This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json) Hash identifier: WVHXp/frJihMwWSdYT/eZ3IH5u/Uj+v0GN7eOsu2s7E= Subject key identifier: 16:C8:AA:A6:2C:22:78:07:F5:BB:2E:5C:6E:9C:F7:F4:99:C4:96:30 Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32 Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732 Certificate serial: 019B337B7F5319C8C3F8AF5FE2A2F468B900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft Manifest number: 03E1 Signing time: Thu 18 Dec 2025 22:01:29 +0000 Manifest this update: Thu 18 Dec 2025 22:01:29 +0000 Manifest next update: Fri 19 Dec 2025 22:01:29 +0000 Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: 8Hq0vSUd+bpEhzaL6EfCXSnw6aN4C+jvjMtlSS2XUCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:7f:53:19:c8:c3:f8:af:5f:e2:a2:f4:68:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732 Validity Not Before: Dec 18 22:01:29 2025 GMT Not After : Dec 19 22:01:29 2025 GMT Subject: CN=16c8aaa62c227807f5bb2e5c6e9cf7f499c49630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:81:dc:02:c0:65:c1:e7:bd:56:78:e7:d6: d4:7a:44:e8:a4:20:00:19:06:64:d9:69:95:73:bc: 69:f5:2a:77:c0:33:f3:0d:00:93:67:93:5e:80:c0: 53:ec:f6:b1:f6:50:90:b2:52:ae:0f:9e:ca:fd:17: 15:8a:6f:3e:e1:e0:2d:47:2d:c8:5a:38:c9:0c:80: a2:be:c8:91:16:8d:a6:0b:3a:61:ea:f3:fe:ff:45: 7c:d0:e6:e3:f2:9e:04:26:25:5b:fb:64:2e:72:42: 58:fb:d2:3c:ec:73:85:b8:ef:c5:16:1c:84:c6:2e: 97:24:e5:75:de:54:ea:e8:7b:1a:1e:50:e7:ce:44: 1f:bd:9a:2d:05:91:4b:de:bb:08:a3:49:7d:20:65: 59:33:af:eb:60:72:09:33:d2:af:c0:86:78:ed:ae: dd:5e:ef:af:f0:46:5e:b1:b6:d0:a2:10:8e:25:f8: ce:cc:58:34:9e:42:da:9c:30:cc:fd:de:a5:28:f1: 4a:8c:d5:5c:6e:da:70:80:7c:6d:45:37:09:39:e0: d1:45:49:84:e9:11:59:47:61:ca:db:7c:1d:7a:23: 21:03:d3:f6:77:7a:29:87:56:ef:d2:29:20:f9:80: fd:64:08:40:03:ac:4f:ed:3a:e6:8c:bc:99:80:ba: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:AA:A6:2C:22:78:07:F5:BB:2E:5C:6E:9C:F7:F4:99:C4:96:30 X509v3 Authority Key Identifier: keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d9:86:15:09:00:ba:a5:4c:73:1b:ab:bf:7c:e3:9e:09:6c: 14:ad:63:8c:cc:75:82:62:22:a8:74:fa:d3:a6:21:83:5d:f7: 58:36:42:56:f6:b0:8d:81:2b:4a:14:ca:62:dc:fd:c1:2c:31: b4:9b:67:ac:fa:1a:11:cf:7f:f5:f2:f5:67:e3:f6:09:f0:cb: 2e:e5:c2:37:57:87:a3:33:a5:67:9d:4f:25:1a:c8:67:53:a1: ad:c2:90:1a:cf:cc:64:b2:a7:ed:8b:ec:ed:f0:b9:33:24:7b: c4:45:13:06:d4:59:9e:e8:6e:ab:88:75:3e:e4:bd:9f:3e:78: 70:d4:5e:c8:2b:1d:95:47:b2:9a:60:95:60:02:e9:2d:3d:3b: fd:b9:d8:b0:f8:47:eb:7e:97:39:f9:be:4a:f4:11:19:90:5c: d9:41:43:84:b1:2b:85:76:0d:6d:8c:8b:ca:df:93:44:94:fe: 7c:46:97:4d:31:11:c5:f3:6e:48:65:a6:cf:13:72:ce:f3:6c: 00:7b:90:27:7a:f8:2f:67:56:45:67:de:3e:34:7d:1b:12:2a: f8:9f:a6:1b:e9:90:b1:6e:09:0f:4b:4e:e6:7d:1b:ef:54:eb: b6:d8:14:ae:2a:4b:d0:5e:9b:df:f7:e4:45:95:7b:ff:fa:07: b7:ff:d1:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze39TGcjD+K9f4qL0aLkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOTRlMDQ0Y2JlNWMzNTI5NWZhYmM0NDU4MDJkYTkwNTgx M2I3MzIwHhcNMjUxMjE4MjIwMTI5WhcNMjUxMjE5MjIwMTI5WjAzMTEwLwYDVQQD EygxNmM4YWFhNjJjMjI3ODA3ZjViYjJlNWM2ZTljZjdmNDk5YzQ5NjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsGB3ALAZcHnvVZ459bUekTopCAA GQZk2WmVc7xp9Sp3wDPzDQCTZ5NegMBT7Pax9lCQslKuD57K/RcVim8+4eAtRy3I WjjJDICivsiRFo2mCzph6vP+/0V80Obj8p4EJiVb+2QuckJY+9I87HOFuO/FFhyE xi6XJOV13lTq6HsaHlDnzkQfvZotBZFL3rsIo0l9IGVZM6/rYHIJM9KvwIZ47a7d Xu+v8EZesbbQohCOJfjOzFg0nkLanDDM/d6lKPFKjNVcbtpwgHxtRTcJOeDRRUmE 6RFZR2HK23wdeiMhA9P2d3oph1bv0ikg+YD9ZAhAA6xP7TrmjLyZgLpgeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbIqqYsIngH9bsuXG6c9/SZxJYwMB8GA1UdIwQY MBaAFP2U4ETL5cNSlfq8RFgC2pBYE7cyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1pUZ1JNdmx3MUtWLXJ4RVdBTGFrRmdUdHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NjAyYTktNzRiNi00OTkyLWI3MWQt YmFiMjQ3ZmU3ZDdjLzEvX1pUZ1JNdmx3MUtWLXJ4RVdBTGFrRmdUdHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NjAyYTktNzRiNi00OTkyLWI3MWQtYmFiMjQ3ZmU3ZDdj LzEvX1pUZ1JNdmx3MUtWLXJ4RVdBTGFrRmdUdHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNmGFQkA uqVMcxurv3zjnglsFK1jjMx1gmIiqHT606Yhg133WDZCVvawjYErShTKYtz9wSwx tJtnrPoaEc9/9fL1Z+P2CfDLLuXCN1eHozOlZ51PJRrIZ1OhrcKQGs/MZLKn7Yvs 7fC5MyR7xEUTBtRZnuhuq4h1PuS9nz54cNReyCsdlUeymmCVYALpLT07/bnYsPhH 636XOfm+SvQRGZBc2UFDhLErhXYNbYyLyt+TRJT+fEaXTTERxfNuSGWmzxNyzvNs AHuQJ3r4L2dWRWfePjR9GxIq+J+mG+mQsW4JD0tO5n0b71TrttgUripL0F6b3/fk RZV7//oHt//RAw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:22 2025 by rpki-client