This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json) Hash identifier: htV1Vrfv3eywbELrjgxM9zbQzTbCyXGfpPk1m6on7E4= Subject key identifier: AB:0C:73:CD:2B:08:6A:DF:1E:6D:9E:81:04:11:56:89:9F:C3:49:4C Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61 Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961 Certificate serial: 019B3D59B625D0EFF47CB6004F138DF4DC94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft Manifest number: 072E Signing time: Sat 20 Dec 2025 20:00:48 +0000 Manifest this update: Sat 20 Dec 2025 20:00:48 +0000 Manifest next update: Sun 21 Dec 2025 20:00:48 +0000 Files and hashes: 1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=) 2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: xoM6Od00X7r0iJncB3DxgdvxcOfRT186ToqaqHBd9MM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b6:25:d0:ef:f4:7c:b6:00:4f:13:8d:f4:dc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961 Validity Not Before: Dec 20 20:00:48 2025 GMT Not After : Dec 21 20:00:48 2025 GMT Subject: CN=ab0c73cd2b086adf1e6d9e81041156899fc3494c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:19:c2:c6:4a:95:f1:5e:37:81:49:49:27: b4:72:3b:f5:24:d8:68:9a:b0:bb:5c:39:d6:bf:1c: a4:1d:6c:b3:1d:e4:58:ad:19:d6:5d:1c:19:43:74: e5:05:23:54:b7:9f:0f:52:7c:90:75:c6:54:2d:8d: e2:e1:cb:fd:0c:04:00:86:a8:4e:e3:d5:87:80:c3: 8c:07:bb:70:2f:e3:d1:0c:0f:59:d8:b3:9d:2f:bc: 42:35:13:31:b3:82:5f:b1:fa:42:ec:c8:24:72:c2: 9d:60:61:5a:48:66:87:bc:36:c3:d6:89:b9:ef:55: 54:f1:3b:12:f9:80:d3:74:f8:eb:19:2b:5e:81:68: 0f:09:23:13:9b:86:cc:2d:55:b6:ca:b1:42:a9:26: 24:f2:25:20:cb:fc:a3:bb:3f:13:f3:54:67:2f:fb: a5:e3:3a:24:d1:bb:c4:0d:43:22:0b:35:e5:7d:f8: 7b:23:3c:71:26:33:bd:59:fe:0d:16:bc:0e:24:09: 44:34:94:00:91:90:8d:e4:fe:ab:f5:70:74:a8:34: 72:02:d5:fa:da:ed:5f:1b:6b:a6:b1:d2:76:42:ea: 16:3d:74:c5:9d:4f:a8:72:58:ba:d5:4c:30:bf:7c: 5f:2d:02:22:4c:cf:d6:f4:34:ad:4c:d0:d5:cb:93: 40:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:73:CD:2B:08:6A:DF:1E:6D:9E:81:04:11:56:89:9F:C3:49:4C X509v3 Authority Key Identifier: keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1e:75:e3:01:ee:d0:b1:94:1f:92:4e:6b:71:d7:8e:f8:7d: 85:e5:a9:c7:4c:13:a9:8b:3e:2e:38:d5:52:b0:08:72:ad:0c: d8:d5:e0:41:26:4e:60:59:e9:a4:0a:45:c5:a5:9d:e9:4f:be: 44:d2:ee:08:0d:41:50:e7:42:f5:6e:c4:a7:f6:ba:8c:c8:5e: 84:8b:81:84:9f:dd:ff:ce:3b:a4:82:b7:3a:eb:49:be:cb:33: 52:90:72:48:81:b6:07:a8:be:13:4a:35:30:af:a0:53:fd:b5: c0:d1:62:94:42:b3:a7:84:98:64:35:ed:77:01:6f:f6:0a:b4: b2:a3:cf:52:78:f4:65:33:09:f7:fd:2e:96:b7:79:61:f4:98: c7:e7:39:50:0c:6a:1d:50:5a:25:6c:12:ff:31:ec:d5:82:ef: 6c:20:cc:ce:bb:0e:48:04:9a:54:cc:29:14:0f:33:66:c9:8f: 92:f8:3e:39:30:b6:10:ec:8b:99:58:96:65:6f:af:b9:c6:62: 54:58:2d:92:74:8b:73:36:eb:46:e7:fc:46:50:4c:5a:7a:e5: 65:4e:71:9b:fd:2e:3c:27:42:19:8f:53:a1:1b:1f:52:5c:28: b6:fc:d6:9c:b0:84:bf:58:45:85:7a:3b:10:a9:fc:3b:be:86: 0a:d4:80:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbYl0O/0fLYATxON9NyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh NzQ5NjEwHhcNMjUxMjIwMjAwMDQ4WhcNMjUxMjIxMjAwMDQ4WjAzMTEwLwYDVQQD EyhhYjBjNzNjZDJiMDg2YWRmMWU2ZDllODEwNDExNTY4OTlmYzM0OTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFYZwsZKlfFeN4FJSSe0cjv1JNho mrC7XDnWvxykHWyzHeRYrRnWXRwZQ3TlBSNUt58PUnyQdcZULY3i4cv9DAQAhqhO 49WHgMOMB7twL+PRDA9Z2LOdL7xCNRMxs4JfsfpC7MgkcsKdYGFaSGaHvDbD1om5 71VU8TsS+YDTdPjrGStegWgPCSMTm4bMLVW2yrFCqSYk8iUgy/yjuz8T81RnL/ul 4zok0bvEDUMiCzXlffh7IzxxJjO9Wf4NFrwOJAlENJQAkZCN5P6r9XB0qDRyAtX6 2u1fG2umsdJ2QuoWPXTFnU+ocli61Uwwv3xfLQIiTM/W9DStTNDVy5NAIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsMc80rCGrfHm2egQQRVomfw0lMMB8GA1UdIwQY MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt M2Q3OTY1NTM5YmM3LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3 LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASx514wHu 0LGUH5JOa3HXjvh9heWpx0wTqYs+LjjVUrAIcq0M2NXgQSZOYFnppApFxaWd6U++ RNLuCA1BUOdC9W7Ep/a6jMhehIuBhJ/d/847pIK3OutJvsszUpBySIG2B6i+E0o1 MK+gU/21wNFilEKzp4SYZDXtdwFv9gq0sqPPUnj0ZTMJ9/0ulrd5YfSYx+c5UAxq HVBaJWwS/zHs1YLvbCDMzrsOSASaVMwpFA8zZsmPkvg+OTC2EOyLmViWZW+vucZi VFgtknSLczbrRuf8RlBMWnrlZU5xm/0uPCdCGY9ToRsfUlwotvzWnLCEv1hFhXo7 EKn8O76GCtSAlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:34:09 2025 by rpki-client