This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft File: ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json) Hash identifier: 9tXPZ7J0nO9QCFnPmJomlyqEetrPRHOmzm3BdY2MYSU= Subject key identifier: 83:40:47:1C:BE:5B:45:37:46:86:70:A3:86:F7:69:1D:8C:DE:D2:51 Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C Certificate issuer: /CN=658cd1491fa84d48218d3860f3323dc9b868578c Certificate serial: 019B36B38CFAB1C56E86AEC3FA33367CC26B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft Manifest number: 0FED Signing time: Fri 19 Dec 2025 13:01:35 +0000 Manifest this update: Fri 19 Dec 2025 13:01:35 +0000 Manifest next update: Sat 20 Dec 2025 13:01:35 +0000 Files and hashes: 1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: NsYOgmOnPyvsfSpx8MCrukwj5Y5hATUNiVAmCAJzw7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:8c:fa:b1:c5:6e:86:ae:c3:fa:33:36:7c:c2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c Validity Not Before: Dec 19 13:01:35 2025 GMT Not After : Dec 20 13:01:35 2025 GMT Subject: CN=8340471cbe5b4537468670a386f7691d8cded251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:cb:26:6f:d1:67:5c:93:10:7b:24:8f:16: 80:d8:bd:15:5c:e0:7e:10:e7:2b:87:19:1d:16:68: 37:2b:aa:c8:7b:54:59:56:18:90:ff:59:dc:68:0f: bb:8f:12:5b:3c:fa:25:7e:03:32:89:6b:80:37:0a: c1:09:b6:6d:ae:06:92:27:4c:75:71:61:6b:c1:3d: be:a0:3b:d1:73:b3:39:67:44:4f:21:0b:bb:ac:c3: 2a:ce:5f:37:86:b3:b4:a3:53:5f:66:0b:aa:2e:d2: d5:c6:78:4d:14:68:fa:b9:05:9f:12:8b:3b:ca:f8: 95:93:ac:fc:e4:d1:62:a7:28:e1:7e:19:e0:69:4d: b4:32:b0:d8:f8:d4:06:a7:3f:fb:f0:36:77:4c:0b: cc:ca:a1:2c:98:fe:af:80:39:8e:25:9a:1f:06:d2: 40:66:88:63:51:80:73:2c:03:5c:96:a6:cb:f2:9a: bd:bb:df:ee:f4:c8:7e:05:42:9b:e0:58:c4:a9:0d: b3:c6:5b:3f:91:70:47:59:6c:ff:d6:c8:0f:f5:7f: 1b:7e:e6:69:66:b7:73:43:df:c9:d6:9b:21:27:f3: c9:03:ef:15:33:af:fe:c0:7a:c2:73:a8:67:eb:10: d0:5b:30:be:03:96:c2:b3:b5:0f:dc:f5:59:e0:53: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:40:47:1C:BE:5B:45:37:46:86:70:A3:86:F7:69:1D:8C:DE:D2:51 X509v3 Authority Key Identifier: keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ff:6a:51:1b:22:5a:f7:1b:96:98:63:56:83:8a:f0:7c:8e: b3:b0:54:f2:bf:a5:15:2f:17:de:84:f5:07:5b:aa:6c:a9:5f: ea:2b:fb:c4:d9:1c:a5:31:ff:4d:ac:7a:af:50:e0:1f:bf:26: 7b:53:50:19:1f:d0:4d:59:bf:9d:0f:b8:4c:1e:24:4e:83:fb: df:9b:c1:b9:33:77:0b:69:47:3b:a4:85:b0:db:d0:75:9b:37: b2:7d:e3:6a:d6:d6:a8:08:d1:c8:59:cc:d5:0c:ea:74:43:e2: 1d:1f:aa:86:dd:53:0e:aa:cb:de:76:0f:83:12:88:8e:3f:78: 3f:d3:8b:01:6e:0e:54:7b:96:ce:91:94:65:ec:7f:a8:13:07: b7:16:02:14:c3:72:76:8d:55:19:2e:70:e7:b0:61:1f:71:00: 84:b9:98:ac:d9:58:74:f5:25:6e:d6:de:65:41:f2:85:61:4f: e9:26:e3:f0:aa:b3:86:2c:61:b1:0e:7b:de:6f:c8:80:57:3f: ac:15:91:12:26:08:fa:d8:8d:f4:4d:0b:86:f9:ab:65:4b:27: bc:b8:49:0b:37:7a:1d:0b:74:36:44:2a:39:1c:0e:77:8f:d0: 47:43:01:b8:3a:fa:b2:87:5a:2e:ab:96:76:ea:5b:87:08:41: 62:9a:46:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s4z6scVuhq7D+jM2fMJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OGNkMTQ5MWZhODRkNDgyMThkMzg2MGYzMzIzZGM5Yjg2 ODU3OGMwHhcNMjUxMjE5MTMwMTM1WhcNMjUxMjIwMTMwMTM1WjAzMTEwLwYDVQQD Eyg4MzQwNDcxY2JlNWI0NTM3NDY4NjcwYTM4NmY3NjkxZDhjZGVkMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9HLJm/RZ1yTEHskjxaA2L0VXOB+ EOcrhxkdFmg3K6rIe1RZVhiQ/1ncaA+7jxJbPPolfgMyiWuANwrBCbZtrgaSJ0x1 cWFrwT2+oDvRc7M5Z0RPIQu7rMMqzl83hrO0o1NfZguqLtLVxnhNFGj6uQWfEos7 yviVk6z85NFipyjhfhngaU20MrDY+NQGpz/78DZ3TAvMyqEsmP6vgDmOJZofBtJA ZohjUYBzLANclqbL8pq9u9/u9Mh+BUKb4FjEqQ2zxls/kXBHWWz/1sgP9X8bfuZp ZrdzQ9/J1pshJ/PJA+8VM6/+wHrCc6hn6xDQWzC+A5bCs7UP3PVZ4FOxtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINARxy+W0U3RoZwo4b3aR2M3tJRMB8GA1UdIwQY MBaAFGWM0UkfqE1IIY04YPMyPcm4aFeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWll6UlNSLW9UVWdoalRoZzh6STl5YmhvVjR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zYWQ5MzUtNjNhNy00MzRmLWI2OWQt NDBhYTgzNDg2ZjhmLzEvWll6UlNSLW9UVWdoalRoZzh6STl5YmhvVjR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8zYWQ5MzUtNjNhNy00MzRmLWI2OWQtNDBhYTgzNDg2Zjhm LzEvWll6UlNSLW9UVWdoalRoZzh6STl5YmhvVjR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf9qURsi WvcblphjVoOK8HyOs7BU8r+lFS8X3oT1B1uqbKlf6iv7xNkcpTH/Tax6r1DgH78m e1NQGR/QTVm/nQ+4TB4kToP735vBuTN3C2lHO6SFsNvQdZs3sn3jatbWqAjRyFnM 1QzqdEPiHR+qht1TDqrL3nYPgxKIjj94P9OLAW4OVHuWzpGUZex/qBMHtxYCFMNy do1VGS5w57BhH3EAhLmYrNlYdPUlbtbeZUHyhWFP6Sbj8KqzhixhsQ573m/IgFc/ rBWREiYI+tiN9E0LhvmrZUsnvLhJCzd6HQt0NkQqORwOd4/QR0MBuDr6sodaLquW dupbhwhBYppGrA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:07:31 2025 by rpki-client