This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json) Hash identifier: ldqvJCv6BUlrIyZ92B6fJZp59xrG3rlgg8Q4bPT3mZI= Subject key identifier: 82:AC:F1:E8:D1:5E:AA:39:4F:D1:B0:AE:63:57:0B:81:06:5A:AC:36 Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81 Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81 Certificate serial: 019AF2AD7F9250172F4B2A7EF0429F59CEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft Manifest number: 12E5 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=) 2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: BWqtibtYAfOlqQtgDmvaJLw2kG9K7er3bgMB7e5OZNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7f:92:50:17:2f:4b:2a:7e:f0:42:9f:59:ce:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=82acf1e8d15eaa394fd1b0ae63570b81065aac36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:ed:fd:7b:d8:dd:cf:26:93:a9:b2:7e:b2: fc:51:c3:6a:0c:8c:40:dd:ff:e0:71:be:34:4d:c4: 16:80:3a:62:a4:fe:41:9e:94:62:a0:3b:33:1c:7f: ac:9b:9e:87:fd:9a:65:a2:d3:1b:1d:4f:26:34:65: 5f:75:9f:a4:12:bb:60:ce:3d:ae:a8:86:fc:78:7d: 4a:42:4a:f3:c9:5d:b1:ae:9a:78:1d:35:54:52:ff: cb:87:4d:44:9d:4e:e3:79:67:1b:98:99:be:f9:8d: 57:09:19:60:c6:4e:00:83:0e:bf:4c:75:71:84:b1: 06:05:82:d7:ea:5b:d4:21:07:84:62:b6:82:37:3f: 7e:5c:18:d6:bb:d7:b8:06:6e:a5:bf:34:a7:1c:23: d1:2d:13:f3:1a:43:33:c3:24:e9:86:2f:26:b6:eb: 6f:47:dc:b5:84:50:67:14:02:e6:4d:39:63:6b:f3: 3e:50:1b:4e:90:b2:39:3e:79:4b:ed:42:6d:6e:e4: 33:f3:da:4c:04:99:4d:fb:d6:a7:4f:0f:c9:20:58: fe:b6:f7:7d:d1:0f:59:12:0a:c2:90:4d:a3:26:30: 57:93:9b:49:cd:20:8c:1f:e9:49:4a:47:53:b3:a1: 16:fb:7b:41:d6:48:0d:b6:fe:f2:65:4f:76:65:50: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AC:F1:E8:D1:5E:AA:39:4F:D1:B0:AE:63:57:0B:81:06:5A:AC:36 X509v3 Authority Key Identifier: keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:83:a5:e7:3b:8c:71:66:68:4f:3a:86:02:7d:65:95:23:e2: 9a:ef:86:b8:2d:41:01:a6:02:c7:e4:15:6a:03:bd:0e:55:4a: e1:a8:65:4a:b2:8b:3e:8d:96:2a:83:37:26:90:38:d5:ff:13: 92:24:ed:31:52:a4:ea:4e:21:3b:da:c4:77:a6:05:a7:22:59: f9:d9:30:94:02:7c:03:d7:93:69:bc:75:fc:5a:d3:de:22:1c: 8b:bd:41:71:c9:ba:0f:43:4a:c9:a1:88:d3:d7:50:1c:75:d4: 58:a6:7f:b1:52:01:d7:b1:16:0b:f7:4b:1a:d6:e8:63:b9:bf: 1b:c5:c5:3d:59:97:77:d1:76:02:b6:00:76:70:e2:25:b8:0a: ca:71:fb:73:da:fd:f8:c3:b8:eb:f1:70:11:03:18:71:22:fd: 93:01:21:e7:4e:ea:8b:8a:ec:ac:60:32:7b:b3:9e:aa:a6:73: 6d:c8:e0:db:14:91:5f:1e:46:e9:37:66:92:f6:0d:2d:d3:d8: 6f:1d:a3:bb:55:02:3f:ac:3b:84:1e:95:4e:c7:7e:b4:47:34: b5:dc:86:7e:bc:ca:92:69:fb:db:92:8c:f2:10:a8:ec:fc:0d: 93:2f:78:63:97:19:7e:61:36:c4:2c:b4:37:59:f8:7a:69:51: 02:7e:fb:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX+SUBcvSyp+8EKfWc7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjY2NTIyZjQwM2Q4Yzk5NGE0ODQ2ODI4NzA3OTk0MTdj ZTFlODEwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD Eyg4MmFjZjFlOGQxNWVhYTM5NGZkMWIwYWU2MzU3MGI4MTA2NWFhYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxXt/XvY3c8mk6myfrL8UcNqDIxA 3f/gcb40TcQWgDpipP5BnpRioDszHH+sm56H/ZplotMbHU8mNGVfdZ+kErtgzj2u qIb8eH1KQkrzyV2xrpp4HTVUUv/Lh01EnU7jeWcbmJm++Y1XCRlgxk4Agw6/THVx hLEGBYLX6lvUIQeEYraCNz9+XBjWu9e4Bm6lvzSnHCPRLRPzGkMzwyTphi8mtutv R9y1hFBnFALmTTlja/M+UBtOkLI5PnlL7UJtbuQz89pMBJlN+9anTw/JIFj+tvd9 0Q9ZEgrCkE2jJjBXk5tJzSCMH+lJSkdTs6EW+3tB1kgNtv7yZU92ZVCxZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKs8ejRXqo5T9GwrmNXC4EGWqw2MB8GA1UdIwQY MBaAFKf2ZSL0A9jJlKSEaChweZQXzh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMt YzVkMzYwZmNkZjBlLzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMtYzVkMzYwZmNkZjBl LzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4Ol5zuM cWZoTzqGAn1llSPimu+GuC1BAaYCx+QVagO9DlVK4ahlSrKLPo2WKoM3JpA41f8T kiTtMVKk6k4hO9rEd6YFpyJZ+dkwlAJ8A9eTabx1/FrT3iIci71Bccm6D0NKyaGI 09dQHHXUWKZ/sVIB17EWC/dLGtboY7m/G8XFPVmXd9F2ArYAdnDiJbgKynH7c9r9 +MO46/FwEQMYcSL9kwEh507qi4rsrGAye7OeqqZzbcjg2xSRXx5G6TdmkvYNLdPY bx2ju1UCP6w7hB6VTsd+tEc0tdyGfrzKkmn725KM8hCo7PwNky94Y5cZfmE2xCy0 N1n4emlRAn77iQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:48 2025 by rpki-client