This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json) Hash identifier: RSBUYtViGoILtSELNYjpxC54OFRVGftDiu7m2wXSrdQ= Subject key identifier: B5:E7:A1:6F:E9:B2:CD:D9:A9:83:76:70:1C:AE:1E:51:20:10:6A:A8 Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6 Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6 Certificate serial: 019AF208CB5A2D64DE32C15C4387648E0764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft Manifest number: 08D2 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: 7d2f98bHzqHWx5M7oEXVyJyz8B4.roa (hash: WP0mtIYc1sSiT/bxjFMuO4V87PtcesycNrQ76Yhzw5U=) 2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: WT4G+GdqLuIuxKiQxl3dVYfcsPdifs8ALKEVbk/Bcx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cb:5a:2d:64:de:32:c1:5c:43:87:64:8e:07:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6 Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=b5e7a16fe9b2cdd9a98376701cae1e5120106aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:a0:52:07:3e:a3:54:b5:3b:b0:a8:2b:76: 9a:42:e6:5b:8f:83:0d:ba:cc:a7:c5:99:45:1b:7a: 6c:15:f6:e1:82:02:9d:8e:05:3c:99:ab:68:3f:e7: 74:93:92:c6:b7:d3:30:93:d0:91:f3:18:a9:7b:c5: 63:9f:dd:d8:87:e5:fc:2a:41:0d:1b:ad:c6:04:d4: 89:91:64:eb:d1:0b:93:46:e9:2a:f4:0b:3c:ff:18: ee:2d:92:b7:e1:9c:08:86:8f:68:b1:cd:5c:c7:42: e1:20:1b:b5:af:21:7e:b0:05:ea:77:56:ba:4e:3d: fe:b7:00:44:73:a0:94:75:d1:81:88:35:5d:1e:bd: 65:0a:96:34:aa:a8:72:d0:e4:e6:b4:9c:8c:48:72: 2a:c8:e1:f6:11:df:e6:38:f6:ac:57:c0:64:51:71: d9:31:5a:c7:97:fe:42:06:db:e9:ef:4e:d3:ef:5c: 78:c2:0a:29:00:bc:d5:36:76:c1:15:0b:9d:b6:10: 5a:5f:ba:d4:67:e7:43:ec:96:94:7c:2e:38:58:09: 10:e2:c5:44:f9:54:85:b1:17:e3:2f:bf:30:1a:d6: 67:f6:73:d3:28:ac:e8:1b:fb:6d:d9:c2:2e:0d:ce: 17:f2:aa:18:c1:de:77:8e:65:50:4f:41:b0:1a:8a: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E7:A1:6F:E9:B2:CD:D9:A9:83:76:70:1C:AE:1E:51:20:10:6A:A8 X509v3 Authority Key Identifier: keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a9:72:a9:3b:44:01:14:94:eb:ab:41:23:d2:29:c7:fc:28: e0:c9:1f:31:86:72:a1:70:a0:9c:a3:98:9e:c2:92:72:0b:98: 29:0f:0a:20:fa:93:4e:73:1c:e9:b0:dd:b9:68:e0:90:e4:0b: 14:44:20:e1:a8:b7:1b:53:b4:e2:38:b9:3e:13:a5:d9:a8:71: 28:e1:e5:c4:fe:b8:ea:ef:f3:62:c5:3e:a5:b1:e0:da:3e:9e: 7c:dd:8a:c6:24:30:da:aa:46:f9:5b:03:82:c4:b8:c0:86:77: df:bf:ed:d0:dc:a2:9a:49:ef:07:44:b1:34:1d:cd:e6:fb:bd: db:87:90:c6:1d:03:15:27:b3:f0:6e:0e:6d:dc:c3:19:96:6d: ce:11:97:c1:d6:21:ab:2a:2d:25:28:03:9c:45:fa:da:b6:a7: da:2c:33:66:ff:d6:65:08:2f:af:ab:be:ef:a6:24:d7:40:9b: 40:5f:30:f7:8e:52:66:f1:7c:91:be:d8:53:e6:1e:f4:d7:42: cd:81:70:6f:86:38:8e:a8:55:fd:04:21:b3:4f:bb:3f:cf:01: 41:82:6c:d9:2a:5f:11:7f:c3:01:0a:5c:ff:27:d4:1c:a8:e4: e9:de:19:85:58:74:5d:aa:74:e1:bf:58:dd:eb:9c:ff:b8:ba: 1b:4f:3e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMtaLWTeMsFcQ4dkjgdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWU3MzEzMzM3NWQ5NTcyYjhjZmNhNWM4YjVmMWZiYmJk YzliYjYwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EyhiNWU3YTE2ZmU5YjJjZGQ5YTk4Mzc2NzAxY2FlMWU1MTIwMTA2YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkigUgc+o1S1O7CoK3aaQuZbj4MN usynxZlFG3psFfbhggKdjgU8matoP+d0k5LGt9Mwk9CR8xipe8Vjn93Yh+X8KkEN G63GBNSJkWTr0QuTRukq9As8/xjuLZK34ZwIho9osc1cx0LhIBu1ryF+sAXqd1a6 Tj3+twBEc6CUddGBiDVdHr1lCpY0qqhy0OTmtJyMSHIqyOH2Ed/mOPasV8BkUXHZ MVrHl/5CBtvp707T71x4wgopALzVNnbBFQudthBaX7rUZ+dD7JaUfC44WAkQ4sVE +VSFsRfjL78wGtZn9nPTKKzoG/tt2cIuDc4X8qoYwd53jmVQT0GwGopICQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXnoW/pss3ZqYN2cByuHlEgEGqoMB8GA1UdIwQY MBaAFMwecxMzddlXK4z8pci18fu73Ju2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQt Mjk4MzhmNGFjNjBlLzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQtMjk4MzhmNGFjNjBl LzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnalyqTtE ARSU66tBI9Ipx/wo4MkfMYZyoXCgnKOYnsKScguYKQ8KIPqTTnMc6bDduWjgkOQL FEQg4ai3G1O04ji5PhOl2ahxKOHlxP646u/zYsU+pbHg2j6efN2KxiQw2qpG+VsD gsS4wIZ337/t0NyimknvB0SxNB3N5vu924eQxh0DFSez8G4ObdzDGZZtzhGXwdYh qyotJSgDnEX62ran2iwzZv/WZQgvr6u+76Yk10CbQF8w945SZvF8kb7YU+Ye9NdC zYFwb4Y4jqhV/QQhs0+7P88BQYJs2SpfEX/DAQpc/yfUHKjk6d4ZhVh0Xap04b9Y 3euc/7i6G08+bA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:37 2025 by rpki-client