This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json) Hash identifier: 68rQZvdbV6plLtkiFCjjdjb13myu/Zmvs1MwbRQkgnM= Subject key identifier: 3B:AD:FA:49:E0:ED:E3:C0:87:61:52:BF:94:D8:29:82:1B:18:37:A8 Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d Certificate serial: 019B3231ACD3C5EFF5EA792EAFCFD0003C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft Manifest number: 074D Signing time: Thu 18 Dec 2025 16:01:14 +0000 Manifest this update: Thu 18 Dec 2025 16:01:14 +0000 Manifest next update: Fri 19 Dec 2025 16:01:14 +0000 Files and hashes: 1: C0Em9awMYVhNg2sMId10Ef0_Qvw.roa (hash: nirBzQQ6k8BEyGM3hSdFnZ+pftgQMVbe2wljIKMV4wk=) 2: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: cvSQEebjrrX+YqXn6SMlM2v0SvU/vNc0p9fPyKpVyZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:ac:d3:c5:ef:f5:ea:79:2e:af:cf:d0:00:3c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d Validity Not Before: Dec 18 16:01:14 2025 GMT Not After : Dec 19 16:01:14 2025 GMT Subject: CN=3badfa49e0ede3c0876152bf94d829821b1837a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:43:da:51:8e:62:36:b2:0b:6a:7f:d0:59: ab:89:cc:e2:e2:c2:c7:1b:c2:9c:72:49:5e:0e:5a: a6:96:7a:96:62:3f:b2:31:55:13:48:48:98:9c:bd: 09:e2:b8:ce:ce:33:9a:ca:61:cb:3a:62:78:69:d6: d6:a2:1f:50:66:c6:7f:63:77:cc:da:57:b4:21:89: 75:80:e5:7f:4d:d6:34:0a:7e:96:3b:77:ca:6b:f5: e3:4f:f3:2a:65:68:29:50:c3:2a:a2:19:61:ad:2f: f2:15:a7:e1:28:48:8d:aa:60:d4:9b:73:95:58:1f: e4:d0:8e:df:97:f7:6c:7f:a0:75:79:dd:81:75:91: fd:57:92:3c:fe:e8:3e:f6:fa:fe:69:8b:0a:47:93: 8f:8d:bd:80:99:20:f5:e4:8e:4e:05:70:53:ce:40: 89:8c:58:86:c4:50:04:9f:7a:67:a1:d3:fd:09:59: b5:9e:8a:db:b2:dc:83:a3:9e:ef:7c:24:18:61:5f: 85:fa:9a:c3:ff:9f:70:fe:04:dd:52:af:f0:9f:b8: 00:e6:a7:a4:c2:48:27:3c:70:10:a3:41:e4:14:07: ae:07:26:48:a3:61:2b:a6:fe:7c:4f:e9:3c:df:2f: a4:70:d8:fd:d1:06:92:60:99:48:cc:d1:25:5a:15: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:FA:49:E0:ED:E3:C0:87:61:52:BF:94:D8:29:82:1B:18:37:A8 X509v3 Authority Key Identifier: keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:52:2a:87:53:dd:78:ef:dd:c6:57:7b:8c:e0:bd:4f:b6:5a: 9c:4f:e0:aa:45:5f:29:55:e7:9f:5f:93:c8:26:1b:d6:7e:00: cd:fc:5c:f6:9c:4c:1a:03:ce:d1:dd:1a:ea:6b:93:c0:f5:cf: 73:dc:c0:e5:e0:3b:c7:08:be:ea:12:ab:f8:81:2f:4a:c5:f3: 73:b6:ff:f3:af:e2:4e:2b:5c:25:01:f1:53:85:ab:0f:3a:48: a2:aa:ec:85:75:7e:d0:0f:fb:06:75:e7:ee:18:f0:1c:9a:fc: 63:94:bc:77:5a:56:54:79:3d:d5:23:f2:dc:55:9d:6e:65:8d: 5e:c2:a1:8f:84:9d:86:39:95:4a:33:a5:43:70:81:d7:54:f7: 71:bb:ad:b4:ee:ff:d8:af:d3:b3:61:83:d7:29:ab:a1:c8:4f: 4e:0b:2b:d4:fb:e8:41:50:c9:c6:91:0d:21:65:52:12:5c:36: 80:cc:2b:03:aa:a8:92:c1:29:f6:1c:e8:0a:1f:ef:28:71:8c: 6a:00:55:8c:9f:54:bd:49:47:5e:e0:05:f5:4d:7a:d3:65:4a: c0:96:eb:0b:3a:f1:91:6d:7f:22:78:d0:7a:a1:24:f0:a7:42: 8f:b0:4d:9d:08:e0:eb:d2:1f:7c:56:7f:c3:1c:f2:6a:c0:60: e4:12:03:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMazTxe/16nkur8/QADwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWRjOTE2MTdhYWRmMGMyY2M3ZjFmNWQ3OTZkYmRiN2Vk ODU5MGQwHhcNMjUxMjE4MTYwMTE0WhcNMjUxMjE5MTYwMTE0WjAzMTEwLwYDVQQD EygzYmFkZmE0OWUwZWRlM2MwODc2MTUyYmY5NGQ4Mjk4MjFiMTgzN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN9D2lGOYjayC2p/0Fmriczi4sLH G8KcckleDlqmlnqWYj+yMVUTSEiYnL0J4rjOzjOaymHLOmJ4adbWoh9QZsZ/Y3fM 2le0IYl1gOV/TdY0Cn6WO3fKa/XjT/MqZWgpUMMqohlhrS/yFafhKEiNqmDUm3OV WB/k0I7fl/dsf6B1ed2BdZH9V5I8/ug+9vr+aYsKR5OPjb2AmSD15I5OBXBTzkCJ jFiGxFAEn3pnodP9CVm1norbstyDo57vfCQYYV+F+prD/59w/gTdUq/wn7gA5qek wkgnPHAQo0HkFAeuByZIo2Erpv58T+k83y+kcNj90QaSYJlIzNElWhW+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDut+kng7ePAh2FSv5TYKYIbGDeoMB8GA1UdIwQY MBaAFGXtyRYXqt8MLMfx9deW29t+2FkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmUzSkZoZXEzd3dzeF9IMTE1YmIyMzdZV1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83YmUwMmYtMjhmNS00MjA5LTkzNWEt ODJkOGViZTk5NDI0LzEvWmUzSkZoZXEzd3dzeF9IMTE1YmIyMzdZV1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83YmUwMmYtMjhmNS00MjA5LTkzNWEtODJkOGViZTk5NDI0 LzEvWmUzSkZoZXEzd3dzeF9IMTE1YmIyMzdZV1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1Iqh1Pd eO/dxld7jOC9T7ZanE/gqkVfKVXnn1+TyCYb1n4Azfxc9pxMGgPO0d0a6muTwPXP c9zA5eA7xwi+6hKr+IEvSsXzc7b/86/iTitcJQHxU4WrDzpIoqrshXV+0A/7BnXn 7hjwHJr8Y5S8d1pWVHk91SPy3FWdbmWNXsKhj4SdhjmVSjOlQ3CB11T3cbuttO7/ 2K/Ts2GD1ymrochPTgsr1PvoQVDJxpENIWVSElw2gMwrA6qoksEp9hzoCh/vKHGM agBVjJ9UvUlHXuAF9U1602VKwJbrCzrxkW1/InjQeqEk8KdCj7BNnQjg69IffFZ/ wxzyasBg5BIDWg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:35:34 2025 by rpki-client