This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json) Hash identifier: vsTzWR3j8RP8O5/P3GIAvFo/QxYrqF1cYTmZ937qUUo= Subject key identifier: A9:40:3C:5D:A8:4C:08:DB:A5:C8:61:E7:4B:17:71:30:9A:F7:8B:91 Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32 Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432 Certificate serial: 019AF2097A4D84A450859A4A99220F5710DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft Manifest number: 0DCA Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=) 2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: CK9ulaX+F6KUBxPqAuz7+GwFb2h/2V1fhA7LE/SRfZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7a:4d:84:a4:50:85:9a:4a:99:22:0f:57:10:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432 Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=a9403c5da84c08dba5c861e74b1771309af78b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:cc:6c:d2:7e:74:ce:59:d7:6b:e7:6d:ea: 6f:65:ba:16:c1:40:d2:07:30:bb:61:88:a6:8f:72: d5:bb:71:fa:3a:22:dd:16:15:2f:03:4f:90:a4:8d: fd:0a:1b:66:95:c1:f5:03:30:10:11:e9:5d:3b:50: bf:ea:e4:4f:f6:18:75:9e:82:41:bb:aa:f5:42:e8: e7:f6:bd:3d:fe:e4:8c:28:77:73:8e:86:79:be:a7: a7:3b:d1:5b:29:a5:6c:ba:ae:23:34:27:bc:2c:3c: 29:ac:d2:72:df:43:6f:31:f8:90:d8:82:ca:14:3e: 0b:cd:3a:f6:c8:bf:ac:39:7e:62:45:ef:41:4c:33: 2c:bc:c1:ce:a9:b6:06:ea:cf:9a:79:1b:d0:e6:7e: 27:a5:58:60:ec:63:9f:ea:d8:87:26:cb:e2:8a:2f: ff:c9:c7:f9:df:bb:ea:65:4b:0b:05:0d:54:49:1e: 61:11:1e:67:63:68:ab:b5:12:34:8e:b5:47:1c:b8: 23:78:2c:35:82:bc:c7:23:b7:2b:20:f3:a4:77:28: a3:4a:5a:5b:ca:7a:a1:d4:1f:d3:55:4d:4d:16:67: d4:74:c8:3b:67:41:2a:e1:45:6c:29:b4:d9:ac:3f: 1d:04:f7:5c:a7:9c:2d:26:7b:e3:06:52:74:f9:c9: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:40:3C:5D:A8:4C:08:DB:A5:C8:61:E7:4B:17:71:30:9A:F7:8B:91 X509v3 Authority Key Identifier: keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a3:73:3c:ac:8f:b7:23:c8:c0:b7:db:25:df:48:6d:76:95: 30:1e:96:9a:a4:6b:f7:93:fa:65:90:c2:9b:80:19:e0:77:0f: b7:2a:49:96:47:4a:88:7f:b0:5d:b1:af:65:00:76:3e:08:59: 25:25:ec:6d:b1:6a:4f:56:2c:00:8b:b6:ea:90:33:d6:6c:d5: 32:cb:82:17:14:e5:61:15:ff:3f:dd:e6:24:be:fa:1f:7b:d5: 0c:0d:5b:fd:29:24:03:1e:ae:fa:2e:17:1f:8b:61:3d:b7:d2: a4:8f:aa:9e:30:e0:f4:02:69:62:7f:ce:be:0d:50:fc:da:b5: c0:86:e2:9d:34:b2:47:e8:d9:20:e6:fb:b8:f8:39:be:18:b0: 4f:af:a2:3c:be:e8:7e:68:4a:04:0f:de:98:00:03:d3:aa:1c: c9:df:b4:64:35:7f:98:2c:a8:a0:b3:35:c3:0a:01:34:d4:e9: a9:3d:f0:3a:30:25:d5:f3:47:d4:79:bd:9c:35:17:57:a4:7a: 71:a7:3a:5a:3f:25:5b:dc:20:65:c9:bb:65:97:8b:68:b6:0f: 9f:09:ba:b7:c7:ae:50:9b:8e:6d:49:c6:02:56:b2:1e:73:db: 5e:70:56:a9:63:23:f5:d5:c3:21:80:a0:bc:96:31:b1:94:a8: 54:6e:16:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXpNhKRQhZpKmSIPVxDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTc5OGE4ZGE5OTk5ZGRmNTNhM2M4ZDM4ZjM2ZjE3ZWNk NDU0MzIwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EyhhOTQwM2M1ZGE4NGMwOGRiYTVjODYxZTc0YjE3NzEzMDlhZjc4YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8zMbNJ+dM5Z12vnbepvZboWwUDS BzC7YYimj3LVu3H6OiLdFhUvA0+QpI39ChtmlcH1AzAQEeldO1C/6uRP9hh1noJB u6r1Qujn9r09/uSMKHdzjoZ5vqenO9FbKaVsuq4jNCe8LDwprNJy30NvMfiQ2ILK FD4LzTr2yL+sOX5iRe9BTDMsvMHOqbYG6s+aeRvQ5n4npVhg7GOf6tiHJsviii// ycf537vqZUsLBQ1USR5hER5nY2irtRI0jrVHHLgjeCw1grzHI7crIPOkdyijSlpb ynqh1B/TVU1NFmfUdMg7Z0Eq4UVsKbTZrD8dBPdcp5wtJnvjBlJ0+cmjUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlAPF2oTAjbpchh50sXcTCa94uRMB8GA1UdIwQY MBaAFM6XmKjamZnd9To8jTjzbxfs1FQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYt OThmY2IzYThiYzllLzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYtOThmY2IzYThiYzll LzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqNzPKyP tyPIwLfbJd9IbXaVMB6WmqRr95P6ZZDCm4AZ4HcPtypJlkdKiH+wXbGvZQB2PghZ JSXsbbFqT1YsAIu26pAz1mzVMsuCFxTlYRX/P93mJL76H3vVDA1b/SkkAx6u+i4X H4thPbfSpI+qnjDg9AJpYn/Ovg1Q/Nq1wIbinTSyR+jZIOb7uPg5vhiwT6+iPL7o fmhKBA/emAAD06ocyd+0ZDV/mCyooLM1wwoBNNTpqT3wOjAl1fNH1Hm9nDUXV6R6 cac6Wj8lW9wgZcm7ZZeLaLYPnwm6t8euUJuObUnGAlayHnPbXnBWqWMj9dXDIYCg vJYxsZSoVG4WRg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:27 2025 by rpki-client