This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json) Hash identifier: V7UULCSuzHd0UFfXUSCyvt9KuPyIzzIkTa1c5QUMLRY= Subject key identifier: 41:67:5E:C9:D2:7C:77:F4:1E:04:EB:92:79:BF:3A:12:81:43:6F:5F Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16 Certificate serial: 019B5AF66395997BA051F2AAED617F52E667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft Manifest number: 018A Signing time: Fri 26 Dec 2025 14:00:55 +0000 Manifest this update: Fri 26 Dec 2025 14:00:55 +0000 Manifest next update: Sat 27 Dec 2025 14:00:55 +0000 Files and hashes: 1: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: FJPC9FuHjcOyISLw8v009oFxR13XSAtIFGaY8N6916c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:63:95:99:7b:a0:51:f2:aa:ed:61:7f:52:e6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16 Validity Not Before: Dec 26 14:00:55 2025 GMT Not After : Dec 27 14:00:55 2025 GMT Subject: CN=41675ec9d27c77f41e04eb9279bf3a1281436f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:15:52:53:d2:f5:55:06:ee:70:a0:77:e1: 07:8b:09:cc:53:8b:9e:ca:61:43:2b:7c:ec:19:e9: 8c:98:bc:1b:f1:83:14:df:87:56:79:fe:4a:77:eb: da:b2:7a:f9:53:a0:d4:bd:74:96:37:43:4f:e2:88: de:ad:25:67:f9:0a:f0:6e:9e:2d:3d:9e:38:a8:2b: a3:b9:41:70:a2:d0:43:c4:45:d1:97:c8:21:68:ce: 28:d3:47:c3:a2:04:ea:fd:4d:36:cd:b8:4c:83:0c: 79:cc:6f:81:44:ac:58:02:26:1c:71:11:ac:8a:9b: 88:5c:d9:19:fa:ae:27:10:71:96:f2:c0:da:72:54: 58:4a:fe:8b:fa:ed:c7:7c:5a:9d:c8:ef:6f:fc:f2: 52:81:bc:87:c2:c9:5b:16:e8:98:50:71:db:b8:8f: 4e:a0:74:54:de:c4:58:ee:89:cf:43:25:29:8b:06: 8f:47:48:59:69:ec:b6:c2:82:1c:6d:74:22:87:3e: e0:7c:88:0c:92:97:54:b5:4e:8f:c1:7e:39:ba:0c: 7f:c4:dd:40:2d:fe:f0:dc:bc:34:f6:68:75:74:d9: f4:20:4f:f5:d9:5a:19:12:4d:df:55:3e:7f:28:d3: f7:6e:49:df:28:a7:29:aa:c8:b9:5d:a3:ee:1d:a9: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:67:5E:C9:D2:7C:77:F4:1E:04:EB:92:79:BF:3A:12:81:43:6F:5F X509v3 Authority Key Identifier: keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:48:cf:03:03:e0:fb:fe:6c:09:e7:38:0e:0d:a3:df:40:71: f2:43:2c:59:18:fd:10:65:a8:43:3f:f1:85:06:1f:9c:79:b5: 0a:4c:eb:e2:b8:72:ee:10:90:d2:59:c7:31:95:b0:c0:31:2a: 7c:7c:35:26:81:91:85:51:ab:31:f6:fa:db:4e:61:f4:2f:be: d4:12:a4:36:fd:60:6c:74:d4:cf:3a:9d:48:88:a2:96:49:74: 4b:e3:0e:bd:44:5a:2f:80:49:c7:32:d5:a9:96:4f:b9:22:67: 2d:22:1c:45:c6:cd:33:04:e6:e0:35:25:ab:bf:a2:d3:28:b7: e2:98:97:93:54:d3:b2:92:ae:e2:2c:a9:76:8b:e5:5a:73:25: e6:19:fd:f1:bd:40:27:21:8f:eb:83:f3:9d:ac:1a:10:05:b1: 18:89:70:e7:f6:2e:50:e5:c3:1a:6a:7c:67:11:c1:e5:bb:8c: 69:49:59:8e:b2:19:df:d9:41:7f:e2:60:91:f5:81:15:e7:a6: f3:f9:95:d6:22:56:3d:4f:7b:a2:41:17:36:49:58:75:33:e0: 1a:09:17:fb:09:1a:65:30:5a:4a:1b:c9:b4:95:d5:e2:c7:bb: 65:df:1e:aa:1f:6e:8f:79:ae:77:12:85:46:60:aa:f4:42:88: 9b:64:8d:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9mOVmXugUfKq7WF/UuZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjQ0NmZlNDQ3MmJhNjk0ZmMyMjk4Mjk4YTRmOGQxNTU5 OTVlMTYwHhcNMjUxMjI2MTQwMDU1WhcNMjUxMjI3MTQwMDU1WjAzMTEwLwYDVQQD Eyg0MTY3NWVjOWQyN2M3N2Y0MWUwNGViOTI3OWJmM2ExMjgxNDM2ZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj4VUlPS9VUG7nCgd+EHiwnMU4ue ymFDK3zsGemMmLwb8YMU34dWef5Kd+vasnr5U6DUvXSWN0NP4ojerSVn+Qrwbp4t PZ44qCujuUFwotBDxEXRl8ghaM4o00fDogTq/U02zbhMgwx5zG+BRKxYAiYccRGs ipuIXNkZ+q4nEHGW8sDaclRYSv6L+u3HfFqdyO9v/PJSgbyHwslbFuiYUHHbuI9O oHRU3sRY7onPQyUpiwaPR0hZaey2woIcbXQihz7gfIgMkpdUtU6PwX45ugx/xN1A Lf7w3Lw09mh1dNn0IE/12VoZEk3fVT5/KNP3bknfKKcpqsi5XaPuHamQ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFnXsnSfHf0HgTrknm/OhKBQ29fMB8GA1UdIwQY MBaAFM70Rv5EcrppT8Ipgpik+NFVmV4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODkt OTAxMDA2YmMxZmQ4LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODktOTAxMDA2YmMxZmQ4 LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0jPAwPg +/5sCec4Dg2j30Bx8kMsWRj9EGWoQz/xhQYfnHm1Ckzr4rhy7hCQ0lnHMZWwwDEq fHw1JoGRhVGrMfb6205h9C++1BKkNv1gbHTUzzqdSIiilkl0S+MOvURaL4BJxzLV qZZPuSJnLSIcRcbNMwTm4DUlq7+i0yi34piXk1TTspKu4iypdovlWnMl5hn98b1A JyGP64PznawaEAWxGIlw5/YuUOXDGmp8ZxHB5buMaUlZjrIZ39lBf+JgkfWBFeem 8/mV1iJWPU97okEXNklYdTPgGgkX+wkaZTBaShvJtJXV4se7Zd8eqh9uj3mudxKF RmCq9EKIm2SN2g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:28 2025 by rpki-client