This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json) Hash identifier: Cq4e1t2MYGVBn7jWlQky13XLmJ9waqvjjfU1oqaNQ3s= Subject key identifier: A7:BE:8B:62:54:51:CF:AA:D0:CA:85:E7:77:FA:55:9E:E9:8F:30:0D Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe Certificate serial: 019B5A5141C438026BF4394EFA922FC8A73F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft Manifest number: 14FE Signing time: Fri 26 Dec 2025 11:00:33 +0000 Manifest this update: Fri 26 Dec 2025 11:00:33 +0000 Manifest next update: Sat 27 Dec 2025 11:00:33 +0000 Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: Kkag5wxOoOV69Z290Y8WR8/Mj3L9MevbXuE9bKLsfBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:41:c4:38:02:6b:f4:39:4e:fa:92:2f:c8:a7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe Validity Not Before: Dec 26 11:00:33 2025 GMT Not After : Dec 27 11:00:33 2025 GMT Subject: CN=a7be8b625451cfaad0ca85e777fa559ee98f300d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:cd:67:b5:1a:4f:4d:d6:ea:b3:4b:e8:3d: 20:36:97:ad:1c:31:66:ea:bd:0b:6d:6e:df:28:bf: 89:e8:28:9e:1d:4c:51:b6:f8:8f:cd:16:6d:a7:97: 0f:97:70:b3:28:df:ab:5f:77:e6:69:69:b9:0b:41: 9b:9b:d4:55:09:d7:a4:09:0c:76:39:1d:26:98:1a: 66:54:76:18:3e:8c:9a:6a:07:b2:b0:4b:2a:1d:11: 54:d3:c0:db:b3:fa:68:b6:f3:2b:0c:bb:71:89:ae: cc:77:bf:0d:5b:b7:de:da:9e:3a:7c:c8:7d:87:d8: e5:3b:d2:ca:32:ba:22:a1:61:65:55:4c:dc:b1:24: c8:13:57:51:fc:de:d4:46:51:64:5c:e3:d2:cc:1d: fa:7d:ca:3f:60:7f:c6:ff:ae:de:0e:e4:85:11:10: 05:81:e0:b0:68:1c:41:93:2c:6f:f5:d8:5f:ef:ee: 90:3f:bb:17:b3:9c:9c:b9:d0:cc:21:6e:67:cf:fd: 0a:12:81:eb:5a:af:95:31:66:d8:47:f8:27:47:d1: c6:d3:11:60:ef:12:0b:08:ab:f5:7f:1c:9a:2c:36: 04:9b:1b:72:53:98:01:c5:52:8e:ff:6e:73:dd:91: 49:55:06:f6:f9:06:6d:cc:d3:4d:e8:86:2a:aa:f1: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BE:8B:62:54:51:CF:AA:D0:CA:85:E7:77:FA:55:9E:E9:8F:30:0D X509v3 Authority Key Identifier: keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:91:aa:5e:a2:47:c0:a7:17:38:07:f3:3c:63:78:6c:65:ef: 73:e8:a9:b6:e0:9b:f6:19:24:e8:31:9c:1d:d0:c1:8a:6d:62: ba:09:1c:4b:b7:6f:33:e5:85:7d:b6:12:a5:7b:19:c5:7d:63: aa:a1:87:41:69:c1:ec:80:7a:24:34:52:53:35:fc:65:b8:d7: a3:6c:cd:fa:f8:0d:ab:cd:a6:30:03:c5:8c:66:04:24:4b:ff: 3d:1e:35:f4:a8:99:7f:2c:ae:8c:4e:23:88:7c:a4:39:0f:e2: 35:ac:f4:c2:3c:f6:67:a7:36:68:80:09:c3:65:4b:6f:ac:89: 8b:b8:4b:75:7e:fe:63:38:cb:04:e0:2e:dc:cf:3f:bd:2a:6e: 8c:d8:b6:19:36:77:58:f8:b3:a3:3f:25:f4:6a:6a:35:82:37: d5:0f:d8:b2:1e:cd:d3:b6:ce:eb:75:25:dc:9d:86:9e:2c:59: 89:4f:70:b7:ee:4d:b0:27:13:d7:44:72:e2:73:91:ae:d1:93: f2:20:3a:17:c2:dc:9f:9f:a3:ab:52:2c:38:e6:78:f0:ba:4c: 13:aa:a6:32:3f:0e:56:6a:c0:53:22:79:49:a7:c4:27:f2:48: 75:9b:f8:96:8f:e8:64:49:0b:d1:bb:30:aa:67:e6:54:1d:99: 87:c8:5f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUHEOAJr9DlO+pIvyKc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTMzYjc5NGU1NTgwMmMxMDQ1YTg3NWYwMzNhYTBjYTc0 YTBmYmUwHhcNMjUxMjI2MTEwMDMzWhcNMjUxMjI3MTEwMDMzWjAzMTEwLwYDVQQD EyhhN2JlOGI2MjU0NTFjZmFhZDBjYTg1ZTc3N2ZhNTU5ZWU5OGYzMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd/NZ7UaT03W6rNL6D0gNpetHDFm 6r0LbW7fKL+J6CieHUxRtviPzRZtp5cPl3CzKN+rX3fmaWm5C0Gbm9RVCdekCQx2 OR0mmBpmVHYYPoyaageysEsqHRFU08Dbs/potvMrDLtxia7Md78NW7fe2p46fMh9 h9jlO9LKMroioWFlVUzcsSTIE1dR/N7URlFkXOPSzB36fco/YH/G/67eDuSFERAF geCwaBxBkyxv9dhf7+6QP7sXs5ycudDMIW5nz/0KEoHrWq+VMWbYR/gnR9HG0xFg 7xILCKv1fxyaLDYEmxtyU5gBxVKO/25z3ZFJVQb2+QZtzNNN6IYqqvHr2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe+i2JUUc+q0MqF53f6VZ7pjzANMB8GA1UdIwQY MBaAFGWTO3lOVYAsEEWodfAzqgynSg++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTct ZmE3NjQ1NzZiZDhlLzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTctZmE3NjQ1NzZiZDhl LzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5GqXqJH wKcXOAfzPGN4bGXvc+iptuCb9hkk6DGcHdDBim1iugkcS7dvM+WFfbYSpXsZxX1j qqGHQWnB7IB6JDRSUzX8ZbjXo2zN+vgNq82mMAPFjGYEJEv/PR419KiZfyyujE4j iHykOQ/iNaz0wjz2Z6c2aIAJw2VLb6yJi7hLdX7+YzjLBOAu3M8/vSpujNi2GTZ3 WPizoz8l9GpqNYI31Q/Ysh7N07bO63Ul3J2GnixZiU9wt+5NsCcT10Ry4nORrtGT 8iA6F8Lcn5+jq1IsOOZ48LpME6qmMj8OVmrAUyJ5SafEJ/JIdZv4lo/oZEkL0bsw qmfmVB2Zh8hfPA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:02 2025 by rpki-client