This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json) Hash identifier: VPATAZrJNatsazdRZBefyan+UbwFY5ppBk0U4UN8uaU= Subject key identifier: DA:60:90:87:2E:DA:57:B5:55:FF:73:A0:79:0E:AD:4E:46:AE:EE:23 Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Certificate serial: 019AF209551712FA30D811E48329410391DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft Manifest number: 13C8 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=) 2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=) 3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: UF1KB5UMjkjVQURuTL+HboJZPBS3R2Yczv7iP+wFQJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:55:17:12:fa:30:d8:11:e4:83:29:41:03:91:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=da6090872eda57b555ff73a0790ead4e46aeee23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:a6:49:21:d8:8c:b3:ba:85:e7:a6:f0:0f: 35:ed:d8:91:5d:6d:6f:6b:aa:55:1e:3e:59:9d:a4: 0c:08:3c:14:6e:1a:2f:36:71:ee:bd:9b:ed:9a:3c: 23:d3:d7:2d:a3:4d:46:db:98:77:3a:a4:97:7e:68: db:2e:68:68:2b:bb:98:f3:00:ab:85:2e:d5:a8:49: f7:4d:93:ce:b9:0a:cb:3b:06:ec:6d:47:fc:96:c5: a4:23:c9:c8:bc:04:16:1c:ff:9e:fd:78:38:58:08: a8:71:63:71:e7:cb:2b:dd:3e:cd:fb:4f:e9:81:61: ae:40:c5:b9:42:4a:8e:e0:8f:d8:bb:ee:8c:e7:d8: 72:8e:8f:1f:01:9f:e9:d7:ef:b4:ef:43:7b:03:d9: 14:4b:16:9b:ac:29:6f:c7:7f:b4:b0:90:4c:49:f3: 86:3b:6c:73:88:a6:18:8d:76:86:a7:6f:5f:7f:81: 0b:08:3b:bc:2c:f8:af:2e:d2:7d:fc:33:3c:b2:bb: bd:3e:86:b6:34:99:bb:ed:d5:b2:d3:08:9b:c3:03: 1d:7e:15:e6:09:7e:c6:ae:48:ed:98:ed:80:a2:68: 14:d0:5c:ec:c7:ea:d8:9b:b5:d3:36:8a:4b:ba:33: a6:6d:60:a6:cf:23:23:67:16:3d:d3:84:56:df:2d: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:60:90:87:2E:DA:57:B5:55:FF:73:A0:79:0E:AD:4E:46:AE:EE:23 X509v3 Authority Key Identifier: keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3c:3a:76:cd:00:bf:7e:e2:b0:1d:6c:01:05:0e:cd:2a:66: e6:d4:4b:43:b1:15:2b:c9:d4:19:3e:9c:b2:79:0c:1e:f0:e3: d4:be:75:6e:c6:0b:86:e7:da:0e:28:d7:00:0f:2f:38:11:d7: 13:a1:45:59:45:9a:ab:d7:c4:21:86:81:34:23:6b:8e:62:93: 20:e8:2c:50:f3:9e:60:da:c2:e0:51:5c:9b:4f:72:0d:38:2d: bf:74:c5:56:4a:07:4f:c2:90:5e:a2:49:e4:75:17:1f:fc:3b: 2c:ae:78:b5:0d:7b:23:91:02:cf:35:1d:3e:f8:37:f2:81:c0: 28:67:39:73:c6:be:ff:df:d5:9f:ce:6d:f9:c3:0c:fe:d1:7d: 35:af:24:e2:d2:62:90:92:70:ac:01:3c:20:d7:8d:01:59:2a: bd:20:cc:5a:fb:c0:13:75:8f:31:b6:fc:42:30:e4:df:54:29: 4c:d9:b8:97:57:26:71:f2:6b:d6:36:4c:63:e8:eb:5d:0c:6c: 03:25:93:99:c7:d3:2f:88:de:77:d1:88:15:c8:8d:c4:d2:63: a7:a0:62:47:0d:64:96:26:43:0f:1c:3a:ad:79:9d:84:a6:d5: 50:05:db:d9:25:80:b7:e6:ea:39:41:ca:32:4a:07:72:da:ec: 0d:83:56:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVUXEvow2BHkgylBA5HaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTEzNWRmZWQwYmI2MzM1ZDE5ZGRkNmQ3ZTk5ZjQ4YWZi ZTNjMDEwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EyhkYTYwOTA4NzJlZGE1N2I1NTVmZjczYTA3OTBlYWQ0ZTQ2YWVlZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHamSSHYjLO6heem8A817diRXW1v a6pVHj5ZnaQMCDwUbhovNnHuvZvtmjwj09cto01G25h3OqSXfmjbLmhoK7uY8wCr hS7VqEn3TZPOuQrLOwbsbUf8lsWkI8nIvAQWHP+e/Xg4WAiocWNx58sr3T7N+0/p gWGuQMW5QkqO4I/Yu+6M59hyjo8fAZ/p1++070N7A9kUSxabrClvx3+0sJBMSfOG O2xziKYYjXaGp29ff4ELCDu8LPivLtJ9/DM8sru9Poa2NJm77dWy0wibwwMdfhXm CX7GrkjtmO2AomgU0Fzsx+rYm7XTNopLujOmbWCmzyMjZxY904RW3y0oLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpgkIcu2le1Vf9zoHkOrU5Gru4jMB8GA1UdIwQY MBaAFM6RNd/tC7YzXRnd1tfpn0ivvjwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgt YzExZWM2ZWE4NmI4LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgtYzExZWM2ZWE4NmI4 LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTw6ds0A v37isB1sAQUOzSpm5tRLQ7EVK8nUGT6csnkMHvDj1L51bsYLhufaDijXAA8vOBHX E6FFWUWaq9fEIYaBNCNrjmKTIOgsUPOeYNrC4FFcm09yDTgtv3TFVkoHT8KQXqJJ 5HUXH/w7LK54tQ17I5ECzzUdPvg38oHAKGc5c8a+/9/Vn85t+cMM/tF9Na8k4tJi kJJwrAE8INeNAVkqvSDMWvvAE3WPMbb8QjDk31QpTNm4l1cmcfJr1jZMY+jrXQxs AyWTmcfTL4jed9GIFciNxNJjp6BiRw1kliZDDxw6rXmdhKbVUAXb2SWAt+bqOUHK MkoHctrsDYNWFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:30 2025 by rpki-client