This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json) Hash identifier: kp/blgk/ZjJ6vtElgcdU5WZf53xZuu+3jV7ihSzmB0s= Subject key identifier: 46:5D:45:A4:A4:4C:AF:8D:D5:8D:33:4C:01:65:A6:42:49:17:4F:70 Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d Certificate serial: 019B44376F0AD9514F0704E69487CC243BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 04:00:42 +0000 Manifest this update: Mon 22 Dec 2025 04:00:42 +0000 Manifest next update: Tue 23 Dec 2025 04:00:42 +0000 Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: +XdWNS18miCIDVoEf23ireN+z6mwXoKcYfbFgHE8Vbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:6f:0a:d9:51:4f:07:04:e6:94:87:cc:24:3b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d Validity Not Before: Dec 22 04:00:42 2025 GMT Not After : Dec 23 04:00:42 2025 GMT Subject: CN=465d45a4a44caf8dd58d334c0165a64249174f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:e2:03:4f:d3:36:1a:c6:9b:e3:69:96:fd: f5:6e:1e:9b:20:d6:82:ea:8e:54:4f:3e:ae:5b:98: 2b:f6:e6:95:cc:aa:b8:fc:00:26:e9:93:da:d9:7f: c4:cf:cc:3b:a2:35:4a:ba:97:88:73:7d:76:74:a5: e7:ec:6a:84:31:b6:41:ec:99:44:08:36:c3:d7:87: b1:38:b8:3f:5a:31:e8:ef:5c:3a:f2:49:fd:d8:77: 2c:1f:3a:44:39:34:6a:67:ba:e0:17:31:bf:3e:76: a4:a1:f7:2d:21:21:06:03:63:a8:b3:c5:80:da:6b: aa:32:ad:88:f9:9f:85:3c:80:c6:90:7e:a7:3e:33: 5c:54:b3:9b:f0:44:7a:84:f6:66:fc:d9:8d:9f:03: 68:b4:6c:b8:60:31:ce:e2:40:06:d0:39:2b:f1:fc: aa:bd:ed:bf:78:92:55:f9:13:97:6e:00:76:2c:a9: 12:f8:b4:ce:8b:2c:24:f8:88:22:a3:b6:03:67:33: 9a:b0:30:67:c0:c5:ca:4c:ef:7d:fd:51:61:0e:ff: 43:55:f5:54:ff:75:22:0b:d3:a5:9d:93:2b:b5:11: 3d:be:61:a7:c6:bc:b3:5a:7e:5e:ea:b1:fd:b6:2a: c1:2b:02:54:c5:95:66:24:29:f9:8b:0f:a3:2f:af: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5D:45:A4:A4:4C:AF:8D:D5:8D:33:4C:01:65:A6:42:49:17:4F:70 X509v3 Authority Key Identifier: keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8b:92:65:f9:3b:fb:bf:b7:78:dc:0e:8d:59:3a:48:23:d2: 48:00:28:75:93:f6:68:6b:da:4e:17:77:c2:81:40:da:1b:b3: 74:2b:e6:85:90:66:cf:75:fe:80:59:61:cc:a4:7d:83:22:0e: 72:e3:a4:a7:66:c3:f9:71:94:58:25:b8:64:29:5e:3f:52:39: 48:09:ca:8f:c2:95:ca:bf:98:6b:90:97:7d:44:32:9f:01:ea: b7:23:17:e8:11:12:b2:5b:62:cf:35:a3:89:da:0f:5f:a9:92: 8f:4f:68:77:5b:17:76:c8:00:6e:fc:98:ca:34:6a:05:60:4e: 5e:b7:0b:2e:b3:56:a5:70:33:d5:9d:0d:25:40:c9:45:84:65: 0f:3c:4c:de:3b:b1:39:da:01:1b:de:33:bd:44:2a:af:41:50: 40:9c:4b:6e:e9:b5:d9:79:48:4e:84:b0:4d:4c:54:ac:77:ff: c2:42:87:94:af:94:14:1d:2f:e2:80:d4:8a:54:da:c2:00:33: 68:d5:3a:ff:c9:f3:91:76:b1:e0:1f:90:51:ea:f6:52:aa:a7: a0:aa:f5:70:02:af:9a:f5:1e:12:82:61:e4:a2:27:23:a5:e9: df:c2:20:ca:76:f5:a3:ef:3f:aa:ba:b2:4c:3e:2c:05:60:dd: b3:64:36:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN28K2VFPBwTmlIfMJDu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZmM4ZDZjZDQ5ZjlhZmUyNjRkNTQyZTlhOTYxNGYzZDRh YzFjOWQwHhcNMjUxMjIyMDQwMDQyWhcNMjUxMjIzMDQwMDQyWjAzMTEwLwYDVQQD Eyg0NjVkNDVhNGE0NGNhZjhkZDU4ZDMzNGMwMTY1YTY0MjQ5MTc0ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueTiA0/TNhrGm+Nplv31bh6bINaC 6o5UTz6uW5gr9uaVzKq4/AAm6ZPa2X/Ez8w7ojVKupeIc312dKXn7GqEMbZB7JlE CDbD14exOLg/WjHo71w68kn92HcsHzpEOTRqZ7rgFzG/PnakofctISEGA2Oos8WA 2muqMq2I+Z+FPIDGkH6nPjNcVLOb8ER6hPZm/NmNnwNotGy4YDHO4kAG0Dkr8fyq ve2/eJJV+ROXbgB2LKkS+LTOiywk+Igio7YDZzOasDBnwMXKTO99/VFhDv9DVfVU /3UiC9OlnZMrtRE9vmGnxryzWn5e6rH9tirBKwJUxZVmJCn5iw+jL68dTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZdRaSkTK+N1Y0zTAFlpkJJF09wMB8GA1UdIwQY MBaAFM38jWzUn5r+Jk1ULpqWFPPUrBydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hYWI5MTUtZDVmZC00NTAzLWIzYjUt ZjI2MDk5ZTExNDgzLzEvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hYWI5MTUtZDVmZC00NTAzLWIzYjUtZjI2MDk5ZTExNDgz LzEvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4uSZfk7 +7+3eNwOjVk6SCPSSAAodZP2aGvaThd3woFA2huzdCvmhZBmz3X+gFlhzKR9gyIO cuOkp2bD+XGUWCW4ZCleP1I5SAnKj8KVyr+Ya5CXfUQynwHqtyMX6BESsltizzWj idoPX6mSj09od1sXdsgAbvyYyjRqBWBOXrcLLrNWpXAz1Z0NJUDJRYRlDzxM3jux OdoBG94zvUQqr0FQQJxLbum12XlIToSwTUxUrHf/wkKHlK+UFB0v4oDUilTawgAz aNU6/8nzkXax4B+QUer2UqqnoKr1cAKvmvUeEoJh5KInI6Xp38Igynb1o+8/qrqy TD4sBWDds2Q2lQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:20:39 2025 by rpki-client