This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json) Hash identifier: AWUyAq07oXIyGsnaFtdx1+25Bz4aZM0DYr3t77/9Cng= Subject key identifier: FA:90:B5:26:2F:FA:A0:65:99:3A:CD:21:AA:50:8F:7D:34:13:EC:DD Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0 Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0 Certificate serial: 019B46CAA3FB3CD82799194516EA419A5E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft Manifest number: 1262 Signing time: Mon 22 Dec 2025 16:00:43 +0000 Manifest this update: Mon 22 Dec 2025 16:00:43 +0000 Manifest next update: Tue 23 Dec 2025 16:00:43 +0000 Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: fnyeY3p9UeYl11cH/ZdSGsPs/BoXb6oFuakd8abH+G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:a3:fb:3c:d8:27:99:19:45:16:ea:41:9a:5e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0 Validity Not Before: Dec 22 16:00:43 2025 GMT Not After : Dec 23 16:00:43 2025 GMT Subject: CN=fa90b5262ffaa065993acd21aa508f7d3413ecdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:61:a7:c8:96:58:45:c7:7c:fa:ab:22:f2: 2c:a8:bb:4c:f3:5b:a9:18:62:8a:16:a2:e9:d3:4b: 22:00:b1:bc:24:1d:56:05:0e:3b:60:08:b9:5d:07: 79:fe:49:49:35:be:0c:30:66:77:6f:02:6a:38:38: ed:9c:1b:8a:41:2e:61:9b:b5:6b:ba:5c:55:76:34: 7c:a3:00:54:b2:a6:ec:ff:20:b9:e7:6e:28:e1:f5: 00:f9:db:7b:1d:08:45:fb:d7:be:bc:5f:6d:6d:b6: 47:bd:7a:9d:8c:63:ab:81:6a:81:c3:3b:b5:18:27: 92:87:ac:c6:c0:31:83:f2:cb:33:48:08:a9:ab:a3: 47:1e:e9:c7:26:bf:30:a4:2e:22:70:ac:41:9b:de: d1:14:3e:07:82:05:24:24:4a:cb:ec:d7:17:3a:98: 85:d8:b7:60:b3:fc:9f:90:a9:f3:8e:37:11:06:af: fb:ad:a9:57:84:39:2e:f8:6c:09:cf:ae:94:6e:89: 3d:ea:4c:cb:37:87:89:78:ee:08:8c:97:ce:d5:a5: 62:a9:0c:0c:f7:8d:43:23:a2:6d:a4:16:7c:90:40: be:95:6d:d3:90:30:0a:fe:82:a7:50:7c:9c:aa:8d: 36:3b:91:d0:39:7a:8f:f2:86:10:29:05:ea:89:ec: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:90:B5:26:2F:FA:A0:65:99:3A:CD:21:AA:50:8F:7D:34:13:EC:DD X509v3 Authority Key Identifier: keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4e:ef:35:91:d4:16:bd:1e:78:33:6d:8a:67:de:a2:63:59: 5a:56:ea:f3:c4:0d:a8:ed:a1:28:c5:dd:bc:2a:2e:cf:e8:d6: 69:63:1e:40:5a:10:02:b9:aa:4c:d6:35:d4:5b:3a:1c:be:2a: e1:ae:4a:43:97:f5:7e:ba:87:02:a2:25:25:1e:34:8f:45:08: ce:60:30:6d:14:55:f3:12:ef:ca:de:1f:0f:c0:92:64:d7:e9: 28:f6:01:1b:c4:70:06:69:b9:ff:82:30:ce:21:60:41:4d:c8: 7c:4d:f2:0a:fa:62:22:d7:7d:e2:ce:28:05:e1:d1:4f:ac:e0: b3:90:43:15:32:fa:75:e1:8a:81:c8:54:87:1d:93:c4:26:c7: 64:d8:28:1a:ce:06:c1:51:eb:af:b3:93:c3:57:72:96:0a:ee: a6:63:db:b0:81:e4:f6:86:e7:10:10:61:91:f5:f4:d2:5a:e3: fa:6e:35:94:c7:e5:a3:56:44:22:d1:54:27:61:c0:37:17:36: 91:6b:9b:97:7a:6a:9d:d7:b3:51:54:35:29:b9:d9:7e:00:d9: 0a:23:50:85:fa:b0:a5:01:bf:de:cb:2d:68:1d:8c:42:b0:f4: ce:d4:a3:16:a5:10:75:1f:da:dd:cb:b9:52:05:56:a1:71:83: 00:17:b9:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyqP7PNgnmRlFFupBml4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNmU5MmEzZWI4MGFjNjNlZTU3MDJjMGQ5N2I0ZTlmMGI4 MjMzZjAwHhcNMjUxMjIyMTYwMDQzWhcNMjUxMjIzMTYwMDQzWjAzMTEwLwYDVQQD EyhmYTkwYjUyNjJmZmFhMDY1OTkzYWNkMjFhYTUwOGY3ZDM0MTNlY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Nhp8iWWEXHfPqrIvIsqLtM81up GGKKFqLp00siALG8JB1WBQ47YAi5XQd5/klJNb4MMGZ3bwJqODjtnBuKQS5hm7Vr ulxVdjR8owBUsqbs/yC5524o4fUA+dt7HQhF+9e+vF9tbbZHvXqdjGOrgWqBwzu1 GCeSh6zGwDGD8sszSAipq6NHHunHJr8wpC4icKxBm97RFD4HggUkJErL7NcXOpiF 2Ldgs/yfkKnzjjcRBq/7ralXhDku+GwJz66Ubok96kzLN4eJeO4IjJfO1aViqQwM 941DI6JtpBZ8kEC+lW3TkDAK/oKnUHycqo02O5HQOXqP8oYQKQXqiew+aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqQtSYv+qBlmTrNIapQj300E+zdMB8GA1UdIwQY MBaAFM1ukqPrgKxj7lcCwNl7Tp8LgjPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUt NzViYzQ0NzkwMjlmLzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUtNzViYzQ0NzkwMjlm LzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE7vNZHU Fr0eeDNtimfeomNZWlbq88QNqO2hKMXdvCouz+jWaWMeQFoQArmqTNY11Fs6HL4q 4a5KQ5f1frqHAqIlJR40j0UIzmAwbRRV8xLvyt4fD8CSZNfpKPYBG8RwBmm5/4Iw ziFgQU3IfE3yCvpiItd94s4oBeHRT6zgs5BDFTL6deGKgchUhx2TxCbHZNgoGs4G wVHrr7OTw1dylgrupmPbsIHk9obnEBBhkfX00lrj+m41lMflo1ZEItFUJ2HANxc2 kWubl3pqndezUVQ1KbnZfgDZCiNQhfqwpQG/3sstaB2MQrD0ztSjFqUQdR/a3cu5 UgVWoXGDABe50g== -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:40 2025 by rpki-client