This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json) Hash identifier: bMC8gaNIUQpFTqkM0mAiTj/nKApCSCMUcIiUj6B2OGc= Subject key identifier: 9C:F0:51:88:9E:E4:B9:02:92:79:DF:86:B0:D2:4B:48:60:44:EF:EC Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68 Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68 Certificate serial: 019B36E98B623827CE1DEC47D857BB816597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft Manifest number: 0805 Signing time: Fri 19 Dec 2025 14:00:33 +0000 Manifest this update: Fri 19 Dec 2025 14:00:33 +0000 Manifest next update: Sat 20 Dec 2025 14:00:33 +0000 Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=) 2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: 9tX6IjMPolxIAD3AgRMCpNXasAYLwj8hqi2x6xTJJyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:8b:62:38:27:ce:1d:ec:47:d8:57:bb:81:65:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68 Validity Not Before: Dec 19 14:00:33 2025 GMT Not After : Dec 20 14:00:33 2025 GMT Subject: CN=9cf051889ee4b9029279df86b0d24b486044efec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:e0:00:23:ec:f3:cc:e9:f5:6f:ce:e1:5d: c9:f3:0d:69:17:e3:47:49:bc:3f:61:fc:4c:78:de: 57:c4:e3:ba:dc:74:48:60:b8:6b:45:de:ed:03:72: 2b:a1:84:7a:77:a0:c3:36:cd:24:fe:27:ce:74:b7: 87:de:1d:a9:0a:93:7b:bc:c2:ac:e1:8b:e2:69:3c: d1:75:d9:91:2c:45:82:b4:c4:d8:bb:e7:8b:7a:52: 96:4e:05:ba:33:6e:cf:13:21:f0:9b:4b:65:52:28: 0e:02:f0:58:6a:52:15:9e:f2:21:ac:12:49:42:d2: 2e:38:e9:73:db:9c:c8:13:95:0d:9b:d9:5f:a1:d0: 9b:d8:f2:a1:a5:43:7c:4a:fd:a3:14:d7:c6:28:df: d0:d8:52:04:2f:85:b8:18:b3:80:d8:9b:33:62:79: bc:a0:40:79:93:6b:a8:d0:db:78:b4:6b:07:8d:b8: f6:1e:5f:63:95:d8:53:eb:43:27:aa:2f:b6:ba:ec: 13:0d:88:77:5f:ec:f0:6e:51:27:47:e5:a9:73:bf: 6d:23:4e:0b:4b:2d:ce:e7:a9:2a:39:e6:df:75:40: cf:44:16:c8:1c:7d:2a:c6:55:b5:88:a7:a5:88:98: 70:e7:36:95:8e:bb:77:42:0b:a9:f0:08:af:aa:b3: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F0:51:88:9E:E4:B9:02:92:79:DF:86:B0:D2:4B:48:60:44:EF:EC X509v3 Authority Key Identifier: keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7b:66:85:b9:55:d4:eb:92:ed:6e:cd:95:4f:a5:39:15:98: 00:9b:f8:9b:0a:61:9c:b9:90:af:df:0f:8c:4d:2a:06:11:29: 1d:00:2e:d0:3e:82:bb:68:48:87:03:d7:81:b3:33:bd:24:68: ee:69:cc:b8:49:0f:56:86:49:8b:49:2c:af:ad:aa:90:a8:f2: 78:54:f4:23:82:01:f1:3d:e6:27:86:77:53:2c:f2:31:d7:45: 18:d7:07:45:fd:af:68:ca:78:af:ba:6b:72:7b:df:a5:11:7b: cf:d0:18:f3:e1:93:09:0b:ee:0a:8f:ba:a2:a6:7d:fb:04:23: 4a:83:04:1c:2d:20:9f:dd:7b:81:95:6a:fe:35:fc:6b:62:53: e9:24:ef:e6:89:83:6c:d3:c4:19:a0:ed:e0:d6:08:18:07:b4: f0:55:94:d8:b4:5d:59:7e:8c:dc:fb:fa:1b:80:53:b7:59:08: 81:12:1a:9f:62:c1:9a:e9:5f:86:09:7e:9c:78:8c:95:da:ba: a3:39:fc:2c:6c:a4:f4:e8:00:37:e6:3a:cd:ee:18:4a:5d:be: 59:3a:9d:17:4c:17:95:86:86:d3:d5:2b:7d:71:a1:2b:29:0a: a2:3a:db:e4:86:45:2e:d4:3b:36:52:01:5a:b9:a2:7b:b9:34: 4d:02:02:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26YtiOCfOHexH2Fe7gWWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDc0NDNlNjIwZDYzYzhlNGY1NGE2NzE3ODQ3NGQxZjkw OWFmNjgwHhcNMjUxMjE5MTQwMDMzWhcNMjUxMjIwMTQwMDMzWjAzMTEwLwYDVQQD Eyg5Y2YwNTE4ODllZTRiOTAyOTI3OWRmODZiMGQyNGI0ODYwNDRlZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgvgACPs88zp9W/O4V3J8w1pF+NH Sbw/YfxMeN5XxOO63HRIYLhrRd7tA3IroYR6d6DDNs0k/ifOdLeH3h2pCpN7vMKs 4YviaTzRddmRLEWCtMTYu+eLelKWTgW6M27PEyHwm0tlUigOAvBYalIVnvIhrBJJ QtIuOOlz25zIE5UNm9lfodCb2PKhpUN8Sv2jFNfGKN/Q2FIEL4W4GLOA2JszYnm8 oEB5k2uo0Nt4tGsHjbj2Hl9jldhT60Mnqi+2uuwTDYh3X+zwblEnR+Wpc79tI04L Sy3O56kqOebfdUDPRBbIHH0qxlW1iKeliJhw5zaVjrt3Qgup8AivqrM6zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzwUYie5LkCknnfhrDSS0hgRO/sMB8GA1UdIwQY MBaAFGVHRD5iDWPI5PVKZxeEdNH5Ca9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYt YWJjYzkwNWQ5ZmZlLzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYtYWJjYzkwNWQ5ZmZl LzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3tmhblV 1OuS7W7NlU+lORWYAJv4mwphnLmQr98PjE0qBhEpHQAu0D6Cu2hIhwPXgbMzvSRo 7mnMuEkPVoZJi0ksr62qkKjyeFT0I4IB8T3mJ4Z3UyzyMddFGNcHRf2vaMp4r7pr cnvfpRF7z9AY8+GTCQvuCo+6oqZ9+wQjSoMEHC0gn917gZVq/jX8a2JT6STv5omD bNPEGaDt4NYIGAe08FWU2LRdWX6M3Pv6G4BTt1kIgRIan2LBmulfhgl+nHiMldq6 ozn8LGyk9OgAN+Y6ze4YSl2+WTqdF0wXlYaG09UrfXGhKykKojrb5IZFLtQ7NlIB Wrmie7k0TQICOg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:05:40 2025 by rpki-client