This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json) Hash identifier: NOi95wpifSJrzHTc/6ajlh3gaHrtylopQkohZEGjuAQ= Subject key identifier: 85:35:75:EB:6F:6A:69:55:B9:05:F9:95:7C:84:CE:BC:2E:7C:A3:28 Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Certificate serial: 019B439300011B5909AA8CBD22F84F1DFEA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft Manifest number: 0DF8 Signing time: Mon 22 Dec 2025 01:01:05 +0000 Manifest this update: Mon 22 Dec 2025 01:01:05 +0000 Manifest next update: Tue 23 Dec 2025 01:01:05 +0000 Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: zNox01Md8Dqrn7P3fv8sMJC6yag2nMZM37JvWvnbQ94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:00:01:1b:59:09:aa:8c:bd:22:f8:4f:1d:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Validity Not Before: Dec 22 01:01:05 2025 GMT Not After : Dec 23 01:01:05 2025 GMT Subject: CN=853575eb6f6a6955b905f9957c84cebc2e7ca328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:6f:c8:b4:08:6a:d5:28:77:30:20:31:c0: 9b:7b:49:80:3b:e5:ce:ea:ec:b9:37:11:1a:aa:29: 1b:91:82:7c:e8:33:2b:89:6d:65:56:29:94:24:da: 30:88:f7:83:77:27:7a:52:68:0b:1b:ec:80:6e:c3: fc:61:cf:ce:34:cf:ed:7e:d2:c1:f0:07:fc:26:9c: 6e:18:2d:63:3b:8c:7e:63:92:33:7e:7b:6f:6f:92: 57:c5:f6:43:75:de:91:b0:4b:00:ab:57:b5:4c:32: 2c:9b:be:b7:6c:55:a4:03:1a:9d:68:9f:77:07:4d: b8:f0:02:c6:8a:93:87:f0:70:b8:c1:02:3d:1e:e3: 04:b7:fd:e4:8d:07:0c:6b:92:a5:6b:e4:5f:be:df: 17:a3:0c:6e:0e:d0:fc:a2:f6:0b:c5:c4:38:bd:b3: 97:bc:fb:9e:b7:fb:bb:ab:e9:39:3d:96:35:74:61: df:2c:77:1d:a8:26:3d:07:7d:08:43:5b:7c:45:59: 8c:22:94:21:2a:e5:63:dc:82:e8:f6:b8:7e:ba:c7: 51:5e:43:7a:e4:85:6f:7b:96:c7:dd:84:c5:da:2e: a4:e2:43:4a:fc:c1:32:76:5f:e7:12:29:46:85:31: 96:b1:bd:fb:e5:00:fd:67:b2:4f:8e:59:b8:8f:6b: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:35:75:EB:6F:6A:69:55:B9:05:F9:95:7C:84:CE:BC:2E:7C:A3:28 X509v3 Authority Key Identifier: keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:19:9a:4f:c9:a5:66:e8:0f:57:3d:ba:09:c3:a5:49:e3:e4: b1:0b:60:0c:74:5d:c5:9e:c4:50:4e:96:8f:a5:51:11:74:c7: 2d:e3:96:29:38:53:e6:11:6f:af:83:b0:6e:8f:3e:17:7b:3c: 79:4a:00:6b:a4:93:51:58:6d:fa:9b:93:ae:85:a9:d0:23:af: 4b:cc:77:98:37:df:44:7e:c0:57:d7:4f:99:5d:b0:a1:08:71: 40:a1:42:34:2b:70:90:f1:24:8c:06:28:56:32:65:49:bf:0d: 9d:14:47:ab:57:66:89:5a:68:57:fe:de:95:d8:ff:a4:2e:1e: 42:cf:ae:d7:fd:fd:34:9f:4e:d7:51:96:75:bc:08:5c:ad:87: 8c:03:23:e0:87:52:a0:23:33:7c:b2:8b:eb:9c:d3:b5:19:f1: 6f:b3:ff:fe:9f:4a:3a:11:ca:15:c7:97:e4:c5:53:01:1a:15: 65:71:b2:f1:80:2a:6d:40:d7:d4:48:35:a9:fd:d5:cc:c2:0d: 93:de:be:a5:e7:84:88:b2:ea:f7:89:07:3b:64:fe:34:d3:30: 5f:e0:aa:ac:81:4c:8a:9c:88:25:b5:e4:df:a2:ee:59:d8:d2: d2:25:65:c0:f3:a3:af:56:22:8a:8a:a5:64:6a:39:a1:9d:6a: e0:d8:c9:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkwABG1kJqoy9IvhPHf6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWFmNWJiNGJlNzY1MDZlOWVjNWU2OTRkOGI1ODUwYTk4 ZTcyMjMwHhcNMjUxMjIyMDEwMTA1WhcNMjUxMjIzMDEwMTA1WjAzMTEwLwYDVQQD Eyg4NTM1NzVlYjZmNmE2OTU1YjkwNWY5OTU3Yzg0Y2ViYzJlN2NhMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuNvyLQIatUodzAgMcCbe0mAO+XO 6uy5NxEaqikbkYJ86DMriW1lVimUJNowiPeDdyd6UmgLG+yAbsP8Yc/ONM/tftLB 8Af8JpxuGC1jO4x+Y5Izfntvb5JXxfZDdd6RsEsAq1e1TDIsm763bFWkAxqdaJ93 B0248ALGipOH8HC4wQI9HuMEt/3kjQcMa5Kla+Rfvt8XowxuDtD8ovYLxcQ4vbOX vPuet/u7q+k5PZY1dGHfLHcdqCY9B30IQ1t8RVmMIpQhKuVj3ILo9rh+usdRXkN6 5IVve5bH3YTF2i6k4kNK/MEydl/nEilGhTGWsb375QD9Z7JPjlm4j2vDLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIU1detvamlVuQX5lXyEzrwufKMoMB8GA1UdIwQY MBaAFGbq9btL52UG6exeaU2LWFCpjnIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgt OWExZjgyZTBkYmY1LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgtOWExZjgyZTBkYmY1 LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxmaT8ml ZugPVz26CcOlSePksQtgDHRdxZ7EUE6Wj6VREXTHLeOWKThT5hFvr4Owbo8+F3s8 eUoAa6STUVht+puTroWp0COvS8x3mDffRH7AV9dPmV2woQhxQKFCNCtwkPEkjAYo VjJlSb8NnRRHq1dmiVpoV/7eldj/pC4eQs+u1/39NJ9O11GWdbwIXK2HjAMj4IdS oCMzfLKL65zTtRnxb7P//p9KOhHKFceX5MVTARoVZXGy8YAqbUDX1Eg1qf3VzMIN k96+peeEiLLq94kHO2T+NNMwX+CqrIFMipyIJbXk36LuWdjS0iVlwPOjr1Yiioql ZGo5oZ1q4NjJ/A== -----END CERTIFICATE-----Generated at Mon Dec 22 04:02:06 2025 by rpki-client