This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft File: ZePmyEfHm7BarCTUF4F41vfARIU.mft (raw, json) Hash identifier: bmMO/9Ng6yUtSdVi1YFw99E7q/iHY7UBXDTJi+3l4nM= Subject key identifier: EC:F3:F4:D5:79:D5:03:B1:EA:26:7D:03:FF:56:E8:E3:9F:C3:7E:5B Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85 Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485 Certificate serial: 019AF087F20692A4CAEA98B201547AD27EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft Manifest number: 03FE Signing time: Fri 05 Dec 2025 22:00:32 +0000 Manifest this update: Fri 05 Dec 2025 22:00:32 +0000 Manifest next update: Sat 06 Dec 2025 22:00:32 +0000 Files and hashes: 1: ZePmyEfHm7BarCTUF4F41vfARIU.crl (hash: nbNa762lbMIptfySIGNowoGcPM4Cpq6UixoW6q5ftDU=) 2: _G6b2YObaO8vXwxmRAdxtdM520E.roa (hash: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f2:06:92:a4:ca:ea:98:b2:01:54:7a:d2:7e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485 Validity Not Before: Dec 5 22:00:32 2025 GMT Not After : Dec 6 22:00:32 2025 GMT Subject: CN=ecf3f4d579d503b1ea267d03ff56e8e39fc37e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:bf:72:b5:11:f1:4d:cc:08:a2:c6:1a:f7: 6e:e1:0f:9f:e6:96:3a:65:ce:fe:d0:e3:0b:85:92: 83:fd:f5:5f:2d:e7:9f:e9:ed:28:86:e0:94:7c:3e: 80:91:1b:03:a8:8b:9c:c6:86:c1:52:ff:5b:c2:c5: 4a:cf:ee:9d:a9:9f:38:39:9f:8c:4f:87:0f:99:a2: a5:ef:59:24:a9:ae:8a:0c:ee:2b:d5:74:88:81:f3: 71:b7:ea:70:b9:a4:8f:98:c3:07:42:83:85:71:3a: 18:be:3f:98:13:18:d0:9a:90:f9:46:d0:08:b7:1d: 50:3c:f6:61:24:70:53:a4:b3:7d:2c:35:e7:1d:eb: 63:2f:23:87:89:16:a1:61:73:be:c6:b9:9c:82:8c: 83:72:c5:c5:66:69:e4:3f:ea:15:4c:98:68:10:04: b9:61:38:94:46:24:52:35:4d:c6:87:fe:d0:ad:32: 25:26:f3:fa:43:74:bd:0a:ac:5f:18:d9:25:93:36: 4e:6d:8a:0c:fa:f5:82:cf:82:66:c2:7e:16:9a:7e: 5d:64:cb:8b:3c:40:46:18:3a:82:50:e0:b5:17:56: 4d:05:1e:35:07:03:ae:53:ce:8a:a4:80:e7:09:c3: 54:a7:2e:08:f7:4b:75:a4:5f:87:a3:35:69:c3:54: 53:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F3:F4:D5:79:D5:03:B1:EA:26:7D:03:FF:56:E8:E3:9F:C3:7E:5B X509v3 Authority Key Identifier: keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6e:0a:f8:1f:63:54:97:0a:20:3a:04:f4:35:87:d3:96:af: c3:29:00:44:36:9b:47:ec:30:a0:8a:e2:f4:c9:74:81:14:cd: 13:1d:46:01:9c:76:93:70:ef:0a:81:27:2d:13:ef:d7:0a:38: 60:1a:08:7f:fa:bf:1c:3c:4f:ed:61:a4:15:dd:0e:ae:fe:77: 64:0a:a4:d8:06:76:53:2f:e0:c4:2b:00:37:3c:b8:44:12:37: 18:47:28:0b:b3:5f:60:91:62:c0:e9:d9:b4:c6:8b:24:d0:18: c2:80:d6:b0:1c:89:c4:3f:46:6a:52:82:16:39:c6:32:94:81: 8d:f6:40:ba:5f:93:1e:5b:31:53:38:27:10:79:9d:c2:b8:2a: e8:6b:b9:23:6f:f8:5b:30:1a:82:9b:09:be:7a:83:2b:17:f1: b1:11:5f:49:d6:79:1c:05:b4:a1:e2:c9:ba:a4:89:5b:6a:91: 34:81:a3:df:17:9b:66:ee:bc:c4:09:e0:30:78:2a:a1:84:e0: 20:d9:e4:71:d7:b3:7d:f6:f1:c8:ff:3d:81:46:6b:b9:44:93: aa:e6:16:d0:12:86:4c:58:98:83:09:3d:86:0b:b7:d6:6d:eb: f5:08:2e:4e:0a:9c:26:21:58:95:a2:c6:c8:e8:cb:a4:88:44: 82:30:ff:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/IGkqTK6piyAVR60n7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZTNlNmM4NDdjNzliYjA1YWFjMjRkNDE3ODE3OGQ2Zjdj MDQ0ODUwHhcNMjUxMjA1MjIwMDMyWhcNMjUxMjA2MjIwMDMyWjAzMTEwLwYDVQQD EyhlY2YzZjRkNTc5ZDUwM2IxZWEyNjdkMDNmZjU2ZThlMzlmYzM3ZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ya/crUR8U3MCKLGGvdu4Q+f5pY6 Zc7+0OMLhZKD/fVfLeef6e0ohuCUfD6AkRsDqIucxobBUv9bwsVKz+6dqZ84OZ+M T4cPmaKl71kkqa6KDO4r1XSIgfNxt+pwuaSPmMMHQoOFcToYvj+YExjQmpD5RtAI tx1QPPZhJHBTpLN9LDXnHetjLyOHiRahYXO+xrmcgoyDcsXFZmnkP+oVTJhoEAS5 YTiURiRSNU3Gh/7QrTIlJvP6Q3S9CqxfGNklkzZObYoM+vWCz4Jmwn4Wmn5dZMuL PEBGGDqCUOC1F1ZNBR41BwOuU86KpIDnCcNUpy4I90t1pF+HozVpw1RTPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzz9NV51QOx6iZ9A/9W6OOfw35bMB8GA1UdIwQY MBaAFGXj5shHx5uwWqwk1BeBeNb3wESFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVQbXlFZkhtN0JhckNUVUY0RjQxdmZBUklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hMzgxMDAtYzc2MC00OGI4LThiM2Yt MmY3YmY3MDRmNzRhLzEvWmVQbXlFZkhtN0JhckNUVUY0RjQxdmZBUklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hMzgxMDAtYzc2MC00OGI4LThiM2YtMmY3YmY3MDRmNzRh LzEvWmVQbXlFZkhtN0JhckNUVUY0RjQxdmZBUklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAam4K+B9j VJcKIDoE9DWH05avwykARDabR+wwoIri9Ml0gRTNEx1GAZx2k3DvCoEnLRPv1wo4 YBoIf/q/HDxP7WGkFd0Orv53ZAqk2AZ2Uy/gxCsANzy4RBI3GEcoC7NfYJFiwOnZ tMaLJNAYwoDWsByJxD9GalKCFjnGMpSBjfZAul+THlsxUzgnEHmdwrgq6Gu5I2/4 WzAagpsJvnqDKxfxsRFfSdZ5HAW0oeLJuqSJW2qRNIGj3xebZu68xAngMHgqoYTg INnkcdezffbxyP89gUZruUSTquYW0BKGTFiYgwk9hgu31m3r9QguTgqcJiFYlaLG yOjLpIhEgjD/Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:09 2025 by rpki-client