This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft File: zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json) Hash identifier: 4MoImWfP6kUSZ9T/av+UuHy/TstjYGXcOrFpIiANkNo= Subject key identifier: 2B:BD:DB:73:3E:BC:8D:E6:D7:ED:5E:F8:82:38:B5:17:41:B2:6E:27 Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF Certificate issuer: /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf Certificate serial: 019AF12D60669ED1FAD6C76A8E89967231A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: DnVFEpYRkYdsvx6fTEjYM0mnXYg.roa (hash: Q/XnpIbexx4X2BOItVZgFWxgUIF3KGLUNsRlADlMLPI=) 2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: XLBiHb9VxJhxyFbqEbNs+t1pB5zeuJIPCF6JWEpak7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:60:66:9e:d1:fa:d6:c7:6a:8e:89:96:72:31:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=2bbddb733ebc8de6d7ed5ef88238b51741b26e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:0e:b9:5e:44:f8:49:c3:dd:30:86:80:7a: b6:8c:ae:08:f6:d5:36:14:e7:8a:07:44:fb:6f:20: 34:3e:6e:b8:79:e2:9a:33:8c:5d:89:7b:2f:7b:7c: 73:80:d6:87:2e:08:31:16:4d:8b:2f:5d:a3:1d:c1: e5:31:ed:7b:16:56:7f:4f:11:52:9b:f1:25:ed:dc: 3b:06:3b:aa:b5:b8:a2:0c:07:40:c1:e4:fa:f9:e2: 2b:e9:19:a4:12:d7:11:3c:de:72:e3:33:88:46:a5: 9e:65:45:57:3b:eb:84:d1:41:66:4f:2a:d4:ea:b1: d2:d4:0d:a8:e7:c1:88:86:db:5d:6a:16:cc:1d:dc: a3:0c:f3:3d:19:55:e3:81:15:57:a6:d6:ab:5a:e7: 90:5c:77:a1:8f:6e:ce:28:24:8e:76:34:c1:99:8e: 3a:02:bb:e5:69:f0:0c:4d:db:94:0b:b7:96:ec:a4: 5f:48:a8:68:02:a6:5e:e0:c9:13:92:3c:cf:2b:0e: 29:79:68:bb:cb:bf:89:dd:95:0c:44:78:08:84:19: 31:e6:bf:2f:7d:ba:c9:71:d3:0c:ac:f8:a6:ff:52: 47:ea:2c:08:ac:b9:93:a4:22:ca:8f:fd:97:17:11: 35:b6:75:fe:82:dc:34:a9:f3:9a:6b:f0:32:63:07: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BD:DB:73:3E:BC:8D:E6:D7:ED:5E:F8:82:38:B5:17:41:B2:6E:27 X509v3 Authority Key Identifier: keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3e:6b:ed:32:92:35:79:58:37:ab:9f:38:a1:46:8b:c5:2d: 56:24:e9:66:f2:b9:42:12:e0:db:d1:5b:2e:8a:cb:63:51:04: f6:a8:4e:c7:87:f7:3b:8d:3a:0f:25:93:9a:81:d9:13:4d:b7: d2:65:09:ea:af:75:29:73:24:10:69:b3:b1:1d:53:09:d6:2f: 0e:21:b7:40:98:27:0a:66:3c:20:0c:fe:42:b3:34:1f:4a:13: 65:3a:74:a6:dd:f8:4e:ab:7a:0e:ad:42:35:ef:b7:a7:24:ca: cf:b1:86:ae:3a:ff:15:36:fe:c2:cd:37:6d:20:78:6d:5d:37: 85:e1:bf:0f:f5:f9:80:30:20:8c:92:9e:ed:d4:ab:b9:76:59: 8a:56:8a:4f:40:f7:fe:85:2e:7b:5c:6f:e2:cd:7a:e0:c9:8c: 7e:f9:db:48:06:75:9f:fa:e2:c6:55:bf:83:ac:5e:11:95:88: 53:e6:a0:ac:cd:34:c2:ba:00:78:0b:dd:c0:44:61:b5:76:59: aa:27:5c:a1:02:45:de:1d:c8:62:df:fb:dd:3d:f3:19:61:7b: c4:44:98:dd:b4:34:4f:4b:af:e8:cb:78:ae:cc:4d:09:a7:96: d8:40:be:e8:de:69:12:91:d3:f4:7c:f3:21:e4:21:a5:fc:cd: 7e:74:c7:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWBmntH61sdqjomWcjGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNWQ0NTYwNDQ4Zjc4YTRkY2RjYjc5MWEwN2RhZDIxNjNh MDhjZGYwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD EygyYmJkZGI3MzNlYmM4ZGU2ZDdlZDVlZjg4MjM4YjUxNzQxYjI2ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDQOuV5E+EnD3TCGgHq2jK4I9tU2 FOeKB0T7byA0Pm64eeKaM4xdiXsve3xzgNaHLggxFk2LL12jHcHlMe17FlZ/TxFS m/El7dw7BjuqtbiiDAdAweT6+eIr6RmkEtcRPN5y4zOIRqWeZUVXO+uE0UFmTyrU 6rHS1A2o58GIhttdahbMHdyjDPM9GVXjgRVXptarWueQXHehj27OKCSOdjTBmY46 ArvlafAMTduUC7eW7KRfSKhoAqZe4MkTkjzPKw4peWi7y7+J3ZUMRHgIhBkx5r8v fbrJcdMMrPim/1JH6iwIrLmTpCLKj/2XFxE1tnX+gtw0qfOaa/AyYwcV4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu923M+vI3m1+1e+II4tRdBsm4nMB8GA1UdIwQY MBaAFM5dRWBEj3ik3Ny3kaB9rSFjoIzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQt NzhkMTE0NGFkOTY3LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQtNzhkMTE0NGFkOTY3 LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz5r7TKS NXlYN6ufOKFGi8UtViTpZvK5QhLg29FbLorLY1EE9qhOx4f3O406DyWTmoHZE023 0mUJ6q91KXMkEGmzsR1TCdYvDiG3QJgnCmY8IAz+QrM0H0oTZTp0pt34Tqt6Dq1C Ne+3pyTKz7GGrjr/FTb+ws03bSB4bV03heG/D/X5gDAgjJKe7dSruXZZilaKT0D3 /oUue1xv4s164MmMfvnbSAZ1n/rixlW/g6xeEZWIU+agrM00wroAeAvdwERhtXZZ qidcoQJF3h3IYt/73T3zGWF7xESY3bQ0T0uv6Mt4rsxNCaeW2EC+6N5pEpHT9Hzz IeQhpfzNfnTHWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:13 2025 by rpki-client