This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json) Hash identifier: LEjHmGH34Z8pD1IgUJGNPfRa62euQ/R0wkhzipaGzK4= Subject key identifier: FB:89:6B:86:B6:5C:59:31:86:7C:5E:F1:5B:48:E1:60:88:2A:AC:EB Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de Certificate serial: 019AF2ADE202F7586D5252946898AEB316D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft Manifest number: 1471 Signing time: Sat 06 Dec 2025 08:01:13 +0000 Manifest this update: Sat 06 Dec 2025 08:01:13 +0000 Manifest next update: Sun 07 Dec 2025 08:01:13 +0000 Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=) 2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: S86CrhOPB/eWo40SodDpR/mJPqKssr4iIQDJolX51U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e2:02:f7:58:6d:52:52:94:68:98:ae:b3:16:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de Validity Not Before: Dec 6 08:01:13 2025 GMT Not After : Dec 7 08:01:13 2025 GMT Subject: CN=fb896b86b65c5931867c5ef15b48e160882aaceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:08:19:0a:57:14:f2:f1:8b:ac:91:d7:1a: b0:2a:ac:a1:19:16:b8:1b:a4:6f:4d:2e:01:de:8e: 8a:10:fd:9c:28:19:6f:66:7b:b7:7c:20:fd:b0:6e: ce:d1:8e:3c:51:46:38:d9:90:7e:18:ef:b0:39:e1: de:68:c2:4b:aa:53:27:85:02:7d:c8:0b:df:75:94: 28:fb:f0:8c:c0:ce:a2:3d:8a:ee:0e:a0:51:cc:33: 52:3a:ba:5d:4e:7f:a0:0d:2d:06:99:68:34:0e:27: e5:d8:c0:78:f2:5d:25:88:38:39:97:0f:f9:92:66: 08:97:5a:42:82:29:b2:aa:77:cd:a7:70:e6:49:c9: 98:1c:b0:7d:a2:15:c7:a8:e4:65:52:03:70:35:a2: 43:97:0a:99:f4:da:9f:d6:17:6a:a8:39:06:25:74: 2a:50:95:36:af:a4:82:08:48:24:a4:e9:e1:20:ac: 41:67:cf:1c:b6:ca:fc:94:4e:d1:27:2f:72:61:85: a5:ed:63:06:8e:50:bb:a1:8f:bf:b4:b0:97:51:81: 9f:88:56:0d:54:04:0d:10:7d:6e:5f:23:bf:4a:22: e9:45:58:4c:d6:27:86:df:28:d9:0a:14:a9:87:c8: 65:6b:ca:c4:e7:2c:34:59:51:7f:e4:32:eb:bd:a6: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:89:6B:86:B6:5C:59:31:86:7C:5E:F1:5B:48:E1:60:88:2A:AC:EB X509v3 Authority Key Identifier: keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ef:82:58:d7:95:be:18:9b:6e:d9:7f:3d:16:91:8f:1c:14: 9a:f6:17:a9:16:e3:d1:7d:3d:9d:ae:df:a0:f2:b3:b5:4d:f3: e0:1a:ab:04:16:ba:d2:1f:20:58:48:b0:33:2e:59:0c:48:f4: 19:ee:5e:56:f2:19:3b:24:d7:e9:df:6e:2f:09:26:01:a9:c3: 4b:11:e1:e3:4c:b9:fb:87:67:51:cd:38:ce:8d:2e:e0:71:8a: 3d:0a:c4:08:8c:2d:3e:ee:14:15:6e:fd:4a:97:26:a9:c8:f5: 62:a5:79:20:da:e0:98:88:77:55:b0:8c:6f:e6:d5:89:b8:c6: 7f:87:5c:a1:ca:d5:17:08:1d:c4:51:87:2b:d4:fe:e8:53:4e: 8e:d6:27:7e:61:35:bb:c1:6b:44:e8:3f:e4:60:25:fb:2d:3e: 3e:8c:43:01:a8:db:89:86:ab:00:ff:1f:c7:96:a2:13:b4:e2: 0f:ec:a0:93:61:aa:ed:46:50:be:8a:23:f5:84:13:e1:be:d4: 5e:f8:b6:a2:27:58:82:bd:62:a0:1b:95:f0:2b:46:d6:3c:bf: fa:c9:6e:ba:2b:30:4c:f2:ef:00:5c:fb:35:1f:87:9a:86:cb: fb:9e:64:1b:8d:fa:c7:92:7e:3d:42:bb:c1:f5:b2:be:d9:47: ad:b2:da:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreIC91htUlKUaJiusxbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGRjMzA4ZmU2ZDg2MTIxMDI2Zjk3NDRhZGQ0MGUxMTcz NTQzZGUwHhcNMjUxMjA2MDgwMTEzWhcNMjUxMjA3MDgwMTEzWjAzMTEwLwYDVQQD EyhmYjg5NmI4NmI2NWM1OTMxODY3YzVlZjE1YjQ4ZTE2MDg4MmFhY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbgIGQpXFPLxi6yR1xqwKqyhGRa4 G6RvTS4B3o6KEP2cKBlvZnu3fCD9sG7O0Y48UUY42ZB+GO+wOeHeaMJLqlMnhQJ9 yAvfdZQo+/CMwM6iPYruDqBRzDNSOrpdTn+gDS0GmWg0Difl2MB48l0liDg5lw/5 kmYIl1pCgimyqnfNp3DmScmYHLB9ohXHqORlUgNwNaJDlwqZ9Nqf1hdqqDkGJXQq UJU2r6SCCEgkpOnhIKxBZ88ctsr8lE7RJy9yYYWl7WMGjlC7oY+/tLCXUYGfiFYN VAQNEH1uXyO/SiLpRVhM1ieG3yjZChSph8hla8rE5yw0WVF/5DLrvaZtqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuJa4a2XFkxhnxe8VtI4WCIKqzrMB8GA1UdIwQY MBaAFMxNwwj+bYYSECb5dErdQOEXNUPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQt ZDIyNmEzYjFmNDJkLzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQtZDIyNmEzYjFmNDJk LzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO+CWNeV vhibbtl/PRaRjxwUmvYXqRbj0X09na7foPKztU3z4BqrBBa60h8gWEiwMy5ZDEj0 Ge5eVvIZOyTX6d9uLwkmAanDSxHh40y5+4dnUc04zo0u4HGKPQrECIwtPu4UFW79 Spcmqcj1YqV5INrgmIh3VbCMb+bVibjGf4dcocrVFwgdxFGHK9T+6FNOjtYnfmE1 u8FrROg/5GAl+y0+PoxDAajbiYarAP8fx5aiE7TiD+ygk2Gq7UZQvooj9YQT4b7U Xvi2oidYgr1ioBuV8CtG1jy/+sluuiswTPLvAFz7NR+HmobL+55kG436x5J+PUK7 wfWyvtlHrbLarQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:54 2025 by rpki-client