This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json) Hash identifier: a/atVSc96dH8yWbk7GR0cZkNwXqg+8EjsSJTI1N+J1o= Subject key identifier: 0B:4B:D4:77:A8:0A:AD:77:A8:D9:60:A3:83:B9:B3:6E:72:71:E7:1C Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44 Certificate serial: 019AF19B1E3B0336C7C5412797810D75574F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=) 2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: ij04bqWG4KFVI94UPtTNKEe57AiMWYehDSsUpAHl5zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1e:3b:03:36:c7:c5:41:27:97:81:0d:75:57:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44 Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=0b4bd477a80aad77a8d960a383b9b36e7271e71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:02:b0:c6:a7:b2:9e:be:79:fb:dd:45:dc: e6:8a:96:a9:91:3a:dc:d8:db:2c:21:8f:b6:6d:1d: ca:12:12:62:81:4f:1a:90:8c:4a:ab:1e:2f:e8:6d: 35:82:d1:67:80:d3:08:0d:9d:9b:b2:ca:66:11:0e: 61:4e:bb:89:0a:87:24:ee:ee:2e:12:2a:6d:ba:ab: 48:b4:d1:5e:c6:cf:d6:4c:48:5e:2a:5b:f0:4c:4e: 9a:66:1f:c5:df:5f:f9:ce:9e:e8:8f:b3:8a:11:be: 98:b6:0b:a7:d4:7d:f0:be:e0:c6:37:fa:24:43:39: 80:af:09:27:f1:3c:d2:42:16:de:27:a7:e1:37:b3: 2c:84:cb:78:71:b5:5a:4d:3f:ba:b2:6a:81:0b:08: fb:72:81:fa:9a:82:de:43:ab:85:8e:32:8a:f7:e8: 28:43:ec:2a:e7:c8:cc:da:56:2a:db:99:3e:2a:6c: a6:72:04:e3:79:76:4f:d2:66:23:06:e3:3d:83:6c: 1e:a4:fb:1f:19:38:20:06:84:8f:7b:2d:ca:02:c8: f5:bd:37:e8:40:84:4c:ff:a1:0b:81:c7:ce:12:ec: f7:98:f8:78:e6:ff:c8:e6:b8:07:69:1f:ac:3f:1e: b4:29:96:02:24:03:bc:ed:f0:f6:43:3c:7e:e5:9d: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4B:D4:77:A8:0A:AD:77:A8:D9:60:A3:83:B9:B3:6E:72:71:E7:1C X509v3 Authority Key Identifier: keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:70:46:44:cb:19:53:e8:6a:dc:83:b8:96:d8:68:81:a9:14: 61:83:5f:81:09:69:65:c3:e5:00:50:5b:70:dc:b1:e3:32:0c: 1e:03:0b:68:08:fc:f7:71:0b:e2:0d:d9:0d:42:3a:fb:16:4e: 31:04:a3:4f:42:dd:dd:69:3e:e6:99:d6:a5:b6:26:9c:98:69: 66:1b:7d:b0:b0:99:ff:c6:1a:de:b2:30:04:2d:85:a3:10:e7: d4:9a:42:4e:cf:8c:29:f2:2e:9d:b2:2d:0f:ec:a5:30:2f:1b: 27:d9:a2:63:96:d6:45:7c:5f:50:d8:e3:69:59:4e:e9:ea:41: e1:c6:c2:70:bb:a4:b9:b3:3c:4a:6b:1a:0b:62:ae:07:78:74: f6:12:cd:63:ab:af:ff:3a:48:8b:dc:73:2d:0b:23:8a:2e:db: b2:c2:bd:3b:e2:6c:13:ba:a8:37:6f:0e:32:6b:6f:81:81:2e: 9b:d7:20:32:7e:1c:a9:f4:6a:7a:38:6c:d5:f3:b4:ac:38:7f: a4:65:63:ff:15:e9:9d:1d:bc:0f:88:10:52:bd:dd:29:a8:ea: 04:6f:93:cf:0b:4f:b2:6d:16:0b:21:38:b8:a2:88:3a:2a:42: 2c:dd:31:9b:9f:1c:82:ab:5e:54:3f:0f:c0:57:c5:e5:9f:4e: c7:87:8e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx47AzbHxUEnl4ENdVdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1 NjJjNDQwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD EygwYjRiZDQ3N2E4MGFhZDc3YThkOTYwYTM4M2I5YjM2ZTcyNzFlNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEECsMansp6+efvdRdzmipapkTrc 2NssIY+2bR3KEhJigU8akIxKqx4v6G01gtFngNMIDZ2bsspmEQ5hTruJCock7u4u EiptuqtItNFexs/WTEheKlvwTE6aZh/F31/5zp7oj7OKEb6Ytgun1H3wvuDGN/ok QzmArwkn8TzSQhbeJ6fhN7MshMt4cbVaTT+6smqBCwj7coH6moLeQ6uFjjKK9+go Q+wq58jM2lYq25k+KmymcgTjeXZP0mYjBuM9g2wepPsfGTggBoSPey3KAsj1vTfo QIRM/6ELgcfOEuz3mPh45v/I5rgHaR+sPx60KZYCJAO87fD2Qzx+5Z0WTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtL1HeoCq13qNlgo4O5s25yceccMB8GA1UdIwQY MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4 LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXBGRMsZ U+hq3IO4lthogakUYYNfgQlpZcPlAFBbcNyx4zIMHgMLaAj893EL4g3ZDUI6+xZO MQSjT0Ld3Wk+5pnWpbYmnJhpZht9sLCZ/8Ya3rIwBC2FoxDn1JpCTs+MKfIunbIt D+ylMC8bJ9miY5bWRXxfUNjjaVlO6epB4cbCcLukubM8SmsaC2KuB3h09hLNY6uv /zpIi9xzLQsjii7bssK9O+JsE7qoN28OMmtvgYEum9cgMn4cqfRqejhs1fO0rDh/ pGVj/xXpnR28D4gQUr3dKajqBG+TzwtPsm0WCyE4uKKIOipCLN0xm58cgqteVD8P wFfF5Z9Ox4eOGg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:29 2025 by rpki-client