This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft File: zfQLRgtIuPNm_sXKObMcOAxkWjI.mft (raw, json) Hash identifier: wO0Y6+2KUVWkCjUMNX7OLua1cBVXRlyJcWIYlqLVBLY= Subject key identifier: 18:3D:90:12:AF:09:FD:86:52:3F:EB:CB:7E:13:A9:B2:AF:66:5E:DB Authority key identifier: CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32 Certificate issuer: /CN=cdf40b460b48b8f366fec5ca39b31c380c645a32 Certificate serial: 019B5A88E095142ABF49DA7E1F0CCC21FD3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft Manifest number: 025E Signing time: Fri 26 Dec 2025 12:01:18 +0000 Manifest this update: Fri 26 Dec 2025 12:01:18 +0000 Manifest next update: Sat 27 Dec 2025 12:01:18 +0000 Files and hashes: 1: zfQLRgtIuPNm_sXKObMcOAxkWjI.crl (hash: 1nbggG1SixxCGt/nsYgY1GaMjUOJ/sutA5UHJF0abHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:e0:95:14:2a:bf:49:da:7e:1f:0c:cc:21:fd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf40b460b48b8f366fec5ca39b31c380c645a32 Validity Not Before: Dec 26 12:01:18 2025 GMT Not After : Dec 27 12:01:18 2025 GMT Subject: CN=183d9012af09fd86523febcb7e13a9b2af665edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:36:ac:ef:83:e5:7f:5d:80:5d:6b:8d:b7: 70:f3:71:dc:91:79:6b:a1:f7:98:e3:ba:9a:52:05: 17:54:02:26:99:75:c9:57:31:a3:a3:3d:5e:2f:7e: e2:fb:b7:f9:1d:8f:e7:9a:18:74:55:c8:4c:97:b6: f0:4a:7f:45:71:8f:a2:d8:32:6e:0f:ef:13:f4:3e: c4:4a:39:fb:b3:85:45:2c:54:82:eb:4e:6d:6b:a4: c4:9b:e1:6b:21:89:e4:cc:88:7e:5f:77:0c:c4:28: aa:40:18:92:00:6b:ce:29:69:8f:e8:a3:fd:36:49: 80:c0:4d:84:e7:bd:a9:f8:1e:03:bd:09:20:20:8a: 43:b8:a4:2b:7c:c9:8d:c9:63:a2:0b:fb:d7:eb:4c: 2c:c7:16:14:cf:28:45:2e:5c:7b:11:bf:be:b6:67: e2:2e:df:66:da:c2:30:49:3f:22:70:95:4d:7b:eb: 06:6b:9c:af:59:e3:cf:da:89:36:2c:1c:69:48:26: 29:7c:55:8f:d9:95:2e:21:24:e5:42:c1:be:5b:9f: 5c:85:48:eb:7c:c4:22:71:a9:4d:ea:3e:5c:e1:3f: ca:d5:a0:fc:e7:15:df:5e:e9:1e:9e:46:98:76:d5: a5:84:c4:71:ee:78:2e:de:4e:3c:5e:e8:de:37:92: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3D:90:12:AF:09:FD:86:52:3F:EB:CB:7E:13:A9:B2:AF:66:5E:DB X509v3 Authority Key Identifier: keyid:CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b6:3a:e1:a9:68:19:b8:65:57:3a:18:95:6f:1f:15:66:38: 4d:9f:30:eb:24:15:28:f9:f9:28:28:9c:7c:2c:35:ca:1f:3f: ca:50:57:55:50:b9:a9:32:06:ec:1b:12:c5:75:ae:7d:54:c7: f7:86:ba:43:08:eb:e0:50:2a:60:3d:4f:b0:70:fe:e0:93:e7: 82:09:c1:5a:94:3f:99:d8:3d:e3:9d:68:0c:04:a9:c7:50:e2: e3:eb:5a:11:24:8f:dd:3e:6c:25:2f:ab:2c:cb:c7:f1:2c:82: 65:21:51:c5:19:17:61:34:09:6c:7b:60:6f:fb:60:f7:ce:f6: a3:e4:8c:9c:b3:64:d8:b1:b0:a7:4d:5d:5a:7e:fb:6a:e1:29: b3:a6:7d:a1:94:67:44:49:d1:5a:ef:2c:b6:1a:99:ab:e8:4b: dc:41:ff:48:65:65:4f:a9:d5:4c:b4:a5:7c:9d:83:71:e1:32: 41:0e:11:3e:cf:4a:ac:43:e9:0d:c9:e7:90:90:be:f2:7c:70: 47:eb:01:0a:8e:82:81:b5:2f:d4:63:89:77:4c:ea:d2:92:83: b0:b5:9a:22:28:55:03:f8:ba:bf:0e:16:26:b6:3a:3d:9b:fb: e8:c1:e8:23:9f:46:07:f6:77:9e:28:63:d9:a1:49:65:71:ac: ee:cf:81:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiOCVFCq/Sdp+HwzMIf07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjQwYjQ2MGI0OGI4ZjM2NmZlYzVjYTM5YjMxYzM4MGM2 NDVhMzIwHhcNMjUxMjI2MTIwMTE4WhcNMjUxMjI3MTIwMTE4WjAzMTEwLwYDVQQD EygxODNkOTAxMmFmMDlmZDg2NTIzZmViY2I3ZTEzYTliMmFmNjY1ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4o2rO+D5X9dgF1rjbdw83HckXlr ofeY47qaUgUXVAImmXXJVzGjoz1eL37i+7f5HY/nmhh0VchMl7bwSn9FcY+i2DJu D+8T9D7ESjn7s4VFLFSC605ta6TEm+FrIYnkzIh+X3cMxCiqQBiSAGvOKWmP6KP9 NkmAwE2E572p+B4DvQkgIIpDuKQrfMmNyWOiC/vX60wsxxYUzyhFLlx7Eb++tmfi Lt9m2sIwST8icJVNe+sGa5yvWePP2ok2LBxpSCYpfFWP2ZUuISTlQsG+W59chUjr fMQicalN6j5c4T/K1aD85xXfXukenkaYdtWlhMRx7ngu3k48XujeN5LaZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg9kBKvCf2GUj/ry34TqbKvZl7bMB8GA1UdIwQY MBaAFM30C0YLSLjzZv7FyjmzHDgMZFoyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YWM1MGYtNDQ5MS00NGE1LTkwYmYt YTdlZjFkY2ZkNWYxLzEvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YWM1MGYtNDQ5MS00NGE1LTkwYmYtYTdlZjFkY2ZkNWYx LzEvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbY64alo GbhlVzoYlW8fFWY4TZ8w6yQVKPn5KCicfCw1yh8/ylBXVVC5qTIG7BsSxXWufVTH 94a6Qwjr4FAqYD1PsHD+4JPnggnBWpQ/mdg9451oDASpx1Di4+taESSP3T5sJS+r LMvH8SyCZSFRxRkXYTQJbHtgb/tg9872o+SMnLNk2LGwp01dWn77auEps6Z9oZRn REnRWu8sthqZq+hL3EH/SGVlT6nVTLSlfJ2DceEyQQ4RPs9KrEPpDcnnkJC+8nxw R+sBCo6CgbUv1GOJd0zq0pKDsLWaIihVA/i6vw4WJrY6PZv76MHoI59GB/Z3nihj 2aFJZXGs7s+BIA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:58 2025 by rpki-client