This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json) Hash identifier: iDYBVI8XxDuurILchbm/VnJqfWI469O0y775ehnXP7o= Subject key identifier: 6E:02:D3:5E:40:A9:41:D7:1F:39:2F:85:51:6A:9C:0D:BB:30:51:CD Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76 Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876 Certificate serial: 019AF27715DA1F8F715C7B1E2659452A4728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft Manifest number: 0D5D Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: Y/LisDSXtVbJkc8FvA6j3Jquvt4u0ESgcz3XRgCbHMs=) 2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:15:da:1f:8f:71:5c:7b:1e:26:59:45:2a:47:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876 Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=6e02d35e40a941d71f392f85516a9c0dbb3051cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:4c:b3:a9:a8:9c:e9:52:93:14:7d:d4:16: 8b:5d:57:ce:83:3d:f7:2d:fc:fb:c1:11:5c:80:42: 48:2a:f0:95:16:3a:ed:f7:89:7a:ce:2d:31:a7:69: 4c:e2:88:4a:3f:97:35:68:0f:a3:e5:f1:7c:7a:ae: 5b:44:ab:fd:48:66:4b:ec:77:37:98:91:a0:94:99: 15:df:72:05:0d:65:da:24:ab:c4:52:08:c8:61:18: 8d:24:93:78:75:6d:d8:dc:a1:56:bd:f0:7d:59:c5: c0:5c:21:08:87:ed:9a:d0:a2:17:cf:de:64:65:dd: b4:fa:e3:d7:e0:d1:2b:be:69:18:cf:ca:fa:83:b7: fc:d7:68:eb:e4:de:ee:53:94:a9:9f:eb:f4:5e:6c: ef:ce:80:03:0a:83:02:f4:f3:7b:55:52:ed:35:9a: 61:ba:86:86:74:a9:80:9e:1b:53:3e:cc:b9:4a:21: 69:15:5f:9e:1b:bf:a9:49:12:ba:a1:a8:2d:68:c6: 2c:5f:6f:21:5f:a5:72:ad:ef:9e:9c:bd:ca:76:d6: be:72:56:0f:62:7c:e8:36:38:0e:23:72:bb:ca:84: 86:19:b8:21:bc:b8:bd:f7:a6:cf:73:71:e4:32:8e: 57:6d:02:1d:a6:60:9f:b1:81:47:7a:b0:1d:6f:47: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:02:D3:5E:40:A9:41:D7:1F:39:2F:85:51:6A:9C:0D:BB:30:51:CD X509v3 Authority Key Identifier: keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:05:7a:20:89:59:64:67:c7:d8:e4:8f:a9:7a:5c:7c:9a:52: 7a:4a:57:8b:e2:d2:80:1e:19:4a:99:88:05:86:66:3e:f6:05: 3c:55:74:cd:05:8a:a1:7d:6e:9d:76:9b:0b:28:28:5e:77:63: cf:0c:c9:68:de:c1:80:b5:99:0b:d1:59:cd:27:3c:cb:25:90: 11:74:3a:03:52:7c:6c:b6:3f:d8:21:1a:e0:76:29:13:14:12: 54:3e:85:c7:d9:bc:cd:c0:dd:c9:3d:d2:49:c3:24:97:12:db: 75:ab:e2:18:cf:6e:87:f9:ed:94:64:fb:60:2b:c7:86:07:e3: 62:ac:92:6b:97:92:15:22:78:ae:42:58:c7:2a:3a:67:79:10: 96:a3:dc:48:e7:87:50:9c:96:ee:d4:21:75:12:56:f6:0a:ff: c0:14:6f:f0:96:19:51:07:fc:18:bf:98:24:91:86:ba:c4:88: de:f2:45:6a:3c:6a:e7:0d:c8:91:08:71:02:ea:6a:a1:5d:02: 79:3e:45:e0:03:53:fd:b8:0b:8f:28:38:a1:7f:eb:ee:a9:e7: d8:1b:98:77:11:02:3e:74:4c:61:8e:f9:34:d3:fb:5e:2c:e9: 1a:a4:75:3d:f5:07:29:05:85:3a:2e:20:48:50:cc:be:10:d6: ca:8f:f1:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxXaH49xXHseJllFKkcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz N2Y4NzYwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD Eyg2ZTAyZDM1ZTQwYTk0MWQ3MWYzOTJmODU1MTZhOWMwZGJiMzA1MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQFMs6monOlSkxR91BaLXVfOgz33 Lfz7wRFcgEJIKvCVFjrt94l6zi0xp2lM4ohKP5c1aA+j5fF8eq5bRKv9SGZL7Hc3 mJGglJkV33IFDWXaJKvEUgjIYRiNJJN4dW3Y3KFWvfB9WcXAXCEIh+2a0KIXz95k Zd20+uPX4NErvmkYz8r6g7f812jr5N7uU5Spn+v0XmzvzoADCoMC9PN7VVLtNZph uoaGdKmAnhtTPsy5SiFpFV+eG7+pSRK6oagtaMYsX28hX6Vyre+enL3Kdta+clYP YnzoNjgOI3K7yoSGGbghvLi996bPc3HkMo5XbQIdpmCfsYFHerAdb0ezJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4C015AqUHXHzkvhVFqnA27MFHNMB8GA1UdIwQY MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt OGY3NmJmNzZjZjQ2LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjItOGY3NmJmNzZjZjQ2 LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgV6IIlZ ZGfH2OSPqXpcfJpSekpXi+LSgB4ZSpmIBYZmPvYFPFV0zQWKoX1unXabCygoXndj zwzJaN7BgLWZC9FZzSc8yyWQEXQ6A1J8bLY/2CEa4HYpExQSVD6Fx9m8zcDdyT3S ScMklxLbdaviGM9uh/ntlGT7YCvHhgfjYqySa5eSFSJ4rkJYxyo6Z3kQlqPcSOeH UJyW7tQhdRJW9gr/wBRv8JYZUQf8GL+YJJGGusSI3vJFajxq5w3IkQhxAupqoV0C eT5F4ANT/bgLjyg4oX/r7qnn2BuYdxECPnRMYY75NNP7XizpGqR1PfUHKQWFOi4g SFDMvhDWyo/x+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:29 2025 by rpki-client