This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json) Hash identifier: Isub1OYopminHSENPOJw6V3B8MnCJtPH9zuUjVM3izM= Subject key identifier: A2:4B:8B:A6:37:FF:FE:26:9E:FD:98:9E:D1:C5:CE:08:50:DF:52:2A Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a Certificate serial: 019B3645753D76D54CE03EB4D10778B71E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft Manifest number: 0AEE Signing time: Fri 19 Dec 2025 11:01:20 +0000 Manifest this update: Fri 19 Dec 2025 11:01:20 +0000 Manifest next update: Sat 20 Dec 2025 11:01:20 +0000 Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: ZkksV20piLOPz+IZsCZ+/i5uaaZ7cIqWnLVoT7YRbuQ=) 2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:75:3d:76:d5:4c:e0:3e:b4:d1:07:78:b7:1e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a Validity Not Before: Dec 19 11:01:20 2025 GMT Not After : Dec 20 11:01:20 2025 GMT Subject: CN=a24b8ba637fffe269efd989ed1c5ce0850df522a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:e7:db:a2:49:2a:92:ab:a2:bb:9f:69:72: 6e:6c:f3:1a:6e:83:8f:d0:b4:92:a2:64:98:b8:5b: b3:d2:21:89:52:42:fd:00:e2:fe:e5:79:05:f1:9e: 38:9e:d1:71:8e:e7:0a:d9:d4:fa:8d:5e:4b:4c:30: e8:a4:3a:b7:d2:95:e3:08:c9:07:6a:0d:9b:9d:4e: a2:ab:08:1b:8f:96:27:ef:ef:fb:85:55:5a:de:6c: 4a:ec:1b:e3:14:82:62:45:ba:f8:1c:f7:5b:e0:80: cb:6e:c9:26:99:0c:8c:bb:21:06:58:3a:a8:83:dd: c4:97:0f:13:b7:dd:80:41:ae:fa:94:e1:2d:49:ee: 27:c9:46:44:48:53:7c:14:3b:a9:cc:62:ff:35:db: c6:71:85:5f:c8:67:94:2b:27:ac:ba:2b:ac:97:eb: b7:92:9c:44:5e:f5:01:9e:0a:27:98:50:79:5e:68: 5d:6e:5f:3f:7d:13:7f:d0:1c:87:6f:3d:dd:f2:b9: 37:bc:dd:fd:34:90:86:d7:78:d0:f6:32:32:7f:27: 39:56:47:ae:a6:00:e9:e1:64:0a:fa:43:65:77:b0: 76:60:d6:a1:bc:32:ac:65:b4:c3:e9:6a:ed:9c:23: b1:37:10:da:5c:54:d5:4a:1f:50:ed:1c:20:27:d4: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:8B:A6:37:FF:FE:26:9E:FD:98:9E:D1:C5:CE:08:50:DF:52:2A X509v3 Authority Key Identifier: keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cf:6d:2d:6f:2c:f2:6e:df:f4:ff:d4:73:e6:ce:5a:1f:c7: 9b:aa:b8:67:8f:e9:08:9a:04:79:af:e3:8a:3e:6c:88:d8:48: cb:29:77:0e:c1:d2:eb:a2:09:06:8c:91:62:08:a8:ea:7b:08: dd:5e:a8:9a:46:7f:0f:f2:17:77:0b:81:8f:cf:e5:c6:fc:fe: 3c:d4:86:05:2b:0d:93:97:79:83:a2:a2:bd:ae:ca:6e:a0:cd: a3:c5:2f:fb:ca:24:04:27:7b:05:71:f5:e3:dc:6a:4e:47:86: 50:da:35:78:ec:fa:e5:d1:85:d9:9a:57:67:44:b7:af:d3:ef: 15:a4:5e:31:43:a7:49:33:3b:73:50:5e:c8:2c:4e:55:79:50: 44:9d:c9:92:c9:b3:02:8c:6c:90:d3:b1:df:60:70:54:9c:c8: e3:91:57:19:a5:ea:3f:44:39:dd:f9:40:00:af:14:59:54:48: 7a:59:25:9d:f7:88:db:9f:f2:3a:8a:55:a8:42:0f:55:ca:bd: a0:ca:ec:f9:0b:d0:92:07:21:de:f1:a3:41:7e:e7:e4:11:43: a6:2f:f1:a2:a8:3a:0a:db:41:d1:ef:72:7a:9b:84:4a:8a:34: 25:78:ab:b4:6d:5c:f3:19:a9:20:58:3c:3a:1f:0d:5c:3d:b3: 04:9b:ce:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RXU9dtVM4D600Qd4tx4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmJhYjg0NTk5NDhiNzk3NDc2NDhlMTNlOTliOWQwYTU4 MjUwNmEwHhcNMjUxMjE5MTEwMTIwWhcNMjUxMjIwMTEwMTIwWjAzMTEwLwYDVQQD EyhhMjRiOGJhNjM3ZmZmZTI2OWVmZDk4OWVkMWM1Y2UwODUwZGY1MjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMPn26JJKpKrorufaXJubPMaboOP 0LSSomSYuFuz0iGJUkL9AOL+5XkF8Z44ntFxjucK2dT6jV5LTDDopDq30pXjCMkH ag2bnU6iqwgbj5Yn7+/7hVVa3mxK7BvjFIJiRbr4HPdb4IDLbskmmQyMuyEGWDqo g93Elw8Tt92AQa76lOEtSe4nyUZESFN8FDupzGL/NdvGcYVfyGeUKyesuiusl+u3 kpxEXvUBngonmFB5Xmhdbl8/fRN/0ByHbz3d8rk3vN39NJCG13jQ9jIyfyc5Vkeu pgDp4WQK+kNld7B2YNahvDKsZbTD6WrtnCOxNxDaXFTVSh9Q7RwgJ9TzzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJLi6Y3//4mnv2YntHFzghQ31IqMB8GA1UdIwQY MBaAFGQrq4RZlIt5dHZI4T6ZudClglBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMt NWIxNTUyM2JmY2JiLzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMtNWIxNTUyM2JmY2Ji LzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPM9tLW8s 8m7f9P/Uc+bOWh/Hm6q4Z4/pCJoEea/jij5siNhIyyl3DsHS66IJBoyRYgio6nsI 3V6omkZ/D/IXdwuBj8/lxvz+PNSGBSsNk5d5g6Kiva7KbqDNo8Uv+8okBCd7BXH1 49xqTkeGUNo1eOz65dGF2ZpXZ0S3r9PvFaReMUOnSTM7c1BeyCxOVXlQRJ3Jksmz AoxskNOx32BwVJzI45FXGaXqP0Q53flAAK8UWVRIelklnfeI25/yOopVqEIPVcq9 oMrs+QvQkgch3vGjQX7n5BFDpi/xoqg6CttB0e9yepuESoo0JXirtG1c8xmpIFg8 Oh8NXD2zBJvO2A== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:37 2025 by rpki-client