This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft File: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json) Hash identifier: w0WqLpk2utuuuY0Wq1SKCgtm8PhO8tiOjFmYS7+QryA= Subject key identifier: 4B:4B:0A:81:31:E2:DA:2C:B0:DE:28:D2:C8:14:DD:6B:D2:18:FA:0B Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD Certificate issuer: /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd Certificate serial: 019AF68A6367680D8620CC1EE1B2943D3341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft Manifest number: 0499 Signing time: Sun 07 Dec 2025 02:00:55 +0000 Manifest this update: Sun 07 Dec 2025 02:00:55 +0000 Manifest next update: Mon 08 Dec 2025 02:00:55 +0000 Files and hashes: 1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: VHbg1S0UIi7v//Wq7Fen8/81CzIordvlWAdRT8sbJBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:63:67:68:0d:86:20:cc:1e:e1:b2:94:3d:33:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd Validity Not Before: Dec 7 02:00:55 2025 GMT Not After : Dec 8 02:00:55 2025 GMT Subject: CN=4b4b0a8131e2da2cb0de28d2c814dd6bd218fa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:eb:43:dd:ab:c4:75:de:9d:16:1c:aa:3a: ee:d4:dd:32:58:1b:1e:e3:ce:0b:97:f7:63:80:15: 18:dd:66:b4:2f:e1:d4:86:85:e6:8b:62:3b:f9:11: bc:2d:40:6b:47:c8:38:aa:eb:58:a4:0d:6d:9e:7b: 28:df:e0:fc:1d:ae:c1:7e:4c:b1:b7:fa:e9:7d:e1: 05:52:2c:c3:88:6e:0e:93:00:01:ad:f1:62:e2:b3: 4e:58:6d:7f:e2:8e:05:a1:1d:36:6c:40:95:7d:de: b8:ab:92:97:a5:90:ef:1e:85:3c:43:f4:f5:32:ca: cf:ac:ff:fb:3e:0b:05:ba:dc:b1:9b:b4:0e:8f:eb: 39:01:3d:fd:ba:f8:fb:91:9d:e0:c0:6d:d0:fa:9c: e5:c3:3a:76:c6:75:13:a4:f9:ba:40:d5:26:03:83: 10:a0:80:5e:11:44:1b:59:9d:84:c2:ef:c1:a3:82: 5d:07:02:61:c2:82:3c:1a:a3:32:3f:9e:48:9e:7e: 1b:12:7b:54:61:2e:4b:c5:d5:dd:fe:7b:fe:01:d4: 8f:a1:c4:57:19:eb:de:3c:eb:84:36:ac:cc:8c:e8: 00:e8:ad:5e:24:b7:54:10:4a:b1:89:52:fc:f4:0c: f0:1f:f6:8c:21:0e:1f:9d:84:b8:07:48:ce:6b:eb: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4B:0A:81:31:E2:DA:2C:B0:DE:28:D2:C8:14:DD:6B:D2:18:FA:0B X509v3 Authority Key Identifier: keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:55:d4:f2:61:f3:3c:3f:f7:b1:89:b8:4c:0b:f9:dc:97:58: bb:84:7f:25:80:eb:f1:96:a1:21:8d:a5:7d:0d:53:30:48:4d: 06:1d:84:b0:0d:c2:b7:8b:83:29:12:f8:a2:6e:a7:fd:f2:53: e3:65:a8:40:4c:06:6c:a8:04:c3:80:ef:7b:b9:35:f6:40:d3: 35:99:3b:05:81:4f:13:3b:2c:28:2d:f9:be:87:df:32:6f:e1: ba:3d:a3:b7:03:a1:b3:f1:4c:80:91:dc:19:86:5d:95:c6:1b: 08:76:e7:20:a4:2a:5e:c3:dc:7b:1f:55:cf:ae:cb:22:c5:17: db:43:61:9a:63:28:44:51:bc:7f:ef:ac:25:1e:7a:93:04:3c: db:e9:e3:fa:da:98:a1:9d:de:76:17:d6:ce:6b:ab:c1:6e:62: 10:4f:a6:6d:44:18:23:3a:bf:2b:83:18:71:0c:6a:63:ea:5d: 4c:d6:0c:e8:be:9a:f7:7f:28:ca:73:0c:50:83:11:2e:7a:f6: 16:73:73:59:9c:8d:f7:51:32:92:60:86:8b:31:eb:a6:61:c3: d5:d4:ac:0f:95:a5:6f:27:d3:00:07:b7:55:e8:7f:d9:a6:ef: 54:7b:7e:3e:fd:60:95:4c:ab:40:53:53:ae:db:86:51:a5:71: 2f:1c:e8:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2imNnaA2GIMwe4bKUPTNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTExNDRlZGM4YzdiYjJkZGU1MmJlYzFlMmZkOGU3YWYx M2IxZGQwHhcNMjUxMjA3MDIwMDU1WhcNMjUxMjA4MDIwMDU1WjAzMTEwLwYDVQQD Eyg0YjRiMGE4MTMxZTJkYTJjYjBkZTI4ZDJjODE0ZGQ2YmQyMThmYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVjrQ92rxHXenRYcqjru1N0yWBse 484Ll/djgBUY3Wa0L+HUhoXmi2I7+RG8LUBrR8g4qutYpA1tnnso3+D8Ha7Bfkyx t/rpfeEFUizDiG4OkwABrfFi4rNOWG1/4o4FoR02bECVfd64q5KXpZDvHoU8Q/T1 MsrPrP/7PgsFutyxm7QOj+s5AT39uvj7kZ3gwG3Q+pzlwzp2xnUTpPm6QNUmA4MQ oIBeEUQbWZ2Ewu/Bo4JdBwJhwoI8GqMyP55Inn4bEntUYS5LxdXd/nv+AdSPocRX GevePOuENqzMjOgA6K1eJLdUEEqxiVL89AzwH/aMIQ4fnYS4B0jOa+swewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtLCoEx4tossN4o0sgU3WvSGPoLMB8GA1UdIwQY MBaAFGThFE7cjHuy3eUr7B4v2OevE7HdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYt ODVkZWFhYjUwOTI3LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82ZDA1ZTItOGQ2OC00Yjc5LThjMmYtODVkZWFhYjUwOTI3 LzEvWk9FVVR0eU1lN0xkNVN2c0hpX1k1NjhUc2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1XU8mHz PD/3sYm4TAv53JdYu4R/JYDr8ZahIY2lfQ1TMEhNBh2EsA3Ct4uDKRL4om6n/fJT 42WoQEwGbKgEw4Dve7k19kDTNZk7BYFPEzssKC35voffMm/huj2jtwOhs/FMgJHc GYZdlcYbCHbnIKQqXsPcex9Vz67LIsUX20NhmmMoRFG8f++sJR56kwQ82+nj+tqY oZ3edhfWzmurwW5iEE+mbUQYIzq/K4MYcQxqY+pdTNYM6L6a938oynMMUIMRLnr2 FnNzWZyN91EykmCGizHrpmHD1dSsD5WlbyfTAAe3Veh/2abvVHt+Pv1glUyrQFNT rtuGUaVxLxzouQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:51 2025 by rpki-client