This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json) Hash identifier: efHEqXat9h1eLT2Ip0Fmdub+oIy6zRE5xUGnZ17x9ko= Subject key identifier: AD:25:0C:24:F9:73:65:A9:36:98:15:79:D7:CF:2C:BE:5B:70:F9:10 Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e Certificate serial: 019B590863753D0A24C2368C7F08B6E87A83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft Manifest number: 06F8 Signing time: Fri 26 Dec 2025 05:01:20 +0000 Manifest this update: Fri 26 Dec 2025 05:01:20 +0000 Manifest next update: Sat 27 Dec 2025 05:01:20 +0000 Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: 6tWw+mYNqGuBEekIWfg7pIpGF1jmha7fFP8YEljllE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:63:75:3d:0a:24:c2:36:8c:7f:08:b6:e8:7a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e Validity Not Before: Dec 26 05:01:20 2025 GMT Not After : Dec 27 05:01:20 2025 GMT Subject: CN=ad250c24f97365a936981579d7cf2cbe5b70f910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:32:db:b0:32:97:6b:1f:50:3c:50:17:20: c8:34:38:fa:cb:9b:f4:af:31:28:8a:4a:73:b0:03: af:87:ac:88:51:64:4e:d9:14:f1:e7:5f:be:38:a9: da:35:bf:f4:6b:67:d5:eb:16:5b:3d:98:58:25:94: 2a:84:b5:60:bd:71:24:74:80:7f:45:04:e0:e4:00: 74:19:e1:83:01:06:cf:42:21:88:ad:3e:00:ea:47: d5:fa:1d:4f:1d:1a:85:a5:07:af:4e:b7:02:b4:cd: ba:05:f2:ff:54:4c:47:95:6c:24:a6:b2:82:2e:58: 91:1f:f1:2a:c2:77:e6:3d:7e:31:81:3e:fa:3e:eb: 86:15:60:25:f0:b2:e8:40:7a:ce:af:bf:2c:32:e2: ef:0d:54:f6:6a:b3:3f:87:7d:3e:c4:00:b5:12:3e: 93:5a:ab:b8:6f:ac:47:a8:9b:76:86:ce:fa:07:d1: 7e:76:f6:e2:aa:1a:16:6c:ba:4a:d7:f7:d8:1b:7e: b2:5f:5a:7d:c2:22:6e:63:e1:f5:98:a8:d6:3e:9f: 56:df:f1:22:73:d2:37:f8:11:9c:28:d9:11:c5:53: be:f1:0e:0c:11:91:49:14:aa:ee:bd:2d:2c:c4:1c: 05:c9:0f:e8:da:4f:71:dc:2e:83:ef:8e:d6:be:0c: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:25:0C:24:F9:73:65:A9:36:98:15:79:D7:CF:2C:BE:5B:70:F9:10 X509v3 Authority Key Identifier: keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7b:c1:8c:f3:cd:95:db:5e:84:2f:6a:8c:84:5c:35:e0:21: 01:80:16:00:39:9b:b7:fd:21:5f:52:66:50:3e:2f:99:ea:0a: 7e:21:83:1e:e5:eb:38:49:dc:67:a0:54:01:9f:2b:71:f1:8a: d4:c4:fa:e4:47:37:78:43:ba:8a:b9:f1:e2:5d:18:7a:e9:dc: 9f:3b:81:74:07:aa:80:b5:c9:09:34:3e:af:33:c4:1a:e4:3a: 44:ee:8b:3f:fb:51:96:21:4f:e9:fa:8e:90:a6:f2:b8:da:24: 79:59:bd:f9:ca:ba:c6:ae:39:5f:0d:46:e0:76:3f:44:db:89: b7:1a:7e:a1:d2:12:9f:d2:17:5b:fc:7c:ed:99:37:59:0d:d1: 21:a9:10:88:fc:d6:09:87:b2:11:d5:47:73:65:4a:55:49:46: d6:25:75:76:dd:ab:04:3d:79:1e:e6:e3:27:e7:6b:dd:02:dd: 01:10:44:fc:4e:24:06:58:c6:d7:a5:72:a4:91:66:c7:27:c0: ae:2b:05:0e:d4:bf:44:3a:60:ab:af:49:c9:7e:17:8b:d2:16: c5:b5:f2:48:0c:0e:e6:f5:a1:0d:00:ad:9f:bb:20:f8:58:23: 43:23:01:14:98:dc:ec:2a:1d:80:30:f4:e3:52:64:70:95:02: c9:0a:ea:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCGN1PQokwjaMfwi26HqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx Zjc2NGUwHhcNMjUxMjI2MDUwMTIwWhcNMjUxMjI3MDUwMTIwWjAzMTEwLwYDVQQD EyhhZDI1MGMyNGY5NzM2NWE5MzY5ODE1NzlkN2NmMmNiZTViNzBmOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8wy27Ayl2sfUDxQFyDINDj6y5v0 rzEoikpzsAOvh6yIUWRO2RTx51++OKnaNb/0a2fV6xZbPZhYJZQqhLVgvXEkdIB/ RQTg5AB0GeGDAQbPQiGIrT4A6kfV+h1PHRqFpQevTrcCtM26BfL/VExHlWwkprKC LliRH/EqwnfmPX4xgT76PuuGFWAl8LLoQHrOr78sMuLvDVT2arM/h30+xAC1Ej6T Wqu4b6xHqJt2hs76B9F+dvbiqhoWbLpK1/fYG36yX1p9wiJuY+H1mKjWPp9W3/Ei c9I3+BGcKNkRxVO+8Q4MEZFJFKruvS0sxBwFyQ/o2k9x3C6D747WvgyGDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0lDCT5c2WpNpgVedfPLL5bcPkQMB8GA1UdIwQY MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4 LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHvBjPPN ldtehC9qjIRcNeAhAYAWADmbt/0hX1JmUD4vmeoKfiGDHuXrOEncZ6BUAZ8rcfGK 1MT65Ec3eEO6irnx4l0YeuncnzuBdAeqgLXJCTQ+rzPEGuQ6RO6LP/tRliFP6fqO kKbyuNokeVm9+cq6xq45Xw1G4HY/RNuJtxp+odISn9IXW/x87Zk3WQ3RIakQiPzW CYeyEdVHc2VKVUlG1iV1dt2rBD15HubjJ+dr3QLdARBE/E4kBljG16VypJFmxyfA risFDtS/RDpgq69JyX4Xi9IWxbXySAwO5vWhDQCtn7sg+FgjQyMBFJjc7CodgDD0 41JkcJUCyQrqCg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:31 2025 by rpki-client