This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft File: zdzNhA0BvLL8qSppg49M2mxqdKg.mft (raw, json) Hash identifier: QjX6qlTX7JUA2U12DO0NtXs0tqh0mbRH9xqOyipUrlc= Subject key identifier: B6:49:51:2E:EA:A1:15:A4:27:56:29:8A:1F:84:93:F6:46:8E:2C:86 Authority key identifier: CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8 Certificate issuer: /CN=cddccd840d01bcb2fca92a69838f4cda6c6a74a8 Certificate serial: 019B5A1AE2BDEA0BD9D1F636838DC700B314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft Manifest number: 04 Signing time: Fri 26 Dec 2025 10:01:09 +0000 Manifest this update: Fri 26 Dec 2025 10:01:09 +0000 Manifest next update: Sat 27 Dec 2025 10:01:09 +0000 Files and hashes: 1: zdzNhA0BvLL8qSppg49M2mxqdKg.crl (hash: uNyOvep053y+MNc7FzaaBRIzqBlpZf/Brzvs+g+Mo/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:e2:bd:ea:0b:d9:d1:f6:36:83:8d:c7:00:b3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cddccd840d01bcb2fca92a69838f4cda6c6a74a8 Validity Not Before: Dec 26 10:01:09 2025 GMT Not After : Dec 27 10:01:09 2025 GMT Subject: CN=b649512eeaa115a42756298a1f8493f6468e2c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:c1:f7:28:82:e2:2d:ab:51:f4:48:ef:c3: e7:5d:df:2a:c1:af:fb:ce:4b:ef:7f:b4:59:e6:7c: 3c:15:7d:0b:29:aa:ff:f1:1e:eb:50:fd:08:2f:7f: 06:a8:fb:62:df:69:82:b5:7b:c0:f6:94:e4:f7:e2: a0:2c:bd:52:98:c9:e6:52:2f:a1:9d:06:9d:3f:d0: 63:f3:ea:25:52:04:45:fc:13:f9:92:4a:16:24:13: fc:3d:78:80:f4:05:e0:e4:24:c3:2f:3b:c1:74:ef: 76:33:f8:1a:e0:a0:a3:59:ad:1f:3d:42:cf:8e:83: 44:ca:90:f2:ab:5a:86:b9:2d:04:20:14:b3:d9:d1: b5:55:74:7e:7f:5a:de:cc:c3:fb:12:47:e4:43:bd: ba:1d:d2:de:20:37:8e:08:8e:b4:eb:2e:36:b4:d8: f4:5d:e6:cd:b5:fe:e1:a6:8e:88:f6:8b:f8:13:70: bf:5d:46:58:5e:f0:3f:9c:9e:21:0d:7c:9e:7e:6f: f8:df:9d:79:ee:d9:f0:b3:6f:c4:33:b3:f1:ab:d3: 71:69:5b:0d:54:0f:ef:8f:24:c9:05:df:86:30:a9: ce:7f:b4:91:34:cc:bb:da:b8:37:14:60:2b:48:f5: 2d:50:28:bc:78:80:8e:67:b2:6e:94:e2:63:54:65: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:49:51:2E:EA:A1:15:A4:27:56:29:8A:1F:84:93:F6:46:8E:2C:86 X509v3 Authority Key Identifier: keyid:CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:28:20:b2:47:13:5c:4e:99:ce:2f:cb:08:ea:f8:bf:c4:0b: 2e:37:db:e3:33:ca:6c:bb:91:43:61:72:5a:a5:ef:3f:06:61: 87:22:eb:e7:0b:fe:1e:f4:89:20:67:f9:9a:4f:52:ce:23:da: 03:cc:0a:4a:60:5e:09:46:5d:12:df:0e:72:e8:86:36:f9:87: 9a:fe:db:fa:03:f7:0f:bd:4b:b9:47:90:c9:b9:60:be:7e:c2: 8b:85:62:2f:38:e7:9a:98:ee:0a:87:cb:d7:9f:c2:57:28:d9: 1e:bd:1b:7f:b6:ca:ae:60:af:33:fe:9b:67:24:e1:72:dc:4b: 3d:57:76:7a:6e:58:1a:e6:eb:ab:70:fe:c0:ac:5a:ba:29:b3: fd:16:3b:54:a2:65:c3:ce:aa:5d:7c:29:54:ac:d8:ed:6c:9f: 85:11:b2:8b:d0:22:56:be:4d:47:69:82:8f:f4:a9:cf:b3:2b: 87:3c:be:90:a0:63:a1:5c:2e:42:ae:82:12:2e:42:aa:e2:fa: 9a:54:8f:9e:e0:d9:7b:ae:5f:16:e1:34:c8:ab:3a:e7:6f:35: 85:be:e5:a2:53:88:e2:8c:09:41:5e:0f:89:5d:f3:1a:b8:38: 20:c0:5b:a1:9e:89:1c:23:2f:19:e8:69:c3:25:02:3c:30:13: 45:43:df:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGuK96gvZ0fY2g43HALMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZGNjZDg0MGQwMWJjYjJmY2E5MmE2OTgzOGY0Y2RhNmM2 YTc0YTgwHhcNMjUxMjI2MTAwMTA5WhcNMjUxMjI3MTAwMTA5WjAzMTEwLwYDVQQD EyhiNjQ5NTEyZWVhYTExNWE0Mjc1NjI5OGExZjg0OTNmNjQ2OGUyYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLHB9yiC4i2rUfRI78PnXd8qwa/7 zkvvf7RZ5nw8FX0LKar/8R7rUP0IL38GqPti32mCtXvA9pTk9+KgLL1SmMnmUi+h nQadP9Bj8+olUgRF/BP5kkoWJBP8PXiA9AXg5CTDLzvBdO92M/ga4KCjWa0fPULP joNEypDyq1qGuS0EIBSz2dG1VXR+f1rezMP7EkfkQ726HdLeIDeOCI606y42tNj0 XebNtf7hpo6I9ov4E3C/XUZYXvA/nJ4hDXyefm/435157tnws2/EM7Pxq9NxaVsN VA/vjyTJBd+GMKnOf7SRNMy72rg3FGArSPUtUCi8eICOZ7JulOJjVGWOyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZJUS7qoRWkJ1Ypih+Ek/ZGjiyGMB8GA1UdIwQY MBaAFM3czYQNAbyy/KkqaYOPTNpsanSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemR6TmhBMEJ2TEw4cVNwcGc0OU0ybXhxZEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNzNlNGUtMmE0YS00ZWJkLTkyZmIt NjgzZTJiOTk1NjE2LzEvemR6TmhBMEJ2TEw4cVNwcGc0OU0ybXhxZEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wNzNlNGUtMmE0YS00ZWJkLTkyZmItNjgzZTJiOTk1NjE2 LzEvemR6TmhBMEJ2TEw4cVNwcGc0OU0ybXhxZEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyggskcT XE6Zzi/LCOr4v8QLLjfb4zPKbLuRQ2FyWqXvPwZhhyLr5wv+HvSJIGf5mk9SziPa A8wKSmBeCUZdEt8OcuiGNvmHmv7b+gP3D71LuUeQyblgvn7Ci4ViLzjnmpjuCofL 15/CVyjZHr0bf7bKrmCvM/6bZyThctxLPVd2em5YGubrq3D+wKxauimz/RY7VKJl w86qXXwpVKzY7WyfhRGyi9AiVr5NR2mCj/Spz7Mrhzy+kKBjoVwuQq6CEi5CquL6 mlSPnuDZe65fFuE0yKs65281hb7lolOI4owJQV4PiV3zGrg4IMBboZ6JHCMvGehp wyUCPDATRUPfVw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:22 2025 by rpki-client