This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json) Hash identifier: LOhgxlD1HCievbasxijHf2tEGBdfh/0tefWsBd9RZ24= Subject key identifier: 50:15:4D:25:B4:D2:0F:FE:D7:2F:DF:AE:04:EA:AA:07:84:43:FE:C9 Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Certificate serial: 019B066BD5E3759831AEDD545D6D95FB7D25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft Manifest number: 14AC Signing time: Wed 10 Dec 2025 04:01:28 +0000 Manifest this update: Wed 10 Dec 2025 04:01:28 +0000 Manifest next update: Thu 11 Dec 2025 04:01:28 +0000 Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=) 2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: pAn7S5w/M9gIiCmEprCwCPhCF6AIcj9DcIIX/BQbNHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:d5:e3:75:98:31:ae:dd:54:5d:6d:95:fb:7d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Validity Not Before: Dec 10 04:01:28 2025 GMT Not After : Dec 11 04:01:28 2025 GMT Subject: CN=50154d25b4d20ffed72fdfae04eaaa078443fec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:ec:fa:27:73:4b:e3:ca:b2:bc:5a:74:21: 91:52:0d:a0:0f:6a:cf:50:36:92:70:25:d3:58:7e: 5d:f7:d2:40:94:2c:87:dd:12:db:d1:86:4e:17:81: 4b:15:e8:bd:c8:80:4c:26:42:60:8b:41:0e:e8:37: 0d:53:f0:31:95:f8:c7:0a:17:c0:24:9f:05:6b:cd: fb:9a:a2:e9:84:9c:81:5a:8e:29:36:d7:19:a7:2f: 1d:fa:ad:9c:0b:52:ba:b4:92:7b:d6:81:16:9d:bc: 3d:ff:0a:32:10:cc:42:df:42:6f:ec:38:ae:2b:7b: 70:ab:26:c8:87:0e:16:54:39:a5:6b:ae:be:91:f4: b4:83:5d:df:b6:6c:bf:68:43:b9:ef:b2:84:44:7d: 5c:74:6c:f8:f9:63:00:64:62:56:b9:ef:8b:35:6c: 6b:3b:ff:fd:37:d0:e9:2e:00:fb:a4:22:44:11:16: ce:b8:d1:29:98:96:5b:d2:74:d3:1b:b0:30:77:2f: 19:cd:cb:d1:38:fc:63:36:d1:ae:41:a9:64:c3:4a: 53:46:51:d5:b6:c5:ad:b0:21:3d:84:37:e6:63:a9: 3d:bc:66:93:62:09:f7:5b:44:81:69:00:8c:7d:cd: 69:ce:10:36:96:40:4a:00:88:6b:04:e9:da:bc:ab: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:15:4D:25:B4:D2:0F:FE:D7:2F:DF:AE:04:EA:AA:07:84:43:FE:C9 X509v3 Authority Key Identifier: keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:a0:bd:3a:ec:49:fb:7d:0c:91:33:02:1d:fc:11:81:32:65: 23:95:ed:ba:1a:04:97:99:49:41:fc:a0:3d:ae:d2:c9:c9:12: 78:c2:92:d4:f1:76:9d:0b:0c:df:10:89:25:e7:a1:c0:dc:3d: 3b:fb:e0:b6:56:a1:ae:2a:4f:b9:f0:ad:15:4e:bf:8b:4a:57: 75:11:1b:da:b8:ac:58:9e:bb:cb:c0:b4:e9:69:1e:a5:21:b9: a7:6c:67:a5:6a:bf:89:3d:e5:30:d0:d1:6e:80:d7:9e:36:d7: a3:29:2a:02:1e:1f:70:43:0b:02:ed:3f:92:04:0c:50:15:7d: aa:09:a6:45:74:f3:8e:1c:73:38:d0:c3:d0:27:67:35:7e:4a: a7:3c:91:d0:e7:2c:71:16:a5:ee:63:ac:0f:be:72:66:f7:be: 50:ea:db:30:5f:3d:ae:03:04:2d:a8:87:32:57:0b:fe:95:34: a1:04:60:f3:3d:58:93:7a:c0:dc:63:43:29:98:27:df:fb:d1: 30:7e:0d:a8:fb:95:45:0e:47:73:0b:01:b7:87:0c:86:7e:f5: ee:f4:45:f0:95:48:fc:39:68:53:47:37:ca:32:f1:60:32:85: ed:50:03:d5:a4:16:f7:c7:b9:dd:4d:d8:dd:4a:4c:1e:3a:3e: ba:cd:5f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa9XjdZgxrt1UXW2V+30lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx YjRhMjAwHhcNMjUxMjEwMDQwMTI4WhcNMjUxMjExMDQwMTI4WjAzMTEwLwYDVQQD Eyg1MDE1NGQyNWI0ZDIwZmZlZDcyZmRmYWUwNGVhYWEwNzg0NDNmZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G/s+idzS+PKsrxadCGRUg2gD2rP UDaScCXTWH5d99JAlCyH3RLb0YZOF4FLFei9yIBMJkJgi0EO6DcNU/AxlfjHChfA JJ8Fa837mqLphJyBWo4pNtcZpy8d+q2cC1K6tJJ71oEWnbw9/woyEMxC30Jv7Diu K3twqybIhw4WVDmla66+kfS0g13ftmy/aEO577KERH1cdGz4+WMAZGJWue+LNWxr O//9N9DpLgD7pCJEERbOuNEpmJZb0nTTG7Awdy8ZzcvROPxjNtGuQalkw0pTRlHV tsWtsCE9hDfmY6k9vGaTYgn3W0SBaQCMfc1pzhA2lkBKAIhrBOnavKtcHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAVTSW00g/+1y/frgTqqgeEQ/7JMB8GA1UdIwQY MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0qC9OuxJ +30MkTMCHfwRgTJlI5XtuhoEl5lJQfygPa7SyckSeMKS1PF2nQsM3xCJJeehwNw9 O/vgtlahripPufCtFU6/i0pXdREb2risWJ67y8C06WkepSG5p2xnpWq/iT3lMNDR boDXnjbXoykqAh4fcEMLAu0/kgQMUBV9qgmmRXTzjhxzONDD0CdnNX5KpzyR0Ocs cRal7mOsD75yZve+UOrbMF89rgMELaiHMlcL/pU0oQRg8z1Yk3rA3GNDKZgn3/vR MH4NqPuVRQ5HcwsBt4cMhn717vRF8JVI/DloU0c3yjLxYDKF7VAD1aQW98e53U3Y 3UpMHjo+us1f5w== -----END CERTIFICATE-----Generated at Wed Dec 10 09:52:45 2025 by rpki-client