This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json) Hash identifier: ovHRPuLKfRX99s4oHalFTHMpAJHz8/hV7rX23CeZfds= Subject key identifier: 2C:29:1A:84:21:DE:93:C9:07:2A:E5:AA:EB:15:D6:89:23:76:78:15 Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Certificate serial: 019AF0F5D808D5DF6D92C1A94167F396F006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: CYtH766h8Mh3xNTQtxo+UUm354H4X4YbsKOkcRkVBc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d8:08:d5:df:6d:92:c1:a9:41:67:f3:96:f0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=2c291a8421de93c9072ae5aaeb15d68923767815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:da:28:de:de:0a:dd:6a:7c:03:62:03:06:63: b8:25:c4:64:fa:bd:f1:c8:32:69:bd:0c:34:e5:07: 41:a6:c9:7e:8d:8e:93:99:a0:45:63:2b:24:b9:15: 88:00:88:67:4f:1e:ed:0f:6d:94:88:b0:9f:20:bd: 91:16:37:a6:bf:69:6c:5d:bf:09:c7:7a:22:28:8a: 35:30:d1:56:0b:e3:6b:0b:a1:17:28:b9:6e:19:97: 47:8b:cc:4d:82:a6:d3:a0:dc:fb:c6:d7:22:ce:30: 06:76:24:8c:1b:d8:be:94:bf:e0:fc:a3:c6:f4:85: bc:00:56:4e:78:2c:99:3f:33:36:ad:47:ec:d2:55: 22:e9:59:44:1e:19:dd:7c:1d:52:08:b0:0a:e8:05: 79:0d:ec:ce:9d:2d:1c:a5:b7:50:bf:5b:44:81:de: df:83:44:35:98:29:c4:bd:70:a2:65:9b:c1:1e:9f: 83:75:8f:44:d1:43:b5:19:59:53:53:8a:83:9b:b7: aa:55:68:90:bf:65:4d:d5:32:b1:ca:0b:84:a5:33: 4b:5c:2d:3b:0c:95:68:03:ad:6e:33:3e:d0:45:45: 25:78:9a:14:b6:0a:16:0d:2c:22:da:cc:3d:73:d3: 22:c3:1b:82:92:73:42:8d:db:a9:79:ce:cb:19:70: 1e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:29:1A:84:21:DE:93:C9:07:2A:E5:AA:EB:15:D6:89:23:76:78:15 X509v3 Authority Key Identifier: keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:31:9a:11:e7:76:7b:f3:59:0f:0f:c0:6f:e9:57:ac:e2:c9: b2:d6:5b:14:4e:c1:a0:80:55:cb:d2:7a:5d:a6:85:4c:cf:24: 2b:5e:14:25:63:9f:b0:c3:cf:72:82:ed:ed:81:8e:56:72:38: 37:a7:ce:65:8a:e4:6a:75:5f:b8:a4:7c:d7:e7:47:98:31:62: d2:3b:67:67:dd:9d:14:b2:75:34:94:34:52:e3:99:55:0a:21: d4:8c:a4:12:73:fa:a1:3e:b7:ed:ad:c3:14:bc:39:95:9c:c1: e7:cc:78:88:bc:de:df:2f:8f:48:87:01:f2:45:ad:b8:26:e0: b9:a9:b6:b8:bf:ae:4a:0c:bc:1b:a3:58:1b:dc:17:90:6c:5d: 79:2f:61:f6:b9:5d:be:e8:79:fd:4b:97:71:f6:d4:ce:ef:ef: ba:c4:4d:b1:e5:1f:c6:7d:31:fb:9c:1d:14:4e:7a:7e:86:86: 7a:9b:21:86:37:e2:10:18:be:72:73:ff:f8:57:55:f3:aa:ff: 5a:78:b2:9e:53:33:48:e9:6b:27:f4:83:d5:c2:d0:82:5a:ff: a7:63:b6:06:83:a6:8a:ee:b3:ca:fb:ed:18:b6:8f:60:3e:3b: d0:28:fe:db:d7:7e:3a:13:00:0a:31:30:fa:56:b9:9c:a2:c4: f5:4b:d7:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dgI1d9tksGpQWfzlvAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1 NzA1NDAwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD EygyYzI5MWE4NDIxZGU5M2M5MDcyYWU1YWFlYjE1ZDY4OTIzNzY3ODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Noo3t4K3Wp8A2IDBmO4JcRk+r3x yDJpvQw05QdBpsl+jY6TmaBFYyskuRWIAIhnTx7tD22UiLCfIL2RFjemv2lsXb8J x3oiKIo1MNFWC+NrC6EXKLluGZdHi8xNgqbToNz7xtcizjAGdiSMG9i+lL/g/KPG 9IW8AFZOeCyZPzM2rUfs0lUi6VlEHhndfB1SCLAK6AV5DezOnS0cpbdQv1tEgd7f g0Q1mCnEvXCiZZvBHp+DdY9E0UO1GVlTU4qDm7eqVWiQv2VN1TKxyguEpTNLXC07 DJVoA61uMz7QRUUleJoUtgoWDSwi2sw9c9MiwxuCknNCjdupec7LGXAeoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwpGoQh3pPJByrlqusV1okjdngVMB8GA1UdIwQY MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2 LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDGaEed2 e/NZDw/Ab+lXrOLJstZbFE7BoIBVy9J6XaaFTM8kK14UJWOfsMPPcoLt7YGOVnI4 N6fOZYrkanVfuKR81+dHmDFi0jtnZ92dFLJ1NJQ0UuOZVQoh1IykEnP6oT637a3D FLw5lZzB58x4iLze3y+PSIcB8kWtuCbguam2uL+uSgy8G6NYG9wXkGxdeS9h9rld vuh5/UuXcfbUzu/vusRNseUfxn0x+5wdFE56foaGepshhjfiEBi+cnP/+FdV86r/ WniynlMzSOlrJ/SD1cLQglr/p2O2BoOmiu6zyvvtGLaPYD470Cj+29d+OhMACjEw +la5nKLE9UvXLA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:18 2025 by rpki-client