This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json) Hash identifier: oChI2PfOxKhx5qcY5tEiTsdjNd4/iZBvHo+5NlgcoNM= Subject key identifier: 41:4B:B1:D0:7D:85:C6:E1:C2:D8:F3:97:08:AE:83:F8:83:04:D3:E2 Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5 Certificate serial: 019AF5412994028392E1C3337C0A43C34B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft Manifest number: 03E9 Signing time: Sat 06 Dec 2025 20:01:19 +0000 Manifest this update: Sat 06 Dec 2025 20:01:19 +0000 Manifest next update: Sun 07 Dec 2025 20:01:19 +0000 Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=) 2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: k5olgY/QwJI8zMaQfi84S63gUao5kppz8n+rJYz9cgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:29:94:02:83:92:e1:c3:33:7c:0a:43:c3:4b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5 Validity Not Before: Dec 6 20:01:19 2025 GMT Not After : Dec 7 20:01:19 2025 GMT Subject: CN=414bb1d07d85c6e1c2d8f39708ae83f88304d3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:1d:ec:ca:91:65:bd:23:f4:a3:84:f2:11: 73:33:bb:35:0d:fa:85:40:ec:fe:93:72:a8:a4:f0: da:88:fc:e5:fb:a3:d5:ae:70:67:48:b1:19:cf:37: 29:82:58:b4:aa:b6:0c:01:0f:92:90:af:dd:ee:ca: cf:84:bc:04:d5:bc:9e:f0:3d:fd:bc:0e:b0:a5:78: 85:5b:ce:ee:1b:6b:66:1d:23:cb:fe:7e:7b:48:b1: e1:61:c6:a1:ce:15:6e:cf:da:cd:f8:77:5f:fe:4f: d5:27:44:ae:66:7f:18:93:89:2f:19:59:e1:ec:42: ce:2d:75:ce:7e:61:6c:2f:da:19:ef:e5:cd:ff:e3: 15:25:a7:8a:56:cf:ed:36:35:25:26:77:76:27:72: eb:ab:74:39:63:44:3e:e0:cc:32:4f:71:f5:08:82: 75:2d:7d:67:e6:6d:4c:6f:0c:5e:de:a0:0d:a6:49: 64:b5:59:60:02:4f:12:bb:e1:f7:fd:6e:c3:3e:2a: ae:d3:e1:6e:84:00:b2:09:7e:43:f9:b8:18:44:55: ea:f6:f1:f7:ce:df:89:81:c3:8b:fc:63:f9:9a:f6: 74:9d:70:8a:0d:20:f8:c8:a4:9e:df:0d:99:5e:e0: d6:a6:a9:56:b9:47:2a:3b:3c:7c:d9:59:2f:54:db: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4B:B1:D0:7D:85:C6:E1:C2:D8:F3:97:08:AE:83:F8:83:04:D3:E2 X509v3 Authority Key Identifier: keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:84:63:9a:65:11:19:28:5b:8c:29:85:8d:97:e3:7a:1f:65: 71:67:c6:3d:31:b8:e0:cf:1c:5e:cc:66:33:01:a2:c3:fc:f5: 89:bc:d2:12:74:fd:12:c6:a5:58:ff:fa:d3:c6:92:b2:bc:0c: 93:cb:57:69:41:9a:1f:f2:bb:0f:08:43:30:92:d2:bc:fb:6a: 01:e2:c0:f1:c2:f4:5a:f1:a3:3b:e6:6d:06:d4:c5:9f:a9:3f: 0b:85:fc:f6:3f:b7:ba:46:9a:12:cb:3d:d7:26:67:da:21:6a: 6b:4a:c7:df:ea:01:b6:e2:c9:72:67:bf:73:52:de:b9:49:7b: b8:cc:a6:7f:59:da:9e:9d:fa:78:72:bd:7f:49:9f:a8:57:fb: 55:a7:1e:cd:6a:e8:2a:98:fd:1e:35:4d:77:cc:7c:28:43:e8: 75:5d:ae:e9:e0:3d:5b:a8:ac:b7:ee:ee:cf:7c:8e:6d:2e:8b: 82:d3:30:26:8f:25:a4:6c:e5:ca:c0:14:3c:d0:8f:b0:63:59: bb:38:fe:c3:a3:cf:aa:94:2f:49:b0:6b:2f:97:da:b2:82:4e: 88:5b:d8:03:87:dc:54:d1:19:99:70:85:61:51:c7:ef:c0:5a: 9b:50:8d:0b:0a:e5:c4:87:a1:a0:ac:96:96:18:bb:57:13:7c: da:15:c0:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSmUAoOS4cMzfApDw0tZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NGFiYzhlNDVkZTIzMWZiODI5YmNhMjJiYjJmMGIzMWUx ZjdhZjUwHhcNMjUxMjA2MjAwMTE5WhcNMjUxMjA3MjAwMTE5WjAzMTEwLwYDVQQD Eyg0MTRiYjFkMDdkODVjNmUxYzJkOGYzOTcwOGFlODNmODgzMDRkM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXgd7MqRZb0j9KOE8hFzM7s1DfqF QOz+k3KopPDaiPzl+6PVrnBnSLEZzzcpgli0qrYMAQ+SkK/d7srPhLwE1bye8D39 vA6wpXiFW87uG2tmHSPL/n57SLHhYcahzhVuz9rN+Hdf/k/VJ0SuZn8Yk4kvGVnh 7ELOLXXOfmFsL9oZ7+XN/+MVJaeKVs/tNjUlJnd2J3Lrq3Q5Y0Q+4MwyT3H1CIJ1 LX1n5m1Mbwxe3qANpklktVlgAk8Su+H3/W7DPiqu0+FuhACyCX5D+bgYRFXq9vH3 zt+JgcOL/GP5mvZ0nXCKDSD4yKSe3w2ZXuDWpqlWuUcqOzx82VkvVNsj9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFLsdB9hcbhwtjzlwiug/iDBNPiMB8GA1UdIwQY MBaAFGVKvI5F3iMfuCm8oiuy8LMeH3r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMt ZjI4N2I3YjZkN2IyLzEvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMtZjI4N2I3YjZkN2Iy LzEvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIRjmmUR GShbjCmFjZfjeh9lcWfGPTG44M8cXsxmMwGiw/z1ibzSEnT9EsalWP/608aSsrwM k8tXaUGaH/K7DwhDMJLSvPtqAeLA8cL0WvGjO+ZtBtTFn6k/C4X89j+3ukaaEss9 1yZn2iFqa0rH3+oBtuLJcme/c1LeuUl7uMymf1nanp36eHK9f0mfqFf7VacezWro Kpj9HjVNd8x8KEPodV2u6eA9W6ist+7uz3yObS6LgtMwJo8lpGzlysAUPNCPsGNZ uzj+w6PPqpQvSbBrL5fasoJOiFvYA4fcVNEZmXCFYVHH78Bam1CNCwrlxIehoKyW lhi7VxN82hXAcA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:11 2025 by rpki-client