This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json) Hash identifier: 4DmooiOpEeOQ/dFTLLMapNJlW7uaMhsrgJjYTwyTkCY= Subject key identifier: 79:33:5F:68:A3:ED:C9:72:5C:CE:36:B0:36:BB:41:C5:FF:80:DD:85 Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32 Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032 Certificate serial: 019B59762DD8E40BEEB5DA325C289725C2F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft Manifest number: 12E6 Signing time: Fri 26 Dec 2025 07:01:15 +0000 Manifest this update: Fri 26 Dec 2025 07:01:15 +0000 Manifest next update: Sat 27 Dec 2025 07:01:15 +0000 Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: OFhrdrYH2s4J/bRXan5CdHryMBFFiQTMnsYCJ0Xnjew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:2d:d8:e4:0b:ee:b5:da:32:5c:28:97:25:c2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032 Validity Not Before: Dec 26 07:01:15 2025 GMT Not After : Dec 27 07:01:15 2025 GMT Subject: CN=79335f68a3edc9725cce36b036bb41c5ff80dd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:7c:0c:22:0d:d6:ad:6d:af:b2:e2:d6:00: 28:12:93:ca:33:dc:c7:0c:c5:b8:bd:a1:a3:c4:8c: 38:d6:28:8d:bf:d3:48:f0:d1:32:6e:55:6e:15:2e: af:b5:5b:42:4b:ad:b4:ba:a9:5d:38:af:37:d4:37: 2d:51:e4:89:e4:87:75:73:15:1c:2e:e1:aa:79:27: a3:75:d9:64:2c:c4:ee:15:c2:08:96:28:19:ab:8b: 23:4c:dd:85:0f:a8:48:17:33:da:20:67:e8:f4:c1: d0:ec:68:c9:eb:d3:27:ba:9d:8e:cc:95:78:fc:5a: 06:65:22:dd:9e:3f:5f:f5:df:d3:7e:9d:87:43:08: dd:6a:05:18:94:50:89:7a:1d:4f:d0:20:82:32:78: ad:cb:63:cf:df:06:d6:e0:5c:52:9b:75:43:7d:ea: a1:51:36:b6:d0:b0:d2:23:b3:04:04:90:86:fa:52: 80:83:09:60:87:43:24:6e:51:b7:16:43:43:3b:df: 28:5c:b7:00:23:7d:58:c2:3d:d6:e9:1e:d1:b0:70: 12:89:ad:c9:f5:60:bd:da:bc:de:16:18:4c:09:28: 46:bb:2a:dd:30:a0:aa:97:01:c7:7c:62:93:78:ad: 35:52:09:c7:84:bc:6d:27:15:88:ee:a3:f4:b9:eb: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:5F:68:A3:ED:C9:72:5C:CE:36:B0:36:BB:41:C5:FF:80:DD:85 X509v3 Authority Key Identifier: keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a8:e5:23:2f:14:bc:c5:87:7c:f4:52:8f:42:98:e3:2d:41: ea:a3:34:ae:4e:d1:90:2c:76:37:db:64:7c:b8:e5:52:ef:2a: 86:23:b8:31:aa:cf:fd:8e:0d:76:ce:c1:6c:b8:cd:24:1d:d3: 13:2e:9c:d6:10:03:6f:d6:00:59:e8:f5:08:ff:7b:3e:9f:0b: df:e3:22:a3:69:7c:12:78:14:11:6e:44:26:15:82:5a:e4:eb: ec:ba:fd:89:48:1d:1a:b3:73:91:69:25:a7:73:02:85:4c:6e: 21:41:2d:6f:e8:d2:c3:27:b4:3e:2a:32:e7:37:67:52:ff:25: 55:a6:d2:5a:fb:be:30:b1:cc:b8:1e:2a:68:f9:f0:80:1b:63: 8d:15:a9:10:db:94:29:97:fc:1a:e5:2a:66:85:64:14:94:56: 4f:9b:45:c5:0e:73:4a:5f:1b:11:f1:b5:cb:f1:8f:b8:a2:c2: f1:f4:72:42:7a:91:d0:e3:02:2b:e8:72:17:e0:a3:49:ec:61: 5b:42:7e:38:b4:ae:e9:1f:1d:c6:6f:d9:2e:70:f9:98:ef:ce: 42:a8:89:55:0b:75:73:58:e1:2a:06:06:a2:d9:b6:9a:21:9d: 9f:18:66:fe:c2:e5:1d:fd:b7:5d:e2:89:0a:59:9c:80:e5:50: c7:25:cc:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdi3Y5AvutdoyXCiXJcLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl ZTIwMzIwHhcNMjUxMjI2MDcwMTE1WhcNMjUxMjI3MDcwMTE1WjAzMTEwLwYDVQQD Eyg3OTMzNWY2OGEzZWRjOTcyNWNjZTM2YjAzNmJiNDFjNWZmODBkZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIR8DCIN1q1tr7Li1gAoEpPKM9zH DMW4vaGjxIw41iiNv9NI8NEyblVuFS6vtVtCS620uqldOK831DctUeSJ5Id1cxUc LuGqeSejddlkLMTuFcIIligZq4sjTN2FD6hIFzPaIGfo9MHQ7GjJ69Mnup2OzJV4 /FoGZSLdnj9f9d/Tfp2HQwjdagUYlFCJeh1P0CCCMnity2PP3wbW4FxSm3VDfeqh UTa20LDSI7MEBJCG+lKAgwlgh0MkblG3FkNDO98oXLcAI31Ywj3W6R7RsHASia3J 9WC92rzeFhhMCShGuyrdMKCqlwHHfGKTeK01UgnHhLxtJxWI7qP0uespIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkzX2ij7clyXM42sDa7QcX/gN2FMB8GA1UdIwQY MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKjlIy8U vMWHfPRSj0KY4y1B6qM0rk7RkCx2N9tkfLjlUu8qhiO4MarP/Y4Nds7BbLjNJB3T Ey6c1hADb9YAWej1CP97Pp8L3+Mio2l8EngUEW5EJhWCWuTr7Lr9iUgdGrNzkWkl p3MChUxuIUEtb+jSwye0Pioy5zdnUv8lVabSWvu+MLHMuB4qaPnwgBtjjRWpENuU KZf8GuUqZoVkFJRWT5tFxQ5zSl8bEfG1y/GPuKLC8fRyQnqR0OMCK+hyF+CjSexh W0J+OLSu6R8dxm/ZLnD5mO/OQqiJVQt1c1jhKgYGotm2miGdnxhm/sLlHf23XeKJ ClmcgOVQxyXMkA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:23 2025 by rpki-client