This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json) Hash identifier: GKjZvedDSrl5NQwVozhQy8ObF8Wob1iPTEhIz7MRW3Y= Subject key identifier: DA:3F:0C:E7:43:5B:1C:A2:AB:23:29:C6:C7:0B:61:1A:CE:73:D2:9D Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68 Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68 Certificate serial: 019AF352A562A4B89386DF6CFD446CCE3702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft Manifest number: 07E2 Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=) 2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: jPHU9J9kvWhCiA8u92GkFBwWvBFWgT9prOfyoOIK6m4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a5:62:a4:b8:93:86:df:6c:fd:44:6c:ce:37:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68 Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=da3f0ce7435b1ca2ab2329c6c70b611ace73d29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:44:ed:6a:a1:c0:42:dd:82:0d:c3:fd:76: 9e:6a:9c:4b:ed:b2:9d:41:1d:e7:32:12:71:9b:73: a7:0c:1e:5b:38:ac:9c:2a:50:ae:a6:5d:45:e4:3c: aa:7e:1a:63:b8:8e:15:55:76:4c:d8:5f:c3:60:b3: 32:33:42:73:b2:4f:2d:2c:2c:14:fc:68:48:4e:07: e2:19:7a:a6:4b:30:2a:5f:ca:e1:7c:cf:33:1c:45: d6:81:37:99:41:8d:03:4e:c9:b9:78:19:60:d6:67: a5:cb:e4:5f:ed:0d:b0:d7:e8:a0:36:ad:28:84:e2: 69:41:ef:94:d5:ef:f2:38:b9:9c:c5:c9:a2:64:07: ff:6b:bf:bb:12:f4:60:c5:f2:c0:8d:05:b2:b9:33: 4f:85:1d:fe:0e:4e:22:ad:71:31:07:26:78:ae:b2: 49:b8:c9:06:c7:67:8c:f2:5a:c4:ef:d8:2e:a7:2f: 9a:5f:f4:b0:70:62:7e:c6:de:ed:33:9d:09:6c:75: fc:39:4f:7e:8c:50:a0:18:11:60:e4:e2:9d:79:b9: fc:9d:91:59:e8:13:d0:57:92:2f:cd:5b:f8:23:a7: 00:96:30:cf:bb:53:8b:d4:ad:a7:78:76:34:9c:3c: 42:92:49:20:5c:75:cb:93:6f:b5:aa:74:f6:d0:c7: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:0C:E7:43:5B:1C:A2:AB:23:29:C6:C7:0B:61:1A:CE:73:D2:9D X509v3 Authority Key Identifier: keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:10:50:4f:55:df:a5:ff:7f:f9:6f:33:00:c8:0f:07:79:17: 9c:78:7c:8b:14:fa:bd:02:28:f5:f2:28:a7:cd:26:1b:0b:b3: 47:0e:48:40:d3:02:44:61:a0:1e:84:39:d4:53:04:1f:73:da: 0c:01:84:ed:44:78:d4:53:86:35:2d:d8:0d:83:a3:3e:6a:02: 00:ac:01:ca:fd:c1:c0:75:40:d1:b9:e1:08:6d:36:01:0e:e9: b3:33:e5:49:5d:bc:29:77:e4:a3:cb:16:2d:51:dd:8c:ea:90: b6:57:7e:05:8b:ce:0d:03:2a:c5:89:2a:7f:75:c8:88:1f:15: 1c:cf:02:da:d4:66:27:75:80:1f:2f:15:0d:d5:7f:f2:23:14: c9:70:91:ea:2a:a2:68:d4:95:d4:1f:da:cb:81:3a:e0:7d:19: 72:5c:8a:1b:33:d0:69:63:c3:77:ac:c6:5c:c1:3a:55:e8:9e: a0:ea:30:2e:c0:12:05:4b:52:70:21:4a:66:87:00:8e:ac:0c: ce:1c:1c:e7:44:99:ad:7c:60:7f:d8:2f:f0:f1:bb:ca:f4:17: e2:be:07:cd:79:b1:e0:db:73:be:5c:06:e4:f1:04:b9:97:c2: b0:fa:22:13:db:31:32:2d:d3:e2:ec:37:ef:a6:3a:55:de:09: 77:5f:ed:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqVipLiTht9s/URszjcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDc0NDNlNjIwZDYzYzhlNGY1NGE2NzE3ODQ3NGQxZjkw OWFmNjgwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD EyhkYTNmMGNlNzQzNWIxY2EyYWIyMzI5YzZjNzBiNjExYWNlNzNkMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtxE7WqhwELdgg3D/XaeapxL7bKd QR3nMhJxm3OnDB5bOKycKlCupl1F5DyqfhpjuI4VVXZM2F/DYLMyM0Jzsk8tLCwU /GhITgfiGXqmSzAqX8rhfM8zHEXWgTeZQY0DTsm5eBlg1mely+Rf7Q2w1+igNq0o hOJpQe+U1e/yOLmcxcmiZAf/a7+7EvRgxfLAjQWyuTNPhR3+Dk4irXExByZ4rrJJ uMkGx2eM8lrE79gupy+aX/SwcGJ+xt7tM50JbHX8OU9+jFCgGBFg5OKdebn8nZFZ 6BPQV5IvzVv4I6cAljDPu1OL1K2neHY0nDxCkkkgXHXLk2+1qnT20Meg7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo/DOdDWxyiqyMpxscLYRrOc9KdMB8GA1UdIwQY MBaAFGVHRD5iDWPI5PVKZxeEdNH5Ca9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYt YWJjYzkwNWQ5ZmZlLzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYtYWJjYzkwNWQ5ZmZl LzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexBQT1Xf pf9/+W8zAMgPB3kXnHh8ixT6vQIo9fIop80mGwuzRw5IQNMCRGGgHoQ51FMEH3Pa DAGE7UR41FOGNS3YDYOjPmoCAKwByv3BwHVA0bnhCG02AQ7pszPlSV28KXfko8sW LVHdjOqQtld+BYvODQMqxYkqf3XIiB8VHM8C2tRmJ3WAHy8VDdV/8iMUyXCR6iqi aNSV1B/ay4E64H0ZclyKGzPQaWPDd6zGXME6VeieoOowLsASBUtScCFKZocAjqwM zhwc50SZrXxgf9gv8PG7yvQX4r4HzXmx4NtzvlwG5PEEuZfCsPoiE9sxMi3T4uw3 76Y6Vd4Jd1/ttw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:25 2025 by rpki-client