This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json) Hash identifier: 0rgUTNh5CUGs+i8jCImshzgGvGMkiQOCgJY1bKEeh+M= Subject key identifier: 21:B4:FB:79:EF:CB:97:E3:E4:09:6A:98:AE:C9:2B:96:33:16:9C:7F Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262 Certificate serial: 019B37583F7F64DA10A45F566665173E038B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft Manifest number: 132E Signing time: Fri 19 Dec 2025 16:01:28 +0000 Manifest this update: Fri 19 Dec 2025 16:01:28 +0000 Manifest next update: Sat 20 Dec 2025 16:01:28 +0000 Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: 9K5AqmdK7iQhIZSWYnwK7JDx47QN1LH0PllA75ZaADg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:3f:7f:64:da:10:a4:5f:56:66:65:17:3e:03:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262 Validity Not Before: Dec 19 16:01:28 2025 GMT Not After : Dec 20 16:01:28 2025 GMT Subject: CN=21b4fb79efcb97e3e4096a98aec92b9633169c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:e9:97:3b:0e:e7:e9:13:06:3d:ae:42:7d: 19:ea:3c:d1:87:65:06:54:c9:5e:4d:f3:3f:06:62: 4f:35:bc:51:34:f2:47:01:10:e6:68:f5:e2:6a:8c: bd:65:f3:86:f7:64:67:3d:eb:0f:c3:25:5f:8a:0e: 36:29:6c:a1:22:86:4f:13:43:71:ac:2c:11:ac:bb: ca:85:75:ce:91:02:18:99:f3:10:e2:4e:be:ed:ed: dd:90:b7:0c:46:6f:75:f1:df:28:7b:8d:75:2d:d9: d9:82:41:5a:95:3d:12:97:d3:0e:c6:3a:e9:76:43: 65:b3:5c:98:9d:e6:32:65:54:5a:57:27:1d:4c:ff: a6:37:30:a0:35:aa:a9:76:07:c4:c3:e8:e4:b6:cf: a7:1a:43:c3:9a:dd:a9:75:05:3a:fd:04:78:b3:55: 2c:ec:98:9f:e4:6d:aa:ee:36:0b:a3:1d:93:10:e6: d6:ce:08:bd:3f:10:65:cf:45:a9:4e:af:34:99:6c: 1f:41:0c:7c:fa:75:7e:a2:19:e2:0f:c0:f2:3e:54: 49:e3:35:9c:1c:34:82:da:96:e4:28:3e:99:2c:0c: d8:e9:a6:8b:dd:a3:94:57:76:f3:57:8f:2e:81:33: b3:3f:18:82:74:bc:b2:f5:08:46:65:6f:8f:f9:84: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:FB:79:EF:CB:97:E3:E4:09:6A:98:AE:C9:2B:96:33:16:9C:7F X509v3 Authority Key Identifier: keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4d:33:27:e1:bb:ee:b9:89:98:46:da:f0:1d:ce:8e:f5:05: fe:c7:6e:dd:5b:47:60:8f:e0:ba:f4:29:9e:d4:1f:4d:2a:f3: 9f:cb:ad:d2:a7:36:c4:ae:8f:4b:3b:d6:fb:a7:47:4d:d4:5b: ea:93:96:9b:0d:2b:43:1b:6e:63:0a:5c:45:cf:e5:87:bf:51: 3e:bd:9c:c8:b1:92:6c:5a:67:0a:77:6c:e6:cb:36:3b:51:5f: 55:02:1b:7c:9b:55:fd:9f:c1:7e:22:d0:28:bc:87:53:dd:bf: 81:3b:c0:5b:58:5f:82:70:14:a8:de:d1:f0:d8:b3:0d:f3:a6: 53:6d:d7:19:4c:68:6b:9a:30:90:83:e1:86:a2:39:3c:4d:84: 9c:7c:9b:c0:23:62:81:e0:3c:2d:64:33:d8:37:c6:dd:5c:03: 7e:82:23:95:e6:7a:52:ad:7b:d8:c3:fa:d5:e4:16:f9:51:98: 88:b8:a4:13:b4:84:96:89:1a:ac:a0:ad:c6:62:b2:ca:2d:3c: 00:f1:cc:b7:1c:f5:5d:67:88:4a:25:2a:95:98:75:c2:3c:c5: c1:24:3d:09:08:e5:47:54:87:63:fc:15:05:37:13:da:4b:7b: 63:25:a6:92:43:91:f7:5b:82:f9:b3:6f:77:84:02:b4:1b:41: 21:74:be:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WD9/ZNoQpF9WZmUXPgOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDJiMmY1NGNhMTcxOGNmZDM4MjkzMTExNDE1NjY2Y2Mz NGUyNjIwHhcNMjUxMjE5MTYwMTI4WhcNMjUxMjIwMTYwMTI4WjAzMTEwLwYDVQQD EygyMWI0ZmI3OWVmY2I5N2UzZTQwOTZhOThhZWM5MmI5NjMzMTY5YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKzplzsO5+kTBj2uQn0Z6jzRh2UG VMleTfM/BmJPNbxRNPJHARDmaPXiaoy9ZfOG92RnPesPwyVfig42KWyhIoZPE0Nx rCwRrLvKhXXOkQIYmfMQ4k6+7e3dkLcMRm918d8oe411LdnZgkFalT0Sl9MOxjrp dkNls1yYneYyZVRaVycdTP+mNzCgNaqpdgfEw+jkts+nGkPDmt2pdQU6/QR4s1Us 7Jif5G2q7jYLox2TEObWzgi9PxBlz0WpTq80mWwfQQx8+nV+ohniD8DyPlRJ4zWc HDSC2pbkKD6ZLAzY6aaL3aOUV3bzV48ugTOzPxiCdLyy9QhGZW+P+YQoEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG0+3nvy5fj5AlqmK7JK5YzFpx/MB8GA1UdIwQY MBaAFGXSsvVMoXGM/TgpMRFBVmbMNOJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmIt ZWY2NWRjYmM3YzA5LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmItZWY2NWRjYmM3YzA5 LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk0zJ+G7 7rmJmEba8B3OjvUF/sdu3VtHYI/guvQpntQfTSrzn8ut0qc2xK6PSzvW+6dHTdRb 6pOWmw0rQxtuYwpcRc/lh79RPr2cyLGSbFpnCnds5ss2O1FfVQIbfJtV/Z/BfiLQ KLyHU92/gTvAW1hfgnAUqN7R8NizDfOmU23XGUxoa5owkIPhhqI5PE2EnHybwCNi geA8LWQz2DfG3VwDfoIjleZ6Uq172MP61eQW+VGYiLikE7SElokarKCtxmKyyi08 APHMtxz1XWeISiUqlZh1wjzFwSQ9CQjlR1SHY/wVBTcT2kt7YyWmkkOR91uC+bNv d4QCtBtBIXS+9w== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:01 2025 by rpki-client