This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json) Hash identifier: Q2rCORIplG+0Pp4BEo8SVQGPy6/g3SzwUMiNITFPELE= Subject key identifier: 15:EF:C4:7D:F4:9F:F4:56:96:D4:EE:2E:82:2F:C8:2F:8E:DF:B6:81 Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Certificate serial: 019AF31D4E1550F7052AFF50F3C496A6E729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft Manifest number: 12A3 Signing time: Sat 06 Dec 2025 10:02:55 +0000 Manifest this update: Sat 06 Dec 2025 10:02:55 +0000 Manifest next update: Sun 07 Dec 2025 10:02:55 +0000 Files and hashes: 1: 1DNJXUdN9aHYwhJ0OLj39VSopnQ.roa (hash: QBTrHThXdQY8h/nmwy8ckGzuWyt8cYLb33EN8JyG6aE=) 2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: 8xWnL6R8N3tlfBBLtEMA1Y3aHokhV4xlDmMMJM+TRpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4e:15:50:f7:05:2a:ff:50:f3:c4:96:a6:e7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Validity Not Before: Dec 6 10:02:55 2025 GMT Not After : Dec 7 10:02:55 2025 GMT Subject: CN=15efc47df49ff45696d4ee2e822fc82f8edfb681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:13:4f:57:4d:8f:d1:9f:41:3e:2c:48:14: dd:e1:af:2f:31:b4:b7:89:c9:fe:cd:f8:4c:c4:43: c8:59:10:6a:a0:5f:71:5e:22:57:ee:1b:43:94:91: 7a:39:63:58:19:63:a2:0a:3d:a1:30:f1:cd:80:43: d6:9b:d9:28:3a:b0:62:83:34:a7:35:6d:0d:e4:5c: ad:b7:43:17:76:7e:73:86:c1:cb:1e:31:d4:73:69: b5:58:c9:58:cc:a5:ff:4e:24:86:b8:be:01:fd:03: b9:fe:21:d2:a1:0e:50:09:f3:b0:d5:f6:8e:fc:ff: b6:59:a7:4c:a9:6d:56:4d:1e:49:fe:68:8f:71:f2: d6:71:6b:57:34:b5:fc:de:b4:d3:24:8b:70:f6:2d: 9e:4c:e8:97:3d:cf:ff:bc:bb:22:41:f2:ba:bb:fc: 30:2a:25:8f:35:6a:1b:4f:df:9c:40:4f:f9:01:b2: 4b:79:02:19:4f:26:6c:ff:b4:89:d9:b3:1b:7c:40: 93:6a:ce:f3:e9:19:31:ef:88:23:14:29:ac:74:69: 72:e2:26:1b:88:2a:8a:85:e7:73:81:21:3a:84:e2: 7d:b6:29:59:ec:4d:58:90:42:02:3a:18:72:0b:ed: 8d:4f:0d:19:51:ce:63:a5:b5:c3:5b:5a:2b:21:74: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EF:C4:7D:F4:9F:F4:56:96:D4:EE:2E:82:2F:C8:2F:8E:DF:B6:81 X509v3 Authority Key Identifier: keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ce:12:08:17:89:23:56:f2:4a:43:10:d9:01:cb:5f:d1:7e: 60:d6:23:d4:17:5d:09:05:0e:7b:42:a7:56:fd:ad:ec:5c:1f: 7c:69:ce:bf:7f:14:57:d8:ae:e7:f5:aa:0a:87:eb:0b:2d:40: 9c:7d:2c:c4:2b:7b:c7:b2:4b:08:04:27:74:c6:3a:4c:38:97: 2f:b1:51:ea:0a:d2:2f:88:da:61:d9:2b:ef:a7:cd:4d:aa:a2: 41:d8:28:43:2c:f3:88:9f:a7:46:9b:88:e1:cb:7e:07:46:d1: d4:11:ad:6c:0d:bd:51:f3:b5:a8:54:25:46:8e:29:8d:6e:39: 88:32:e0:66:2c:41:cc:14:6c:2c:42:f5:f7:00:03:43:5a:43: ad:ed:00:ac:fe:ad:45:e8:4a:ea:bf:61:7c:de:f4:1f:83:d1: 33:36:fd:81:37:fc:96:55:3d:12:e3:70:93:b3:b0:8b:39:50: 66:f2:a5:f7:96:7b:86:d3:ab:4b:8c:7e:fb:cf:44:de:b0:9e: 55:47:e0:df:35:fd:44:50:c0:d1:fe:19:16:6c:e9:1f:15:db: 0a:a4:e3:b1:cd:70:43:96:aa:f8:b5:bd:29:7f:bd:a4:40:14: c0:5c:92:3f:94:65:76:71:40:f6:b7:7d:60:c1:8a:30:f2:5b: b7:66:e6:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHU4VUPcFKv9Q88SWpucpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZTAwNjJlNTRhNWZjYjZhMGM5OWU1OTg1NTdmZWQ2ZjM3 YTQ2MjkwHhcNMjUxMjA2MTAwMjU1WhcNMjUxMjA3MTAwMjU1WjAzMTEwLwYDVQQD EygxNWVmYzQ3ZGY0OWZmNDU2OTZkNGVlMmU4MjJmYzgyZjhlZGZiNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7MTT1dNj9GfQT4sSBTd4a8vMbS3 icn+zfhMxEPIWRBqoF9xXiJX7htDlJF6OWNYGWOiCj2hMPHNgEPWm9koOrBigzSn NW0N5Fytt0MXdn5zhsHLHjHUc2m1WMlYzKX/TiSGuL4B/QO5/iHSoQ5QCfOw1faO /P+2WadMqW1WTR5J/miPcfLWcWtXNLX83rTTJItw9i2eTOiXPc//vLsiQfK6u/ww KiWPNWobT9+cQE/5AbJLeQIZTyZs/7SJ2bMbfECTas7z6Rkx74gjFCmsdGly4iYb iCqKhedzgSE6hOJ9tilZ7E1YkEICOhhyC+2NTw0ZUc5jpbXDW1orIXTGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXvxH30n/RWltTuLoIvyC+O37aBMB8GA1UdIwQY MBaAFGXgBi5Upfy2oMmeWYVX/tbzekYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDIt YWFlOTdlNjUwMTVjLzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDItYWFlOTdlNjUwMTVj LzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs4SCBeJ I1bySkMQ2QHLX9F+YNYj1BddCQUOe0KnVv2t7FwffGnOv38UV9iu5/WqCofrCy1A nH0sxCt7x7JLCAQndMY6TDiXL7FR6grSL4jaYdkr76fNTaqiQdgoQyzziJ+nRpuI 4ct+B0bR1BGtbA29UfO1qFQlRo4pjW45iDLgZixBzBRsLEL19wADQ1pDre0ArP6t RehK6r9hfN70H4PRMzb9gTf8llU9EuNwk7OwizlQZvKl95Z7htOrS4x++89E3rCe VUfg3zX9RFDA0f4ZFmzpHxXbCqTjsc1wQ5aq+LW9KX+9pEAUwFySP5RldnFA9rd9 YMGKMPJbt2bmEg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:24 2025 by rpki-client