This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json) Hash identifier: roF4QrWToZqSe1o+cWq2P0PCPFEJ1dh7eBq3ZwQvAAs= Subject key identifier: E9:37:84:DB:91:DB:23:C8:B5:B8:5A:15:24:33:BC:D1:39:DA:9A:45 Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Certificate serial: 019AF38A15BC505FEDEB143F7BA61594EABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft Manifest number: 03B3 Signing time: Sat 06 Dec 2025 12:01:44 +0000 Manifest this update: Sat 06 Dec 2025 12:01:44 +0000 Manifest next update: Sun 07 Dec 2025 12:01:44 +0000 Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=) 2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=) 3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: PIpP8oeNMbgjAoj7jibhaFvIaqRxhQ1lAlIJRzVPUSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:15:bc:50:5f:ed:eb:14:3f:7b:a6:15:94:ea:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Validity Not Before: Dec 6 12:01:44 2025 GMT Not After : Dec 7 12:01:44 2025 GMT Subject: CN=e93784db91db23c8b5b85a152433bcd139da9a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:51:a7:17:63:f8:19:67:c8:92:e4:52:60: d0:82:c5:05:8f:23:9f:f4:50:f4:61:9e:90:0a:ef: cc:1d:73:d3:c8:9b:d7:0e:31:39:24:18:33:de:16: 21:58:d9:0e:c3:37:8c:87:d4:c7:b2:58:51:f4:95: 0f:95:ac:8b:7c:6b:95:58:60:1e:59:a0:fb:57:11: 72:cc:b5:a8:56:48:15:db:ee:5d:57:07:cc:e9:e2: db:05:6e:da:72:eb:d1:99:9f:c4:59:8b:87:84:fc: cf:ab:2d:62:86:7e:77:70:2b:3f:b0:ee:0d:7b:85: 16:43:ef:ef:50:ac:99:15:8c:37:88:b0:02:ec:32: 06:7b:93:04:68:e6:bc:49:b5:c4:f2:86:5b:2e:81: f0:80:1a:5d:b5:b0:29:0d:0e:59:e3:2d:e5:8f:34: 5b:7c:1d:44:db:ac:7d:2e:25:07:d7:84:ce:6b:67: fb:00:27:0b:7e:87:27:4a:27:40:1e:eb:29:97:85: 0b:02:ff:e7:83:7c:45:ac:de:01:f6:17:62:0d:4b: 7c:00:b5:61:10:30:ff:74:2b:b1:bc:28:ac:0f:0c: 3b:7f:b6:aa:5b:55:07:f5:9c:17:96:28:fd:e3:89: 2e:9c:76:b4:86:d3:05:aa:0a:4e:95:29:49:28:c0: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:37:84:DB:91:DB:23:C8:B5:B8:5A:15:24:33:BC:D1:39:DA:9A:45 X509v3 Authority Key Identifier: keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:11:ed:86:1d:51:13:20:2f:de:ac:3d:28:ef:aa:0f:1e:41: c1:0e:e5:12:50:75:63:7e:28:02:90:1e:45:bb:b2:3e:80:bb: 37:04:b2:fa:80:7b:42:d8:b0:89:c9:8c:02:6b:24:9d:b7:55: b6:1a:9a:f0:95:4c:1f:ce:03:a3:59:f6:db:79:1c:a4:a3:28: bf:2b:1f:5e:2b:7b:12:bf:00:6a:0a:e7:48:fe:8a:81:80:07: a7:e9:a4:3f:58:cb:2e:52:a7:21:c1:40:3e:43:b5:66:93:31: 31:fb:9a:71:67:a0:c7:f3:ce:2d:fa:b2:cd:8d:4f:e8:3d:1f: de:f8:0b:cf:f8:d1:ae:82:6e:b4:03:99:40:17:65:5b:dc:0a: 05:ee:47:cb:a7:2d:4c:4f:b9:74:e4:db:fc:d3:82:5f:4d:c5: 35:6a:d8:b4:1c:75:ac:ec:f3:b4:67:51:39:de:ff:88:52:eb: 64:fb:4e:e7:46:15:ee:ab:15:e9:67:d0:f2:91:44:27:a3:8c: 0b:aa:20:ea:09:e4:b2:06:93:0f:55:7f:00:70:08:3c:e0:a6: 8f:df:7e:2e:a7:8e:30:99:02:33:21:b5:c3:92:54:86:17:d7: 29:0e:88:5e:a2:51:cc:53:57:13:17:64:63:22:d3:b0:c4:62: f2:86:4a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihW8UF/t6xQ/e6YVlOq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5 ZTcwZjIwHhcNMjUxMjA2MTIwMTQ0WhcNMjUxMjA3MTIwMTQ0WjAzMTEwLwYDVQQD EyhlOTM3ODRkYjkxZGIyM2M4YjViODVhMTUyNDMzYmNkMTM5ZGE5YTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRRRpxdj+BlnyJLkUmDQgsUFjyOf 9FD0YZ6QCu/MHXPTyJvXDjE5JBgz3hYhWNkOwzeMh9THslhR9JUPlayLfGuVWGAe WaD7VxFyzLWoVkgV2+5dVwfM6eLbBW7acuvRmZ/EWYuHhPzPqy1ihn53cCs/sO4N e4UWQ+/vUKyZFYw3iLAC7DIGe5MEaOa8SbXE8oZbLoHwgBpdtbApDQ5Z4y3ljzRb fB1E26x9LiUH14TOa2f7ACcLfocnSidAHuspl4ULAv/ng3xFrN4B9hdiDUt8ALVh EDD/dCuxvCisDww7f7aqW1UH9ZwXlij944kunHa0htMFqgpOlSlJKMDg1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk3hNuR2yPItbhaFSQzvNE52ppFMB8GA1UdIwQY MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxHthh1R EyAv3qw9KO+qDx5BwQ7lElB1Y34oApAeRbuyPoC7NwSy+oB7QtiwicmMAmsknbdV thqa8JVMH84Do1n223kcpKMovysfXit7Er8AagrnSP6KgYAHp+mkP1jLLlKnIcFA PkO1ZpMxMfuacWegx/POLfqyzY1P6D0f3vgLz/jRroJutAOZQBdlW9wKBe5Hy6ct TE+5dOTb/NOCX03FNWrYtBx1rOzztGdROd7/iFLrZPtO50YV7qsV6WfQ8pFEJ6OM C6og6gnksgaTD1V/AHAIPOCmj99+LqeOMJkCMyG1w5JUhhfXKQ6IXqJRzFNXExdk YyLTsMRi8oZKZA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:34 2025 by rpki-client