This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json) Hash identifier: ECooc0jho89/rJ0DAJer+y/WG3HPf439t+e2ROt843Y= Subject key identifier: 0D:54:0F:D3:8A:FB:61:35:1B:32:C9:74:85:C4:8F:E0:C6:46:8F:1E Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d Certificate serial: 019B32D677FDA5F9C3A433F50D0CA3D05094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft Manifest number: 0C8A Signing time: Thu 18 Dec 2025 19:01:14 +0000 Manifest this update: Thu 18 Dec 2025 19:01:14 +0000 Manifest next update: Fri 19 Dec 2025 19:01:14 +0000 Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=) 2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: lModN9IuXSkEBIdGiInDiQL2mBrtt3leK34ESLiQMZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:77:fd:a5:f9:c3:a4:33:f5:0d:0c:a3:d0:50:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d Validity Not Before: Dec 18 19:01:14 2025 GMT Not After : Dec 19 19:01:14 2025 GMT Subject: CN=0d540fd38afb61351b32c97485c48fe0c6468f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7a:59:7c:32:87:91:d8:ca:14:22:38:b1:cb: 4c:7a:22:6a:d2:1f:16:a0:e3:6c:99:72:1e:36:67: f4:0f:03:84:6b:b0:ce:5a:82:e2:b6:4f:6e:47:9a: ba:14:18:32:b7:3c:b1:34:1f:ca:09:00:1c:f7:8b: 4c:35:0a:90:b8:a6:c6:1d:b8:c2:f0:a8:4a:12:b2: ba:33:02:5b:df:e2:2a:96:24:24:96:63:a7:52:a7: 50:5c:d7:e5:3b:8f:00:84:13:04:6c:9e:a1:f6:a0: de:a8:c4:3d:39:30:bc:6a:5d:85:70:4c:7d:e8:fc: b6:3b:06:ba:64:99:ef:c2:2d:60:f1:b6:cf:ad:ee: cb:5e:ab:17:55:df:81:53:cc:7e:5a:d8:2b:93:93: 1a:0e:3d:8e:d0:24:aa:41:a1:43:50:1b:27:48:ad: b6:96:7d:57:4d:cc:7d:2e:2b:f0:80:c5:36:01:e0: 05:87:0f:37:3c:a2:e7:41:b4:b9:57:f0:7c:ed:44: 3c:2a:32:e4:6a:75:db:ad:d6:73:6e:56:39:35:30: 69:8c:b1:d1:69:89:ff:7e:3c:20:a6:ee:97:0f:a3: f1:f9:9f:d9:f5:d2:e8:49:b4:2d:32:4d:d0:3c:f1: ac:a6:ad:46:ec:e5:13:7b:9f:a3:7d:a9:88:f2:7b: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:54:0F:D3:8A:FB:61:35:1B:32:C9:74:85:C4:8F:E0:C6:46:8F:1E X509v3 Authority Key Identifier: keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2f:bd:4d:71:45:c1:cf:0d:02:b2:ae:5a:4f:20:90:d7:7a: 74:3b:d4:43:49:fb:4e:48:b5:69:69:47:9c:6f:bc:1f:df:80: cc:e8:c9:d9:8e:f2:40:ed:e5:db:4f:fc:1c:5c:ce:d9:f3:5a: 7a:f7:0c:62:1b:7e:19:43:5c:f6:4b:f3:50:49:3f:c2:f7:c4: 54:b5:b4:10:e2:5c:1d:52:47:e2:9c:89:9a:6f:10:31:71:7c: cd:16:46:1c:74:5a:4e:da:b7:0f:08:e7:48:72:57:d7:e1:2d: 7c:12:e6:44:45:55:e1:a2:2a:4a:9a:3f:bd:f7:16:8b:29:3e: 4c:44:0f:8f:29:ae:4c:ff:4b:96:db:4d:31:e6:e6:3c:18:0a: 62:cb:d5:01:b0:49:fa:35:30:5c:18:d2:54:95:8f:20:27:f2: 85:95:45:42:7d:a0:6a:9f:e8:46:e9:db:dc:77:ff:29:81:8a: 1d:a6:90:c3:ab:84:4c:42:d2:e5:c6:09:92:31:3e:6e:14:83: 8b:20:d0:71:52:8d:78:5c:ce:a5:83:25:3e:e9:69:cb:8e:52: b3:f0:52:8f:17:12:ce:5a:bb:be:6e:33:a4:fb:ec:92:b4:f5: 4c:77:df:3c:56:87:f0:3c:9e:0e:c2:a1:44:7d:27:87:53:49: 0b:36:40:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1nf9pfnDpDP1DQyj0FCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZWU1ZDkwMDYxZmEyYTcyNGMzNjc0MjU4NmM2MjlkNDcx ZTdhNGQwHhcNMjUxMjE4MTkwMTE0WhcNMjUxMjE5MTkwMTE0WjAzMTEwLwYDVQQD EygwZDU0MGZkMzhhZmI2MTM1MWIzMmM5NzQ4NWM0OGZlMGM2NDY4ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9npZfDKHkdjKFCI4sctMeiJq0h8W oONsmXIeNmf0DwOEa7DOWoLitk9uR5q6FBgytzyxNB/KCQAc94tMNQqQuKbGHbjC 8KhKErK6MwJb3+IqliQklmOnUqdQXNflO48AhBMEbJ6h9qDeqMQ9OTC8al2FcEx9 6Py2Owa6ZJnvwi1g8bbPre7LXqsXVd+BU8x+Wtgrk5MaDj2O0CSqQaFDUBsnSK22 ln1XTcx9LivwgMU2AeAFhw83PKLnQbS5V/B87UQ8KjLkanXbrdZzblY5NTBpjLHR aYn/fjwgpu6XD6Px+Z/Z9dLoSbQtMk3QPPGspq1G7OUTe5+jfamI8nsLaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1UD9OK+2E1GzLJdIXEj+DGRo8eMB8GA1UdIwQY MBaAFM3uXZAGH6KnJMNnQlhsYp1HHnpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUt NTdhNWYzMjg5OTkyLzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUtNTdhNWYzMjg5OTky LzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS+9TXFF wc8NArKuWk8gkNd6dDvUQ0n7Tki1aWlHnG+8H9+AzOjJ2Y7yQO3l20/8HFzO2fNa evcMYht+GUNc9kvzUEk/wvfEVLW0EOJcHVJH4pyJmm8QMXF8zRZGHHRaTtq3Dwjn SHJX1+EtfBLmREVV4aIqSpo/vfcWiyk+TEQPjymuTP9LlttNMebmPBgKYsvVAbBJ +jUwXBjSVJWPICfyhZVFQn2gap/oRunb3Hf/KYGKHaaQw6uETELS5cYJkjE+bhSD iyDQcVKNeFzOpYMlPulpy45Ss/BSjxcSzlq7vm4zpPvskrT1THffPFaH8DyeDsKh RH0nh1NJCzZAJg== -----END CERTIFICATE-----Generated at Thu Dec 18 21:29:41 2025 by rpki-client