This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json) Hash identifier: teOJvhF/osaKs0kmAEL7mPQw9CC6KmtOwtJumuJLvx0= Subject key identifier: E5:5D:D7:3C:DB:D7:E1:24:63:22:FF:BE:A9:7D:9D:73:DE:D0:92:06 Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95 Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595 Certificate serial: 019B5ABF37A4A9B932599B579C911FCB7B61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft Manifest number: 1245 Signing time: Fri 26 Dec 2025 13:00:39 +0000 Manifest this update: Fri 26 Dec 2025 13:00:39 +0000 Manifest next update: Sat 27 Dec 2025 13:00:39 +0000 Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: 7/pb1m+rCVrCS0V7mBDo/k2/bZ/Y+YR7ftq51Qm5J/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:37:a4:a9:b9:32:59:9b:57:9c:91:1f:cb:7b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595 Validity Not Before: Dec 26 13:00:39 2025 GMT Not After : Dec 27 13:00:39 2025 GMT Subject: CN=e55dd73cdbd7e1246322ffbea97d9d73ded09206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:f0:a6:d8:1c:72:45:2c:ef:e2:da:3c:6d: 1a:8f:f6:eb:a1:dd:7b:5b:ca:55:c6:a7:9a:00:db: bb:56:c5:7b:c6:56:13:cd:69:88:e7:9b:4d:f4:d9: 3d:ea:cf:b3:ad:18:6b:65:81:e8:6d:b9:d8:97:d2: 04:ec:ed:71:26:0f:4b:ec:30:88:36:ac:a1:30:60: 00:9b:1f:9a:91:8c:ee:ca:6e:c3:40:ba:83:8d:5b: c9:7b:98:20:3b:90:a5:ad:14:eb:9e:ac:69:4f:5f: 56:66:63:48:cf:a3:a5:ee:46:67:8b:06:1b:8f:79: 14:be:70:46:41:ad:b0:da:dc:87:21:9d:be:d4:a7: 7c:cc:99:cf:5e:95:95:7a:dd:4e:28:50:84:6f:bd: fc:15:02:4e:71:c7:b3:b8:36:f7:67:d0:d4:23:35: cb:1e:34:50:59:17:a8:b0:09:dd:db:17:56:66:57: 1e:1a:43:a7:bb:28:2e:23:38:58:d2:a6:e7:6d:91: 92:1e:50:db:74:67:d6:a9:b9:03:e8:71:a5:c6:05: a2:d2:35:1e:5c:17:a4:7f:45:c5:42:08:8b:7a:88: a7:14:df:59:4b:36:93:87:ae:c7:db:7d:7d:be:87: 21:f4:cd:9c:44:bd:ca:a7:da:40:e2:a8:d9:8b:60: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5D:D7:3C:DB:D7:E1:24:63:22:FF:BE:A9:7D:9D:73:DE:D0:92:06 X509v3 Authority Key Identifier: keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b1:16:83:97:c2:86:7b:43:f2:09:3a:68:aa:86:f3:e3:a9: 83:55:ad:70:94:bf:08:34:64:e6:68:42:4f:e4:bb:63:19:8d: 8f:f0:83:bb:8b:b3:91:bb:d1:0b:4a:2a:f0:50:43:64:be:b8: cb:10:1e:b5:5a:f9:90:1c:81:f1:33:63:58:b1:62:fc:85:b2: 74:69:c5:56:b7:a5:f7:ad:bd:81:97:12:02:6a:2a:a0:6c:63: 6f:ec:12:c5:bd:c7:a0:a9:30:76:95:d1:1d:ad:f0:22:7c:1d: 51:6f:c0:8a:5a:85:78:c1:5b:1f:36:e2:b1:8d:b3:50:02:18: 35:67:2f:7b:96:54:71:eb:db:e1:d0:63:3c:45:b0:35:e2:9c: fd:62:cc:40:ba:03:26:76:b5:b2:10:60:8e:43:01:27:4d:12: 6a:30:8b:a1:53:43:d4:c9:73:da:56:71:95:ce:c7:0f:47:ef: 04:a5:77:19:5b:8b:df:1d:af:01:5c:d9:ae:e2:99:1f:7f:7c: be:d4:4b:60:1a:a7:ff:2f:3c:72:a2:19:60:73:d8:b5:d5:98: b0:f9:43:a1:a4:82:1a:04:6c:62:b3:91:26:f8:25:e5:2a:71: 83:9f:94:04:fb:cf:0b:de:ac:15:3c:f7:23:01:b1:04:7d:01: ed:7e:46:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavzekqbkyWZtXnJEfy3thMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTBkMDcyMjE0MDBlMzdiMDFlNzRhNzEyZmFlN2M2ZDcw MzE1OTUwHhcNMjUxMjI2MTMwMDM5WhcNMjUxMjI3MTMwMDM5WjAzMTEwLwYDVQQD EyhlNTVkZDczY2RiZDdlMTI0NjMyMmZmYmVhOTdkOWQ3M2RlZDA5MjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bvwptgcckUs7+LaPG0aj/brod17 W8pVxqeaANu7VsV7xlYTzWmI55tN9Nk96s+zrRhrZYHobbnYl9IE7O1xJg9L7DCI NqyhMGAAmx+akYzuym7DQLqDjVvJe5ggO5ClrRTrnqxpT19WZmNIz6Ol7kZniwYb j3kUvnBGQa2w2tyHIZ2+1Kd8zJnPXpWVet1OKFCEb738FQJOccezuDb3Z9DUIzXL HjRQWReosAnd2xdWZlceGkOnuyguIzhY0qbnbZGSHlDbdGfWqbkD6HGlxgWi0jUe XBekf0XFQgiLeoinFN9ZSzaTh67H2319voch9M2cRL3Kp9pA4qjZi2B5+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVd1zzb1+EkYyL/vql9nXPe0JIGMB8GA1UdIwQY MBaAFGaQ0HIhQA43sB50pxL658bXAxWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDIt NDYxYWNiOGExYzlmLzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDItNDYxYWNiOGExYzlm LzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbEWg5fC hntD8gk6aKqG8+Opg1WtcJS/CDRk5mhCT+S7YxmNj/CDu4uzkbvRC0oq8FBDZL64 yxAetVr5kByB8TNjWLFi/IWydGnFVrel9629gZcSAmoqoGxjb+wSxb3HoKkwdpXR Ha3wInwdUW/AilqFeMFbHzbisY2zUAIYNWcve5ZUcevb4dBjPEWwNeKc/WLMQLoD Jna1shBgjkMBJ00SajCLoVND1Mlz2lZxlc7HD0fvBKV3GVuL3x2vAVzZruKZH398 vtRLYBqn/y88cqIZYHPYtdWYsPlDoaSCGgRsYrORJvgl5Spxg5+UBPvPC96sFTz3 IwGxBH0B7X5GgA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:22 2025 by rpki-client