This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json) Hash identifier: /sWGKSVvkanue/c0b925oatG9xp6D4Xi6Qknr55sDsE= Subject key identifier: 6C:31:A4:7E:7F:6E:AF:06:4F:43:A2:1B:10:DF:36:26:39:42:45:E5 Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0 Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0 Certificate serial: 019B65B0A6C92D6FD84182314F254DADEDF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft Manifest number: 1272 Signing time: Sun 28 Dec 2025 16:00:34 +0000 Manifest this update: Sun 28 Dec 2025 16:00:34 +0000 Manifest next update: Mon 29 Dec 2025 16:00:34 +0000 Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: uhxV9sS4GjTW19rx8UQnDS6UTBNhuCKz+7bc/eArhZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b0:a6:c9:2d:6f:d8:41:82:31:4f:25:4d:ad:ed:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0 Validity Not Before: Dec 28 16:00:34 2025 GMT Not After : Dec 29 16:00:34 2025 GMT Subject: CN=6c31a47e7f6eaf064f43a21b10df3626394245e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:82:a9:97:a8:02:0a:86:d0:05:f1:82:35:4d: ef:67:82:ea:f6:1e:cb:09:34:b7:14:e5:fb:5b:aa: 69:05:2e:f9:9c:3b:26:37:61:48:4d:75:3f:a2:59: 4f:e0:9c:19:b3:e9:1f:2b:c2:a9:81:69:bd:88:7a: bc:19:8e:97:19:6d:56:d5:44:3c:a3:45:42:6c:1e: 36:25:65:0f:b7:cc:5c:41:9b:f8:f3:09:cf:65:05: 2a:7f:77:03:4d:ce:89:49:e0:75:48:6c:fe:42:27: e1:9a:b6:a8:f8:4f:32:91:55:ea:20:88:37:af:7e: 64:7c:02:dd:10:65:fb:0a:19:be:50:02:fb:a5:94: af:28:33:06:f2:84:c1:48:ab:ed:87:dc:8e:a4:b6: 98:eb:e4:07:43:16:01:a9:5b:e6:13:8d:df:10:08: e4:12:f0:58:a7:43:ac:a3:5a:fe:bd:4a:fb:42:84: 6e:8f:ad:8c:ed:6e:d7:98:3e:09:ca:6d:4c:3c:51: ec:e9:d9:b9:0e:cb:66:df:1f:d5:67:5b:8f:c4:c2: c1:68:bd:f8:73:8d:42:e6:49:4d:b2:4c:e2:2b:24: 6f:af:fb:0f:05:f6:ad:45:68:55:2d:78:aa:06:48: 62:92:5e:f2:ed:82:00:dd:cf:38:ab:85:ca:02:6d: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:31:A4:7E:7F:6E:AF:06:4F:43:A2:1B:10:DF:36:26:39:42:45:E5 X509v3 Authority Key Identifier: keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d7:91:04:c9:89:9f:68:96:fb:87:b4:1c:43:4f:7e:1d:06: a5:be:29:2d:5c:e3:6e:80:f7:e5:27:6d:51:b3:bf:22:78:18: 0d:88:11:7e:76:f9:4e:1b:e2:ca:87:02:5a:1d:ea:20:92:f6: c1:99:cf:8f:26:e6:03:dc:66:82:14:ba:1a:55:1e:8c:83:df: 92:07:a2:c0:33:62:b0:dd:f4:bd:37:7b:ec:22:b0:76:27:f0: c0:c7:61:f1:6c:b9:bc:28:6e:9e:91:1f:2e:4b:6e:5e:86:c0: ee:72:1c:80:03:1e:d0:a1:36:25:cc:4b:a2:51:51:1d:7c:dc: af:1a:69:27:b2:e5:96:ac:3d:d3:88:b5:ae:24:83:90:63:42: a1:7b:db:20:50:20:f1:35:50:92:cf:f3:7c:d6:45:b5:e9:b8: de:c5:08:d9:7d:e4:1e:2b:88:96:87:46:e9:f1:53:86:71:52: d5:16:af:f5:90:78:6d:81:ba:4d:3e:c4:57:73:a9:b5:29:76: ff:d1:50:74:61:6f:8a:86:df:67:f2:b9:3e:ae:c4:5d:64:97: 2d:ac:af:b0:38:01:df:1c:60:12:16:e2:21:f8:20:c2:41:5a: e9:c7:e8:74:13:42:8c:b4:55:45:6f:44:c5:a7:e4:36:d1:8c: ba:47:ee:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsKbJLW/YQYIxTyVNre3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNmU5MmEzZWI4MGFjNjNlZTU3MDJjMGQ5N2I0ZTlmMGI4 MjMzZjAwHhcNMjUxMjI4MTYwMDM0WhcNMjUxMjI5MTYwMDM0WjAzMTEwLwYDVQQD Eyg2YzMxYTQ3ZTdmNmVhZjA2NGY0M2EyMWIxMGRmMzYyNjM5NDI0NWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IKpl6gCCobQBfGCNU3vZ4Lq9h7L CTS3FOX7W6ppBS75nDsmN2FITXU/ollP4JwZs+kfK8KpgWm9iHq8GY6XGW1W1UQ8 o0VCbB42JWUPt8xcQZv48wnPZQUqf3cDTc6JSeB1SGz+Qifhmrao+E8ykVXqIIg3 r35kfALdEGX7Chm+UAL7pZSvKDMG8oTBSKvth9yOpLaY6+QHQxYBqVvmE43fEAjk EvBYp0Oso1r+vUr7QoRuj62M7W7XmD4Jym1MPFHs6dm5Dstm3x/VZ1uPxMLBaL34 c41C5klNskziKyRvr/sPBfatRWhVLXiqBkhikl7y7YIA3c84q4XKAm1DbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwxpH5/bq8GT0OiGxDfNiY5QkXlMB8GA1UdIwQY MBaAFM1ukqPrgKxj7lcCwNl7Tp8LgjPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUt NzViYzQ0NzkwMjlmLzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUtNzViYzQ0NzkwMjlm LzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9eRBMmJ n2iW+4e0HENPfh0Gpb4pLVzjboD35SdtUbO/IngYDYgRfnb5ThviyocCWh3qIJL2 wZnPjybmA9xmghS6GlUejIPfkgeiwDNisN30vTd77CKwdifwwMdh8Wy5vChunpEf LktuXobA7nIcgAMe0KE2JcxLolFRHXzcrxppJ7Lllqw904i1riSDkGNCoXvbIFAg 8TVQks/zfNZFtem43sUI2X3kHiuIlodG6fFThnFS1Rav9ZB4bYG6TT7EV3OptSl2 /9FQdGFviobfZ/K5Pq7EXWSXLayvsDgB3xxgEhbiIfggwkFa6cfodBNCjLRVRW9E xafkNtGMukfuiw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:57 2025 by rpki-client