This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json) Hash identifier: 0hIQdIw7UcAx3eJgsL3EjUaTaernTmMTdeXBn310zoE= Subject key identifier: 3C:75:8B:3D:D6:4F:99:7E:38:33:D6:93:43:57:01:AC:7E:A2:46:2D Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b Certificate serial: 019B1A974492E7E00081797404B39D317646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft Manifest number: 177E Signing time: Sun 14 Dec 2025 02:01:19 +0000 Manifest this update: Sun 14 Dec 2025 02:01:19 +0000 Manifest next update: Mon 15 Dec 2025 02:01:19 +0000 Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: bFVOdE2+WJl0ql4KnRWV0YrJzyNIkPE2Uqa1ljCnWVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:44:92:e7:e0:00:81:79:74:04:b3:9d:31:76:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b Validity Not Before: Dec 14 02:01:19 2025 GMT Not After : Dec 15 02:01:19 2025 GMT Subject: CN=3c758b3dd64f997e3833d693435701ac7ea2462d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:dc:81:43:ef:67:f1:9d:a9:a9:79:b1:54: 22:1f:e7:f7:88:10:b1:cc:b3:16:36:a3:9e:8c:d2: 42:b2:c5:62:9a:7e:e2:68:52:85:6b:e3:d3:03:d9: cd:d9:c8:3e:e9:60:91:77:83:4b:e5:98:d9:da:42: b4:7a:1d:b8:70:67:aa:bf:48:90:5a:6a:f9:34:63: 8c:a1:13:ce:d4:03:40:75:1b:90:fc:5e:0d:f6:88: 6f:83:0d:c1:e4:a1:37:97:26:87:44:01:a5:17:8e: 1c:c2:db:de:03:de:fd:af:2d:82:36:78:ee:7f:0e: 5a:a5:2d:82:5a:79:df:9e:43:60:0e:e8:77:f6:27: df:81:bf:9f:48:26:69:ce:12:11:77:53:64:42:b6: 2f:ab:b4:28:f3:1d:14:f6:a8:aa:ed:cb:ea:1f:4c: 39:72:d2:97:46:1f:1a:7c:d0:4f:c3:0b:14:83:c1: b3:ff:47:67:39:38:1a:48:ca:36:f4:66:0e:0a:c3: 30:a1:86:a7:58:eb:ec:6e:51:7b:e6:d1:db:6a:2b: 1a:7d:fa:64:96:6b:73:fc:e3:e0:2e:b4:01:21:7a: 26:b7:0a:38:d6:23:45:93:a2:f8:f6:d0:87:8b:12: c8:03:ff:4f:74:e4:57:40:74:48:7e:2a:72:4b:cf: da:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:75:8B:3D:D6:4F:99:7E:38:33:D6:93:43:57:01:AC:7E:A2:46:2D X509v3 Authority Key Identifier: keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:73:a7:25:1f:c8:53:a2:cd:30:60:cb:65:d1:22:f4:9b:ae: ee:21:6f:52:12:65:55:5e:67:c5:2c:99:99:f0:dd:51:48:16: f7:47:8f:38:07:2f:b4:cb:cc:26:de:29:0d:d3:dd:54:13:9d: ba:1c:42:85:9f:61:05:78:56:99:2e:8e:47:52:0e:42:e8:17: 2f:63:99:a1:57:45:0b:f6:ba:d7:94:16:34:6c:32:11:ba:df: d0:7e:6e:ff:b2:37:5f:45:0f:6f:df:e0:4d:4a:51:3a:bf:ae: c6:dd:80:9d:6e:d0:eb:38:eb:ad:7c:29:3a:f9:63:eb:f9:80: ea:54:f6:aa:85:26:10:f0:57:a9:05:64:9c:3e:f7:d2:54:30: 92:b6:a4:98:7d:19:4c:61:8d:2b:14:71:73:d3:8d:99:1b:9d: ca:8f:e8:cf:88:cc:d9:c7:b5:46:90:b4:ad:88:08:72:49:f7: e3:2a:36:c0:fb:2b:94:53:9c:18:05:0a:98:1b:be:fa:ed:79: 1f:96:52:92:e8:07:f9:3d:87:e7:c9:6a:a4:4c:8a:ec:1a:58: 3b:9e:b8:d3:be:c0:1b:2a:db:80:25:c7:c4:d9:84:ec:96:4f: ca:3f:21:9c:58:24:32:da:30:00:0f:c8:9f:de:23:0d:69:a5: ec:c5:df:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal0SS5+AAgXl0BLOdMXZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYzg0MDgyYmU5NmU2MDlkOWRlOTgwOGZiYzM3ODY2ZmVi NGM1NGIwHhcNMjUxMjE0MDIwMTE5WhcNMjUxMjE1MDIwMTE5WjAzMTEwLwYDVQQD EygzYzc1OGIzZGQ2NGY5OTdlMzgzM2Q2OTM0MzU3MDFhYzdlYTI0NjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHTcgUPvZ/Gdqal5sVQiH+f3iBCx zLMWNqOejNJCssVimn7iaFKFa+PTA9nN2cg+6WCRd4NL5ZjZ2kK0eh24cGeqv0iQ Wmr5NGOMoRPO1ANAdRuQ/F4N9ohvgw3B5KE3lyaHRAGlF44cwtveA979ry2CNnju fw5apS2CWnnfnkNgDuh39iffgb+fSCZpzhIRd1NkQrYvq7Qo8x0U9qiq7cvqH0w5 ctKXRh8afNBPwwsUg8Gz/0dnOTgaSMo29GYOCsMwoYanWOvsblF75tHbaisaffpk lmtz/OPgLrQBIXomtwo41iNFk6L49tCHixLIA/9PdORXQHRIfipyS8/aYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDx1iz3WT5l+ODPWk0NXAax+okYtMB8GA1UdIwQY MBaAFM3IQIK+luYJ2d6YCPvDeGb+tMVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMt Y2JmMTY0ZThiZTAxLzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMtY2JmMTY0ZThiZTAx LzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3OnJR/I U6LNMGDLZdEi9Juu7iFvUhJlVV5nxSyZmfDdUUgW90ePOAcvtMvMJt4pDdPdVBOd uhxChZ9hBXhWmS6OR1IOQugXL2OZoVdFC/a615QWNGwyEbrf0H5u/7I3X0UPb9/g TUpROr+uxt2AnW7Q6zjrrXwpOvlj6/mA6lT2qoUmEPBXqQVknD730lQwkrakmH0Z TGGNKxRxc9ONmRudyo/oz4jM2ce1RpC0rYgIckn34yo2wPsrlFOcGAUKmBu++u15 H5ZSkugH+T2H58lqpEyK7BpYO564077AGyrbgCXHxNmE7JZPyj8hnFgkMtowAA/I n94jDWml7MXfqw== -----END CERTIFICATE-----Generated at Sun Dec 14 06:12:58 2025 by rpki-client