This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft File: zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json) Hash identifier: jmfKM8YEMcd1vN/ZwFVLCX3TfqCKuN0dloGBSmCf4MA= Subject key identifier: D7:53:6A:BE:66:6C:AA:25:5B:71:89:E0:DE:05:7B:67:6F:A2:7B:E8 Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F Certificate issuer: /CN=cc4d48708da5054959e618a582e28c155fef113f Certificate serial: 019AF42E0D0B2414D5FB8F4641366FAF5E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft Manifest number: 06BE Signing time: Sat 06 Dec 2025 15:00:49 +0000 Manifest this update: Sat 06 Dec 2025 15:00:49 +0000 Manifest next update: Sun 07 Dec 2025 15:00:49 +0000 Files and hashes: 1: r9Ux985jnVmfKHLZzNH9_T06wzU.roa (hash: SP4ahRSwbqs6nOlIBz3rDf0O3m+DJabQsDxWQ8oLOwM=) 2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: 0leOMfp0y3pFzh3WqA/yDZtI9XplE6lsXBd0HiDsJJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:0d:0b:24:14:d5:fb:8f:46:41:36:6f:af:5e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f Validity Not Before: Dec 6 15:00:49 2025 GMT Not After : Dec 7 15:00:49 2025 GMT Subject: CN=d7536abe666caa255b7189e0de057b676fa27be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:a3:5e:1e:52:16:18:bf:05:cd:7d:1d:45: 0d:d7:73:3e:bd:bf:4e:a0:09:74:92:ee:71:19:df: 84:f1:4d:c7:9d:98:38:4c:3a:6b:12:4c:d6:c0:c6: 07:0d:6a:07:9c:a8:50:ea:df:ba:e0:af:f8:9a:b0: 47:f2:01:a5:9a:da:c7:4b:00:8c:d9:f3:c8:e7:56: d1:64:0c:f7:b6:0a:3f:c8:37:c5:1b:3a:3d:c9:3b: 0b:3d:44:0e:f0:ea:d3:1f:98:d3:d4:f1:f0:f3:ba: 15:16:b9:6c:21:6f:24:a6:53:31:be:d0:6c:3a:16: 92:69:d9:2e:33:20:02:72:3e:cb:9b:c3:13:58:19: 6f:89:f5:ca:81:e2:e1:78:77:d1:2e:70:6d:a0:96: e0:00:f4:43:33:99:b4:6e:88:6a:0d:f8:5e:26:ec: d3:c7:a8:51:96:79:1d:28:bf:78:6b:2c:36:6d:3d: 04:5b:42:f6:d1:4b:0d:b9:0d:72:07:ab:e0:e9:9d: 46:e6:fe:c3:58:8b:cb:3a:41:7d:e9:32:e0:4a:70: 73:da:fe:99:19:7d:18:56:5f:67:37:5e:02:e1:0e: 39:f3:f0:aa:23:16:5f:9b:9e:4a:0f:51:1c:cd:bc: b3:c2:36:9f:45:c4:e2:fc:68:3b:10:d7:65:ac:17: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:53:6A:BE:66:6C:AA:25:5B:71:89:E0:DE:05:7B:67:6F:A2:7B:E8 X509v3 Authority Key Identifier: keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d0:b8:8e:fb:0f:ea:8c:77:1d:10:6e:9a:d0:4e:02:30:f2: f8:e8:4e:dd:0d:64:c0:f1:45:07:5b:ce:0d:24:a9:95:d0:6a: 90:3d:6e:58:b9:a9:be:bf:6b:1a:ba:3a:75:90:4e:28:a6:76: 50:26:22:3b:79:31:40:48:47:0a:35:53:0e:f8:f6:a5:44:25: a5:8a:a0:53:45:e8:61:e0:d0:9c:8e:c9:07:dd:cf:c0:16:25: 8f:7c:ef:da:52:9a:94:e0:18:23:93:d5:3c:f7:8f:04:19:5e: 4f:ed:05:da:9b:c2:27:49:c3:32:df:64:9b:d3:df:36:18:e8: 3f:fb:13:c9:09:c2:a1:23:49:26:2c:e0:06:85:5b:3e:35:51: df:ed:30:d1:96:43:58:37:c2:b9:6b:b1:18:0c:bd:5e:42:52: ce:3d:78:57:94:03:8b:c2:80:4d:1a:ae:d5:34:f7:3d:e4:de: b2:d7:b2:55:7f:4a:e5:41:00:48:03:61:1a:ae:8d:16:07:1c: f3:6b:7c:e1:f6:80:3c:69:78:3d:8a:ce:98:23:57:fc:57:71: 38:b3:b1:08:d2:2c:57:c2:4b:e5:ee:c1:f1:5c:b3:35:a3:86: a9:27:fb:4c:dc:6a:40:08:ed:cd:9b:15:4e:f7:b6:5a:3e:fd: 10:f8:a2:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lg0LJBTV+49GQTZvr14xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGQ0ODcwOGRhNTA1NDk1OWU2MThhNTgyZTI4YzE1NWZl ZjExM2YwHhcNMjUxMjA2MTUwMDQ5WhcNMjUxMjA3MTUwMDQ5WjAzMTEwLwYDVQQD EyhkNzUzNmFiZTY2NmNhYTI1NWI3MTg5ZTBkZTA1N2I2NzZmYTI3YmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3WjXh5SFhi/Bc19HUUN13M+vb9O oAl0ku5xGd+E8U3HnZg4TDprEkzWwMYHDWoHnKhQ6t+64K/4mrBH8gGlmtrHSwCM 2fPI51bRZAz3tgo/yDfFGzo9yTsLPUQO8OrTH5jT1PHw87oVFrlsIW8kplMxvtBs OhaSadkuMyACcj7Lm8MTWBlvifXKgeLheHfRLnBtoJbgAPRDM5m0bohqDfheJuzT x6hRlnkdKL94ayw2bT0EW0L20UsNuQ1yB6vg6Z1G5v7DWIvLOkF96TLgSnBz2v6Z GX0YVl9nN14C4Q458/CqIxZfm55KD1EczbyzwjafRcTi/Gg7ENdlrBd+NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdTar5mbKolW3GJ4N4Fe2dvonvoMB8GA1UdIwQY MBaAFMxNSHCNpQVJWeYYpYLijBVf7xE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekUxSWNJMmxCVWxaNWhpbGd1S01GVl92RVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NmE1MjQtMmUxYi00ZTllLWIyZDgt YTljMzEyMjk4NGM1LzEvekUxSWNJMmxCVWxaNWhpbGd1S01GVl92RVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NmE1MjQtMmUxYi00ZTllLWIyZDgtYTljMzEyMjk4NGM1 LzEvekUxSWNJMmxCVWxaNWhpbGd1S01GVl92RVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdC4jvsP 6ox3HRBumtBOAjDy+OhO3Q1kwPFFB1vODSSpldBqkD1uWLmpvr9rGro6dZBOKKZ2 UCYiO3kxQEhHCjVTDvj2pUQlpYqgU0XoYeDQnI7JB93PwBYlj3zv2lKalOAYI5PV PPePBBleT+0F2pvCJ0nDMt9km9PfNhjoP/sTyQnCoSNJJizgBoVbPjVR3+0w0ZZD WDfCuWuxGAy9XkJSzj14V5QDi8KATRqu1TT3PeTesteyVX9K5UEASANhGq6NFgcc 82t84faAPGl4PYrOmCNX/FdxOLOxCNIsV8JL5e7B8VyzNaOGqSf7TNxqQAjtzZsV Tve2Wj79EPiiNA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:47 2025 by rpki-client