This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json) Hash identifier: v8J+x4gDODswmt62sGYJzV0Io3SNf6MZ6q47hSUHXOg= Subject key identifier: EA:15:BE:34:68:2E:F2:15:63:F3:96:0C:33:D2:B4:A5:1B:9A:82:92 Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Certificate serial: 019ACAC525473D6F5BEA55F88C778A1629CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft Manifest number: 1751 Signing time: Fri 28 Nov 2025 14:01:48 +0000 Manifest this update: Fri 28 Nov 2025 14:01:48 +0000 Manifest next update: Sat 29 Nov 2025 14:01:48 +0000 Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=) 2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=) 3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: lACHIj834+2HfwWIG+3RBVvhx7BD0gkrwZTKHlU4rdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:c5:25:47:3d:6f:5b:ea:55:f8:8c:77:8a:16:29:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Validity Not Before: Nov 28 14:01:48 2025 GMT Not After : Nov 29 14:01:48 2025 GMT Subject: CN=ea15be34682ef21563f3960c33d2b4a51b9a8292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:7d:b4:44:d7:95:49:be:ee:9e:fb:34:0f: 47:89:9b:9d:4a:b0:58:f0:8a:8f:17:f5:ba:44:80: d4:b0:44:ab:d2:82:c9:82:b6:5e:39:4f:3f:f9:28: 6d:df:03:d7:b6:b3:84:c7:e5:c7:ff:7e:2e:4f:ef: ab:ca:c4:3c:cd:6b:53:3f:68:34:b1:df:0f:3e:9e: a2:e0:78:c9:96:72:75:aa:a9:3e:e9:47:31:2c:b8: c5:a6:1e:22:7e:52:64:89:f6:ff:65:6f:84:6b:26: 96:39:5e:f9:de:93:a0:9d:e4:ec:11:83:ec:f5:45: 35:59:44:a0:5e:da:95:49:63:9d:e7:49:e8:49:95: 5a:06:30:c3:3e:7c:52:9c:02:b4:01:3c:77:21:07: 9c:5e:3e:80:f4:fe:48:32:3e:2c:4e:07:f0:2f:5f: 43:45:b2:f0:54:7c:f8:b0:58:8a:f4:88:6d:ff:42: 54:8c:59:b0:74:88:fd:a9:a5:43:13:35:58:d9:2d: 82:5b:f1:85:50:11:c1:bb:dc:f1:db:32:19:78:52: 09:1b:af:75:fd:22:12:41:71:07:13:d6:e6:10:51: 1d:4e:a1:99:6e:ab:a9:58:15:86:5f:d1:05:00:e4: 76:6b:fe:fc:2c:90:fb:af:ea:9f:8f:8e:09:88:b9: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:BE:34:68:2E:F2:15:63:F3:96:0C:33:D2:B4:A5:1B:9A:82:92 X509v3 Authority Key Identifier: keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ad:9e:ea:7d:59:0f:26:bf:07:27:9d:dd:28:e5:60:b5:b6: b4:1f:db:c6:42:47:53:5b:e7:57:7d:6e:1d:56:ed:05:ce:9e: e3:41:b8:5f:ad:36:03:8f:60:5f:a1:f8:cb:70:2a:9b:8a:08: 53:de:d4:3b:ba:be:3b:ef:e8:62:68:61:09:3a:96:25:45:0f: f1:1f:0d:9a:33:54:85:59:ef:7a:4a:e9:7b:82:94:cb:92:ea: ba:b5:00:01:d9:74:1e:69:7b:91:40:0c:6f:75:4e:6d:26:88: ac:a0:5b:7f:cf:f9:fe:e9:92:00:2e:a9:54:a9:b4:f6:66:51: 44:2e:6f:44:48:be:25:79:4d:53:62:13:2b:18:58:b4:05:84: 95:f9:23:44:ea:ab:b8:7b:e9:eb:75:1a:f0:f6:a8:5d:5b:55: d3:7b:e9:f1:bb:c2:0e:0a:a9:fa:b8:3e:8e:e4:2e:ee:03:0a: cf:b6:09:9b:ea:3e:76:c6:12:16:47:23:a4:13:fa:67:8b:43: 9f:7a:09:5b:25:83:02:b5:67:75:38:e6:d6:81:4a:a9:ba:f3: 5f:6a:c5:1f:82:98:f5:a7:fc:28:c7:f3:d6:21:68:ba:84:9a: 10:a0:1b:ab:19:6f:c1:eb:5e:2a:af:8e:77:f1:41:f1:11:f8: d3:c6:3a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrKxSVHPW9b6lX4jHeKFinLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDZiZmZmOGI5MGUzNzQ4NTU1YmExNDQ3ZmQ0ZWRlY2Mz NDBhMTMwHhcNMjUxMTI4MTQwMTQ4WhcNMjUxMTI5MTQwMTQ4WjAzMTEwLwYDVQQD EyhlYTE1YmUzNDY4MmVmMjE1NjNmMzk2MGMzM2QyYjRhNTFiOWE4MjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkB9tETXlUm+7p77NA9HiZudSrBY 8IqPF/W6RIDUsESr0oLJgrZeOU8/+Sht3wPXtrOEx+XH/34uT++rysQ8zWtTP2g0 sd8PPp6i4HjJlnJ1qqk+6UcxLLjFph4iflJkifb/ZW+EayaWOV753pOgneTsEYPs 9UU1WUSgXtqVSWOd50noSZVaBjDDPnxSnAK0ATx3IQecXj6A9P5IMj4sTgfwL19D RbLwVHz4sFiK9Iht/0JUjFmwdIj9qaVDEzVY2S2CW/GFUBHBu9zx2zIZeFIJG691 /SISQXEHE9bmEFEdTqGZbqupWBWGX9EFAOR2a/78LJD7r+qfj44JiLl5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoVvjRoLvIVY/OWDDPStKUbmoKSMB8GA1UdIwQY MBaAFMxGv/+LkON0hVW6FEf9Tt7MNAoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt NGRjOWJmNjQyZGQyLzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy LzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfq2e6n1Z Dya/Byed3SjlYLW2tB/bxkJHU1vnV31uHVbtBc6e40G4X602A49gX6H4y3Aqm4oI U97UO7q+O+/oYmhhCTqWJUUP8R8NmjNUhVnvekrpe4KUy5LqurUAAdl0Hml7kUAM b3VObSaIrKBbf8/5/umSAC6pVKm09mZRRC5vREi+JXlNU2ITKxhYtAWElfkjROqr uHvp63Ua8PaoXVtV03vp8bvCDgqp+rg+juQu7gMKz7YJm+o+dsYSFkcjpBP6Z4tD n3oJWyWDArVndTjm1oFKqbrzX2rFH4KY9af8KMfz1iFouoSaEKAbqxlvweteKq+O d/FB8RH408Y64g== -----END CERTIFICATE-----Generated at Fri Nov 28 17:42:54 2025 by rpki-client