This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json) Hash identifier: rJ1Mi2UTwysd0ySJWlUuRPNc4JezA7Wx4HHcyYiVEEQ= Subject key identifier: F1:0B:AC:56:77:CC:41:9A:BC:0C:84:58:26:76:2B:C5:57:3B:E2:90 Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa Certificate serial: 019AF12F35B447FACB89ABFC1B65A87B42F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft Manifest number: 10B8 Signing time: Sat 06 Dec 2025 01:03:14 +0000 Manifest this update: Sat 06 Dec 2025 01:03:14 +0000 Manifest next update: Sun 07 Dec 2025 01:03:14 +0000 Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: Nl0tidcrt1xCtZFqTCvgXSgV7osP2mpPvHP8F1WtKzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:35:b4:47:fa:cb:89:ab:fc:1b:65:a8:7b:42:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa Validity Not Before: Dec 6 01:03:14 2025 GMT Not After : Dec 7 01:03:14 2025 GMT Subject: CN=f10bac5677cc419abc0c845826762bc5573be290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d0:3b:83:d5:7a:a9:35:c4:80:7d:92:ed:e0: ab:51:e7:cf:61:81:12:01:cf:a5:8a:a0:8f:20:22: 85:58:27:31:bf:4b:35:c9:7b:10:9f:bd:8d:3e:56: e4:43:14:94:25:c6:73:b0:19:d0:e9:dd:40:3d:77: f4:b6:79:61:1f:35:00:41:01:11:a5:77:78:35:fd: cf:0b:8f:39:2e:d5:68:04:6c:b1:b1:bf:6b:1e:72: e9:1d:84:65:2d:d7:1a:30:d9:e9:ed:ec:e2:c6:ef: 8a:b9:56:4a:03:ff:8c:92:4e:d5:fa:1c:ee:ab:0f: b0:fe:96:5f:b9:82:ec:69:50:49:37:54:47:48:9c: 06:9c:a7:76:1e:c2:c4:69:c8:d9:7a:d3:13:33:36: c1:78:d2:57:e8:f7:e4:dc:7b:cc:a8:2f:33:cd:dc: 28:e0:2e:77:6e:96:b6:33:42:aa:19:87:74:bd:03: dc:3b:38:4b:8b:28:e5:fc:57:9d:28:41:c2:6b:0e: 55:62:ec:c3:d0:6e:4e:f5:e1:fc:4b:d9:4b:d7:96: b3:2b:9f:39:dc:43:f3:5f:c2:9f:0b:0a:50:d0:76: 40:ad:75:f3:b8:8c:52:3a:55:a0:94:6a:84:69:ce: a5:07:ae:15:21:eb:65:32:3a:ec:92:ba:ec:13:6a: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0B:AC:56:77:CC:41:9A:BC:0C:84:58:26:76:2B:C5:57:3B:E2:90 X509v3 Authority Key Identifier: keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2a:18:9e:ad:4b:29:33:51:fc:ca:8f:18:15:69:d9:d2:85: c8:37:1f:fc:8d:91:e2:58:6e:d1:53:c9:01:1c:c1:57:6a:b6: 98:e2:cc:8d:7d:28:fb:a6:9b:aa:cb:c5:f8:01:69:8c:30:3b: 74:a6:3d:98:c8:07:22:ae:40:9d:91:d7:46:f4:e7:29:15:2c: 2a:48:1f:c6:25:9e:7e:d6:c0:9b:74:88:9a:7b:bb:0b:e2:5b: b2:d2:ca:26:0c:f2:5a:2d:d1:7e:6c:9a:a5:5b:b2:86:05:74: b2:f1:4a:6a:3b:ba:05:7c:d9:9d:a9:4b:e6:07:89:52:c5:cd: f4:2d:7d:39:b3:74:56:2f:96:9d:b8:10:d0:3b:7f:53:19:3c: 39:a8:b6:a1:3b:ca:3c:b0:e3:a5:ac:80:54:db:35:2f:10:2e: c0:cc:44:94:ad:90:bd:da:b9:92:bd:e1:d7:04:fb:0b:ba:5f: 84:38:41:8c:32:0d:b0:32:f0:bb:52:24:af:86:3c:f7:2d:1b: 06:ae:d8:ae:45:91:94:37:5f:4c:8f:54:4b:cf:7b:35:ab:51: 7d:5f:7b:19:2f:f1:d6:67:fa:9e:02:18:84:dd:25:14:f4:6e: 3e:0a:1f:dc:75:34:b5:b6:64:a3:35:2a:9e:e6:68:8e:d7:3b: e5:2c:53:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzW0R/rLiav8G2Woe0L5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZTIwMmMwMWE4MjkwZWU5NTMyNWQzYTRmMzdmZjQwZTk5 NjQ4ZmEwHhcNMjUxMjA2MDEwMzE0WhcNMjUxMjA3MDEwMzE0WjAzMTEwLwYDVQQD EyhmMTBiYWM1Njc3Y2M0MTlhYmMwYzg0NTgyNjc2MmJjNTU3M2JlMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tA7g9V6qTXEgH2S7eCrUefPYYES Ac+liqCPICKFWCcxv0s1yXsQn72NPlbkQxSUJcZzsBnQ6d1APXf0tnlhHzUAQQER pXd4Nf3PC485LtVoBGyxsb9rHnLpHYRlLdcaMNnp7ezixu+KuVZKA/+Mkk7V+hzu qw+w/pZfuYLsaVBJN1RHSJwGnKd2HsLEacjZetMTMzbBeNJX6Pfk3HvMqC8zzdwo 4C53bpa2M0KqGYd0vQPcOzhLiyjl/FedKEHCaw5VYuzD0G5O9eH8S9lL15azK585 3EPzX8KfCwpQ0HZArXXzuIxSOlWglGqEac6lB64VIetlMjrskrrsE2p3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPELrFZ3zEGavAyEWCZ2K8VXO+KQMB8GA1UdIwQY MBaAFM3iAsAagpDulTJdOk83/0Dplkj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYt OTQzNzgyYzc5ZDBjLzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYtOTQzNzgyYzc5ZDBj LzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyoYnq1L KTNR/MqPGBVp2dKFyDcf/I2R4lhu0VPJARzBV2q2mOLMjX0o+6abqsvF+AFpjDA7 dKY9mMgHIq5AnZHXRvTnKRUsKkgfxiWeftbAm3SImnu7C+JbstLKJgzyWi3Rfmya pVuyhgV0svFKaju6BXzZnalL5geJUsXN9C19ObN0Vi+WnbgQ0Dt/Uxk8Oai2oTvK PLDjpayAVNs1LxAuwMxElK2Qvdq5kr3h1wT7C7pfhDhBjDINsDLwu1Ikr4Y89y0b Bq7YrkWRlDdfTI9US897NatRfV97GS/x1mf6ngIYhN0lFPRuPgof3HU0tbZkozUq nuZojtc75SxTmg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:12 2025 by rpki-client