This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json) Hash identifier: Zu7MjrzmM9kha0QasCgPtXFg8CKumkYs53i+i4ZUCck= Subject key identifier: 24:B0:D9:C8:A6:F8:4F:40:4B:9A:FB:04:BB:CF:60:ED:33:36:0E:B6 Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b Certificate serial: 019B1B0470BF1FB7B068AA7C0F0F467AE059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft Manifest number: 1773 Signing time: Sun 14 Dec 2025 04:00:34 +0000 Manifest this update: Sun 14 Dec 2025 04:00:34 +0000 Manifest next update: Mon 15 Dec 2025 04:00:34 +0000 Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: iq68Fru7WspoO3Wgf435FwXp4wR9/svSuAS8SGLwAbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:70:bf:1f:b7:b0:68:aa:7c:0f:0f:46:7a:e0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b Validity Not Before: Dec 14 04:00:34 2025 GMT Not After : Dec 15 04:00:34 2025 GMT Subject: CN=24b0d9c8a6f84f404b9afb04bbcf60ed33360eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:34:70:a5:3b:5e:89:c1:e9:57:64:b8:11: 8b:54:0b:22:25:18:b2:ae:f0:86:1a:eb:86:9b:78: 03:e1:31:10:ac:8b:26:34:4b:f4:99:3e:8f:b8:76: 5c:41:a5:90:fe:81:f1:5c:ea:70:d7:7e:92:ec:0e: bb:a5:91:d6:ab:29:ba:1d:1a:1a:36:f9:bf:27:24: d4:61:08:a0:09:0f:ec:81:a8:b8:e2:fb:58:e0:8c: 65:9c:1b:38:7c:36:a2:db:89:62:88:94:c8:00:b5: d4:51:cf:67:99:81:9f:d8:b3:00:e3:bd:f0:fa:68: ad:71:07:26:ab:0d:03:58:f5:b4:64:a7:7e:52:c7: 30:06:32:4a:c8:8d:26:72:77:4e:1e:ac:db:ca:c2: 43:60:a4:1e:32:b7:2e:32:4b:ec:0a:83:06:7f:00: d6:e5:6f:6e:3f:45:cd:76:46:79:b8:4e:ae:12:77: 8c:76:7f:22:93:0b:04:7d:8b:2d:ec:4a:90:83:1e: c6:f9:b4:ae:87:62:1d:33:ac:f8:37:6e:6b:34:a0: a9:02:9c:6e:9e:d2:72:e3:2d:e6:ae:48:77:61:62: c6:2c:a4:d2:06:56:30:2c:59:65:96:e5:b8:e3:af: 45:63:d1:6b:47:02:e4:14:15:89:5d:ec:e2:40:ee: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B0:D9:C8:A6:F8:4F:40:4B:9A:FB:04:BB:CF:60:ED:33:36:0E:B6 X509v3 Authority Key Identifier: keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:01:49:15:8e:29:ed:31:a8:03:17:a7:d8:52:4a:d7:41:e0: f2:4c:c3:9e:ac:29:67:71:74:57:c7:78:81:b7:ba:8c:ec:a9: 4d:02:cf:f4:ef:e0:75:eb:46:63:3b:81:01:79:3e:ba:b0:52: d2:3e:90:b8:cc:22:a4:82:e3:91:83:79:89:04:af:3b:58:3d: 6e:3b:67:e1:e4:9a:4a:6b:06:b6:93:0e:32:e2:60:76:16:a5: 77:6f:62:dc:00:91:f7:da:dc:6d:fc:e0:e2:9d:9d:4c:74:c6: fe:95:0c:15:5d:93:24:bf:f4:fb:42:7a:23:dc:cf:6b:b1:92: b4:77:fd:c8:e3:52:11:64:e7:37:ad:08:fb:4f:32:b5:a8:71: b3:e7:67:82:b7:a4:33:2c:d9:00:73:cd:22:7e:1f:89:d7:55: 79:d5:bf:d6:fc:a5:76:a3:70:fe:4c:8f:55:b5:1a:e3:e4:13: 4b:89:84:41:a6:b4:e1:be:57:6a:2c:84:00:0e:ac:1a:ba:1c: 2b:2a:1e:dd:30:31:82:9a:ac:9c:9b:2c:0d:7a:1e:68:66:d6: c3:da:2c:43:cc:b5:77:85:38:61:59:52:f7:c8:f6:24:05:20: 28:5e:40:7e:11:13:b8:5c:e5:7e:73:bc:d3:98:99:80:f5:72: a0:7c:34:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBHC/H7ewaKp8Dw9GeuBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzUwN2E1YTFlNTUwMWE3YWQ2MzU1MzM1YWNkZmU2M2Rh YmM5MGIwHhcNMjUxMjE0MDQwMDM0WhcNMjUxMjE1MDQwMDM0WjAzMTEwLwYDVQQD EygyNGIwZDljOGE2Zjg0ZjQwNGI5YWZiMDRiYmNmNjBlZDMzMzYwZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaE0cKU7XonB6VdkuBGLVAsiJRiy rvCGGuuGm3gD4TEQrIsmNEv0mT6PuHZcQaWQ/oHxXOpw136S7A67pZHWqym6HRoa Nvm/JyTUYQigCQ/sgai44vtY4IxlnBs4fDai24liiJTIALXUUc9nmYGf2LMA473w +mitcQcmqw0DWPW0ZKd+UscwBjJKyI0mcndOHqzbysJDYKQeMrcuMkvsCoMGfwDW 5W9uP0XNdkZ5uE6uEneMdn8ikwsEfYst7EqQgx7G+bSuh2IdM6z4N25rNKCpApxu ntJy4y3mrkh3YWLGLKTSBlYwLFllluW4469FY9FrRwLkFBWJXeziQO51RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSw2cim+E9AS5r7BLvPYO0zNg62MB8GA1UdIwQY MBaAFM7FB6Wh5VAaetY1UzWs3+Y9q8kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2Mt ZDI0YWE1Nzk0ZDhiLzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2MtZDI0YWE1Nzk0ZDhi LzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQFJFY4p 7TGoAxen2FJK10Hg8kzDnqwpZ3F0V8d4gbe6jOypTQLP9O/gdetGYzuBAXk+urBS 0j6QuMwipILjkYN5iQSvO1g9bjtn4eSaSmsGtpMOMuJgdhald29i3ACR99rcbfzg 4p2dTHTG/pUMFV2TJL/0+0J6I9zPa7GStHf9yONSEWTnN60I+08ytahxs+dngrek MyzZAHPNIn4fiddVedW/1vyldqNw/kyPVbUa4+QTS4mEQaa04b5XaiyEAA6sGroc Kyoe3TAxgpqsnJssDXoeaGbWw9osQ8y1d4U4YVlS98j2JAUgKF5AfhETuFzlfnO8 05iZgPVyoHw0sQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:07 2025 by rpki-client