This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft File: zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json) Hash identifier: APQreB64vtDlGeH2hPDBCrLAxY8JWKp6vfz8bDQIkxo= Subject key identifier: 77:6B:42:94:6D:B3:57:C5:71:D6:15:38:05:BC:31:3F:09:94:A9:96 Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F Certificate issuer: /CN=cc4500091efcd905e72ea45f278248661f225b2f Certificate serial: 019AF0BF8805910438A98C0E078E0FF048AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft Manifest number: 0215 Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: WprXhXq/fSHvuAjytsk1nYqb7kQGQidOA1cGJ7FOn28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:88:05:91:04:38:a9:8c:0e:07:8e:0f:f0:48:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=776b42946db357c571d6153805bc313f0994a996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:92:2c:29:ce:95:51:d2:e3:bc:72:0a:e0: e4:43:c0:fe:47:d6:eb:b6:5c:10:39:b1:8b:76:c2: cd:e2:8c:46:e9:a3:df:61:8b:8c:3d:ed:dc:ce:d8: 3d:96:8e:d6:1f:13:0d:3e:7e:95:62:21:cf:80:ae: ab:52:8c:c8:1d:8a:87:7e:57:52:ab:57:43:ee:93: df:32:92:26:53:31:c8:e6:6b:2b:6d:54:73:83:6c: 24:c0:05:b4:21:21:61:79:5e:78:9c:73:c6:01:28: 82:89:83:d5:25:0c:38:b1:d7:22:1a:71:96:31:7c: 8d:4f:30:8a:97:87:3a:6a:0b:b0:68:44:de:03:ed: ca:70:38:62:c8:c5:b4:64:1f:72:bd:d6:07:1a:f5: 29:92:ec:34:38:bc:32:da:d6:d2:0d:30:d1:13:d9: 72:46:51:b5:01:01:0c:24:08:30:19:6a:95:84:20: a0:f8:2a:36:7d:89:04:1a:4e:13:19:cb:f1:6f:e2: e9:c3:d4:dc:c2:ad:2c:d0:23:d1:80:57:86:1c:09: 50:36:7b:8f:1f:2b:bc:92:11:8b:0a:eb:67:45:3f: 67:f0:ae:35:9c:6c:16:e5:c4:86:20:ea:fa:0a:3a: 57:38:fd:60:1d:1c:a4:b3:b7:e4:14:d7:8e:2e:12: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:42:94:6D:B3:57:C5:71:D6:15:38:05:BC:31:3F:09:94:A9:96 X509v3 Authority Key Identifier: keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6a:57:dc:73:02:6f:9c:92:92:5b:75:d3:d1:30:f5:62:d4: c5:ca:16:2a:55:ac:94:45:04:52:aa:9c:0e:68:7d:82:30:1e: 04:cd:6c:69:72:8b:51:f0:c1:ef:02:c2:24:26:8c:59:30:17: fd:9b:0d:dc:45:ce:a7:e5:b0:62:4d:6a:18:c0:6e:99:d5:68: 90:22:1f:9a:c0:b1:2f:b5:93:71:ce:ca:78:6c:f4:82:bc:65: 10:cd:d4:d9:a9:3f:80:0e:4f:5d:5f:ce:a4:95:1c:ae:47:0a: a4:43:ff:82:8c:84:08:cd:26:22:a9:35:87:04:97:54:ee:d7: ee:86:cb:e4:73:a8:f6:85:4b:d0:df:bf:ab:ec:bb:ad:67:eb: cc:cf:ef:f8:92:46:23:c9:fb:d5:a9:e7:a2:bc:42:05:b4:7d: 46:d9:49:ce:85:c7:cb:31:38:c1:f0:0c:ff:d2:5b:08:d3:db: 4e:34:9c:f6:c2:83:9f:d2:65:3c:d4:e0:69:39:8f:e4:72:97: 70:11:eb:a3:d1:ff:f5:d9:83:10:81:92:4d:96:78:94:11:f4: 6f:8d:16:53:70:33:fc:39:84:66:6a:a5:5f:ef:df:b2:9b:81: 20:6d:63:57:4a:72:a7:ac:9c:b3:47:9b:bf:6e:c0:67:7c:12: 72:db:6b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4gFkQQ4qYwOB44P8EisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDUwMDA5MWVmY2Q5MDVlNzJlYTQ1ZjI3ODI0ODY2MWYy MjViMmYwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD Eyg3NzZiNDI5NDZkYjM1N2M1NzFkNjE1MzgwNWJjMzEzZjA5OTRhOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BOSLCnOlVHS47xyCuDkQ8D+R9br tlwQObGLdsLN4oxG6aPfYYuMPe3cztg9lo7WHxMNPn6VYiHPgK6rUozIHYqHfldS q1dD7pPfMpImUzHI5msrbVRzg2wkwAW0ISFheV54nHPGASiCiYPVJQw4sdciGnGW MXyNTzCKl4c6aguwaETeA+3KcDhiyMW0ZB9yvdYHGvUpkuw0OLwy2tbSDTDRE9ly RlG1AQEMJAgwGWqVhCCg+Co2fYkEGk4TGcvxb+Lpw9Tcwq0s0CPRgFeGHAlQNnuP Hyu8khGLCutnRT9n8K41nGwW5cSGIOr6CjpXOP1gHRyks7fkFNeOLhJXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdrQpRts1fFcdYVOAW8MT8JlKmWMB8GA1UdIwQY MBaAFMxFAAke/NkF5y6kXyeCSGYfIlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzct NDQ5MTQwMWVkYzIyLzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzctNDQ5MTQwMWVkYzIy LzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGpX3HMC b5ySklt109Ew9WLUxcoWKlWslEUEUqqcDmh9gjAeBM1saXKLUfDB7wLCJCaMWTAX /ZsN3EXOp+WwYk1qGMBumdVokCIfmsCxL7WTcc7KeGz0grxlEM3U2ak/gA5PXV/O pJUcrkcKpEP/goyECM0mIqk1hwSXVO7X7obL5HOo9oVL0N+/q+y7rWfrzM/v+JJG I8n71annorxCBbR9RtlJzoXHyzE4wfAM/9JbCNPbTjSc9sKDn9JlPNTgaTmP5HKX cBHro9H/9dmDEIGSTZZ4lBH0b40WU3Az/DmEZmqlX+/fspuBIG1jV0pyp6ycs0eb v27AZ3wScttr1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:21 2025 by rpki-client