This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json) Hash identifier: IAPslvR/ECDuJdmmj66Kv0msabyNobujAjxk7SLleqY= Subject key identifier: 07:ED:7F:12:70:55:CA:8D:DB:3B:05:68:9C:B1:79:35:72:0F:35:8A Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9 Certificate serial: 019AF23FD72F9800E5DDAAE7D62C4E5FEF2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: QpDUrJSy60VqG7DQyka+Q24Q3T7YTeudjqUnz6iDGL8=) 2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d7:2f:98:00:e5:dd:aa:e7:d6:2c:4e:5f:ef:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=07ed7f127055ca8ddb3b05689cb17935720f358a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:5f:db:25:4b:39:a1:28:03:57:e2:0f:e6: 87:f7:c7:b2:05:3f:8d:c4:12:fe:f4:11:a5:11:cd: 9d:5b:c2:7f:fe:9d:31:05:24:96:9c:fd:d8:a6:7b: be:88:f1:f8:a0:a3:2f:ba:52:a9:d6:b9:59:f5:2a: f2:a9:ba:0f:0b:97:69:d1:c2:0b:ba:bf:6d:cc:1d: 24:4d:67:8b:7f:ac:0d:81:71:6a:f7:5b:3c:0c:32: b7:bc:80:8c:f0:67:96:97:a1:05:e3:a3:76:76:99: a6:95:80:74:f0:39:7d:da:85:0f:f2:a2:ac:e4:a1: 3e:09:63:32:b8:6d:f9:52:61:a5:72:51:34:89:47: b3:3d:ab:d3:5d:d5:a2:81:5c:5f:24:c3:ee:84:be: 18:8b:19:37:10:b3:b8:74:14:c4:d0:38:e2:b3:34: 10:05:97:c6:d8:78:81:98:23:93:e6:85:d6:e1:4f: 77:57:bf:4e:25:d6:b8:6a:7e:6e:d5:e2:83:49:d2: e8:94:db:07:a4:4f:6a:0c:fa:ff:95:93:5a:da:65: c8:64:bc:e5:97:60:38:81:3f:19:83:06:83:ae:a6: 20:a9:37:5a:30:98:9e:f6:0d:05:25:ef:03:38:f4: 67:0b:02:3b:9a:36:83:c9:a4:e7:a3:44:77:85:ca: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:ED:7F:12:70:55:CA:8D:DB:3B:05:68:9C:B1:79:35:72:0F:35:8A X509v3 Authority Key Identifier: keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ac:25:f1:a1:df:45:ee:7c:da:0a:da:7c:fc:41:dc:1f:5a: f7:53:2d:8d:eb:84:85:b2:c7:ed:ef:d9:d6:13:29:2d:6e:d2: 44:6d:27:2b:82:ca:fd:31:2b:ec:d3:b0:cc:ea:ac:c8:17:e0: f2:18:d2:90:f0:2c:e8:ca:db:a9:81:23:98:00:62:be:b0:9e: 3e:0d:3f:24:38:9f:3a:56:4b:29:b6:d3:2d:17:72:94:12:f5: 54:68:e3:41:fe:35:26:37:1c:6d:50:f6:4b:43:d4:f6:67:3d: 8f:e5:d6:65:c7:09:98:38:f8:2e:6f:4b:d6:30:ac:c8:69:a4: 59:31:be:a8:66:88:84:e0:fa:95:d2:ca:37:e7:1a:70:ef:c1: 0f:7f:ce:a8:f5:a3:d6:aa:77:93:9e:53:4b:32:d4:ae:3a:a5: 28:f5:bc:a1:70:e3:27:f3:8b:7b:b1:b6:1b:6f:8f:d1:92:39: 47:dc:0a:e5:4d:7c:83:56:5a:9c:90:07:03:f8:23:b6:9c:b9: 5a:66:36:bd:ec:e3:62:01:36:2c:9b:fc:bd:b0:21:a5:59:95: 73:54:44:54:d5:aa:16:d9:3e:50:74:20:b9:e4:bd:ef:de:ad: 73:8f:2b:05:2f:9b:13:65:ca:a2:90:ec:05:ef:42:fd:b1:a6: e1:f2:50:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9cvmADl3arn1ixOX+8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGRhOTJmOTliNTQwN2YyOGEyZjM2NjEzZTg0OTQ0N2E5 M2Y2YjkwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EygwN2VkN2YxMjcwNTVjYThkZGIzYjA1Njg5Y2IxNzkzNTcyMGYzNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIFf2yVLOaEoA1fiD+aH98eyBT+N xBL+9BGlEc2dW8J//p0xBSSWnP3Ypnu+iPH4oKMvulKp1rlZ9SryqboPC5dp0cIL ur9tzB0kTWeLf6wNgXFq91s8DDK3vICM8GeWl6EF46N2dpmmlYB08Dl92oUP8qKs 5KE+CWMyuG35UmGlclE0iUezPavTXdWigVxfJMPuhL4Yixk3ELO4dBTE0DjiszQQ BZfG2HiBmCOT5oXW4U93V79OJda4an5u1eKDSdLolNsHpE9qDPr/lZNa2mXIZLzl l2A4gT8ZgwaDrqYgqTdaMJie9g0FJe8DOPRnCwI7mjaDyaTno0R3hcqlTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAftfxJwVcqN2zsFaJyxeTVyDzWKMB8GA1UdIwQY MBaAFGaNqS+ZtUB/KKLzZhPoSUR6k/a5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEt ZGM4ZTgzZTYyOWYyLzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEtZGM4ZTgzZTYyOWYy LzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARawl8aHf Re582grafPxB3B9a91MtjeuEhbLH7e/Z1hMpLW7SRG0nK4LK/TEr7NOwzOqsyBfg 8hjSkPAs6MrbqYEjmABivrCePg0/JDifOlZLKbbTLRdylBL1VGjjQf41JjccbVD2 S0PU9mc9j+XWZccJmDj4Lm9L1jCsyGmkWTG+qGaIhOD6ldLKN+cacO/BD3/OqPWj 1qp3k55TSzLUrjqlKPW8oXDjJ/OLe7G2G2+P0ZI5R9wK5U18g1ZanJAHA/gjtpy5 WmY2vezjYgE2LJv8vbAhpVmVc1REVNWqFtk+UHQgueS9796tc48rBS+bE2XKopDs Be9C/bGm4fJQYw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:05 2025 by rpki-client