This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json) Hash identifier: 4RT6se1QY3LqlramfHUb1WbQ/TBGiJaySrFK5Ir4Uh0= Subject key identifier: 42:8D:A6:4D:EF:98:86:D3:7F:C0:3F:66:FC:B7:95:D0:E6:62:E2:1A Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Certificate serial: 019B3B6BD83E6E991A2044EA56E1AC6CFF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft Manifest number: 0283 Signing time: Sat 20 Dec 2025 11:01:21 +0000 Manifest this update: Sat 20 Dec 2025 11:01:21 +0000 Manifest next update: Sun 21 Dec 2025 11:01:21 +0000 Files and hashes: 1: KWrcvpROrYGOwG3-oqsXPNMfFDk.roa (hash: UFnDH1kBqyWioGuvQqX1adr28AYT6aanInwk+hkuyEE=) 2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: WHvsmzrLOeZZ783lkGGBTKinLkpigclUw0A0vUmL0Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:d8:3e:6e:99:1a:20:44:ea:56:e1:ac:6c:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6 Validity Not Before: Dec 20 11:01:21 2025 GMT Not After : Dec 21 11:01:21 2025 GMT Subject: CN=428da64def9886d37fc03f66fcb795d0e662e21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:4e:fc:cd:70:14:16:81:38:90:a5:06:b0: d1:32:31:4a:30:8b:64:a0:e8:e3:3a:63:0d:ec:93: b8:b5:de:14:45:09:06:8c:e5:90:26:34:bc:67:d9: e6:6b:43:6c:31:cb:e1:05:c2:80:67:d0:71:cc:e9: af:59:b5:57:ae:b6:fb:db:e9:4a:6e:3f:68:e1:4f: 15:bb:19:bd:76:77:e9:22:b3:3c:8f:a1:cf:8c:36: 8e:21:8a:09:e3:8c:4a:02:33:56:4a:25:79:18:6c: 0e:51:0b:b4:bd:a7:1a:7b:dc:7a:bb:2e:df:5a:df: 83:f3:6c:3c:5c:26:ce:cc:89:47:49:09:d9:9b:f8: 5e:9d:d7:a8:47:5d:b8:14:f7:fc:ba:ad:ad:a6:e0: 5f:29:fa:eb:8b:27:c2:74:af:7c:aa:d4:fc:e7:7c: 41:60:15:b9:b6:50:92:3e:b7:d1:e5:b3:32:48:e1: 8d:5c:92:ac:8e:ad:8b:74:14:6a:e7:88:9b:ad:48: a5:6e:dc:ba:32:e9:db:bc:f6:f5:67:47:59:c5:c7: 7a:7e:88:0e:46:1f:52:4a:f8:b4:49:0f:f7:05:ce: ca:e5:c7:2f:27:70:2e:f1:bc:52:ee:ee:0a:a7:66: 0d:ad:4d:27:35:61:57:c9:d2:bd:29:6a:e2:76:9b: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:A6:4D:EF:98:86:D3:7F:C0:3F:66:FC:B7:95:D0:E6:62:E2:1A X509v3 Authority Key Identifier: keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c8:ae:4d:03:a5:1f:d9:f4:57:23:ae:a5:88:f6:5c:ef:8a: b6:2b:d1:03:8c:fc:df:2f:5d:55:42:9e:61:a0:21:75:87:e2: 0b:66:0a:5d:7b:5f:c2:ff:e9:da:dc:5e:7e:d8:74:22:9f:0c: 90:99:35:e5:e0:10:67:dd:dc:35:c4:23:b6:59:05:08:a4:e9: b4:3a:4c:f9:32:5c:64:75:74:c9:3d:7c:eb:5e:38:e3:8d:91: 48:e4:20:5a:60:f7:70:bc:25:5d:38:32:cd:8a:5a:98:48:73: 2c:81:af:46:eb:a4:54:4d:01:d7:f2:7c:02:4e:a8:f0:8d:c2: 39:a4:83:d1:9d:5b:54:e5:ef:24:49:ae:93:4a:e3:c6:29:0d: 0b:d1:d3:4e:86:d3:1e:1d:47:66:73:17:21:28:d1:24:15:5d: 98:29:c2:02:a1:d2:d8:38:37:22:6c:62:60:c3:00:75:9f:f7: d7:07:51:9d:e3:1b:4f:4e:ff:c1:53:f5:5a:03:8b:a7:cc:c1: 78:ca:5e:f7:67:7f:d0:e3:93:a0:19:c1:c0:4a:ec:ea:de:70: 75:f0:16:cc:d7:98:16:9f:c2:a6:b8:be:e7:6a:80:c7:1c:df: 73:7b:68:f0:62:98:a6:6e:55:c4:5d:9e:1c:e6:d7:8c:58:a5: d6:5c:7b:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a9g+bpkaIETqVuGsbP8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmJjYzEwZDE2YjBmZWQyODU1ZTkyOTVmYzQwOWQ2NTA3 YjQzZDYwHhcNMjUxMjIwMTEwMTIxWhcNMjUxMjIxMTEwMTIxWjAzMTEwLwYDVQQD Eyg0MjhkYTY0ZGVmOTg4NmQzN2ZjMDNmNjZmY2I3OTVkMGU2NjJlMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1pO/M1wFBaBOJClBrDRMjFKMItk oOjjOmMN7JO4td4URQkGjOWQJjS8Z9nma0NsMcvhBcKAZ9BxzOmvWbVXrrb72+lK bj9o4U8Vuxm9dnfpIrM8j6HPjDaOIYoJ44xKAjNWSiV5GGwOUQu0vacae9x6uy7f Wt+D82w8XCbOzIlHSQnZm/hendeoR124FPf8uq2tpuBfKfrriyfCdK98qtT853xB YBW5tlCSPrfR5bMySOGNXJKsjq2LdBRq54ibrUilbty6MunbvPb1Z0dZxcd6fogO Rh9SSvi0SQ/3Bc7K5ccvJ3Au8bxS7u4Kp2YNrU0nNWFXydK9KWridpscMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKNpk3vmIbTf8A/Zvy3ldDmYuIaMB8GA1UdIwQY MBaAFM4rzBDRaw/tKFXpKV/ECdZQe0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMt NjExNjFhNjVkM2Q2LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjc1N2MtNDk5ZC00MDIwLWE1YzMtNjExNjFhNjVkM2Q2 LzEveml2TUVORnJELTBvVmVrcFg4UUoxbEI3UTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVciuTQOl H9n0VyOupYj2XO+KtivRA4z83y9dVUKeYaAhdYfiC2YKXXtfwv/p2txefth0Ip8M kJk15eAQZ93cNcQjtlkFCKTptDpM+TJcZHV0yT186144442RSOQgWmD3cLwlXTgy zYpamEhzLIGvRuukVE0B1/J8Ak6o8I3COaSD0Z1bVOXvJEmuk0rjxikNC9HTTobT Hh1HZnMXISjRJBVdmCnCAqHS2Dg3ImxiYMMAdZ/31wdRneMbT07/wVP1WgOLp8zB eMpe92d/0OOToBnBwErs6t5wdfAWzNeYFp/Cpri+52qAxxzfc3to8GKYpm5VxF2e HObXjFil1lx74g== -----END CERTIFICATE-----Generated at Sat Dec 20 19:01:39 2025 by rpki-client