This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json) Hash identifier: D1COFIE8N2SYAQaCy3EVDDeCyFbFj1OtcU/Is8o4XMA= Subject key identifier: A5:D1:B8:EF:FC:A3:B6:7D:25:DC:29:EC:96:DC:78:EA:2C:4C:59:18 Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Certificate serial: 019AF54129A5AFC58FAC6EF3D3A4B0845124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 20:01:19 +0000 Manifest this update: Sat 06 Dec 2025 20:01:19 +0000 Manifest next update: Sun 07 Dec 2025 20:01:19 +0000 Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=) 2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=) 3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: UdcUU+MsoMCWOO5oi4n3wayc6mRNVZKk79Qvt52GHcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:29:a5:af:c5:8f:ac:6e:f3:d3:a4:b0:84:51:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Validity Not Before: Dec 6 20:01:19 2025 GMT Not After : Dec 7 20:01:19 2025 GMT Subject: CN=a5d1b8effca3b67d25dc29ec96dc78ea2c4c5918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:b3:31:7e:86:38:c5:b0:66:44:eb:44:dd: 81:d0:8a:b3:19:38:7a:8f:ae:e9:0c:5a:57:b6:a4: 1e:ff:f3:ad:0c:d2:77:5c:a9:09:cc:9b:ac:e0:5c: e8:19:d2:60:dc:d9:b0:20:84:b3:8f:38:20:bd:29: 6b:90:60:cd:aa:39:e9:ae:e7:d9:4e:38:c7:73:78: d6:71:d5:99:5d:4b:11:1d:17:33:81:30:97:d3:05: 62:f2:ff:f6:c0:45:be:52:a0:2b:33:67:98:33:dd: 7d:fd:e4:da:d5:31:cf:03:32:ae:74:bd:a4:19:12: 03:16:94:5d:20:6c:a8:46:b4:ef:5e:67:dd:a1:fc: b2:dd:7f:bc:36:06:49:2f:e2:00:09:76:c8:57:13: 24:d2:a4:c8:69:29:58:09:b5:2d:22:07:05:ca:96: ed:a1:61:15:23:04:53:d2:4e:a2:19:40:5e:4a:8f: b4:ff:13:f1:4b:11:6a:70:a3:12:06:4b:b3:fa:0c: 9e:ed:8e:9e:79:b8:3a:9d:39:5c:56:de:a2:63:13: 93:e2:17:17:35:c0:64:32:c9:4e:9b:ce:7e:c0:f5: d5:5c:ec:a2:58:fb:78:a5:a3:d5:d4:59:ff:b6:39: d7:cf:5f:e7:a0:6c:1a:c8:a8:bc:d1:0e:26:7d:e7: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D1:B8:EF:FC:A3:B6:7D:25:DC:29:EC:96:DC:78:EA:2C:4C:59:18 X509v3 Authority Key Identifier: keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:be:00:1d:f3:46:f7:94:fd:97:17:7a:57:55:2e:fd:85:8f: 53:a6:21:6d:12:5e:99:f6:2c:05:ee:64:1d:5f:9c:04:5e:8e: 78:3c:9c:da:7e:18:8b:c8:9c:a7:6a:74:5e:c4:51:90:05:9d: 8c:fe:5a:f9:44:89:7d:9c:3f:90:28:13:d8:24:b0:67:67:93: aa:96:2f:65:9e:4d:b6:f7:c1:27:47:41:bd:8b:d9:e8:13:7a: 77:79:0c:cc:26:d5:9f:1b:0a:92:0b:94:e3:47:77:84:4a:0e: d3:2a:74:bd:70:ac:2c:de:cd:d6:b8:95:c7:42:b1:cd:56:b4: d5:62:6c:19:54:42:f8:8c:3f:2c:84:d0:50:8d:3e:3d:59:33: 1c:98:28:9e:c4:66:1a:ac:d9:fa:a3:26:ab:85:55:90:c3:2e: 51:18:11:3b:61:db:8f:a5:b3:0c:4c:4f:c8:94:03:c3:0f:4f: 90:af:0d:e6:de:d9:32:04:1e:f1:74:24:89:74:d8:68:9f:08: 91:41:dc:9c:5e:dd:05:3e:bd:a3:dc:04:06:89:7f:c3:ad:49: 41:6d:4e:bb:df:82:2f:f4:a1:05:48:cb:65:70:7b:f8:bb:54: 2d:b8:ae:63:f7:f8:54:2e:4d:9c:ad:24:49:58:a2:56:97:c6: 91:a0:73:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSmlr8WPrG7z06SwhFEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDZiZmZmOGI5MGUzNzQ4NTU1YmExNDQ3ZmQ0ZWRlY2Mz NDBhMTMwHhcNMjUxMjA2MjAwMTE5WhcNMjUxMjA3MjAwMTE5WjAzMTEwLwYDVQQD EyhhNWQxYjhlZmZjYTNiNjdkMjVkYzI5ZWM5NmRjNzhlYTJjNGM1OTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLWzMX6GOMWwZkTrRN2B0IqzGTh6 j67pDFpXtqQe//OtDNJ3XKkJzJus4FzoGdJg3NmwIISzjzggvSlrkGDNqjnprufZ TjjHc3jWcdWZXUsRHRczgTCX0wVi8v/2wEW+UqArM2eYM919/eTa1THPAzKudL2k GRIDFpRdIGyoRrTvXmfdofyy3X+8NgZJL+IACXbIVxMk0qTIaSlYCbUtIgcFypbt oWEVIwRT0k6iGUBeSo+0/xPxSxFqcKMSBkuz+gye7Y6eebg6nTlcVt6iYxOT4hcX NcBkMslOm85+wPXVXOyiWPt4paPV1Fn/tjnXz1/noGwayKi80Q4mfefDTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXRuO/8o7Z9Jdwp7JbceOosTFkYMB8GA1UdIwQY MBaAFMxGv/+LkON0hVW6FEf9Tt7MNAoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt NGRjOWJmNjQyZGQyLzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy LzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACb4AHfNG 95T9lxd6V1Uu/YWPU6YhbRJemfYsBe5kHV+cBF6OeDyc2n4Yi8icp2p0XsRRkAWd jP5a+USJfZw/kCgT2CSwZ2eTqpYvZZ5NtvfBJ0dBvYvZ6BN6d3kMzCbVnxsKkguU 40d3hEoO0yp0vXCsLN7N1riVx0KxzVa01WJsGVRC+Iw/LITQUI0+PVkzHJgonsRm GqzZ+qMmq4VVkMMuURgRO2Hbj6WzDExPyJQDww9PkK8N5t7ZMgQe8XQkiXTYaJ8I kUHcnF7dBT69o9wEBol/w61JQW1Ou9+CL/ShBUjLZXB7+LtULbiuY/f4VC5NnK0k SViiVpfGkaBzlQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:15:03 2025 by rpki-client