This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json) Hash identifier: KKu4npqgapXLw8sBaLA0ZY2cPyJF/poSrCIZ0Psn+Jo= Subject key identifier: 13:32:C0:49:BE:8D:93:30:51:EB:23:93:69:1C:9C:67:21:11:E8:6A Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Certificate serial: 019AF50B8B44E8F39276AE16A74E4F90A10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft Manifest number: 14A3 Signing time: Sat 06 Dec 2025 19:02:45 +0000 Manifest this update: Sat 06 Dec 2025 19:02:45 +0000 Manifest next update: Sun 07 Dec 2025 19:02:45 +0000 Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=) 2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: 1MRgs01TvVAi8JnXVUmQoVD2ElNQ4nBe2i/wO+EbDKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:8b:44:e8:f3:92:76:ae:16:a7:4e:4f:90:a1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Validity Not Before: Dec 6 19:02:45 2025 GMT Not After : Dec 7 19:02:45 2025 GMT Subject: CN=1332c049be8d933051eb2393691c9c672111e86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:ff:a9:1e:ed:cb:f9:ec:8d:ab:01:bf:e8: 8f:ce:64:c5:46:d5:6f:16:3e:a3:dd:fd:1f:e1:e6: e4:53:42:b8:d1:24:94:9b:58:5e:55:8f:39:e0:52: ba:ab:8d:55:54:ba:77:d9:96:72:c7:42:9d:eb:35: 17:e9:89:1f:ec:b7:58:e2:c3:a2:c0:1a:fa:c2:5b: 6c:c6:34:cf:8d:31:1c:ea:00:49:71:92:b4:4b:59: 7e:f9:eb:4b:56:e3:18:e4:81:51:a9:e6:99:de:b1: d7:4c:80:10:8c:20:8f:18:77:75:84:da:26:b0:39: df:53:d8:73:cb:3a:6d:a2:f7:54:f1:b1:c6:ca:a6: 11:bb:5e:2f:40:a2:97:2b:c9:7d:49:45:7a:2e:93: fe:a8:cb:19:45:33:ca:b0:7c:0a:e3:3c:31:81:a7: ef:b2:f9:d0:46:27:eb:8f:29:c0:b7:38:35:73:ee: 88:49:95:e0:f3:66:e7:df:d1:88:4d:37:46:7c:1b: 55:53:4a:d3:94:85:3c:43:86:c2:73:e8:f4:36:8a: 4a:c4:1f:8a:a7:2b:86:85:e3:c0:0d:09:f8:e5:2e: 8e:b0:36:9b:fc:70:a7:d2:2a:60:19:77:16:17:34: 66:b8:09:27:0f:84:72:7f:f2:3d:a6:d5:6f:f9:ad: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:C0:49:BE:8D:93:30:51:EB:23:93:69:1C:9C:67:21:11:E8:6A X509v3 Authority Key Identifier: keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3a:71:90:74:cc:92:3f:88:00:5f:ce:3b:bf:df:cd:24:f7: 55:9b:b5:dd:28:3e:13:e5:5f:ea:0e:b0:41:b9:ce:fa:5c:40: d9:36:42:36:39:56:a5:c8:f4:43:10:ad:b2:b4:2c:26:06:8e: 0a:ae:b9:bc:3e:62:5b:a9:9d:40:08:73:2f:63:76:39:f1:1d: 5a:96:e8:e6:0b:8a:e1:9b:5f:64:01:30:8f:1b:77:6d:c5:38: 94:f5:5d:72:1a:c1:8f:7e:eb:9c:28:92:fc:a9:a4:c0:6c:59: b5:bc:1a:45:5d:54:ac:33:53:9b:33:61:6d:6c:35:4c:8b:e8: 2a:f0:3b:5a:fe:f6:95:a2:92:d8:7b:f5:f6:a8:b3:88:f3:fb: f4:05:02:ca:45:55:28:fe:01:5b:07:4e:31:44:ca:95:a9:85: 2b:1d:ff:c1:4c:84:0f:b1:e2:86:1d:3b:dc:7a:ba:4b:62:fd: 3b:41:00:7a:73:ab:2d:c4:aa:1f:e8:5a:25:62:c3:49:b1:cc: ad:d6:a6:64:01:e8:a9:26:c6:91:71:00:a5:32:08:5e:94:a9: e1:89:02:a0:62:3c:06:de:fa:d0:b5:e1:70:6d:e4:41:83:12: e4:ea:f9:b3:d6:b9:e8:61:4c:61:03:6c:75:4a:30:26:d1:e6: 9a:e3:83:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4tE6POSdq4Wp05PkKENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx YjRhMjAwHhcNMjUxMjA2MTkwMjQ1WhcNMjUxMjA3MTkwMjQ1WjAzMTEwLwYDVQQD EygxMzMyYzA0OWJlOGQ5MzMwNTFlYjIzOTM2OTFjOWM2NzIxMTFlODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGH/qR7ty/nsjasBv+iPzmTFRtVv Fj6j3f0f4ebkU0K40SSUm1heVY854FK6q41VVLp32ZZyx0Kd6zUX6Ykf7LdY4sOi wBr6wltsxjTPjTEc6gBJcZK0S1l++etLVuMY5IFRqeaZ3rHXTIAQjCCPGHd1hNom sDnfU9hzyzptovdU8bHGyqYRu14vQKKXK8l9SUV6LpP+qMsZRTPKsHwK4zwxgafv svnQRifrjynAtzg1c+6ISZXg82bn39GITTdGfBtVU0rTlIU8Q4bCc+j0NopKxB+K pyuGhePADQn45S6OsDab/HCn0ipgGXcWFzRmuAknD4Ryf/I9ptVv+a18xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMywEm+jZMwUesjk2kcnGchEehqMB8GA1UdIwQY MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjpxkHTM kj+IAF/OO7/fzST3VZu13Sg+E+Vf6g6wQbnO+lxA2TZCNjlWpcj0QxCtsrQsJgaO Cq65vD5iW6mdQAhzL2N2OfEdWpbo5guK4ZtfZAEwjxt3bcU4lPVdchrBj37rnCiS /KmkwGxZtbwaRV1UrDNTmzNhbWw1TIvoKvA7Wv72laKS2Hv19qiziPP79AUCykVV KP4BWwdOMUTKlamFKx3/wUyED7Hihh073Hq6S2L9O0EAenOrLcSqH+haJWLDSbHM rdamZAHoqSbGkXEApTIIXpSp4YkCoGI8Bt760LXhcG3kQYMS5Or5s9a56GFMYQNs dUowJtHmmuODrA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:25 2025 by rpki-client