This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json) Hash identifier: vEAUr/NN8CiYaCV/+ViycwKG3DKnVp239Ynv6D7zUOk= Subject key identifier: 1C:A7:B6:40:85:72:C8:0A:9C:28:25:7E:8B:1A:CD:74:70:46:9B:B8 Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244 Certificate serial: 019B2FD53F12761420DC44BBD2E4775D8EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft Manifest number: 0704 Signing time: Thu 18 Dec 2025 05:01:03 +0000 Manifest this update: Thu 18 Dec 2025 05:01:03 +0000 Manifest next update: Fri 19 Dec 2025 05:01:03 +0000 Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=) 2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: ozmnZUpKL3sQs74xOzTQs2t6axAubxD4lRqDkj3mGbM=) 3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:3f:12:76:14:20:dc:44:bb:d2:e4:77:5d:8e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244 Validity Not Before: Dec 18 05:01:03 2025 GMT Not After : Dec 19 05:01:03 2025 GMT Subject: CN=1ca7b6408572c80a9c28257e8b1acd7470469bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:54:49:7f:cd:c7:37:af:c5:e7:4f:13:96:6a: 92:c4:20:8c:bb:e5:11:91:5f:59:87:8c:58:53:a4: de:03:e6:44:1b:60:fc:40:c5:e6:b2:bb:5d:ba:f4: 6a:10:58:60:46:13:d3:cf:1f:9e:f7:51:fe:45:bd: 0b:1e:cf:76:f4:7e:9f:a9:95:e8:0a:65:92:22:73: fe:23:e8:5b:95:75:c5:db:20:61:7c:b9:8f:4a:ad: d6:95:54:fa:40:23:25:90:39:1d:a2:6c:ab:44:12: 9b:44:09:5f:f1:eb:92:3a:85:6c:0f:4d:bd:7e:c6: d2:fb:48:90:04:49:ba:ef:86:99:da:cd:af:fc:57: fb:b7:af:1f:94:07:a9:04:87:bc:73:ae:28:d3:ee: f3:5c:7f:47:83:6d:96:35:0a:29:bd:03:48:3d:60: 58:43:66:5e:a8:76:fa:55:4b:f4:9e:11:4d:e2:f0: 56:51:d3:51:67:20:06:67:37:6b:30:6c:89:ad:f3: 36:5d:98:ba:f2:40:78:67:5c:ff:e0:d4:cd:74:c2: e2:93:73:1b:1f:3c:9e:02:4e:51:ba:cc:24:24:a7: c4:50:ca:c4:3b:86:1b:be:7c:c6:55:69:35:7d:ce: 7d:c5:68:2c:28:34:c7:a2:8d:59:eb:40:99:3f:cc: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:B6:40:85:72:C8:0A:9C:28:25:7E:8B:1A:CD:74:70:46:9B:B8 X509v3 Authority Key Identifier: keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:67:23:e4:15:bd:dc:e2:4a:64:71:ea:37:b3:2c:be:91:92: d2:cd:a5:f6:ea:2e:d1:73:e9:e5:82:80:d4:8d:e5:4e:cc:da: 88:44:cb:18:19:a8:79:0d:66:5b:a7:ad:72:28:94:62:28:70: 10:d9:74:bc:e7:1e:b9:3b:72:7d:3c:37:fe:4e:5e:5e:e5:88: eb:92:c8:82:cc:05:a8:82:14:d8:7f:d8:b7:17:0d:97:f8:5d: 9a:1a:6c:2e:0c:e4:38:92:af:79:9a:e3:fd:16:79:16:06:df: e4:4e:36:03:57:8e:6a:aa:23:2e:ed:e0:1f:a3:bc:58:42:cb: c5:6c:e6:d0:54:4a:c3:3c:ef:c1:66:2e:4b:cd:f0:fe:12:14: f3:66:19:91:b8:f2:1e:a4:d7:7c:9a:02:9a:68:e8:f7:21:05: 1b:40:60:1c:7b:29:64:b2:d3:46:db:ef:50:51:dc:b4:3c:62: bf:a8:74:01:f1:18:a6:a1:e5:cc:89:20:6f:fb:43:a8:59:7f: 7a:87:42:9f:ac:37:8d:1a:f9:74:4c:59:5c:ea:d1:07:01:c7: 56:d8:8d:36:ce:9f:ef:ef:f2:05:e3:f7:04:c0:60:06:68:09: 92:6b:3a:9e:b0:2d:99:86:a7:ee:f7:b4:3f:71:f4:02:eb:48: 72:7e:4c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1T8SdhQg3ES70uR3XY75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NGQ5NjY3MmE1OWVjMzg5NWZjMTU4NDdhY2ExYjI5ZGI3 OTEyNDQwHhcNMjUxMjE4MDUwMTAzWhcNMjUxMjE5MDUwMTAzWjAzMTEwLwYDVQQD EygxY2E3YjY0MDg1NzJjODBhOWMyODI1N2U4YjFhY2Q3NDcwNDY5YmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VRJf83HN6/F508TlmqSxCCMu+UR kV9Zh4xYU6TeA+ZEG2D8QMXmsrtduvRqEFhgRhPTzx+e91H+Rb0LHs929H6fqZXo CmWSInP+I+hblXXF2yBhfLmPSq3WlVT6QCMlkDkdomyrRBKbRAlf8euSOoVsD029 fsbS+0iQBEm674aZ2s2v/Ff7t68flAepBIe8c64o0+7zXH9Hg22WNQopvQNIPWBY Q2ZeqHb6VUv0nhFN4vBWUdNRZyAGZzdrMGyJrfM2XZi68kB4Z1z/4NTNdMLik3Mb HzyeAk5RuswkJKfEUMrEO4YbvnzGVWk1fc59xWgsKDTHoo1Z60CZP8z5nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByntkCFcsgKnCglfosazXRwRpu4MB8GA1UdIwQY MBaAFGVNlmcqWew4lfwVhHrKGynbeRJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMt YjQ2OWRiMTBiNjhhLzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMtYjQ2OWRiMTBiNjhh LzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2cj5BW9 3OJKZHHqN7MsvpGS0s2l9uou0XPp5YKA1I3lTszaiETLGBmoeQ1mW6etciiUYihw ENl0vOceuTtyfTw3/k5eXuWI65LIgswFqIIU2H/YtxcNl/hdmhpsLgzkOJKveZrj /RZ5Fgbf5E42A1eOaqojLu3gH6O8WELLxWzm0FRKwzzvwWYuS83w/hIU82YZkbjy HqTXfJoCmmjo9yEFG0BgHHspZLLTRtvvUFHctDxiv6h0AfEYpqHlzIkgb/tDqFl/ eodCn6w3jRr5dExZXOrRBwHHVtiNNs6f7+/yBeP3BMBgBmgJkms6nrAtmYan7ve0 P3H0AutIcn5MwA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:48:31 2025 by rpki-client