This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json) Hash identifier: f8XybFubfUIrWWNIONRoR9ZrahvL+0KwIVTLARU4k/s= Subject key identifier: 68:4C:62:E2:EA:08:7C:E1:A8:5D:22:C8:70:B4:7D:C8:65:60:B6:8B Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851 Certificate serial: 019B53AAF8D157A52122396BDC7171675BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft Manifest number: 1790 Signing time: Thu 25 Dec 2025 04:01:12 +0000 Manifest this update: Thu 25 Dec 2025 04:01:12 +0000 Manifest next update: Fri 26 Dec 2025 04:01:12 +0000 Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: 3MfwlXivupF+qfcUTa5MuUeZjLNxyNfK/Lzp4OihqsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:f8:d1:57:a5:21:22:39:6b:dc:71:71:67:5b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851 Validity Not Before: Dec 25 04:01:12 2025 GMT Not After : Dec 26 04:01:12 2025 GMT Subject: CN=684c62e2ea087ce1a85d22c870b47dc86560b68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:66:ce:bc:e9:4a:9f:1f:9f:96:dc:cf:d3: 84:6a:a3:52:bc:57:d8:0f:fd:37:aa:78:01:7f:c8: 90:88:14:7e:f5:e1:49:e1:62:0b:c1:43:11:c9:2e: d7:48:b5:3d:a4:07:99:c1:ce:f9:dd:5e:fb:e7:76: 47:8e:b7:39:d5:5f:51:0e:ee:71:1e:b7:be:59:d6: 05:0a:98:31:3d:5a:09:ee:02:9b:49:f3:87:e8:8b: fa:be:98:e6:d8:5c:87:a1:73:3b:32:ad:0c:93:ad: 98:c3:9f:a0:5e:53:ba:7c:d2:11:86:1d:d5:ea:3f: 2b:77:df:69:6b:6f:f1:2d:60:58:71:ac:8f:c7:d6: d0:c9:8c:61:2c:12:e2:90:ea:b1:77:be:15:b4:bf: 41:76:f6:6c:b0:6e:53:e0:75:32:c1:fd:2c:4a:fe: 50:9b:46:d0:2c:6b:dc:aa:2c:7a:31:9a:bc:8c:70: c5:dc:4d:c3:f4:91:7c:b6:20:01:37:65:0c:6e:a5: a1:2c:d6:3d:16:3d:9e:68:06:3c:f6:02:a1:dc:1d: b2:e2:8d:49:77:27:5b:ac:a7:c5:c9:8e:24:50:23: bd:1b:42:d7:a5:01:27:33:a2:0e:b4:72:4d:1a:98: f4:b2:96:94:24:60:c3:b5:e9:9b:0a:0d:d6:67:5b: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:62:E2:EA:08:7C:E1:A8:5D:22:C8:70:B4:7D:C8:65:60:B6:8B X509v3 Authority Key Identifier: keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:64:39:cc:98:fc:3a:4a:a7:a5:ac:69:a5:39:87:ab:77:58: 89:69:55:48:18:dd:1f:75:48:39:3b:40:e2:a2:40:71:02:be: be:8a:fd:4f:a4:8e:3c:e0:3e:a9:50:4c:2d:b2:6d:82:b0:10: 33:58:47:ad:d7:cf:d2:eb:d2:f3:2c:c0:a1:81:b5:35:58:e3: 0f:1e:08:d0:82:87:e1:42:cd:6a:67:24:db:c8:c9:fe:9a:e5: 45:d3:9c:75:ca:ec:68:eb:80:2f:ec:6b:1b:63:59:aa:2c:ec: 04:d6:66:4c:84:42:8b:04:50:41:9f:85:0c:96:0f:29:71:aa: c7:20:de:ea:81:71:fd:24:ab:ab:a0:01:8e:8e:c3:d6:7c:86: d2:fb:1b:a7:da:14:d4:6c:f0:0f:20:42:e3:b9:6b:24:ac:3c: ac:0f:60:2e:44:5a:1b:09:dd:b3:d5:2d:50:34:45:a8:fc:b4: 2c:81:d8:0a:09:f4:a7:1c:e0:7a:c7:94:26:67:8c:33:8a:45: 9e:ad:88:c3:8c:64:e2:86:ed:bd:cf:cf:65:c5:2f:30:ff:c2: 03:36:f3:7e:91:7d:3d:92:3d:0c:ef:b0:14:48:59:c4:4b:d5: 57:cd:6d:31:fc:b4:85:8a:76:08:ce:10:36:90:8a:a1:f5:10: 12:04:eb:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqvjRV6UhIjlr3HFxZ1uyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmRjYmU1ODBlOTQyZjIxMGEyNzg3MWI1NjUwYzhjMjkw NjM4NTEwHhcNMjUxMjI1MDQwMTEyWhcNMjUxMjI2MDQwMTEyWjAzMTEwLwYDVQQD Eyg2ODRjNjJlMmVhMDg3Y2UxYTg1ZDIyYzg3MGI0N2RjODY1NjBiNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUFmzrzpSp8fn5bcz9OEaqNSvFfY D/03qngBf8iQiBR+9eFJ4WILwUMRyS7XSLU9pAeZwc753V7753ZHjrc51V9RDu5x Hre+WdYFCpgxPVoJ7gKbSfOH6Iv6vpjm2FyHoXM7Mq0Mk62Yw5+gXlO6fNIRhh3V 6j8rd99pa2/xLWBYcayPx9bQyYxhLBLikOqxd74VtL9BdvZssG5T4HUywf0sSv5Q m0bQLGvcqix6MZq8jHDF3E3D9JF8tiABN2UMbqWhLNY9Fj2eaAY89gKh3B2y4o1J dydbrKfFyY4kUCO9G0LXpQEnM6IOtHJNGpj0spaUJGDDtembCg3WZ1syPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhMYuLqCHzhqF0iyHC0fchlYLaLMB8GA1UdIwQY MBaAFM8ty+WA6ULyEKJ4cbVlDIwpBjhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2It NWQ0OTM2OGRkMmZmLzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2ItNWQ0OTM2OGRkMmZm LzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWQ5zJj8 OkqnpaxppTmHq3dYiWlVSBjdH3VIOTtA4qJAcQK+vor9T6SOPOA+qVBMLbJtgrAQ M1hHrdfP0uvS8yzAoYG1NVjjDx4I0IKH4ULNamck28jJ/prlRdOcdcrsaOuAL+xr G2NZqizsBNZmTIRCiwRQQZ+FDJYPKXGqxyDe6oFx/SSrq6ABjo7D1nyG0vsbp9oU 1GzwDyBC47lrJKw8rA9gLkRaGwnds9UtUDRFqPy0LIHYCgn0pxzgeseUJmeMM4pF nq2Iw4xk4obtvc/PZcUvMP/CAzbzfpF9PZI9DO+wFEhZxEvVV81tMfy0hYp2CM4Q NpCKofUQEgTrDQ== -----END CERTIFICATE-----Generated at Thu Dec 25 10:58:44 2025 by rpki-client