This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json) Hash identifier: AbcLSvTMHfWDombvrsYutDj1xSO3OgfqjvuJa5qEGrg= Subject key identifier: 0B:B7:B3:85:BB:E3:18:A0:AC:39:57:AD:7A:EF:87:28:FD:64:36:A9 Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10 Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710 Certificate serial: 019AF509C13B4A7B6DCBCBDA6B9F65FB95D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft Manifest number: 09D9 Signing time: Sat 06 Dec 2025 19:00:48 +0000 Manifest this update: Sat 06 Dec 2025 19:00:48 +0000 Manifest next update: Sun 07 Dec 2025 19:00:48 +0000 Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: 3APa90FTuaEAhCndF8neIKoB7ASaedChouLZWiKLOzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:c1:3b:4a:7b:6d:cb:cb:da:6b:9f:65:fb:95:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710 Validity Not Before: Dec 6 19:00:48 2025 GMT Not After : Dec 7 19:00:48 2025 GMT Subject: CN=0bb7b385bbe318a0ac3957ad7aef8728fd6436a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:8d:0f:db:a0:d9:05:f6:54:51:91:a6:7b: 6f:51:2f:96:ee:e0:21:40:c1:38:1e:c6:2a:33:ff: 35:5b:48:4a:c2:a9:24:6f:b2:89:8a:dd:fc:56:70: 1c:ee:d1:7a:d7:4e:9b:13:bb:82:54:9d:b4:fd:e0: d0:5d:aa:3e:9f:96:5e:e2:74:7b:56:0f:2d:21:ad: 9c:f8:a0:d6:70:39:28:5b:09:f6:2c:0c:89:ab:5f: cd:41:29:a7:8f:5c:5e:76:fa:c4:03:18:a0:9b:c1: 0f:ff:70:bc:1d:6b:86:32:5c:83:73:61:45:59:81: 76:f4:62:6b:84:73:fe:07:be:c2:10:19:6b:7a:8c: 11:0f:53:94:56:57:0f:cd:55:f5:99:a2:51:c4:e9: 91:7f:ea:f9:a4:8c:d4:85:08:e5:df:96:fd:24:97: d3:88:35:2d:55:64:2f:64:b2:7f:0b:b7:0a:a1:5a: 59:24:45:03:fd:f6:ee:47:b1:71:74:7a:28:80:19: b9:e1:ec:4f:df:45:ab:33:c4:dc:35:51:12:c2:3d: 55:d5:23:36:e8:6c:b3:f3:e7:b5:a0:c7:b3:5f:3d: 3a:3f:9e:ed:53:02:47:c0:56:63:b4:d6:6e:f8:2e: 51:aa:f4:2c:61:7c:7d:26:9a:a8:41:21:c9:fd:f6: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B7:B3:85:BB:E3:18:A0:AC:39:57:AD:7A:EF:87:28:FD:64:36:A9 X509v3 Authority Key Identifier: keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:49:35:a3:fd:85:99:cb:cc:3a:b4:c9:ce:07:23:21:a1:b8: 57:22:bc:7d:bd:45:33:86:35:2b:a8:39:7d:83:47:01:0e:5f: 5a:3e:22:e5:15:6e:04:46:6e:a6:62:12:37:a5:6c:31:7e:29: 72:49:84:a7:8b:e2:e7:d8:fd:43:65:23:5e:9f:b2:84:39:9f: f9:b0:0e:3e:41:40:94:53:b1:62:f5:e4:d6:fb:35:48:ba:23: 02:a1:94:0a:19:9b:04:4c:20:fb:00:49:21:f8:38:00:62:a3: 2e:8c:03:61:27:c5:21:59:58:37:1d:46:08:08:c8:90:f0:02: ad:45:e2:f4:b6:8b:e0:83:dd:b9:6c:c8:94:0d:3f:d5:c1:36: bc:ea:4c:62:6f:0c:f7:8e:e1:a5:96:78:a7:41:62:14:9c:e5: 58:59:c6:ca:da:89:95:b9:ee:d1:a9:1f:7f:36:48:82:1d:e4: dc:b8:90:61:03:3d:49:1f:8f:13:b0:93:45:c6:42:43:f7:5f: 79:7b:c6:ce:4f:67:0f:c0:8c:09:0a:63:b7:b5:54:14:ec:27: 0b:ef:3f:c5:fa:fd:b4:eb:64:b9:f5:4c:a9:11:b3:73:83:30: ad:ae:80:df:60:b5:2f:98:13:12:54:fb:2b:1a:df:ff:97:a9: 4f:9d:98:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcE7Sntty8vaa59l+5XWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZjY1MTc5YTg1NWJiMGE2ZGRlNTY2MjE2MmIyYjViYTk3 NDg3MTAwHhcNMjUxMjA2MTkwMDQ4WhcNMjUxMjA3MTkwMDQ4WjAzMTEwLwYDVQQD EygwYmI3YjM4NWJiZTMxOGEwYWMzOTU3YWQ3YWVmODcyOGZkNjQzNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry2ND9ug2QX2VFGRpntvUS+W7uAh QME4HsYqM/81W0hKwqkkb7KJit38VnAc7tF6106bE7uCVJ20/eDQXao+n5Ze4nR7 Vg8tIa2c+KDWcDkoWwn2LAyJq1/NQSmnj1xedvrEAxigm8EP/3C8HWuGMlyDc2FF WYF29GJrhHP+B77CEBlreowRD1OUVlcPzVX1maJRxOmRf+r5pIzUhQjl35b9JJfT iDUtVWQvZLJ/C7cKoVpZJEUD/fbuR7FxdHoogBm54exP30WrM8TcNVESwj1V1SM2 6Gyz8+e1oMezXz06P57tUwJHwFZjtNZu+C5RqvQsYXx9JpqoQSHJ/fZuAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu3s4W74xigrDlXrXrvhyj9ZDapMB8GA1UdIwQY MBaAFBP2UXmoVbsKbd5WYhYrK1updIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV9aUmVhaFZ1d3B0M2xaaUZpc3JXNmwwaHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTM4OTItZWE4OC00MDU4LWI5OWYt MjFmZGZhMzYwN2M5LzEvRV9aUmVhaFZ1d3B0M2xaaUZpc3JXNmwwaHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81ZTM4OTItZWE4OC00MDU4LWI5OWYtMjFmZGZhMzYwN2M5 LzEvRV9aUmVhaFZ1d3B0M2xaaUZpc3JXNmwwaHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0k1o/2F mcvMOrTJzgcjIaG4VyK8fb1FM4Y1K6g5fYNHAQ5fWj4i5RVuBEZupmISN6VsMX4p ckmEp4vi59j9Q2UjXp+yhDmf+bAOPkFAlFOxYvXk1vs1SLojAqGUChmbBEwg+wBJ Ifg4AGKjLowDYSfFIVlYNx1GCAjIkPACrUXi9LaL4IPduWzIlA0/1cE2vOpMYm8M 947hpZZ4p0FiFJzlWFnGytqJlbnu0akffzZIgh3k3LiQYQM9SR+PE7CTRcZCQ/df eXvGzk9nD8CMCQpjt7VUFOwnC+8/xfr9tOtkufVMqRGzc4Mwra6A32C1L5gTElT7 Kxrf/5epT52YqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:20:05 2025 by rpki-client