This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json) Hash identifier: gWPFpiKbUJrrhz0t/Gfhp+bAkYiG324wTXDRYqZ7QFM= Subject key identifier: 36:AE:E3:C6:39:AE:C8:C9:19:29:73:6D:FD:7A:6C:3D:F7:58:07:21 Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd Certificate serial: 019B28523CBFEB6772FBBAAC6B40CC6EF336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft Manifest number: 0D3B Signing time: Tue 16 Dec 2025 18:00:36 +0000 Manifest this update: Tue 16 Dec 2025 18:00:36 +0000 Manifest next update: Wed 17 Dec 2025 18:00:36 +0000 Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: FtYBkTPRqRFLEbYw8te/feAci7Q4Qs+8lVFKGPA4mik=) 2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:3c:bf:eb:67:72:fb:ba:ac:6b:40:cc:6e:f3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd Validity Not Before: Dec 16 18:00:36 2025 GMT Not After : Dec 17 18:00:36 2025 GMT Subject: CN=36aee3c639aec8c91929736dfd7a6c3df7580721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9d:ea:d3:e8:46:c7:75:34:f6:85:bb:1f:95: b6:ee:ad:e1:15:22:dd:45:50:e4:34:05:a1:b5:c0: e5:2c:6c:60:28:e5:fb:54:fc:c5:e9:21:9c:74:b2: ac:02:00:ea:3f:8c:ed:10:89:a9:11:3b:c1:98:68: 24:1a:e1:6d:45:ad:2e:7e:fd:36:eb:af:3f:ba:34: cc:44:f4:53:4a:7f:e8:de:03:0b:19:dc:c2:1a:a4: 88:3a:7a:34:87:b7:5f:4c:3b:c6:f0:47:7b:39:1d: ef:b6:d9:c1:dc:ec:f6:e9:58:84:6b:dd:85:c2:99: bf:83:31:cc:de:fc:1f:fb:27:0b:09:51:15:36:02: 9c:81:5b:b0:c9:55:84:78:4d:5f:ab:6b:90:d1:29: 1c:1f:c2:66:0f:98:a5:3e:fe:36:3c:b7:a6:69:d9: 97:5b:c2:46:62:99:63:99:f6:08:dd:eb:22:47:a1: 87:ff:a1:09:21:d1:d8:28:47:9d:9e:68:72:7f:0e: 66:d4:c2:d5:50:f3:08:1e:d2:c5:35:2c:ca:96:86: f0:65:3b:50:ec:33:fc:a7:09:d4:d6:1c:c2:17:16: 43:8b:88:9a:84:37:11:5f:a1:e7:c5:5a:d0:f6:5e: a9:5c:cd:d2:47:4d:37:e2:f2:22:bf:9b:ec:ca:5d: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AE:E3:C6:39:AE:C8:C9:19:29:73:6D:FD:7A:6C:3D:F7:58:07:21 X509v3 Authority Key Identifier: keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:04:67:9f:8c:0d:00:d1:14:ef:85:20:a5:e2:83:9a:19:67: 98:61:6d:49:c1:3c:f0:fa:fe:0f:d0:dd:12:07:07:ce:95:ce: 04:c6:cc:72:71:f9:79:3a:0e:90:c6:66:fe:50:c6:3e:06:19: db:9c:44:90:61:12:cd:0f:6d:76:af:c9:21:c0:a4:a9:99:de: cf:8e:ea:06:aa:09:58:21:df:7d:0b:ed:1a:68:4e:ee:a2:7c: d2:f1:0f:1a:cc:1f:23:d7:30:9c:cf:dc:08:15:38:ae:5b:ba: 29:a1:26:8a:d2:2c:2f:27:21:0a:9e:90:7c:7c:dc:e4:fa:ca: c4:a0:a1:cf:ba:a8:56:83:87:4e:46:37:c3:45:c2:d6:04:37: 84:69:00:9f:6c:b1:26:91:9a:cb:a0:da:1e:6b:50:0e:14:38: 7a:0a:e6:3c:4c:b1:28:a3:ac:1a:8c:d9:f1:23:de:7e:d8:3c: ec:53:4b:23:b4:e1:ae:df:c0:db:9f:4f:b1:37:d9:dc:0d:7f: 57:99:31:2e:62:57:0d:17:1b:99:47:af:64:22:64:f2:ab:6a: f6:e2:de:4f:ed:c3:65:c7:3d:70:c6:77:dc:25:e6:a3:70:fa: ea:f3:a3:78:c1:d2:ac:f9:bd:57:f2:cc:8b:f9:f4:b4:66:f4: b0:62:7e:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUjy/62dy+7qsa0DMbvM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz YzEzYmQwHhcNMjUxMjE2MTgwMDM2WhcNMjUxMjE3MTgwMDM2WjAzMTEwLwYDVQQD EygzNmFlZTNjNjM5YWVjOGM5MTkyOTczNmRmZDdhNmMzZGY3NTgwNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp3q0+hGx3U09oW7H5W27q3hFSLd RVDkNAWhtcDlLGxgKOX7VPzF6SGcdLKsAgDqP4ztEImpETvBmGgkGuFtRa0ufv02 668/ujTMRPRTSn/o3gMLGdzCGqSIOno0h7dfTDvG8Ed7OR3vttnB3Oz26ViEa92F wpm/gzHM3vwf+ycLCVEVNgKcgVuwyVWEeE1fq2uQ0SkcH8JmD5ilPv42PLemadmX W8JGYpljmfYI3esiR6GH/6EJIdHYKEednmhyfw5m1MLVUPMIHtLFNSzKlobwZTtQ 7DP8pwnU1hzCFxZDi4iahDcRX6HnxVrQ9l6pXM3SR0034vIiv5vsyl2nmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDau48Y5rsjJGSlzbf16bD33WAchMB8GA1UdIwQY MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt YWQ5ZTFhMDUxMGI5LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5 LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigRnn4wN ANEU74UgpeKDmhlnmGFtScE88Pr+D9DdEgcHzpXOBMbMcnH5eToOkMZm/lDGPgYZ 25xEkGESzQ9tdq/JIcCkqZnez47qBqoJWCHffQvtGmhO7qJ80vEPGswfI9cwnM/c CBU4rlu6KaEmitIsLychCp6QfHzc5PrKxKChz7qoVoOHTkY3w0XC1gQ3hGkAn2yx JpGay6DaHmtQDhQ4egrmPEyxKKOsGozZ8SPeftg87FNLI7Thrt/A259PsTfZ3A1/ V5kxLmJXDRcbmUevZCJk8qtq9uLeT+3DZcc9cMZ33CXmo3D66vOjeMHSrPm9V/LM i/n0tGb0sGJ+FQ== -----END CERTIFICATE-----Generated at Tue Dec 16 20:30:12 2025 by rpki-client