This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json) Hash identifier: ufLwKhaelrXg6M2WMZy4mcW22YNb90yLRmO+UbrITaw= Subject key identifier: 01:2A:5D:D9:89:50:9D:59:60:C5:4C:DF:EF:D8:AC:5A:C6:94:D7:4B Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Certificate serial: 019B679F992FFE6F90037AF155DC44478B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft Manifest number: 0DEB Signing time: Mon 29 Dec 2025 01:01:11 +0000 Manifest this update: Mon 29 Dec 2025 01:01:11 +0000 Manifest next update: Tue 30 Dec 2025 01:01:11 +0000 Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: p8PWg6lzEXbEEFUk6hipKtrWhIjEG5hGjcI+kHEFFwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:99:2f:fe:6f:90:03:7a:f1:55:dc:44:47:8b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Validity Not Before: Dec 29 01:01:11 2025 GMT Not After : Dec 30 01:01:11 2025 GMT Subject: CN=012a5dd989509d5960c54cdfefd8ac5ac694d74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:03:db:3c:fd:cd:4c:fe:f7:2e:4b:0b:92: b8:b0:bf:73:eb:bb:50:9f:6e:f9:30:f2:d2:2c:c4: 39:9e:67:db:60:da:03:16:52:f3:48:7a:5b:78:1d: 60:c7:77:ac:c7:72:6e:46:60:09:e6:31:a5:26:d0: 12:27:e4:8a:f5:a8:fc:cf:4d:be:7e:6f:09:ac:89: 45:40:e7:e0:e0:6d:f4:72:ff:05:42:6f:e7:83:80: 0e:18:75:11:06:f5:e5:47:02:9e:df:ab:2e:87:92: c0:1b:2c:8d:56:38:3c:40:84:ab:7e:96:db:49:28: 64:c2:02:f3:f2:90:0d:eb:cd:63:ea:89:20:1e:80: ce:54:e7:46:10:47:53:8a:c3:f6:39:76:20:aa:04: 5d:b7:cb:77:30:f5:26:4d:f0:2e:7c:00:88:8f:8e: 13:82:70:23:e4:9e:61:85:c7:d3:8f:38:85:84:a1: 39:25:52:e6:ef:ad:8a:6a:54:41:12:81:ff:4d:19: 89:60:2e:ff:67:05:4f:45:5c:a8:71:df:e0:db:92: 9a:cf:da:1e:34:2b:5d:6a:46:71:d8:50:21:5c:37: 8e:bf:89:28:93:a4:6c:f0:02:9c:4e:a4:61:ab:fd: d7:de:3e:5d:e6:0d:60:4d:f8:1f:19:b6:61:07:46: 31:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:5D:D9:89:50:9D:59:60:C5:4C:DF:EF:D8:AC:5A:C6:94:D7:4B X509v3 Authority Key Identifier: keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a2:e2:c1:3b:f0:9c:93:d1:80:d5:73:fa:9a:d1:aa:b2:60: b3:b2:0a:c1:cb:78:3d:4d:f7:a5:76:40:4c:28:4e:a8:84:b5: cf:e8:7a:f3:e4:84:16:ae:d9:de:4d:7c:51:90:03:ed:07:cb: 69:d1:b3:cd:89:1c:7d:11:bc:44:e5:a8:44:c3:f3:4a:aa:91: 71:38:9c:d2:cf:91:c9:4a:47:bb:eb:3a:4f:8f:57:a2:17:21: a0:7f:d8:e6:c5:de:94:51:3e:d1:a8:68:0e:50:83:49:ce:81: c6:a9:ef:96:77:45:19:50:f4:4c:d8:78:40:df:fa:d8:d4:d9: ff:16:1d:09:c4:13:a8:b6:5c:0f:f1:09:7c:bf:f2:a7:74:76: 1a:a3:3f:7a:a6:89:0d:e5:85:6f:c2:53:88:07:86:16:45:1e: 96:69:7a:af:2e:5b:24:0c:2d:01:9c:e3:2a:ed:fb:57:9e:ab: 73:07:3d:34:81:b5:16:c2:b9:4b:49:66:65:45:3f:9d:f0:c8: 76:86:28:4f:40:87:85:36:77:46:bb:bd:22:aa:bd:e9:c2:2c: 25:54:77:2e:39:76:e2:2c:f2:bc:b1:9b:9d:78:53:be:1f:a5: 6f:06:96:f5:aa:6c:60:8c:93:18:44:2f:b6:fd:c9:92:09:05: 3f:92:71:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnn5kv/m+QA3rxVdxER4sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MGJiNmQxYjJkMjdjYWUyNzU4NjVjNmQ1Y2NjN2Y4YTc1 N2I3ZjUwHhcNMjUxMjI5MDEwMTExWhcNMjUxMjMwMDEwMTExWjAzMTEwLwYDVQQD EygwMTJhNWRkOTg5NTA5ZDU5NjBjNTRjZGZlZmQ4YWM1YWM2OTRkNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fAD2zz9zUz+9y5LC5K4sL9z67tQ n275MPLSLMQ5nmfbYNoDFlLzSHpbeB1gx3esx3JuRmAJ5jGlJtASJ+SK9aj8z02+ fm8JrIlFQOfg4G30cv8FQm/ng4AOGHURBvXlRwKe36suh5LAGyyNVjg8QISrfpbb SShkwgLz8pAN681j6okgHoDOVOdGEEdTisP2OXYgqgRdt8t3MPUmTfAufACIj44T gnAj5J5hhcfTjziFhKE5JVLm762KalRBEoH/TRmJYC7/ZwVPRVyocd/g25Kaz9oe NCtdakZx2FAhXDeOv4kok6Rs8AKcTqRhq/3X3j5d5g1gTfgfGbZhB0YxOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEqXdmJUJ1ZYMVM3+/YrFrGlNdLMB8GA1UdIwQY MBaAFGQLttGy0nyuJ1hlxtXMx/inV7f1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEt OWY2ZWFiYzBlODQzLzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEtOWY2ZWFiYzBlODQz LzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqLiwTvw nJPRgNVz+prRqrJgs7IKwct4PU33pXZATChOqIS1z+h68+SEFq7Z3k18UZAD7QfL adGzzYkcfRG8ROWoRMPzSqqRcTic0s+RyUpHu+s6T49XohchoH/Y5sXelFE+0aho DlCDSc6BxqnvlndFGVD0TNh4QN/62NTZ/xYdCcQTqLZcD/EJfL/yp3R2GqM/eqaJ DeWFb8JTiAeGFkUelml6ry5bJAwtAZzjKu37V56rcwc9NIG1FsK5S0lmZUU/nfDI doYoT0CHhTZ3Rru9Iqq96cIsJVR3Ljl24izyvLGbnXhTvh+lbwaW9apsYIyTGEQv tv3JkgkFP5Jx4A== -----END CERTIFICATE-----Generated at Mon Dec 29 10:02:36 2025 by rpki-client