This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft File: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json) Hash identifier: HjlcGsuRuGOMFx5IKRP15bSVb9xqsx7MN8QCfFu1BHY= Subject key identifier: A2:C4:37:2F:01:CC:C4:D2:96:18:53:4E:27:1C:55:B9:C0:71:CE:FB Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD Certificate issuer: /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd Certificate serial: 019B194DB7DE0BCF4E181808DB4A1D03CE27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft Manifest number: 04AB Signing time: Sat 13 Dec 2025 20:01:22 +0000 Manifest this update: Sat 13 Dec 2025 20:01:22 +0000 Manifest next update: Sun 14 Dec 2025 20:01:22 +0000 Files and hashes: 1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: ZLhp5m8vMClxE0d81n8MgtPLmmF1UjxStlfFbZWZClU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:b7:de:0b:cf:4e:18:18:08:db:4a:1d:03:ce:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd Validity Not Before: Dec 13 20:01:22 2025 GMT Not After : Dec 14 20:01:22 2025 GMT Subject: CN=a2c4372f01ccc4d29618534e271c55b9c071cefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:72:80:d8:bc:af:f6:08:41:8e:02:8d:94: d7:39:23:24:ac:7a:a9:0f:4a:a4:20:4f:48:43:90: 13:14:86:af:1b:67:02:16:83:22:e6:b0:77:50:55: 6d:12:72:80:a5:ab:1b:eb:e0:87:a3:ba:ad:d5:08: 2a:9b:78:85:1f:66:a9:05:95:25:6d:74:77:0d:a8: 72:5f:14:cb:a9:d9:8f:d6:f5:19:29:2b:7d:b5:66: 02:93:3c:09:b7:82:1e:ae:20:89:87:c3:6b:f5:01: d2:3e:19:ec:c4:1a:d5:da:86:6f:bf:fc:af:af:58: 98:01:8c:40:b8:c3:83:ef:a9:cd:af:a7:6f:5b:a1: fa:c1:3c:e2:a9:63:a4:f9:5d:1f:28:4f:4f:28:dd: 0d:d6:5a:25:a9:a8:43:38:64:53:9f:ae:1a:fa:78: 71:e8:ac:30:0e:b9:f3:eb:9e:b3:dd:73:0a:0c:8c: a0:ab:aa:00:ef:23:40:18:03:7b:9a:aa:d6:5d:d6: f8:17:5e:f6:ae:1f:fa:9a:d3:7b:7c:c1:db:23:d8: f8:6e:19:2b:f2:92:4e:4b:c1:af:ff:58:a3:d5:db: a2:5e:a6:1b:88:d3:51:87:58:49:3d:e0:84:83:12: 11:3e:cc:e9:b2:ed:3f:b6:c3:d0:31:8b:e5:f6:5e: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:37:2F:01:CC:C4:D2:96:18:53:4E:27:1C:55:B9:C0:71:CE:FB X509v3 Authority Key Identifier: keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:89:0f:95:ad:70:ea:2f:3e:fc:47:4b:13:a8:91:fa:a7:ca: 50:1f:d7:08:cc:28:b8:6c:8f:12:b2:bb:c5:c0:08:24:38:a9: 89:ac:30:6a:36:6e:36:6b:0e:bc:8b:45:05:8c:5a:f9:04:ca: 97:1a:b2:fc:30:bf:6b:d7:f1:5f:71:76:d0:2b:4c:28:0c:f1: 11:04:0d:7c:34:d4:66:d4:2e:7d:03:ae:09:31:60:63:d7:e3: 01:0d:8f:eb:61:b5:05:5d:01:1e:3f:56:33:80:ef:3e:48:6c: ed:e1:90:d8:fe:74:f2:93:f6:72:2d:2a:6b:bc:15:1b:b4:b3: 10:d6:ef:0e:d4:8c:5a:2d:0e:e6:63:0b:ad:70:6a:6c:f4:0a: 0c:5d:9c:85:78:0a:3f:9d:1c:f5:0c:a9:db:c2:14:b5:93:51: 0b:69:31:fd:3b:0e:8d:fe:96:83:24:11:dc:98:91:92:a0:4a: 46:5f:e0:19:37:0d:91:cd:eb:e6:39:ba:31:a4:2a:c7:3a:91: 6b:e0:f5:7b:bd:ac:e2:26:bf:86:2c:97:8c:db:45:35:a1:57: b7:d6:15:d9:dd:2d:2b:a8:0f:34:ee:97:79:d1:c6:b3:c4:1e: 53:51:89:47:d7:5f:ab:dc:68:e8:f8:c7:d4:64:16:dd:77:2d: bd:7d:17:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTbfeC89OGBgI20odA84nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTExNDRlZGM4YzdiYjJkZGU1MmJlYzFlMmZkOGU3YWYx M2IxZGQwHhcNMjUxMjEzMjAwMTIyWhcNMjUxMjE0MjAwMTIyWjAzMTEwLwYDVQQD EyhhMmM0MzcyZjAxY2NjNGQyOTYxODUzNGUyNzFjNTViOWMwNzFjZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvFygNi8r/YIQY4CjZTXOSMkrHqp D0qkIE9IQ5ATFIavG2cCFoMi5rB3UFVtEnKApasb6+CHo7qt1Qgqm3iFH2apBZUl bXR3DahyXxTLqdmP1vUZKSt9tWYCkzwJt4IeriCJh8Nr9QHSPhnsxBrV2oZvv/yv r1iYAYxAuMOD76nNr6dvW6H6wTziqWOk+V0fKE9PKN0N1lolqahDOGRTn64a+nhx 6KwwDrnz656z3XMKDIygq6oA7yNAGAN7mqrWXdb4F172rh/6mtN7fMHbI9j4bhkr 8pJOS8Gv/1ij1duiXqYbiNNRh1hJPeCEgxIRPszpsu0/tsPQMYvl9l75ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLENy8BzMTSlhhTTiccVbnAcc77MB8GA1UdIwQY MBaAFGThFE7cjHuy3eUr7B4v2OevE7HdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYt ODVkZWFhYjUwOTI3LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYtODVkZWFhYjUwOTI3 LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJokPla1w 6i8+/EdLE6iR+qfKUB/XCMwouGyPErK7xcAIJDipiawwajZuNmsOvItFBYxa+QTK lxqy/DC/a9fxX3F20CtMKAzxEQQNfDTUZtQufQOuCTFgY9fjAQ2P62G1BV0BHj9W M4DvPkhs7eGQ2P508pP2ci0qa7wVG7SzENbvDtSMWi0O5mMLrXBqbPQKDF2chXgK P50c9Qyp28IUtZNRC2kx/TsOjf6WgyQR3JiRkqBKRl/gGTcNkc3r5jm6MaQqxzqR a+D1e72s4ia/hiyXjNtFNaFXt9YV2d0tK6gPNO6XedHGs8QeU1GJR9dfq9xo6PjH 1GQW3XctvX0Xxg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:34:21 2025 by rpki-client