This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json) Hash identifier: Di6R+/MSZ/9X5xesBQzJXS7k9qm+EB6PERWOcW9/zyc= Subject key identifier: C9:B4:F5:B2:2D:BD:57:0E:C7:5C:A7:B2:F6:BE:32:F8:0D:99:13:32 Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Certificate serial: 019AF23FDF73C758A1A0C48A64C097C5AA6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft Manifest number: 0CAC Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=) 2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=) 3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=) 4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: 7VMY4SLfjyPO+b6QRt6+H05xc51zos0yhlhtITc28M0=) 5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=) 6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=) 7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:df:73:c7:58:a1:a0:c4:8a:64:c0:97:c5:aa:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=c9b4f5b22dbd570ec75ca7b2f6be32f80d991332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:bd:b3:82:c6:1c:85:e5:1e:a5:3d:00:14: dd:2b:d8:53:19:70:c0:8b:34:4f:ce:7a:63:15:13: 48:c0:01:91:c0:6c:4e:43:ca:75:7b:e3:de:84:63: 92:6d:e7:fd:b9:e0:b1:91:9d:81:25:97:ce:c8:32: b9:94:c9:e0:8d:7d:9e:24:db:e4:34:6d:bb:85:c5: 69:c6:b3:22:2e:ef:17:bb:19:0d:97:dc:e3:f8:2d: 8d:56:87:d1:4b:df:b1:7f:07:4d:dd:a7:6f:66:64: e3:66:5a:21:16:b4:5c:2c:ee:70:4a:b5:f2:fa:e3: b7:75:64:41:89:9a:4d:50:a0:0c:b4:2d:ce:d3:92: 32:4e:11:bb:04:da:9d:f3:c3:cf:3b:69:c8:84:78: ec:4d:9f:e9:88:82:1e:ce:e9:f5:82:99:d8:a4:41: a9:95:2f:d7:28:4d:20:41:99:96:c4:9b:16:fb:1c: 0c:bb:14:2a:e7:60:20:60:08:e3:88:87:fe:3e:74: f6:20:e1:60:b4:00:7b:55:c8:cd:5f:d7:87:fc:7a: 10:39:da:74:03:14:32:27:ce:66:9d:d6:90:9d:66: e9:81:ac:a9:85:fb:ef:4a:ca:9b:43:de:83:e9:47: ec:f5:a1:03:6f:5e:de:3b:a7:fb:57:5c:86:04:e2: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B4:F5:B2:2D:BD:57:0E:C7:5C:A7:B2:F6:BE:32:F8:0D:99:13:32 X509v3 Authority Key Identifier: keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:79:07:bb:c1:69:77:ab:bd:c2:f6:ed:e3:14:19:54:3b:64: 1e:60:b9:a4:92:4f:dc:9f:07:d5:da:6e:fa:f8:5f:84:8f:32: b8:9b:3b:ae:29:a0:8d:d7:10:18:88:e9:38:b3:9f:44:04:3c: 49:d3:0d:02:47:d2:f6:db:ec:c5:6d:39:3f:c9:50:94:51:e8: ae:cc:5d:76:46:c1:97:c6:2e:51:4f:a6:e5:68:4b:b6:80:5b: 67:63:7b:41:1a:c7:87:f9:58:78:26:1c:ea:64:7a:b2:bd:c9: c4:31:4e:07:33:d6:a9:7a:05:04:99:c8:d8:72:0a:da:42:f6: ea:2b:9f:f8:de:50:44:81:81:06:ca:5d:11:d7:8b:e6:d0:20: 8b:5a:a7:d3:f8:30:44:99:9c:97:a1:72:77:6c:d5:cb:c5:09: 7e:6f:5f:e9:b5:ac:67:06:aa:ff:0f:4b:aa:95:38:98:e1:68: 19:2f:d6:4a:a2:87:b1:36:82:5c:0d:8f:d0:19:40:2b:87:ac: 89:10:6d:91:11:d6:85:15:5a:ba:9a:70:93:87:7b:61:b7:3f: 44:df:90:e8:74:dd:9b:8c:c2:cb:79:ad:eb:29:3c:f7:7e:68: ba:ef:67:4c:e1:4b:64:5b:f9:d8:ec:f4:97:94:ee:31:d3:34: 0b:7a:6a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP99zx1ihoMSKZMCXxaptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0 YjViMTEwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD EyhjOWI0ZjViMjJkYmQ1NzBlYzc1Y2E3YjJmNmJlMzJmODBkOTkxMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmm9s4LGHIXlHqU9ABTdK9hTGXDA izRPznpjFRNIwAGRwGxOQ8p1e+PehGOSbef9ueCxkZ2BJZfOyDK5lMngjX2eJNvk NG27hcVpxrMiLu8XuxkNl9zj+C2NVofRS9+xfwdN3advZmTjZlohFrRcLO5wSrXy +uO3dWRBiZpNUKAMtC3O05IyThG7BNqd88PPO2nIhHjsTZ/piIIezun1gpnYpEGp lS/XKE0gQZmWxJsW+xwMuxQq52AgYAjjiIf+PnT2IOFgtAB7VcjNX9eH/HoQOdp0 AxQyJ85mndaQnWbpgayphfvvSsqbQ96D6Ufs9aEDb17eO6f7V1yGBOJPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMm09bItvVcOx1ynsva+MvgNmRMyMB8GA1UdIwQY MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3kHu8Fp d6u9wvbt4xQZVDtkHmC5pJJP3J8H1dpu+vhfhI8yuJs7rimgjdcQGIjpOLOfRAQ8 SdMNAkfS9tvsxW05P8lQlFHorsxddkbBl8YuUU+m5WhLtoBbZ2N7QRrHh/lYeCYc 6mR6sr3JxDFOBzPWqXoFBJnI2HIK2kL26iuf+N5QRIGBBspdEdeL5tAgi1qn0/gw RJmcl6Fyd2zVy8UJfm9f6bWsZwaq/w9LqpU4mOFoGS/WSqKHsTaCXA2P0BlAK4es iRBtkRHWhRVauppwk4d7Ybc/RN+Q6HTdm4zCy3mt6yk8935ouu9nTOFLZFv52Oz0 l5TuMdM0C3pqAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:40 2025 by rpki-client