This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json) Hash identifier: lNKMgn4YcWlcKeInjGfUO9xoaazSv2QPgpBLkY3oG8E= Subject key identifier: 13:D2:3C:7A:F4:2C:0C:3B:4E:F6:FA:2B:BC:2A:70:33:BC:35:53:F0 Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b Certificate serial: 019B19BC0A5AA71928F430766C67DA7E2214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft Manifest number: 0B09 Signing time: Sat 13 Dec 2025 22:01:52 +0000 Manifest this update: Sat 13 Dec 2025 22:01:52 +0000 Manifest next update: Sun 14 Dec 2025 22:01:52 +0000 Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: TN0QttNxGENLHQw9YSV7jaICLFYkDRTyRB87yahftFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:0a:5a:a7:19:28:f4:30:76:6c:67:da:7e:22:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b Validity Not Before: Dec 13 22:01:52 2025 GMT Not After : Dec 14 22:01:52 2025 GMT Subject: CN=13d23c7af42c0c3b4ef6fa2bbc2a7033bc3553f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:a6:c9:3e:85:56:c2:a7:33:5f:20:c0:59: 82:e6:19:74:8b:92:19:f3:d5:63:8e:9e:4e:f3:a3: df:77:59:ff:27:eb:2e:60:64:c1:7e:f7:87:e1:a2: 80:da:98:9b:c4:21:d4:0c:21:ef:23:a4:0a:ea:69: 8f:fa:23:f8:48:ae:cd:37:9f:d9:ab:96:f8:1b:3d: 40:3a:b4:10:e0:7d:b8:73:c8:20:36:1a:b9:c8:59: 1f:73:96:c7:64:92:57:32:d5:73:54:ab:82:a6:fe: 1f:18:8c:01:ed:05:a3:bc:42:ec:45:82:8d:ef:8c: 8b:0b:cc:35:26:ae:fd:64:b8:db:95:d5:97:30:fb: 91:9c:2d:cb:dd:57:2c:b1:2a:24:05:b3:f8:de:f7: 08:ab:79:ac:65:01:62:38:9a:cf:c4:92:49:6a:9f: fa:09:cf:8b:02:14:92:d6:92:7a:c9:7d:cc:d1:af: e8:64:62:e1:ac:52:ba:03:59:0e:53:81:50:7f:73: 59:50:60:c4:e7:e0:f4:e9:d4:6b:57:5a:09:ea:9e: 60:94:fc:cf:58:af:f3:9f:00:d3:4b:06:7e:cb:a5: e8:0d:22:d0:7b:42:c2:03:69:0d:b8:71:a8:1a:ed: 49:3f:90:81:81:57:b5:f2:0a:18:3a:d8:d8:fc:2b: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:3C:7A:F4:2C:0C:3B:4E:F6:FA:2B:BC:2A:70:33:BC:35:53:F0 X509v3 Authority Key Identifier: keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:51:99:79:4f:11:9d:f7:1d:08:4a:1b:d3:29:b8:ca:c3:88: 82:b1:0a:d3:2d:64:e5:df:3d:8c:22:19:88:03:5d:22:53:71: 97:94:e1:fa:34:ac:89:81:c1:d0:b8:9a:47:5a:d8:12:9d:c6: 5f:cd:01:b8:5e:91:f4:03:f3:7f:36:ce:16:a9:f8:e1:90:ae: ca:21:de:c9:15:da:cc:60:64:b6:06:cc:70:f5:60:dc:1d:f9: 61:83:d0:1d:fb:cb:1c:de:4a:58:4d:c1:8b:31:f4:63:db:ee: 8d:c7:21:4e:41:e4:d6:a0:2a:d0:a9:e3:68:73:43:f1:d1:9b: af:7e:e3:2d:c2:c7:31:0c:fb:19:8f:c2:f6:9d:2a:5b:0f:1d: 8f:4a:06:ce:23:dd:b7:a7:7c:b0:1e:6b:6d:d5:d5:18:00:14: 75:ea:18:a8:fa:77:16:ff:8a:51:ab:b6:dc:58:d8:f6:16:17: 0d:57:88:1a:e1:1f:ee:90:6a:f8:9b:a6:7f:a7:85:e0:c8:8c: d4:ed:ea:90:31:1f:76:29:81:f6:d9:bb:2f:a9:e0:a1:e6:c6: 09:84:be:9a:e3:99:67:45:78:47:b3:c9:a4:6e:c0:81:9b:75: 91:1e:4a:50:50:3e:c5:43:f7:50:75:ff:ab:4d:14:a9:77:24: 39:e2:c4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvApapxko9DB2bGfafiIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDM2NGQwYzZjOTNkZjI4MDI3NDg4YWZjYmZjZjMyOTcy NjM5MmIwHhcNMjUxMjEzMjIwMTUyWhcNMjUxMjE0MjIwMTUyWjAzMTEwLwYDVQQD EygxM2QyM2M3YWY0MmMwYzNiNGVmNmZhMmJiYzJhNzAzM2JjMzU1M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGOmyT6FVsKnM18gwFmC5hl0i5IZ 89Vjjp5O86Pfd1n/J+suYGTBfveH4aKA2pibxCHUDCHvI6QK6mmP+iP4SK7NN5/Z q5b4Gz1AOrQQ4H24c8ggNhq5yFkfc5bHZJJXMtVzVKuCpv4fGIwB7QWjvELsRYKN 74yLC8w1Jq79ZLjbldWXMPuRnC3L3VcssSokBbP43vcIq3msZQFiOJrPxJJJap/6 Cc+LAhSS1pJ6yX3M0a/oZGLhrFK6A1kOU4FQf3NZUGDE5+D06dRrV1oJ6p5glPzP WK/znwDTSwZ+y6XoDSLQe0LCA2kNuHGoGu1JP5CBgVe18goYOtjY/CsVzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPSPHr0LAw7Tvb6K7wqcDO8NVPwMB8GA1UdIwQY MBaAFGVDZNDGyT3ygCdIivy/zzKXJjkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTct YjZlOGVhOTEyNDgwLzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTctYjZlOGVhOTEyNDgw LzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1GZeU8R nfcdCEob0ym4ysOIgrEK0y1k5d89jCIZiANdIlNxl5Th+jSsiYHB0LiaR1rYEp3G X80BuF6R9APzfzbOFqn44ZCuyiHeyRXazGBktgbMcPVg3B35YYPQHfvLHN5KWE3B izH0Y9vujcchTkHk1qAq0KnjaHND8dGbr37jLcLHMQz7GY/C9p0qWw8dj0oGziPd t6d8sB5rbdXVGAAUdeoYqPp3Fv+KUau23FjY9hYXDVeIGuEf7pBq+Jumf6eF4MiM 1O3qkDEfdimB9tm7L6ngoebGCYS+muOZZ0V4R7PJpG7AgZt1kR5KUFA+xUP3UHX/ q00UqXckOeLEzw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:51:20 2025 by rpki-client