This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json) Hash identifier: JYS8Ajc/ExiElIizwSAMhBjuiJIVBSFXCKSdIY0dorc= Subject key identifier: 81:3C:EA:40:3D:B0:34:ED:90:84:71:F6:FB:F4:4B:33:33:2D:50:F7 Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781 Certificate serial: 019B390ED796CD470C59E2D17966BB454D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft Manifest number: 1783 Signing time: Sat 20 Dec 2025 00:00:32 +0000 Manifest this update: Sat 20 Dec 2025 00:00:32 +0000 Manifest next update: Sun 21 Dec 2025 00:00:32 +0000 Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: 4awOnQuCqOuslgZxbHwafBbLi9V9Kia5m1eratAFTg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:d7:96:cd:47:0c:59:e2:d1:79:66:bb:45:4d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781 Validity Not Before: Dec 20 00:00:32 2025 GMT Not After : Dec 21 00:00:32 2025 GMT Subject: CN=813cea403db034ed908471f6fbf44b33332d50f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1d:cd:52:2d:ac:9e:e9:98:f6:dd:7a:a4:07: 8a:a0:f2:b4:e7:95:87:ab:8f:a8:02:2a:c5:e5:5b: 55:36:93:dd:4c:4a:61:f0:3e:71:64:61:46:9f:36: 76:41:2b:3c:54:be:b4:e1:51:4e:4d:d2:d6:a0:47: 15:5a:31:4e:13:74:9f:a6:0e:c2:c5:89:f6:01:38: c1:d8:b7:4e:fb:20:2b:8a:9a:77:e0:d8:c7:64:30: 47:1f:63:06:86:5b:cd:55:2c:ee:78:b4:67:c0:ad: 3d:8d:c3:64:3a:1f:8f:bc:84:16:61:51:cf:df:bc: bd:21:e0:e6:4e:23:8f:13:a5:38:d3:8f:02:c1:8e: dd:09:15:eb:71:c9:e6:00:ae:b8:5c:93:8c:54:03: 4a:7d:d9:d8:1b:fa:7c:28:78:03:39:e7:5b:53:9f: ca:6e:1c:54:4d:30:a6:df:85:8f:70:6d:11:9e:da: 94:62:3b:98:0a:46:fe:ef:88:07:46:aa:d1:64:be: 71:ee:77:33:42:f5:4e:a6:c2:26:49:ce:83:63:19: fa:bd:a7:5a:f7:67:96:5d:dd:7c:73:ba:16:04:2f: f9:c0:0a:36:a5:9f:d7:f8:1e:76:8b:cc:ab:ed:ba: f7:2c:5b:6b:d3:32:4c:70:28:df:8e:a9:7d:fb:28: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3C:EA:40:3D:B0:34:ED:90:84:71:F6:FB:F4:4B:33:33:2D:50:F7 X509v3 Authority Key Identifier: keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0f:a0:4d:bb:40:56:72:9d:61:50:9e:3d:31:b7:bf:66:e1: 3a:24:cf:e2:d8:a3:47:9b:32:12:55:7d:04:ca:ce:f6:db:1a: d6:91:71:d3:69:08:53:c6:2b:52:2d:7a:cf:e7:09:28:31:76: 18:ff:a0:ce:35:1a:15:53:b4:c3:df:60:53:77:89:41:96:65: 18:48:0e:12:a0:d2:5b:74:8e:9a:05:b1:04:9d:15:91:66:ee: 5d:06:3b:90:8f:4a:b7:44:a3:f4:98:09:e1:3d:09:ca:2f:33: 18:1e:90:2f:ae:f3:b8:5c:2b:9a:5b:ac:47:c9:15:49:91:51: 1c:a4:ac:12:53:dc:3f:3c:d2:13:79:da:ab:27:10:84:07:59: 0e:90:3b:40:bf:9c:8b:4f:d4:cf:85:60:66:a3:f8:fb:30:0e: 11:1f:72:41:5b:bb:a2:26:c7:f2:8a:42:ca:ea:d1:b5:30:3b: 3a:16:3d:c1:01:2d:92:f8:8b:3a:7a:77:43:34:96:6e:dc:7d: f6:5b:c9:07:a9:0c:aa:e0:82:d4:68:e9:ab:1d:6f:eb:ee:ad: fd:f3:06:49:a7:d0:26:96:56:91:54:5d:e1:27:5f:26:d2:4b: 73:b9:a9:28:80:64:f2:15:a3:ce:e0:80:d1:db:e0:0f:84:5d: 51:ff:a3:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DteWzUcMWeLReWa7RU1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTEwNDU3NzI2NmVjOWIxNDY3MzZjOGNjOWRhNzM2NmIx ZDk3ODEwHhcNMjUxMjIwMDAwMDMyWhcNMjUxMjIxMDAwMDMyWjAzMTEwLwYDVQQD Eyg4MTNjZWE0MDNkYjAzNGVkOTA4NDcxZjZmYmY0NGIzMzMzMmQ1MGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x3NUi2snumY9t16pAeKoPK055WH q4+oAirF5VtVNpPdTEph8D5xZGFGnzZ2QSs8VL604VFOTdLWoEcVWjFOE3Sfpg7C xYn2ATjB2LdO+yAripp34NjHZDBHH2MGhlvNVSzueLRnwK09jcNkOh+PvIQWYVHP 37y9IeDmTiOPE6U4048CwY7dCRXrccnmAK64XJOMVANKfdnYG/p8KHgDOedbU5/K bhxUTTCm34WPcG0RntqUYjuYCkb+74gHRqrRZL5x7nczQvVOpsImSc6DYxn6vada 92eWXd18c7oWBC/5wAo2pZ/X+B52i8yr7br3LFtr0zJMcCjfjql9+yjJiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE86kA9sDTtkIRx9vv0SzMzLVD3MB8GA1UdIwQY MBaAFM2hBFdyZuybFGc2yMydpzZrHZeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYt NWZiMDlmMjFjNjA3LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYtNWZiMDlmMjFjNjA3 LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ+gTbtA VnKdYVCePTG3v2bhOiTP4tijR5syElV9BMrO9tsa1pFx02kIU8YrUi16z+cJKDF2 GP+gzjUaFVO0w99gU3eJQZZlGEgOEqDSW3SOmgWxBJ0VkWbuXQY7kI9Kt0Sj9JgJ 4T0Jyi8zGB6QL67zuFwrmlusR8kVSZFRHKSsElPcPzzSE3naqycQhAdZDpA7QL+c i0/Uz4VgZqP4+zAOER9yQVu7oibH8opCyurRtTA7OhY9wQEtkviLOnp3QzSWbtx9 9lvJB6kMquCC1Gjpqx1v6+6t/fMGSafQJpZWkVRd4SdfJtJLc7mpKIBk8hWjzuCA 0dvgD4RdUf+jig== -----END CERTIFICATE-----Generated at Sat Dec 20 01:47:01 2025 by rpki-client