This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json) Hash identifier: d/BQ3JKv7XU1be8MVtGarfOljI+lgJP7MGylvwLHQGc= Subject key identifier: 25:D4:EB:1E:50:63:DA:1B:ED:48:3F:66:56:8B:6E:29:90:46:C2:B3 Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Certificate serial: 019AF12D5D3A30324025BC4CE9FBDC36F07E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft Manifest number: 1328 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=) 2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: ySmTUdc9IQk4sLNavm67gMQyvjcrXrgLpz0vJSmA/Jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5d:3a:30:32:40:25:bc:4c:e9:fb:dc:36:f0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=25d4eb1e5063da1bed483f66568b6e299046c2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:f8:35:6f:a3:a6:01:88:c8:5f:80:7e:95: 50:85:c1:49:0c:8e:96:18:db:01:82:fc:6a:65:a3: 1e:8f:16:7a:0e:96:7b:70:95:1a:de:fa:04:e4:53: 9a:15:8f:23:a6:b2:55:bc:51:cd:f0:55:5b:76:32: 26:86:b6:c5:3d:c2:31:fa:cc:18:e6:ec:0f:89:3e: 2f:88:90:f1:81:d5:cf:c9:7a:93:5c:a3:0b:d1:bf: 8b:02:30:46:e9:52:67:32:d0:5e:69:9b:32:0e:de: 33:a7:a8:6f:7d:01:29:c5:99:0b:4e:86:07:9d:6e: 0c:fd:f9:52:63:90:59:fd:e5:a4:6a:5c:28:11:41: 15:21:ad:6c:46:f1:79:3a:f9:5d:c1:08:be:89:2a: 97:fd:9c:cc:1a:b8:88:50:b3:99:1e:7c:81:e6:de: 62:91:74:b5:72:ac:50:7c:b9:9c:ee:23:b6:3d:11: c4:61:eb:a3:c4:f2:57:16:60:a1:93:15:e8:6c:3d: 50:c3:24:58:28:17:ab:ed:62:b2:b9:57:ab:e6:00: d7:bb:bc:02:ca:0a:51:2e:5e:d3:14:4f:49:17:c3: cd:64:33:38:c5:a7:75:58:cd:ef:5d:af:fd:66:31: 5a:e9:a9:b8:57:fc:cd:6e:b9:d4:3a:9a:c5:b1:1a: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D4:EB:1E:50:63:DA:1B:ED:48:3F:66:56:8B:6E:29:90:46:C2:B3 X509v3 Authority Key Identifier: keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:dd:ff:45:99:25:2f:7b:fe:1a:f1:e8:65:05:65:cb:34:46: 02:66:7b:b7:71:f7:8a:e1:38:82:8b:ba:ec:48:fa:9c:83:5c: 2d:9e:ef:02:cf:c0:ec:bc:5a:dd:2e:f8:1a:f7:30:d6:1f:09: ac:46:b3:12:24:58:ac:0a:c1:9f:74:a6:fe:80:fd:6c:69:df: 50:c3:0b:cf:2a:de:33:05:09:e6:6c:a4:ab:da:8f:8c:c1:d2: e8:ef:01:56:39:ff:f9:05:08:76:b5:6a:38:c3:fd:c0:7b:30: dc:45:d4:a1:a3:75:e1:17:13:ef:6a:42:57:fc:d1:0b:25:09: b3:55:43:fb:df:35:a4:4d:d7:d6:ac:59:61:c4:b5:1b:78:da: 4c:b8:d2:d9:4e:fd:37:5d:06:e4:5e:3b:b9:c5:34:8d:47:b6: 47:5c:07:32:c5:07:01:cc:fc:4f:34:e2:59:d0:00:17:87:a6: 25:06:63:3e:af:47:58:6c:d1:1c:31:4c:fd:ba:cf:97:67:bf: a2:d0:08:a2:6b:09:07:0f:b0:e5:3b:82:1b:22:44:3e:5e:63: 6b:b2:01:b3:01:7e:04:4f:94:82:48:de:9b:0d:4b:bc:20:2a: 90:eb:ad:84:89:12:54:97:24:23:b6:ef:3c:58:1c:c3:13:80: 7d:77:67:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLV06MDJAJbxM6fvcNvB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZTRjMTVjODcwN2RmYmRmZGE4M2JlM2E2OTNjMzU5NDdm MTZkNTkwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD EygyNWQ0ZWIxZTUwNjNkYTFiZWQ0ODNmNjY1NjhiNmUyOTkwNDZjMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkn4NW+jpgGIyF+AfpVQhcFJDI6W GNsBgvxqZaMejxZ6DpZ7cJUa3voE5FOaFY8jprJVvFHN8FVbdjImhrbFPcIx+swY 5uwPiT4viJDxgdXPyXqTXKML0b+LAjBG6VJnMtBeaZsyDt4zp6hvfQEpxZkLToYH nW4M/flSY5BZ/eWkalwoEUEVIa1sRvF5OvldwQi+iSqX/ZzMGriIULOZHnyB5t5i kXS1cqxQfLmc7iO2PRHEYeujxPJXFmChkxXobD1QwyRYKBer7WKyuVer5gDXu7wC ygpRLl7TFE9JF8PNZDM4xad1WM3vXa/9ZjFa6am4V/zNbrnUOprFsRokoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXU6x5QY9ob7Ug/ZlaLbimQRsKzMB8GA1UdIwQY MBaAFM7kwVyHB9+9/ag746aTw1lH8W1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2Yt MmQ3Yjg1NzBkZDAzLzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2YtMmQ3Yjg1NzBkZDAz LzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa93/RZkl L3v+GvHoZQVlyzRGAmZ7t3H3iuE4gou67Ej6nINcLZ7vAs/A7Lxa3S74Gvcw1h8J rEazEiRYrArBn3Sm/oD9bGnfUMMLzyreMwUJ5mykq9qPjMHS6O8BVjn/+QUIdrVq OMP9wHsw3EXUoaN14RcT72pCV/zRCyUJs1VD+981pE3X1qxZYcS1G3jaTLjS2U79 N10G5F47ucU0jUe2R1wHMsUHAcz8TzTiWdAAF4emJQZjPq9HWGzRHDFM/brPl2e/ otAIomsJBw+w5TuCGyJEPl5ja7IBswF+BE+Ugkjemw1LvCAqkOuthIkSVJckI7bv PFgcwxOAfXdnww== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:17 2025 by rpki-client