This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json) Hash identifier: CSUiArYAPXkM9HcMYbBuUpuLtpbg918hosnRjsxt+SQ= Subject key identifier: 76:C8:2F:7A:78:81:6A:58:30:E7:98:5E:C4:63:6A:54:92:F1:C0:62 Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f Certificate serial: 019B337B0089963F4186EC2A1B366EF7D4B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft Manifest number: 1521 Signing time: Thu 18 Dec 2025 22:00:57 +0000 Manifest this update: Thu 18 Dec 2025 22:00:57 +0000 Manifest next update: Fri 19 Dec 2025 22:00:57 +0000 Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: YJ6g1/UUuIXzlBVCbKFzn1VdgumXqdTYLuJcUi4mGr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:00:89:96:3f:41:86:ec:2a:1b:36:6e:f7:d4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f Validity Not Before: Dec 18 22:00:57 2025 GMT Not After : Dec 19 22:00:57 2025 GMT Subject: CN=76c82f7a78816a5830e7985ec4636a5492f1c062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:24:00:8b:8a:70:d4:2f:2a:9f:26:d0:86:4d: 53:48:90:c4:bc:78:00:3f:69:d8:fc:6f:59:81:02: 4c:06:15:9c:b7:7f:df:eb:2c:a8:fd:3f:a5:71:f7: 09:69:be:3b:19:ad:ff:f4:6f:b5:d6:6c:74:f0:97: 3d:68:75:59:31:53:72:3a:30:a2:24:7a:c3:89:63: 96:ee:d9:46:c8:c7:8d:2f:47:03:9a:8f:4a:2c:e0: b7:00:4e:f9:a4:af:1f:39:49:d1:80:50:f6:6e:69: 74:3f:54:fd:d8:6f:6c:28:63:e8:fd:94:27:d5:c5: 67:3c:53:d8:3c:e0:f4:9a:25:49:91:23:66:09:08: 1d:7e:b2:66:bf:1a:25:d0:0c:fc:ad:51:3d:93:b1: 3a:2c:77:31:e8:93:86:0c:d3:a4:4e:5d:6f:06:92: ed:2c:3e:4b:1a:99:00:de:24:1b:05:74:7b:e9:49: 66:ce:75:e9:d8:57:f5:51:8c:76:41:43:cd:c6:00: ac:ed:26:ae:67:40:1d:60:e4:ac:3b:3f:f5:b8:96: 9d:93:8b:79:cd:86:46:7c:07:42:87:d8:ab:21:15: b2:ad:15:74:93:16:53:d5:24:e3:8c:a9:5f:3f:59: 74:05:ac:b4:c2:c0:4b:5a:40:05:66:5c:36:43:58: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C8:2F:7A:78:81:6A:58:30:E7:98:5E:C4:63:6A:54:92:F1:C0:62 X509v3 Authority Key Identifier: keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2f:60:78:76:e7:4b:f1:81:8d:49:64:10:4c:18:32:3a:29: 3e:ff:cf:05:89:a9:3a:54:1a:fe:cd:2b:8e:3f:0f:78:b2:3e: 9b:42:79:63:10:58:ee:fd:0a:f2:10:5a:62:6c:50:06:da:61: bb:9c:cd:70:e9:8e:b4:5e:82:3f:a8:93:8c:c7:3a:3a:c0:ef: 4e:64:d1:64:c1:05:dc:18:c9:ed:4d:fc:28:85:f9:3e:d1:ad: 3e:79:88:e8:84:ea:66:1a:da:c2:a4:d9:49:4f:21:79:61:3b: 45:79:a4:aa:a3:20:66:01:40:ee:16:46:cb:52:d6:93:51:ea: 33:be:eb:5e:6a:f9:f8:ba:82:36:b5:25:df:67:93:b6:23:0e: af:80:cc:ee:2c:21:26:b0:11:f0:9a:de:06:ba:d6:90:a8:28: 6b:ae:92:ff:93:c7:7d:ac:ec:3a:80:f0:ed:91:75:f9:6c:67: 46:68:ca:e5:9c:5c:f3:24:83:6f:85:e6:64:30:89:ec:f6:4e: b8:89:f1:8f:89:5b:82:a0:ad:30:e3:2b:93:a8:18:10:e0:f2: 23:a0:04:1b:11:1e:32:5d:08:6a:dd:30:1f:e1:a6:e8:55:2c: 69:50:3d:1f:03:65:38:b4:71:7c:62:fb:54:27:a7:83:66:ff: 38:21:31:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszewCJlj9BhuwqGzZu99S3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOWExY2JlOWIwYjRiYTdiNDdkNDJhYWQ2NzI1NzE0ODRl NTU5NWYwHhcNMjUxMjE4MjIwMDU3WhcNMjUxMjE5MjIwMDU3WjAzMTEwLwYDVQQD Eyg3NmM4MmY3YTc4ODE2YTU4MzBlNzk4NWVjNDYzNmE1NDkyZjFjMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iQAi4pw1C8qnybQhk1TSJDEvHgA P2nY/G9ZgQJMBhWct3/f6yyo/T+lcfcJab47Ga3/9G+11mx08Jc9aHVZMVNyOjCi JHrDiWOW7tlGyMeNL0cDmo9KLOC3AE75pK8fOUnRgFD2bml0P1T92G9sKGPo/ZQn 1cVnPFPYPOD0miVJkSNmCQgdfrJmvxol0Az8rVE9k7E6LHcx6JOGDNOkTl1vBpLt LD5LGpkA3iQbBXR76UlmznXp2Ff1UYx2QUPNxgCs7SauZ0AdYOSsOz/1uJadk4t5 zYZGfAdCh9irIRWyrRV0kxZT1STjjKlfP1l0Bay0wsBLWkAFZlw2Q1iqAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbIL3p4gWpYMOeYXsRjalSS8cBiMB8GA1UdIwQY MBaAFM2aHL6bC0untH1CqtZyVxSE5VlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgt N2UxZWYyMTU2NjQ4LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgtN2UxZWYyMTU2NjQ4 LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC9geHbn S/GBjUlkEEwYMjopPv/PBYmpOlQa/s0rjj8PeLI+m0J5YxBY7v0K8hBaYmxQBtph u5zNcOmOtF6CP6iTjMc6OsDvTmTRZMEF3BjJ7U38KIX5PtGtPnmI6ITqZhrawqTZ SU8heWE7RXmkqqMgZgFA7hZGy1LWk1HqM77rXmr5+LqCNrUl32eTtiMOr4DM7iwh JrAR8JreBrrWkKgoa66S/5PHfazsOoDw7ZF1+WxnRmjK5Zxc8ySDb4XmZDCJ7PZO uInxj4lbgqCtMOMrk6gYEODyI6AEGxEeMl0Iat0wH+Gm6FUsaVA9HwNlOLRxfGL7 VCeng2b/OCExcA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:44:28 2025 by rpki-client