This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft File: zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft (raw, json) Hash identifier: XgdyzCnSImuFxHgINodDzAufJz7TPZaL0rLVgkBxPTQ= Subject key identifier: 29:26:7A:51:2E:E3:D7:67:53:3A:D2:8A:EF:4D:7C:1D:66:17:64:02 Authority key identifier: CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31 Certificate issuer: /CN=cda054474fafd90b0ea47c55765bbe6f37637531 Certificate serial: 019B43C9845018DFA8EA625DA640DB21D62C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft Manifest number: 0240 Signing time: Mon 22 Dec 2025 02:00:38 +0000 Manifest this update: Mon 22 Dec 2025 02:00:38 +0000 Manifest next update: Tue 23 Dec 2025 02:00:38 +0000 Files and hashes: 1: zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl (hash: /GREJeWnTvwqfUz0hE7GvhTLA7uewrt41yj080w+Fc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:84:50:18:df:a8:ea:62:5d:a6:40:db:21:d6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda054474fafd90b0ea47c55765bbe6f37637531 Validity Not Before: Dec 22 02:00:38 2025 GMT Not After : Dec 23 02:00:38 2025 GMT Subject: CN=29267a512ee3d767533ad28aef4d7c1d66176402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:6c:a0:40:74:ea:65:d6:1d:02:96:1e:47: 07:60:03:76:f8:ec:71:70:94:7d:80:aa:c8:d9:49: 04:08:22:50:e5:f0:b9:25:5b:8b:50:ff:9d:ed:ea: 98:73:56:c2:c2:fa:51:5d:cb:bb:d7:2e:3b:c0:03: 8b:d6:2f:a5:0a:ed:11:78:e6:f7:81:7d:05:05:6a: e6:7d:71:8d:d6:f2:05:93:81:a7:51:af:3a:d6:2b: 78:1f:c1:a2:8f:21:1b:e9:59:52:51:ee:65:44:3d: d1:14:94:e5:1c:a5:29:df:c9:f0:cf:60:b0:26:7f: b6:a5:76:76:d4:6d:e4:05:28:eb:7a:da:99:e2:c1: a7:94:0a:26:f3:14:ee:7d:12:86:da:0b:8f:b2:86: d8:3a:47:21:1d:1c:f7:51:ee:71:8d:38:8d:97:2f: c4:f8:85:41:c9:31:51:9f:ed:de:4a:9c:56:a8:a0: c2:c6:85:0d:60:b3:71:21:ef:bb:34:04:18:0d:d8: 5f:b6:4f:5c:d4:d7:a6:de:3e:a6:f2:f9:53:06:b7: 33:a0:df:ac:fa:96:f8:fc:c2:d6:93:9c:71:8d:a6: f3:f7:0f:71:c3:ac:90:91:59:09:42:bd:ec:40:c0: ec:5a:18:61:a3:31:b7:f6:1e:c7:64:50:b8:81:ce: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:7A:51:2E:E3:D7:67:53:3A:D2:8A:EF:4D:7C:1D:66:17:64:02 X509v3 Authority Key Identifier: keyid:CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0f:4a:7d:15:7c:27:51:59:c7:4d:d9:3d:23:5e:4b:4c:a2: 0a:72:a7:c5:dc:25:b2:6e:da:61:49:13:b3:7b:ff:be:91:16: 8b:af:78:d6:9e:d5:28:e2:24:c4:16:02:06:5d:52:49:3f:00: d7:d0:99:e3:5d:21:d2:a0:e3:06:9b:ee:29:bb:1f:56:7e:40: af:90:a3:0e:f9:e7:b7:d0:94:77:c1:4d:92:df:cc:30:4d:1c: a0:96:55:3e:ef:6f:eb:9e:91:2d:82:4f:b8:7d:4e:13:f5:e1: ca:70:a9:d8:5f:7c:02:bc:6c:be:b1:72:ae:90:f0:4e:85:9a: 7b:f4:06:95:13:76:8a:cd:84:a0:c7:cc:69:03:78:f9:20:86: f8:89:58:92:1a:1d:78:41:05:19:81:d2:22:35:42:9e:87:d0: d9:d0:cd:53:68:20:13:c9:af:da:f2:86:29:c8:d0:5d:06:5a: 10:b8:50:08:c8:27:29:48:60:bb:b4:95:b8:af:cd:2f:68:10: 09:8c:9b:ad:26:b7:6f:ac:b3:71:6f:31:3c:ad:01:9f:d8:d7: f1:0e:ce:b3:b0:30:59:df:6d:11:99:85:cf:00:2e:f4:e8:d0: 26:91:3c:1c:09:35:f5:8f:bc:82:3b:03:4c:ef:a3:f9:07:f0: c2:8c:62:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyYRQGN+o6mJdpkDbIdYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTA1NDQ3NGZhZmQ5MGIwZWE0N2M1NTc2NWJiZTZmMzc2 Mzc1MzEwHhcNMjUxMjIyMDIwMDM4WhcNMjUxMjIzMDIwMDM4WjAzMTEwLwYDVQQD EygyOTI2N2E1MTJlZTNkNzY3NTMzYWQyOGFlZjRkN2MxZDY2MTc2NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppFsoEB06mXWHQKWHkcHYAN2+Oxx cJR9gKrI2UkECCJQ5fC5JVuLUP+d7eqYc1bCwvpRXcu71y47wAOL1i+lCu0ReOb3 gX0FBWrmfXGN1vIFk4GnUa861it4H8GijyEb6VlSUe5lRD3RFJTlHKUp38nwz2Cw Jn+2pXZ21G3kBSjretqZ4sGnlAom8xTufRKG2guPsobYOkchHRz3Ue5xjTiNly/E +IVByTFRn+3eSpxWqKDCxoUNYLNxIe+7NAQYDdhftk9c1Nem3j6m8vlTBrczoN+s +pb4/MLWk5xxjabz9w9xw6yQkVkJQr3sQMDsWhhhozG39h7HZFC4gc5GCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkmelEu49dnUzrSiu9NfB1mF2QCMB8GA1UdIwQY MBaAFM2gVEdPr9kLDqR8VXZbvm83Y3UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYWM5MDQtMjgwMi00MzZlLWFiNDAt ODEzN2M1Mjk5YWVlLzEvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iYWM5MDQtMjgwMi00MzZlLWFiNDAtODEzN2M1Mjk5YWVl LzEvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ9KfRV8 J1FZx03ZPSNeS0yiCnKnxdwlsm7aYUkTs3v/vpEWi6941p7VKOIkxBYCBl1SST8A 19CZ410h0qDjBpvuKbsfVn5Ar5CjDvnnt9CUd8FNkt/MME0coJZVPu9v656RLYJP uH1OE/XhynCp2F98ArxsvrFyrpDwToWae/QGlRN2is2EoMfMaQN4+SCG+IlYkhod eEEFGYHSIjVCnofQ2dDNU2ggE8mv2vKGKcjQXQZaELhQCMgnKUhgu7SVuK/NL2gQ CYybrSa3b6yzcW8xPK0Bn9jX8Q7Os7AwWd9tEZmFzwAu9OjQJpE8HAk19Y+8gjsD TO+j+Qfwwoxipw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:12:48 2025 by rpki-client