This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json) Hash identifier: p3BHLMsvdtIuQVt68Zy3ZufG5CSqeKvv/QUzdlKicyk= Subject key identifier: 6A:ED:3A:DC:4F:42:69:66:A9:C8:40:86:FD:77:4C:73:43:10:76:22 Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c Certificate serial: 019B2287F84744C5C2390667835829532CD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft Manifest number: 0701 Signing time: Mon 15 Dec 2025 15:01:34 +0000 Manifest this update: Mon 15 Dec 2025 15:01:34 +0000 Manifest next update: Tue 16 Dec 2025 15:01:34 +0000 Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: +hOp6Q8LxZ85Ejd6OqbFlFCM/nQ4Uvg/6TwZYRvskOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:f8:47:44:c5:c2:39:06:67:83:58:29:53:2c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c Validity Not Before: Dec 15 15:01:34 2025 GMT Not After : Dec 16 15:01:34 2025 GMT Subject: CN=6aed3adc4f426966a9c84086fd774c7343107622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:5f:c1:92:62:7d:4c:37:7a:14:e6:1a:58: 90:56:c1:97:60:62:f9:b3:63:61:ca:e8:6e:73:0c: 22:86:bc:3e:2e:92:30:f2:8b:e6:67:d9:9d:5a:16: 98:cd:cd:9d:23:7a:71:6d:66:7f:91:e0:2a:3c:99: 31:88:79:55:b5:55:a3:31:58:fe:63:b1:01:3e:ca: a1:f5:af:c5:c0:67:e1:5f:8d:b9:7b:33:b6:75:e7: 88:be:77:fa:f1:c6:99:66:56:8f:1c:bf:51:b8:01: 65:47:6b:3f:ae:53:d5:ca:b7:43:ea:59:74:87:17: f6:97:4f:45:13:47:30:65:fb:19:c4:18:22:c4:68: e3:df:22:eb:25:18:44:ad:fa:a2:98:e8:16:aa:93: 6c:9f:8a:26:f2:fd:64:fe:f4:43:fa:f9:e0:89:8e: 17:1b:eb:45:bc:45:2b:75:87:47:67:3b:f5:8b:db: 40:bf:91:13:06:62:64:47:b6:be:96:49:06:35:86: 83:7d:fa:11:26:00:f1:fb:ae:09:67:b9:fa:11:b6: f5:ee:d9:11:9f:f8:96:0d:39:54:ee:4e:cb:23:0f: 8f:93:fd:f1:0d:a0:ab:80:e3:e4:f7:f6:14:82:b2: 53:c3:08:c3:b6:a6:f0:f0:e8:b2:3b:ad:31:87:3d: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:ED:3A:DC:4F:42:69:66:A9:C8:40:86:FD:77:4C:73:43:10:76:22 X509v3 Authority Key Identifier: keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ae:04:bd:8a:d3:83:14:6d:fe:c6:57:6e:12:98:0a:7a:50: 1f:7b:11:15:3c:76:cc:fa:0b:0d:c6:fc:69:33:1b:3d:2e:6a: 6d:6e:cc:8b:ce:33:57:45:24:9f:8b:72:42:c1:4b:03:8f:a1: f8:a2:46:a9:d4:32:53:27:b7:73:a7:42:ba:2e:95:bc:fd:d7: 41:fd:43:bf:88:c9:e5:43:dd:e7:91:93:72:72:1b:a7:90:35: df:3a:f6:40:46:32:7a:be:1b:74:de:e9:43:e0:f7:5b:6e:4a: f7:fa:8b:4a:eb:a1:72:b4:8e:2c:62:83:7c:0c:af:85:de:b6: 6a:30:4d:76:b9:60:79:3e:8a:9f:5c:66:f3:45:70:eb:b2:3b: 7c:c0:5a:97:48:18:a4:22:c6:1b:0c:37:40:54:cf:66:95:b2: 0e:3e:03:5e:62:7b:3d:ad:15:7b:ef:90:07:95:ee:88:e1:5d: f4:c4:ea:44:ea:95:bf:bb:57:f9:77:e3:ab:75:24:65:15:d4: 93:9e:89:31:b3:cb:a5:a7:96:83:2f:f0:6a:ee:50:dd:f8:c9: 6b:71:51:6a:a5:f2:b7:ce:eb:79:1d:67:9a:7f:6a:ea:da:b8: 2f:f9:2e:6c:37:05:3d:ad:36:d9:6f:17:53:65:71:7c:e7:37: 3e:c0:5e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih/hHRMXCOQZng1gpUyzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWQ0NmE2YTMzNjM1M2E5MGYxNzRmYTk5MGZjMjI0MTIw MWViMWMwHhcNMjUxMjE1MTUwMTM0WhcNMjUxMjE2MTUwMTM0WjAzMTEwLwYDVQQD Eyg2YWVkM2FkYzRmNDI2OTY2YTljODQwODZmZDc3NGM3MzQzMTA3NjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ5fwZJifUw3ehTmGliQVsGXYGL5 s2Nhyuhucwwihrw+LpIw8ovmZ9mdWhaYzc2dI3pxbWZ/keAqPJkxiHlVtVWjMVj+ Y7EBPsqh9a/FwGfhX425ezO2deeIvnf68caZZlaPHL9RuAFlR2s/rlPVyrdD6ll0 hxf2l09FE0cwZfsZxBgixGjj3yLrJRhErfqimOgWqpNsn4om8v1k/vRD+vngiY4X G+tFvEUrdYdHZzv1i9tAv5ETBmJkR7a+lkkGNYaDffoRJgDx+64JZ7n6Ebb17tkR n/iWDTlU7k7LIw+Pk/3xDaCrgOPk9/YUgrJTwwjDtqbw8OiyO60xhz3whQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrtOtxPQmlmqchAhv13THNDEHYiMB8GA1UdIwQY MBaAFLGdRqajNjU6kPF0+pkPwiQSAescMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMt NTk0YzY5ZmIwNzExLzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMtNTk0YzY5ZmIwNzEx LzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ64EvYrT gxRt/sZXbhKYCnpQH3sRFTx2zPoLDcb8aTMbPS5qbW7Mi84zV0Ukn4tyQsFLA4+h +KJGqdQyUye3c6dCui6VvP3XQf1Dv4jJ5UPd55GTcnIbp5A13zr2QEYyer4bdN7p Q+D3W25K9/qLSuuhcrSOLGKDfAyvhd62ajBNdrlgeT6Kn1xm80Vw67I7fMBal0gY pCLGGww3QFTPZpWyDj4DXmJ7Pa0Ve++QB5XuiOFd9MTqROqVv7tX+Xfjq3UkZRXU k56JMbPLpaeWgy/wau5Q3fjJa3FRaqXyt87reR1nmn9q6tq4L/kubDcFPa022W8X U2VxfOc3PsBeZg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:28 2025 by rpki-client