This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json) Hash identifier: ZoMKct3HW7JtIRc2PVBmst3Rbki9Tl30HptD/7rcCBg= Subject key identifier: 94:30:6E:35:03:16:BC:08:9A:09:9E:DB:D0:A1:43:69:46:A3:9E:81 Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998 Certificate serial: 019B18DF93B9055ED9031DEC41EF4399C419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft Manifest number: 06D7 Signing time: Sat 13 Dec 2025 18:01:04 +0000 Manifest this update: Sat 13 Dec 2025 18:01:04 +0000 Manifest next update: Sun 14 Dec 2025 18:01:04 +0000 Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: 0RnVQCKUpUvCexgN9dOTY/+OYG/8KnHc17lWOCo9TZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:93:b9:05:5e:d9:03:1d:ec:41:ef:43:99:c4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998 Validity Not Before: Dec 13 18:01:04 2025 GMT Not After : Dec 14 18:01:04 2025 GMT Subject: CN=94306e350316bc089a099edbd0a1436946a39e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:6d:7f:d8:d8:86:c9:66:94:51:b8:e6:36: ba:a7:20:7c:01:c8:4a:a5:4a:05:13:72:fa:28:38: 12:c2:6e:cd:ef:bc:d3:e3:dc:9d:b0:25:02:79:ff: d3:0e:3a:3a:e7:4b:24:18:6d:4e:10:21:94:64:4d: b4:c3:3a:89:ab:a0:74:df:13:1e:3b:9d:63:99:93: 6c:ec:95:a7:e2:c8:83:27:fa:cc:fb:06:df:49:f8: b5:78:d7:99:b7:29:8e:3d:5c:98:5c:b7:3b:89:d5: 6a:b5:e5:12:fa:ae:66:16:73:d8:a3:31:a3:9b:70: f3:dc:78:ef:69:0d:a5:5e:07:8d:42:df:d4:0c:00: 14:fa:9d:6d:a5:f9:fc:6a:07:a5:bf:99:15:c0:1a: eb:6d:95:f8:75:4c:56:ba:b8:17:9a:73:48:de:00: c3:e7:06:66:2a:7b:c0:fa:8e:92:8b:ee:86:87:fe: 42:44:91:f5:b1:1e:ea:97:22:e1:b9:1f:0e:f7:8a: c9:a3:19:9c:b6:c3:df:88:93:0b:91:49:14:11:7f: d0:2c:9e:10:b6:0e:ad:3f:ec:18:68:15:23:e5:79: c3:ef:87:40:47:e3:0d:97:79:ca:59:2c:c8:9f:96: 39:2e:dc:1e:cd:e4:5a:c5:e7:93:23:f0:79:a1:a7: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:30:6E:35:03:16:BC:08:9A:09:9E:DB:D0:A1:43:69:46:A3:9E:81 X509v3 Authority Key Identifier: keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e3:15:ac:32:c9:ad:ac:90:b4:e5:8d:0a:63:2a:55:8e:8b: 2b:02:fa:71:89:8c:b0:13:0a:71:1e:c7:75:b8:15:fe:62:20: b4:a2:b1:c9:7b:1f:d9:b2:d7:f7:46:f2:69:59:d8:25:4f:95: 74:a9:8a:50:7a:77:a0:32:71:35:15:17:a5:ee:62:52:c7:ff: e8:ae:b1:17:bc:47:82:87:94:4c:7a:a6:95:f3:bb:e2:2d:cf: df:fd:a3:11:1d:45:f9:8e:29:b4:8a:47:a8:b8:18:58:58:42: b7:20:9e:b6:7d:7d:4b:09:70:f6:e8:e2:06:d6:05:fb:2e:54: 24:a2:96:a2:eb:ee:9b:af:fd:38:05:0c:4f:cb:df:da:e0:08: a8:30:64:af:98:83:2b:ae:2b:98:31:c6:27:25:14:34:5e:78: 6f:f3:c7:1a:3a:c7:10:8b:f3:fe:46:b4:d5:93:d6:a2:73:38: fb:b1:4f:15:cf:a1:65:33:ed:6a:c1:d1:a7:08:74:7c:a2:6f: e8:95:05:a8:48:52:fa:95:e3:c0:2f:7c:c7:6b:42:15:25:76: 9f:09:5a:e4:21:c5:00:72:c1:e9:dc:0d:a0:78:e4:60:a5:38: 35:0d:0a:ac:a9:93:ca:b3:bd:ef:e7:e9:d6:24:0f:dd:2f:89: 62:9e:d4:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY35O5BV7ZAx3sQe9DmcQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZWRhYTM2MDQ1MTQ2ZWJjNTg0ZTcxYjVjMWFmYTY4YTcz OTk5OTgwHhcNMjUxMjEzMTgwMTA0WhcNMjUxMjE0MTgwMTA0WjAzMTEwLwYDVQQD Eyg5NDMwNmUzNTAzMTZiYzA4OWEwOTllZGJkMGExNDM2OTQ2YTM5ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6ttf9jYhslmlFG45ja6pyB8AchK pUoFE3L6KDgSwm7N77zT49ydsCUCef/TDjo650skGG1OECGUZE20wzqJq6B03xMe O51jmZNs7JWn4siDJ/rM+wbfSfi1eNeZtymOPVyYXLc7idVqteUS+q5mFnPYozGj m3Dz3HjvaQ2lXgeNQt/UDAAU+p1tpfn8agelv5kVwBrrbZX4dUxWurgXmnNI3gDD 5wZmKnvA+o6Si+6Gh/5CRJH1sR7qlyLhuR8O94rJoxmctsPfiJMLkUkUEX/QLJ4Q tg6tP+wYaBUj5XnD74dAR+MNl3nKWSzIn5Y5LtwezeRaxeeTI/B5oaflmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQwbjUDFrwImgme29ChQ2lGo56BMB8GA1UdIwQY MBaAFM7tqjYEUUbrxYTnG1wa+minOZmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2Mt NDQzMWU0ZmNiMzgyLzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2MtNDQzMWU0ZmNiMzgy LzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+MVrDLJ rayQtOWNCmMqVY6LKwL6cYmMsBMKcR7HdbgV/mIgtKKxyXsf2bLX90byaVnYJU+V dKmKUHp3oDJxNRUXpe5iUsf/6K6xF7xHgoeUTHqmlfO74i3P3/2jER1F+Y4ptIpH qLgYWFhCtyCetn19Swlw9ujiBtYF+y5UJKKWouvum6/9OAUMT8vf2uAIqDBkr5iD K64rmDHGJyUUNF54b/PHGjrHEIvz/ka01ZPWonM4+7FPFc+hZTPtasHRpwh0fKJv 6JUFqEhS+pXjwC98x2tCFSV2nwla5CHFAHLB6dwNoHjkYKU4NQ0KrKmTyrO97+fp 1iQP3S+JYp7UaQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:23:52 2025 by rpki-client