This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json) Hash identifier: f+9nbRfnJ5yi1sWeOfAtFQ3fyBgO1fHey96mO4FaNEQ= Subject key identifier: E7:7A:43:0F:3C:31:A8:53:A0:F5:D6:A1:F0:7C:A5:B3:3D:BB:06:E0 Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61 Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61 Certificate serial: 019AF19ADA54D1D378E9E81068AE47C8E64A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft Manifest number: 025D Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: io91j750ajIw6JC+xIPbAu0xj8tLsehN52tYhdr3cVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:da:54:d1:d3:78:e9:e8:10:68:ae:47:c8:e6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61 Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=e77a430f3c31a853a0f5d6a1f07ca5b33dbb06e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:4e:b4:7e:0d:e7:d6:e5:85:64:0e:eb:bf: 8a:53:35:0a:a2:8e:d4:8c:b4:e6:d4:7f:ff:f3:b8: d2:f7:c3:90:c5:c8:d2:94:b6:42:70:32:83:02:1a: 1c:a0:2d:3f:3a:d1:9d:2f:36:c5:c4:6b:4e:8f:38: 6f:45:6b:d9:53:e2:eb:6b:b2:ff:e9:1e:9b:74:c6: 52:69:0b:47:29:c9:52:46:32:7b:bc:d9:2b:98:03: aa:60:e4:d1:83:82:44:1a:c4:4d:09:ce:12:64:05: d8:4c:87:82:50:65:c6:4d:af:4a:63:1e:da:4a:6b: ca:e3:76:8b:2a:3a:36:3e:34:fb:1a:51:10:8e:4f: 76:73:37:47:67:07:8d:fe:ee:b4:1e:4f:69:ed:3a: 95:c2:7d:52:d5:7d:49:4c:ba:ba:ae:fb:a1:db:47: ac:13:3d:82:67:ca:5a:20:58:af:c9:52:bf:55:ce: 83:49:3d:6a:b1:da:49:e2:58:80:03:5c:07:7e:ac: 8e:f8:fc:c9:f1:8a:d4:56:cb:a4:1d:59:49:b7:67: fc:13:0c:76:af:ac:30:b1:23:01:f6:d1:b6:6e:d3: 0f:79:9e:46:c3:19:86:fa:44:53:04:ce:24:72:84: 94:8f:54:a0:8e:1f:99:76:34:96:57:01:7f:f7:72: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7A:43:0F:3C:31:A8:53:A0:F5:D6:A1:F0:7C:A5:B3:3D:BB:06:E0 X509v3 Authority Key Identifier: keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7c:cd:bf:01:a1:67:73:d8:08:dc:d1:ec:e2:16:0f:69:e6: 7f:0e:06:25:f6:fa:42:00:f1:99:6f:c1:6e:9c:87:c5:3a:bb: 03:e7:f8:de:fb:65:e1:4a:a8:58:b4:b5:71:72:da:b7:d2:6b: c5:fa:cd:27:7d:c7:f7:37:d0:92:93:81:64:42:21:ce:1e:f7: 9d:93:6a:be:16:32:07:76:98:a6:51:e4:21:a4:f2:87:d9:90: 21:b0:b9:e9:65:c2:38:5a:21:6b:ed:7b:5e:7c:67:b1:b6:cf: 9d:90:8c:78:8a:74:39:89:96:70:5d:ab:c1:ed:c7:91:9b:0c: 90:a0:d3:88:ab:2d:c1:bb:00:93:ac:be:d0:fa:5b:5d:96:b2: cb:f8:fe:92:a2:69:da:3b:19:47:5c:d2:c9:95:19:be:c9:62: 2e:92:41:30:ad:1d:f7:ba:cf:8f:be:20:52:12:73:a5:da:6a: 5d:de:31:95:30:4d:b8:8e:9c:23:3d:63:51:94:ab:05:f4:83: 88:06:c5:25:63:d0:51:fa:c9:1e:9a:96:93:f3:74:89:b4:11: 22:1a:57:ba:fa:6a:ed:cf:ab:8e:81:77:f4:cb:45:f9:1b:de: 8e:cf:84:a1:29:a2:64:82:aa:36:f2:d0:f1:38:f0:3f:2e:6b: dd:69:1f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtpU0dN46egQaK5HyOZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzdhOWYwMjFlMjgxMGQ4NGIyMThlMmY2OTliMjZmNTM1 NzVlNjEwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD EyhlNzdhNDMwZjNjMzFhODUzYTBmNWQ2YTFmMDdjYTViMzNkYmIwNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AJOtH4N59blhWQO67+KUzUKoo7U jLTm1H//87jS98OQxcjSlLZCcDKDAhocoC0/OtGdLzbFxGtOjzhvRWvZU+Lra7L/ 6R6bdMZSaQtHKclSRjJ7vNkrmAOqYOTRg4JEGsRNCc4SZAXYTIeCUGXGTa9KYx7a SmvK43aLKjo2PjT7GlEQjk92czdHZweN/u60Hk9p7TqVwn1S1X1JTLq6rvuh20es Ez2CZ8paIFivyVK/Vc6DST1qsdpJ4liAA1wHfqyO+PzJ8YrUVsukHVlJt2f8Ewx2 r6wwsSMB9tG2btMPeZ5GwxmG+kRTBM4kcoSUj1Sgjh+ZdjSWVwF/93K2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd6Qw88MahToPXWofB8pbM9uwbgMB8GA1UdIwQY MBaAFM83qfAh4oENhLIY4vaZsm9TV15hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zZTUwNTAtZDU5Yi00N2YwLTgwYWQt OGUzOTVlZjI0NmY2LzEvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zZTUwNTAtZDU5Yi00N2YwLTgwYWQtOGUzOTVlZjI0NmY2 LzEvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHzNvwGh Z3PYCNzR7OIWD2nmfw4GJfb6QgDxmW/BbpyHxTq7A+f43vtl4UqoWLS1cXLat9Jr xfrNJ33H9zfQkpOBZEIhzh73nZNqvhYyB3aYplHkIaTyh9mQIbC56WXCOFoha+17 XnxnsbbPnZCMeIp0OYmWcF2rwe3HkZsMkKDTiKstwbsAk6y+0PpbXZayy/j+kqJp 2jsZR1zSyZUZvsliLpJBMK0d97rPj74gUhJzpdpqXd4xlTBNuI6cIz1jUZSrBfSD iAbFJWPQUfrJHpqWk/N0ibQRIhpXuvpq7c+rjoF39MtF+Rvejs+EoSmiZIKqNvLQ 8TjwPy5r3WkfXg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:55 2025 by rpki-client