This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft File: ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft (raw, json) Hash identifier: 5rBCQBMU4GCFSkeM2vFF3/359cjIBs/IztndVVAjBPA= Subject key identifier: BA:77:66:2C:E0:A9:07:A4:89:69:11:D2:BB:A0:A1:A2:42:38:2B:BD Authority key identifier: 64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92 Certificate issuer: /CN=64b90f34525f80025ea77cb618e7519982ab8592 Certificate serial: 019B2174A45A0E3BD7BC341653EE6034AFA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 10:00:50 +0000 Manifest this update: Mon 15 Dec 2025 10:00:50 +0000 Manifest next update: Tue 16 Dec 2025 10:00:50 +0000 Files and hashes: 1: ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl (hash: ibuXceKJjFQTOKA/nDTBXnxQp8cc4IYoW6wHr5dJXm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:a4:5a:0e:3b:d7:bc:34:16:53:ee:60:34:af:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b90f34525f80025ea77cb618e7519982ab8592 Validity Not Before: Dec 15 10:00:50 2025 GMT Not After : Dec 16 10:00:50 2025 GMT Subject: CN=ba77662ce0a907a4896911d2bba0a1a242382bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ac:a1:14:1f:55:4a:7c:fa:f3:28:1e:3c:02: 7d:e4:28:cb:c3:e8:c1:2d:7d:17:f0:2c:5d:9e:2e: 54:e2:99:b8:c5:ea:f3:c2:32:31:72:79:56:17:c6: e5:39:0a:20:a1:5d:d9:7d:81:85:00:35:9e:f9:45: b9:cc:55:79:67:5d:4d:8b:0a:2f:c5:7b:2a:5a:45: 35:43:34:46:4d:c3:fb:da:f7:d4:a3:bf:94:f4:e9: 35:34:1d:f6:fc:23:a2:b9:dd:33:bc:2d:5a:99:9f: e2:0c:cb:c8:c5:ca:b4:d2:4b:28:0e:e3:68:8a:f5: d7:e2:a6:4b:21:14:22:45:66:2d:33:fc:ff:e7:40: 00:12:ac:ef:bc:cf:1f:ca:6a:07:cb:2a:a1:ef:c7: 20:57:5c:3a:3a:ad:8f:0d:ad:8f:63:e6:89:4d:a0: c8:a8:23:5f:3d:e7:3c:3b:a6:df:a3:da:a8:97:e5: 52:57:8a:ea:78:c1:f9:b4:e5:af:4a:6d:f6:d1:28: 65:02:88:fb:9d:05:68:51:06:98:2a:c5:e9:ce:0f: 4f:2a:fc:e6:68:7c:70:62:03:1e:fb:47:30:f2:0a: 86:76:12:4c:04:a3:7e:e2:36:22:55:75:7c:58:2e: 07:9f:c1:a9:6f:6c:02:49:25:1a:c2:e5:dc:b5:bd: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:77:66:2C:E0:A9:07:A4:89:69:11:D2:BB:A0:A1:A2:42:38:2B:BD X509v3 Authority Key Identifier: keyid:64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:55:62:c7:5f:e0:6a:63:86:59:54:e1:9c:70:a8:77:dd:4c: 57:c8:63:67:d5:79:5d:7f:3d:de:54:f6:96:d6:a4:f3:0f:0c: 93:96:d7:3a:d5:57:eb:31:4d:cf:f1:16:d5:83:d9:de:1d:9b: 11:40:ef:d5:07:cc:2a:fc:6a:22:79:25:1c:a9:76:ae:0a:70: 20:d6:7d:6d:44:fc:4e:8f:2d:01:27:7d:90:46:d0:0e:d4:a2: fe:2e:21:24:7d:90:38:13:6e:ce:19:bf:92:72:ff:7d:04:05: 03:19:cb:dd:c1:ff:93:c0:59:fb:96:e3:22:9c:e3:39:55:9f: 18:fa:cd:7b:4a:ff:c2:7a:f3:c3:b4:62:a1:ed:d9:ef:05:05: c2:00:36:79:c2:9e:b6:8c:61:b8:76:9a:fb:f4:46:e0:8b:cf: 93:41:f1:4b:b7:ad:76:86:02:cc:f4:b0:6e:c0:2f:ae:12:d7: 0e:69:ca:6b:67:3f:80:35:75:b1:f1:5a:a0:25:b5:88:48:0b: fe:a2:68:8e:62:cb:86:03:c1:62:9d:0c:7b:6a:b0:ba:c7:6f: c4:d1:1e:ff:4c:9a:78:04:29:cc:9d:e9:47:6b:fe:22:29:4f: 2d:4b:9a:00:90:81:00:3f:78:24:0d:9b:01:bf:17:0a:2e:13: 81:31:c9:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdKRaDjvXvDQWU+5gNK+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjkwZjM0NTI1ZjgwMDI1ZWE3N2NiNjE4ZTc1MTk5ODJh Yjg1OTIwHhcNMjUxMjE1MTAwMDUwWhcNMjUxMjE2MTAwMDUwWjAzMTEwLwYDVQQD EyhiYTc3NjYyY2UwYTkwN2E0ODk2OTExZDJiYmEwYTFhMjQyMzgyYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86yhFB9VSnz68ygePAJ95CjLw+jB LX0X8Cxdni5U4pm4xerzwjIxcnlWF8blOQogoV3ZfYGFADWe+UW5zFV5Z11Niwov xXsqWkU1QzRGTcP72vfUo7+U9Ok1NB32/COiud0zvC1amZ/iDMvIxcq00ksoDuNo ivXX4qZLIRQiRWYtM/z/50AAEqzvvM8fymoHyyqh78cgV1w6Oq2PDa2PY+aJTaDI qCNfPec8O6bfo9qol+VSV4rqeMH5tOWvSm320ShlAoj7nQVoUQaYKsXpzg9PKvzm aHxwYgMe+0cw8gqGdhJMBKN+4jYiVXV8WC4Hn8Gpb2wCSSUawuXctb2gmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp3ZizgqQekiWkR0rugoaJCOCu9MB8GA1UdIwQY MBaAFGS5DzRSX4ACXqd8thjnUZmCq4WSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jN2E3ZjUtZTNhMi00OTNiLWE4YmQt N2JkYjY3MmUwYzU0LzEvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jN2E3ZjUtZTNhMi00OTNiLWE4YmQtN2JkYjY3MmUwYzU0 LzEvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVVix1/g amOGWVThnHCod91MV8hjZ9V5XX893lT2ltak8w8Mk5bXOtVX6zFNz/EW1YPZ3h2b EUDv1QfMKvxqInklHKl2rgpwINZ9bUT8To8tASd9kEbQDtSi/i4hJH2QOBNuzhm/ knL/fQQFAxnL3cH/k8BZ+5bjIpzjOVWfGPrNe0r/wnrzw7Rioe3Z7wUFwgA2ecKe toxhuHaa+/RG4IvPk0HxS7etdoYCzPSwbsAvrhLXDmnKa2c/gDV1sfFaoCW1iEgL /qJojmLLhgPBYp0Me2qwusdvxNEe/0yaeAQpzJ3pR2v+IilPLUuaAJCBAD94JA2b Ab8XCi4TgTHJxg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:38:51 2025 by rpki-client