This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json) Hash identifier: rgnQRDYo4iZYDyPAsbQ6ZC5NT5MgosXJWPBvA5/I+CQ= Subject key identifier: 56:C1:BA:6A:24:93:43:20:AE:DE:6E:15:4A:0C:02:FB:28:D5:C9:02 Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85 Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285 Certificate serial: 019B424AE59FA5BF2CA4F00D14C7C833F47B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft Manifest number: 0335 Signing time: Sun 21 Dec 2025 19:02:43 +0000 Manifest this update: Sun 21 Dec 2025 19:02:43 +0000 Manifest next update: Mon 22 Dec 2025 19:02:43 +0000 Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: 3vv97iQSolrhvvDbGhqDWzQTSerkRaCPzo0i1Gls1mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:e5:9f:a5:bf:2c:a4:f0:0d:14:c7:c8:33:f4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285 Validity Not Before: Dec 21 19:02:43 2025 GMT Not After : Dec 22 19:02:43 2025 GMT Subject: CN=56c1ba6a24934320aede6e154a0c02fb28d5c902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:34:af:06:b5:f3:a5:82:ba:f0:1d:1c:fa: aa:57:bf:c7:cf:a1:23:3f:3a:ad:e2:f6:6b:d7:52: 0c:6c:15:80:a7:6b:f1:f9:a6:18:dd:9a:73:96:ad: 53:82:71:f7:a1:4a:12:f0:6d:22:16:69:fa:89:eb: 3a:59:88:63:bd:dd:b1:c9:9c:24:ac:a3:e8:ae:12: f7:6b:0e:4c:32:2f:21:0a:2d:08:56:f7:e3:2c:da: 4e:33:bc:dc:76:be:db:eb:d0:e4:03:0a:e8:85:76: 3b:40:88:a7:4b:a4:7c:95:53:7d:21:c2:ab:6c:7c: f9:2c:31:18:13:85:2c:10:db:b6:08:b1:79:ac:8e: b2:c8:19:0c:f0:26:98:55:c5:ab:c9:57:6c:da:30: 0a:30:22:d4:06:01:88:ee:88:bc:f6:f4:f7:8e:1b: b0:c4:87:95:f6:74:0a:0e:a0:57:48:89:38:95:80: da:3b:14:21:6c:a4:45:f3:3c:00:48:27:09:c1:3f: 1a:f3:2d:c3:28:c2:af:5d:97:79:d7:73:7a:43:d8: 39:86:43:52:2e:5d:36:57:42:8d:61:d0:cc:5f:db: 4d:6b:a3:87:fe:fb:12:11:87:80:c3:0b:72:f4:d7: 57:76:9e:fa:f5:fe:61:d2:e3:d4:e4:d8:c2:69:58: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C1:BA:6A:24:93:43:20:AE:DE:6E:15:4A:0C:02:FB:28:D5:C9:02 X509v3 Authority Key Identifier: keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:45:c4:5a:95:6a:a3:8a:ed:19:8d:cd:9a:8a:cc:d1:ea:ea: 6a:c4:b0:6a:8a:c8:98:10:ad:b8:92:87:ad:f7:5c:49:72:80: 03:cb:17:83:f8:c1:43:73:2b:5a:67:f8:31:66:29:3a:70:17: 72:91:38:14:6b:b9:af:7e:e4:35:9f:0e:4d:db:1c:33:70:e8: 1e:32:90:0b:85:22:43:2d:63:c3:9c:55:2f:4b:a5:3e:80:f4: c6:9c:54:94:43:74:4c:21:c4:4e:6b:64:08:a8:76:2b:fc:e5: 38:0f:72:93:00:cc:07:7e:41:09:eb:66:d3:6f:42:54:00:7d: 4e:06:ab:44:7f:a8:3e:38:25:73:2d:24:a1:00:e7:0d:fe:0c: 2b:57:b8:63:ec:2f:3a:7f:a4:17:10:d8:96:b2:34:70:eb:a5: 14:35:32:fa:a2:24:cb:54:f7:98:8c:b0:d5:24:a3:03:56:09: 01:87:27:2c:b8:46:cb:64:02:4a:45:51:76:ea:36:ca:1f:82: 1a:d7:3e:77:ad:14:a0:61:ca:e1:87:9d:59:25:13:e2:10:ab: 95:c1:20:ad:94:bb:2f:c2:51:5c:13:cb:b2:cb:47:da:55:74: 54:dc:fe:41:3c:b7:fc:92:15:f3:2c:1f:8e:0e:12:4a:c9:54: 4a:38:31:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSuWfpb8spPANFMfIM/R7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzExN2FlOWQ2YWUwZTFlNGEzOGI3NDlhYmJmOWQ5ZTQ5 MmMyODUwHhcNMjUxMjIxMTkwMjQzWhcNMjUxMjIyMTkwMjQzWjAzMTEwLwYDVQQD Eyg1NmMxYmE2YTI0OTM0MzIwYWVkZTZlMTU0YTBjMDJmYjI4ZDVjOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj00rwa186WCuvAdHPqqV7/Hz6Ej Pzqt4vZr11IMbBWAp2vx+aYY3Zpzlq1TgnH3oUoS8G0iFmn6ies6WYhjvd2xyZwk rKPorhL3aw5MMi8hCi0IVvfjLNpOM7zcdr7b69DkAwrohXY7QIinS6R8lVN9IcKr bHz5LDEYE4UsENu2CLF5rI6yyBkM8CaYVcWryVds2jAKMCLUBgGI7oi89vT3jhuw xIeV9nQKDqBXSIk4lYDaOxQhbKRF8zwASCcJwT8a8y3DKMKvXZd513N6Q9g5hkNS Ll02V0KNYdDMX9tNa6OH/vsSEYeAwwty9NdXdp769f5h0uPU5NjCaVjKYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbBumokk0Mgrt5uFUoMAvso1ckCMB8GA1UdIwQY MBaAFP8xF66dauDh5KOLdJq7+dnkksKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmIt NDcyYmUzZTdjOGQ0LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmItNDcyYmUzZTdjOGQ0 LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkXEWpVq o4rtGY3NmorM0erqasSwaorImBCtuJKHrfdcSXKAA8sXg/jBQ3MrWmf4MWYpOnAX cpE4FGu5r37kNZ8OTdscM3DoHjKQC4UiQy1jw5xVL0ulPoD0xpxUlEN0TCHETmtk CKh2K/zlOA9ykwDMB35BCetm029CVAB9TgarRH+oPjglcy0koQDnDf4MK1e4Y+wv On+kFxDYlrI0cOulFDUy+qIky1T3mIyw1SSjA1YJAYcnLLhGy2QCSkVRduo2yh+C Gtc+d60UoGHK4YedWSUT4hCrlcEgrZS7L8JRXBPLsstH2lV0VNz+QTy3/JIV8ywf jg4SSslUSjgxGg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:21:00 2025 by rpki-client