This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json) Hash identifier: mTtHVyKgAPiGY2r7HLa5umFwzNmEYGT76B1C3Ny7M3o= Subject key identifier: DB:1B:88:EB:4E:D4:9F:05:78:99:DD:C5:75:94:CC:A9:94:62:C2:FD Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6 Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6 Certificate serial: 019B0F006E1A84F0FB3ED217D441E4FD43EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft Manifest number: 08E1 Signing time: Thu 11 Dec 2025 20:00:44 +0000 Manifest this update: Thu 11 Dec 2025 20:00:44 +0000 Manifest next update: Fri 12 Dec 2025 20:00:44 +0000 Files and hashes: 1: 7d2f98bHzqHWx5M7oEXVyJyz8B4.roa (hash: WP0mtIYc1sSiT/bxjFMuO4V87PtcesycNrQ76Yhzw5U=) 2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: wNl5lzzW3eFhuMKzmUskEAH7ArtfovRMYOgWf/hZHFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:6e:1a:84:f0:fb:3e:d2:17:d4:41:e4:fd:43:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6 Validity Not Before: Dec 11 20:00:44 2025 GMT Not After : Dec 12 20:00:44 2025 GMT Subject: CN=db1b88eb4ed49f057899ddc57594cca99462c2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:58:e9:ce:e4:1d:0b:52:be:b8:51:59:4f: 2d:2f:a5:84:5a:e4:2f:2d:7f:81:8a:ae:18:98:29: 5c:72:34:83:a2:5b:7c:bb:b2:b7:9e:ae:c1:16:32: cd:40:b8:23:4f:9f:bd:22:01:79:1f:5a:9e:30:4d: 8c:90:60:76:b8:d4:3b:de:6e:84:a2:b1:96:65:5b: d3:39:fc:31:2a:79:8b:b9:37:e3:96:fc:52:3e:68: 5e:0a:ef:04:46:41:7f:c3:9e:ec:71:d5:3b:8a:ea: de:9a:b2:33:45:64:fe:d2:79:d6:99:2f:98:d8:6d: 5a:ab:99:ad:7d:aa:cf:89:94:ce:0e:36:5b:2a:86: 65:4b:64:11:bd:bb:26:06:65:2a:59:f7:19:35:d5: 8c:e7:51:ed:4d:e5:e5:33:68:6e:0c:fd:30:ac:09: 73:08:08:5c:42:57:db:7a:8d:97:72:4a:31:f4:1e: b1:b0:66:61:4d:68:9a:0d:30:cf:9f:29:3a:88:c6: ef:46:c1:ac:c6:55:22:73:01:d5:c3:87:49:b8:1f: 68:ca:b1:b1:0a:bb:23:b3:66:cd:3a:bf:85:9c:23: fe:93:52:7a:5e:f6:fe:79:d6:9a:b0:16:32:5d:d2: 0c:89:74:c0:49:28:0e:62:16:ac:a6:17:17:5d:29: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1B:88:EB:4E:D4:9F:05:78:99:DD:C5:75:94:CC:A9:94:62:C2:FD X509v3 Authority Key Identifier: keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b7:a5:a9:18:21:17:0a:b8:be:48:35:c6:6d:6f:f6:79:b4: 15:b4:b4:09:9a:f4:90:dc:37:79:e5:62:31:74:47:5b:ba:7f: e8:83:f5:53:c1:ed:c8:d8:77:75:fa:08:48:bc:51:29:05:c4: 0d:aa:82:c3:fd:55:15:d4:41:1a:10:d5:38:58:ba:e2:93:91: 1a:9b:9c:ae:92:2d:20:59:75:55:bb:eb:8c:04:b3:06:61:dd: a9:9b:b2:42:08:ce:04:f8:d1:13:74:60:ed:da:40:92:19:f6: ff:fb:fb:ad:19:bd:c3:0f:b2:6e:58:04:2d:ec:06:ad:1b:4d: d0:db:88:06:df:60:d7:a4:0f:5d:9c:f6:ca:b5:ec:56:15:33: 32:a4:47:6f:7d:aa:b2:09:de:06:57:11:19:a9:c5:17:bc:d0: c9:20:9c:82:26:8a:48:92:f1:db:1f:c3:be:5d:a7:44:30:a7: 29:70:90:18:19:8e:c7:ab:5d:24:f7:e4:9c:0e:0d:e8:8a:a4: fb:f9:8d:d1:ba:8e:dd:d9:77:ae:af:a9:90:3c:0c:45:a8:5b: 70:5f:82:f6:5a:73:d1:52:3e:ad:68:7c:4e:72:7e:d3:fc:1b: 28:ae:cc:4d:f4:db:76:13:5a:97:26:b5:3b:3a:ac:9d:dc:49: ec:66:82:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAG4ahPD7PtIX1EHk/UPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWU3MzEzMzM3NWQ5NTcyYjhjZmNhNWM4YjVmMWZiYmJk YzliYjYwHhcNMjUxMjExMjAwMDQ0WhcNMjUxMjEyMjAwMDQ0WjAzMTEwLwYDVQQD EyhkYjFiODhlYjRlZDQ5ZjA1Nzg5OWRkYzU3NTk0Y2NhOTk0NjJjMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXNY6c7kHQtSvrhRWU8tL6WEWuQv LX+Biq4YmClccjSDolt8u7K3nq7BFjLNQLgjT5+9IgF5H1qeME2MkGB2uNQ73m6E orGWZVvTOfwxKnmLuTfjlvxSPmheCu8ERkF/w57scdU7iuremrIzRWT+0nnWmS+Y 2G1aq5mtfarPiZTODjZbKoZlS2QRvbsmBmUqWfcZNdWM51HtTeXlM2huDP0wrAlz CAhcQlfbeo2Xckox9B6xsGZhTWiaDTDPnyk6iMbvRsGsxlUicwHVw4dJuB9oyrGx Crsjs2bNOr+FnCP+k1J6Xvb+edaasBYyXdIMiXTASSgOYhasphcXXSkFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsbiOtO1J8FeJndxXWUzKmUYsL9MB8GA1UdIwQY MBaAFMwecxMzddlXK4z8pci18fu73Ju2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQt Mjk4MzhmNGFjNjBlLzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQtMjk4MzhmNGFjNjBl LzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLelqRgh Fwq4vkg1xm1v9nm0FbS0CZr0kNw3eeViMXRHW7p/6IP1U8HtyNh3dfoISLxRKQXE DaqCw/1VFdRBGhDVOFi64pORGpucrpItIFl1VbvrjASzBmHdqZuyQgjOBPjRE3Rg 7dpAkhn2//v7rRm9ww+yblgELewGrRtN0NuIBt9g16QPXZz2yrXsVhUzMqRHb32q sgneBlcRGanFF7zQySCcgiaKSJLx2x/Dvl2nRDCnKXCQGBmOx6tdJPfknA4N6Iqk +/mN0bqO3dl3rq+pkDwMRahbcF+C9lpz0VI+rWh8TnJ+0/wbKK7MTfTbdhNalya1 OzqsndxJ7GaCfA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:02 2025 by rpki-client