNMjUxMjIzMTkwMDM1WhcNMjUxMjI0MTkwMDM1WjAzMTEwLwYDVQQD Eyg4ZGYwNWY4OWEyMTQ4Zjg5ODQxOGE4OGZlMjllNTk1Nzg1ZjdjMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN/Rko8ORoggSd0MsxcIdUicJHj/ +UHAOXNikBp8SdjODRufshm0485pYsSIZov2Gxr0B68n7BvWAwAZMxkisXxXhzX3 28AyXD/AdqGqrtPgFXb2jjsKRNKT8ereF7qtm+4o2LQN6IgjTm+FCbpVbrvUt14d A+ziAZwCDQa9XF/WSdfY9Fn/hqZwNt47rd8RBTayDeUIWnRC2uBp4LEYJUZiZ5lt WWONZgovPEbow0zgzCEkD41987FjvbpVp+4HpAQQX/107pvWQs+I5PqOxrYrKrJh uTO/OroBqREHILHcBu3Zuk8T8K1mP/35TTTLTTE6GeZtllEf7SJ5WsSfdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3wX4miFI+JhBioj+KeWVeF98HcMB8GA1UdIwQY MBaAFP2U4ETL5cNSlfq8RFgC2pBYE7cyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1pUZ1JNdmx3MUtWLXJ4RVdBTGFrRmdUdHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NjAyYTktNzRiNi00OTkyLWI3MWQt YmFiMjQ3ZmU3ZDdjLzEvX1pUZ1JNdmx3MUtWLXJ4RVdBTGFrRmdUdHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NjAyYTktNzRiNi00OTkyLWI3MWQtYmFiMjQ3ZmU3ZDdj LzEvX1pUZ1JNdmx3MUtWLXJ4RVdBTGFrRmdUdHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/s3kfrV 5AoHTBmjzfki2FcAiQdvDQYvErTJrdylJDnmQFVaiHdwBzR02zemKT6FGglwzg9D ieF5SptAVACMX2lJLxwNPJSoIGDkCxynDY5oC0l8Jah0UgrUOhTlS5PT8+zkgrlY YOI+8UhjCBdk5k0vt4L1s4qwTw5/KUGpwcllcKWyMlf4MXo3l58+9K4eJxUmpE5r CycBgwlAu7AkSi4EtkoJfedFta8CB1s9Qgm+MoaxEXjqyX7DQs3VOOyKmf3f+gay tnoJcuEc1TJ7Ig4j/YA/mrjIIESnbP57GEceuQQyFhkXrp0o+SNdJ1pQYWCLkNZU Mh2By/vKGpiOIQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:58:21 2025 by rpki-client