This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json) Hash identifier: ZzFp0GIXGagtbJm/pReA8EES1jlNX4wwgrj81hp6XaA= Subject key identifier: 3F:66:C4:B8:68:92:5E:7F:20:F1:B3:1C:5E:32:1C:8E:11:30:40:FA Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b Certificate serial: 019B2D0C0DD2787D52BB0DDF491342835420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft Manifest number: 0C74 Signing time: Wed 17 Dec 2025 16:02:03 +0000 Manifest this update: Wed 17 Dec 2025 16:02:03 +0000 Manifest next update: Thu 18 Dec 2025 16:02:03 +0000 Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: rZKvNxS3f0bD1ehgWoqwLOipsBTMZD7sIqi3Tf11BDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:0d:d2:78:7d:52:bb:0d:df:49:13:42:83:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b Validity Not Before: Dec 17 16:02:03 2025 GMT Not After : Dec 18 16:02:03 2025 GMT Subject: CN=3f66c4b868925e7f20f1b31c5e321c8e113040fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:19:a1:89:71:98:45:a9:2c:37:7f:23:90: d5:9b:8f:2a:67:de:a8:d1:02:fe:79:c1:83:a2:b9: 90:e0:d3:fd:79:ad:87:10:d7:5d:79:db:05:f8:3a: 93:eb:0c:6b:4d:66:7f:f0:58:96:b4:be:9b:a1:44: 63:a9:3b:1f:62:20:cc:9c:c1:c4:3e:75:11:c8:d2: 3a:92:11:e5:fc:14:90:f8:30:cd:12:4f:17:75:1f: 5d:d2:17:d1:81:c8:f0:2d:53:51:b3:81:c4:eb:8e: dd:19:5d:01:ae:ad:9e:46:f1:f4:42:1d:b1:88:9b: e2:76:8f:91:26:8b:23:ed:2c:b1:f4:e7:7d:6c:e1: 92:e8:f5:7f:d6:6c:fd:bc:7f:f8:a4:9a:5e:47:11: f0:3e:6a:13:47:71:5b:ee:3a:a6:0d:d6:2c:c5:3e: 18:7e:10:11:72:03:5a:59:a2:67:fa:48:75:6c:b5: c0:a3:5e:65:71:cc:5b:6c:cd:c8:15:31:cd:34:73: 32:df:fe:e4:1b:93:66:5a:32:b8:bb:e9:7b:79:be: aa:a8:1a:5b:67:e0:04:4b:b3:dc:11:13:aa:33:75: 33:a2:98:59:79:a6:ba:e9:3f:fa:f9:da:33:51:b5: 4a:8c:92:32:24:2d:d4:9b:fd:98:ae:a1:5c:b3:10: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:66:C4:B8:68:92:5E:7F:20:F1:B3:1C:5E:32:1C:8E:11:30:40:FA X509v3 Authority Key Identifier: keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f2:64:0c:81:3e:99:ad:5f:2a:ab:ec:59:d3:0b:64:75:a4: ca:69:2b:3e:69:91:67:48:67:47:cb:a8:11:16:39:26:a1:e7: 95:3c:4d:6c:6c:bd:e7:7d:08:8a:27:2e:a7:4b:ba:b4:9c:fa: d2:f6:4b:f5:c0:1e:ee:cf:5d:87:a6:04:e6:77:ab:0e:62:9d: a5:62:19:1f:2c:57:92:33:27:7b:50:d0:7b:f1:d8:47:f2:95: 97:23:50:ac:d9:81:9d:04:98:e7:d0:4e:f2:57:85:e5:5f:e3: 05:cf:4b:93:63:4e:ba:01:26:60:5c:b1:bc:b7:a0:98:05:b4: 65:92:e0:f7:26:da:79:a2:6b:e0:8b:d6:f8:04:02:9c:cc:ba: ce:93:98:c3:cb:08:59:d4:70:55:a8:2d:a9:6e:14:48:20:42: ec:0b:1a:07:2a:6f:92:f5:87:8a:2d:18:f6:e9:c0:1e:38:63: 7b:ff:8d:a2:01:a5:e9:a8:02:88:fe:c6:ec:41:8e:6e:82:45: 0a:4f:71:f3:88:27:f1:60:d4:ab:f6:ba:48:1f:5e:5f:f9:bf: 02:7c:42:16:f3:50:7e:1a:83:6e:57:e7:4e:ce:b0:09:94:05: 4c:a1:5b:54:b8:02:e6:91:e4:b1:f6:d5:6d:7b:7a:4b:ea:28: 98:c1:9a:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDA3SeH1Suw3fSRNCg1QgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDVlYzk5YmMwYzZjYTk3YmZiZTZiZDUyNDRkZWNiMDI4 NjZlMmIwHhcNMjUxMjE3MTYwMjAzWhcNMjUxMjE4MTYwMjAzWjAzMTEwLwYDVQQD EygzZjY2YzRiODY4OTI1ZTdmMjBmMWIzMWM1ZTMyMWM4ZTExMzA0MGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4oZoYlxmEWpLDd/I5DVm48qZ96o 0QL+ecGDormQ4NP9ea2HENddedsF+DqT6wxrTWZ/8FiWtL6boURjqTsfYiDMnMHE PnURyNI6khHl/BSQ+DDNEk8XdR9d0hfRgcjwLVNRs4HE647dGV0Brq2eRvH0Qh2x iJvido+RJosj7Syx9Od9bOGS6PV/1mz9vH/4pJpeRxHwPmoTR3Fb7jqmDdYsxT4Y fhARcgNaWaJn+kh1bLXAo15lccxbbM3IFTHNNHMy3/7kG5NmWjK4u+l7eb6qqBpb Z+AES7PcEROqM3UzophZeaa66T/6+dozUbVKjJIyJC3Um/2YrqFcsxBwhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9mxLhokl5/IPGzHF4yHI4RMED6MB8GA1UdIwQY MBaAFGUF7Jm8DGype/vmvVJE3ssChm4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ODMxNGMtZDJjZi00OGI4LWI5NWEt ZmRhNWRkNTkwZjE2LzEvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ODMxNGMtZDJjZi00OGI4LWI5NWEtZmRhNWRkNTkwZjE2 LzEvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/JkDIE+ ma1fKqvsWdMLZHWkymkrPmmRZ0hnR8uoERY5JqHnlTxNbGy9530Iiicup0u6tJz6 0vZL9cAe7s9dh6YE5nerDmKdpWIZHyxXkjMne1DQe/HYR/KVlyNQrNmBnQSY59BO 8leF5V/jBc9Lk2NOugEmYFyxvLegmAW0ZZLg9ybaeaJr4IvW+AQCnMy6zpOYw8sI WdRwVagtqW4USCBC7AsaBypvkvWHii0Y9unAHjhje/+NogGl6agCiP7G7EGOboJF Ck9x84gn8WDUq/a6SB9eX/m/AnxCFvNQfhqDblfnTs6wCZQFTKFbVLgC5pHksfbV bXt6S+oomMGalQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:42 2025 by rpki-client