This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft File: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft (raw, json) Hash identifier: OBJcm8rIxWPY58+FSiPCvkT5pBtlUEoRjV6PyB8rPEA= Subject key identifier: 6A:E4:8F:97:BC:20:5B:B2:03:7A:DC:CA:5C:3A:2F:53:C0:79:20:23 Authority key identifier: 64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F Certificate issuer: /CN=644d731965489244a7bd28f893d0b3769afd996f Certificate serial: 019AF0F5C5FEA53E270F30BF9B675D6E4AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft Manifest number: 0114 Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl (hash: oZXIuWk0cPYGtdk9bBxYlAfJx5k58YlF2RHak4mRzJo=) 2: _UD-0s3a5L-DuKpnQLmvpANybxQ.roa (hash: KfVEabLC35sn8DyWFnbokPqek3epj+ROSa1QAr9G1Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c5:fe:a5:3e:27:0f:30:bf:9b:67:5d:6e:4a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644d731965489244a7bd28f893d0b3769afd996f Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=6ae48f97bc205bb2037adcca5c3a2f53c0792023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:4e:b1:7e:7d:40:d9:b8:02:97:e3:9d:5a: 5d:aa:14:3f:a6:24:4d:8f:b8:02:b2:e6:29:e4:4d: 71:51:d9:7e:49:c1:64:a5:30:93:50:e1:00:f4:e9: 70:ec:da:49:5a:8c:1e:4d:5a:48:d7:83:21:b9:b8: 26:33:64:24:b9:cc:bd:3b:19:68:45:cd:0e:33:8e: c2:13:6e:57:2c:4b:ab:5f:47:34:48:5b:19:df:be: a1:11:18:fb:ee:d7:99:ab:55:0c:a0:97:a4:6e:02: 52:e4:6e:a0:cf:b2:e0:c3:42:aa:bf:44:d6:c7:dd: 35:ed:e8:c2:ac:18:fb:1f:2c:4d:43:74:52:d9:d9: b7:53:7c:c9:7f:0f:cb:b5:36:85:92:d4:8a:24:b3: 7e:14:b3:82:1a:4e:21:49:d1:ec:6d:6c:a7:7a:77: fc:de:35:29:06:91:c2:73:67:81:66:8f:09:6e:d4: 6f:cf:86:02:46:fe:a4:5d:ed:96:74:ba:7f:29:c2: c5:20:d8:81:01:d8:96:83:1f:c2:c2:05:42:5e:4c: 37:bb:26:2e:5e:74:0e:99:ee:50:23:d7:81:29:7a: c8:c2:6e:e1:ee:c6:bc:18:06:ca:da:18:40:00:86: 5f:8d:0a:6a:c1:74:82:94:b6:d5:94:68:86:10:3e: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E4:8F:97:BC:20:5B:B2:03:7A:DC:CA:5C:3A:2F:53:C0:79:20:23 X509v3 Authority Key Identifier: keyid:64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9b:0b:de:6d:ee:d3:68:ff:e6:37:2a:81:4f:f3:a8:f1:dd: 7b:4e:05:e7:d2:42:8c:96:f4:90:43:3d:70:05:f8:ab:4d:33: 16:35:24:c8:1d:2c:54:ec:42:01:03:5f:50:3a:61:12:93:1c: 07:fb:5d:d7:35:e4:b2:e0:55:3b:bb:06:d5:b0:91:1c:07:c7: 5e:48:7e:23:39:d2:06:dd:6b:ac:f1:3d:00:df:23:0c:fe:77: 85:b6:9e:ab:8f:00:2d:b8:b8:c0:eb:86:93:3a:c5:bc:52:f2: 59:a7:d5:f1:77:2e:f0:0b:bf:fd:54:33:29:21:f1:c7:d4:82: 13:7d:00:ec:63:c8:46:7b:97:7b:cb:e8:82:b1:a1:e4:ea:84: 3f:ea:17:9b:af:43:63:27:a4:90:2a:84:e1:e9:ce:26:51:89: 1e:4b:0a:cb:57:89:20:7f:5a:59:1e:b6:42:5f:2e:51:22:fa: b0:6d:11:f7:1d:df:0b:09:15:f0:88:fe:57:e0:4a:a4:b4:e0: 2d:f5:36:8d:be:80:3f:70:39:db:45:fe:0c:7c:75:90:c6:74: 72:9e:ec:e2:d2:f3:6f:72:7e:92:3d:1b:18:d2:bd:fe:e8:33: 8e:2b:ff:34:56:30:41:64:2a:26:0d:31:4f:26:56:8c:5a:43: 69:44:d9:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cX+pT4nDzC/m2ddbkqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGQ3MzE5NjU0ODkyNDRhN2JkMjhmODkzZDBiMzc2OWFm ZDk5NmYwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD Eyg2YWU0OGY5N2JjMjA1YmIyMDM3YWRjY2E1YzNhMmY1M2MwNzkyMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4lOsX59QNm4ApfjnVpdqhQ/piRN j7gCsuYp5E1xUdl+ScFkpTCTUOEA9Olw7NpJWoweTVpI14MhubgmM2Qkucy9Oxlo Rc0OM47CE25XLEurX0c0SFsZ376hERj77teZq1UMoJekbgJS5G6gz7Lgw0Kqv0TW x9017ejCrBj7HyxNQ3RS2dm3U3zJfw/LtTaFktSKJLN+FLOCGk4hSdHsbWynenf8 3jUpBpHCc2eBZo8JbtRvz4YCRv6kXe2WdLp/KcLFINiBAdiWgx/CwgVCXkw3uyYu XnQOme5QI9eBKXrIwm7h7sa8GAbK2hhAAIZfjQpqwXSClLbVlGiGED45zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrkj5e8IFuyA3rcylw6L1PAeSAjMB8GA1UdIwQY MBaAFGRNcxllSJJEp70o+JPQs3aa/ZlvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkUxekdXVklra1NudlNqNGs5Q3pkcHI5bVc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84OTBhNDEtYmU3Ni00MzRkLTg3Y2Yt Y2NjODJmMmQ1N2UwLzEvWkUxekdXVklra1NudlNqNGs5Q3pkcHI5bVc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84OTBhNDEtYmU3Ni00MzRkLTg3Y2YtY2NjODJmMmQ1N2Uw LzEvWkUxekdXVklra1NudlNqNGs5Q3pkcHI5bVc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJsL3m3u 02j/5jcqgU/zqPHde04F59JCjJb0kEM9cAX4q00zFjUkyB0sVOxCAQNfUDphEpMc B/td1zXksuBVO7sG1bCRHAfHXkh+IznSBt1rrPE9AN8jDP53hbaeq48ALbi4wOuG kzrFvFLyWafV8Xcu8Au//VQzKSHxx9SCE30A7GPIRnuXe8vogrGh5OqEP+oXm69D YyekkCqE4enOJlGJHksKy1eJIH9aWR62Ql8uUSL6sG0R9x3fCwkV8Ij+V+BKpLTg LfU2jb6AP3A520X+DHx1kMZ0cp7s4tLzb3J+kj0bGNK9/ugzjiv/NFYwQWQqJg0x TyZWjFpDaUTZdg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:45 2025 by rpki-client