This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json) Hash identifier: s4QqBid6Z9fZoyCP8vMaw88tMJgD9xwTBu7fPxvYns0= Subject key identifier: 63:D3:B3:31:C5:5C:7B:9F:21:8B:EF:14:24:35:92:46:33:9D:45:21 Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Certificate serial: 019B329EF07F9E277B99540390798F4B9E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 18:00:35 +0000 Manifest this update: Thu 18 Dec 2025 18:00:35 +0000 Manifest next update: Fri 19 Dec 2025 18:00:35 +0000 Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: bRlArJjPOqIVNFBsBo3JNjT0eiKZqUj/v9Tlqn516H4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:f0:7f:9e:27:7b:99:54:03:90:79:8f:4b:9e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Validity Not Before: Dec 18 18:00:35 2025 GMT Not After : Dec 19 18:00:35 2025 GMT Subject: CN=63d3b331c55c7b9f218bef1424359246339d4521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:3e:5f:d4:6c:17:e5:78:44:f9:1a:b2:53: 46:4b:4b:eb:91:4a:40:80:3e:01:64:e0:67:dc:7b: 6f:e1:14:0c:7f:b1:98:56:27:eb:22:85:0a:88:6b: 78:9d:b0:57:47:8a:b5:34:37:13:ae:90:d2:63:a6: 81:65:f9:00:27:03:0a:ae:bf:0e:45:6e:3d:fe:11: 59:1d:ce:6d:02:7f:03:8b:3a:af:52:c9:fe:ba:14: 7f:e1:72:58:58:cd:98:87:00:43:18:b9:77:de:90: fe:d4:26:b3:2e:47:a6:71:bd:13:86:eb:49:75:15: e5:02:f0:ad:32:73:a5:21:67:bc:f6:aa:9a:23:99: fc:18:61:79:28:6c:a7:a0:71:2e:15:f9:4d:13:c3: fe:4d:8e:de:87:04:1e:fc:a3:43:b8:b6:d2:e8:8f: 2f:19:9e:4f:c8:78:68:0d:79:d5:dc:48:74:45:d5: c5:54:b8:a0:77:53:30:b1:f4:c1:78:7a:2d:74:f2: e3:b3:56:cc:1e:0e:b5:a4:c0:65:eb:e5:00:95:de: 6f:f9:b2:eb:94:7b:64:77:f7:57:30:6e:fa:1b:db: b5:55:fd:e1:27:27:ad:46:0a:e7:a3:db:04:af:a8: 7e:b4:3f:14:0d:b1:b8:42:d0:2a:e1:20:c8:5a:75: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D3:B3:31:C5:5C:7B:9F:21:8B:EF:14:24:35:92:46:33:9D:45:21 X509v3 Authority Key Identifier: keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a9:bc:37:70:08:b4:20:81:55:3a:2f:c3:dc:d0:8e:06:9f: b3:4a:4b:6f:5c:f4:3c:07:f2:6f:c8:f0:60:43:f1:5e:16:ac: 5a:7d:67:9e:07:cc:df:7a:36:70:22:d9:d4:44:25:83:1d:23: c2:b0:4c:42:3d:44:f7:2c:a4:df:17:4f:df:cf:89:d0:7b:c8: dd:2a:11:10:51:49:98:5c:58:88:b9:fd:ea:f0:e1:0b:a4:8c: 3b:ed:f0:33:0d:1e:68:23:0b:41:57:3e:fd:02:f6:f3:f3:c1: ac:51:bd:e7:96:de:d3:ab:1e:97:14:20:8d:a5:a7:1b:1f:66: f4:9b:a6:8b:a5:74:c1:4c:8d:93:0b:fe:cd:0f:30:69:ba:7a: f5:f3:02:6b:be:cb:62:44:e0:a1:10:80:e1:3d:24:7f:90:33: 55:11:25:32:69:81:5a:d6:e0:66:24:e7:7d:56:58:31:78:ad: 2f:0b:73:4d:ae:b0:f0:59:27:d0:44:94:4c:8a:1e:b3:dd:63: 4c:f9:a3:66:a2:9c:bf:cf:3a:95:5b:7a:b5:8c:c9:97:02:73: 6e:72:01:d6:7e:d7:e5:97:b4:94:03:11:da:dd:69:19:13:03: 4f:81:b1:11:09:bf:5c:8d:56:35:04:50:3e:20:e1:6c:31:e3: 2d:07:c8:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynvB/nid7mVQDkHmPS56XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1 NzA1NDAwHhcNMjUxMjE4MTgwMDM1WhcNMjUxMjE5MTgwMDM1WjAzMTEwLwYDVQQD Eyg2M2QzYjMzMWM1NWM3YjlmMjE4YmVmMTQyNDM1OTI0NjMzOWQ0NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygc+X9RsF+V4RPkaslNGS0vrkUpA gD4BZOBn3Htv4RQMf7GYVifrIoUKiGt4nbBXR4q1NDcTrpDSY6aBZfkAJwMKrr8O RW49/hFZHc5tAn8DizqvUsn+uhR/4XJYWM2YhwBDGLl33pD+1CazLkemcb0ThutJ dRXlAvCtMnOlIWe89qqaI5n8GGF5KGynoHEuFflNE8P+TY7ehwQe/KNDuLbS6I8v GZ5PyHhoDXnV3Eh0RdXFVLigd1MwsfTBeHotdPLjs1bMHg61pMBl6+UAld5v+bLr lHtkd/dXMG76G9u1Vf3hJyetRgrno9sEr6h+tD8UDbG4QtAq4SDIWnVFQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPTszHFXHufIYvvFCQ1kkYznUUhMB8GA1UdIwQY MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2 LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6m8N3AI tCCBVTovw9zQjgafs0pLb1z0PAfyb8jwYEPxXhasWn1nngfM33o2cCLZ1EQlgx0j wrBMQj1E9yyk3xdP38+J0HvI3SoREFFJmFxYiLn96vDhC6SMO+3wMw0eaCMLQVc+ /QL28/PBrFG955be06selxQgjaWnGx9m9Jumi6V0wUyNkwv+zQ8wabp69fMCa77L YkTgoRCA4T0kf5AzVRElMmmBWtbgZiTnfVZYMXitLwtzTa6w8Fkn0ESUTIoes91j TPmjZqKcv886lVt6tYzJlwJzbnIB1n7X5Ze0lAMR2t1pGRMDT4GxEQm/XI1WNQRQ PiDhbDHjLQfIRQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:41 2025 by rpki-client