This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json) Hash identifier: mmgk5TNJunIBeTAxS0xZuSmPhDhYjz8JB9LwvvEj+fI= Subject key identifier: E3:24:4E:17:AD:42:D0:78:46:0B:65:CF:41:84:A0:62:55:C3:FA:B1 Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d Certificate serial: 019AF389E25E2FC8F3221C14AAFB6D7AEBD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:30 +0000 Manifest this update: Sat 06 Dec 2025 12:01:30 +0000 Manifest next update: Sun 07 Dec 2025 12:01:30 +0000 Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=) 2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: Pt/JfzGEajaD0z/baiTfg9ZGW2JVjspDuGl679xFPBs=) 3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=) 4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e2:5e:2f:c8:f3:22:1c:14:aa:fb:6d:7a:eb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d Validity Not Before: Dec 6 12:01:30 2025 GMT Not After : Dec 7 12:01:30 2025 GMT Subject: CN=e3244e17ad42d078460b65cf4184a06255c3fab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f8:49:44:63:80:ab:bb:f8:b3:d7:2c:0a:5f: 13:0b:e9:98:4c:cf:91:30:a8:39:41:4c:ea:b9:85: ff:a7:ed:c8:a2:48:87:fa:20:71:5f:ff:0c:76:5e: de:99:68:fa:1b:16:f9:f8:d2:f1:94:9c:28:4a:a9: 49:b7:c1:f5:3f:91:19:e2:10:ff:21:cd:b9:4a:9c: 36:61:06:f7:f8:07:ed:a4:4e:1b:62:d8:7c:c8:2a: af:c0:19:92:78:f3:ac:83:c9:e9:44:a2:c4:35:0e: 25:b7:3e:be:05:79:02:d4:bb:4c:08:66:ca:6a:08: 27:55:de:c2:7a:59:50:33:e3:07:fe:f8:88:a8:c7: 74:18:98:21:2d:5b:8d:ed:48:f3:4d:62:ef:01:be: a2:0e:97:e2:04:7b:e4:fd:f1:d2:e2:d8:39:bf:55: 5b:7b:17:15:fa:7a:ed:88:38:0c:45:26:bc:17:ba: 6a:46:4a:60:4e:b8:77:d2:31:96:11:33:90:82:82: b8:4b:f2:1f:58:1e:96:eb:b4:d9:f3:31:dc:d6:83: b3:c0:94:3d:cd:2b:12:b1:e3:96:a3:cb:2e:56:ac: 35:50:c5:c9:c5:99:23:b6:c3:14:46:c6:b1:05:a2: d6:80:29:5a:ab:30:e1:87:fa:bd:41:ee:24:72:58: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:24:4E:17:AD:42:D0:78:46:0B:65:CF:41:84:A0:62:55:C3:FA:B1 X509v3 Authority Key Identifier: keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:39:75:14:5b:43:68:c8:8a:0f:c8:5e:40:89:80:0c:09:36: fe:42:87:d7:fa:50:4a:f7:11:90:30:1b:a5:58:d8:4a:9e:5b: af:51:12:ba:c4:9f:fd:5d:f9:c2:d6:45:0c:47:a5:ed:a8:5b: 06:9c:98:14:9a:45:e1:da:9a:b4:41:11:38:39:a5:8a:79:55: 50:c7:39:27:d8:a8:19:8a:ab:74:ac:ed:0e:27:0a:4f:78:58: 15:73:79:a9:dd:14:7b:96:59:b4:33:f5:f4:9a:14:e9:81:b6: a8:1d:aa:05:1f:33:e1:18:0f:05:11:17:82:05:86:83:80:05: 3f:75:1f:28:53:95:fb:80:e3:9f:d4:85:35:34:e8:cd:47:98: e7:0a:d5:0a:7b:3e:1d:a6:9a:82:68:56:79:a2:fa:58:6b:0a: 64:cf:81:ff:68:8b:c9:3a:6c:47:87:a9:ce:c3:b2:b5:00:6b: de:39:ef:d1:11:18:04:8c:02:c9:1a:09:b6:61:69:c8:86:ed: 78:67:4d:19:ea:ad:3c:22:d6:fd:91:01:6a:ab:14:84:b0:c9: ee:49:3f:ed:f8:39:ee:6d:44:2d:d1:9a:60:9d:95:38:7d:51: 10:fd:1e:e4:59:66:02:a0:fd:d0:b3:11:1e:41:b5:62:f4:1f: 75:f0:70:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieJeL8jzIhwUqvtteuvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw MTQxMmQwHhcNMjUxMjA2MTIwMTMwWhcNMjUxMjA3MTIwMTMwWjAzMTEwLwYDVQQD EyhlMzI0NGUxN2FkNDJkMDc4NDYwYjY1Y2Y0MTg0YTA2MjU1YzNmYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/hJRGOAq7v4s9csCl8TC+mYTM+R MKg5QUzquYX/p+3IokiH+iBxX/8Mdl7emWj6Gxb5+NLxlJwoSqlJt8H1P5EZ4hD/ Ic25Spw2YQb3+AftpE4bYth8yCqvwBmSePOsg8npRKLENQ4ltz6+BXkC1LtMCGbK aggnVd7CellQM+MH/viIqMd0GJghLVuN7UjzTWLvAb6iDpfiBHvk/fHS4tg5v1Vb excV+nrtiDgMRSa8F7pqRkpgTrh30jGWETOQgoK4S/IfWB6W67TZ8zHc1oOzwJQ9 zSsSseOWo8suVqw1UMXJxZkjtsMURsaxBaLWgClaqzDhh/q9Qe4kclhzZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMkThetQtB4Rgtlz0GEoGJVw/qxMB8GA1UdIwQY MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt MDYxNjM5ODEyYzc0LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0 LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTl1FFtD aMiKD8heQImADAk2/kKH1/pQSvcRkDAbpVjYSp5br1ESusSf/V35wtZFDEel7ahb BpyYFJpF4dqatEERODmlinlVUMc5J9ioGYqrdKztDicKT3hYFXN5qd0Ue5ZZtDP1 9JoU6YG2qB2qBR8z4RgPBREXggWGg4AFP3UfKFOV+4Djn9SFNTTozUeY5wrVCns+ HaaagmhWeaL6WGsKZM+B/2iLyTpsR4epzsOytQBr3jnv0REYBIwCyRoJtmFpyIbt eGdNGeqtPCLW/ZEBaqsUhLDJ7kk/7fg57m1ELdGaYJ2VOH1REP0e5FlmAqD90LMR HkG1YvQfdfBwSg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:31 2025 by rpki-client