This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json) Hash identifier: 2CSlLP2Kg6JR6qNRv/wm1f1oIOE4nncgQorDk+hRaYc= Subject key identifier: B6:A1:49:80:40:69:3D:F0:4C:1C:45:18:5D:CF:A7:D2:2F:7E:14:C3 Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32 Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432 Certificate serial: 019B0F00F2DD0D0EAD09BD402441359C15E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft Manifest number: 0DD9 Signing time: Thu 11 Dec 2025 20:01:18 +0000 Manifest this update: Thu 11 Dec 2025 20:01:18 +0000 Manifest next update: Fri 12 Dec 2025 20:01:18 +0000 Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=) 2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: diYOKhiTCZ7rHZvktmc1jG+mU5Ha4vS9IRfMonvtMkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:f2:dd:0d:0e:ad:09:bd:40:24:41:35:9c:15:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432 Validity Not Before: Dec 11 20:01:18 2025 GMT Not After : Dec 12 20:01:18 2025 GMT Subject: CN=b6a1498040693df04c1c45185dcfa7d22f7e14c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:be:27:b8:7b:68:6e:1c:1d:09:b0:13:3f: 39:74:54:15:42:9a:ea:7e:51:02:01:37:c8:4c:94: 07:39:77:49:a0:8a:f9:54:d1:e4:9a:0f:62:02:66: 21:fb:d9:d0:5c:d9:5b:52:17:ce:c0:23:28:71:eb: 05:a8:41:ea:5e:8c:b8:51:3d:cd:2a:66:b5:fc:67: 9a:03:51:82:30:b2:f6:2f:88:72:5b:f4:40:52:ee: 9a:cf:6e:98:2f:ef:c7:bc:00:28:30:e3:97:cb:10: c3:8b:36:7d:f0:45:65:b5:3f:9b:bd:1b:1b:84:c9: 1e:3c:b0:35:e1:13:59:2d:08:71:6f:8d:88:7e:7d: 05:bb:b7:91:ea:ed:76:94:60:33:69:3a:7d:d1:a1: b4:4e:98:18:c7:92:cc:d9:87:7f:17:06:e2:a7:b2: 26:00:3e:8a:b6:0f:a1:27:76:26:7a:bd:3d:85:b9: 5d:27:0f:a7:54:d3:77:d0:b6:ca:a0:54:33:15:25: f8:47:7c:e1:46:7d:cf:80:76:83:1b:1b:97:f6:5e: ad:d2:3e:12:ec:28:08:d7:1b:98:a2:04:fb:18:84: 7d:17:5e:3c:23:80:79:d9:86:52:aa:1a:54:62:b5: 9c:91:52:f3:fa:7a:d6:ad:33:7d:88:3c:2f:87:ed: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A1:49:80:40:69:3D:F0:4C:1C:45:18:5D:CF:A7:D2:2F:7E:14:C3 X509v3 Authority Key Identifier: keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:de:93:bf:8e:fa:af:32:b6:ba:63:e5:20:0c:31:16:1c:9a: b6:92:e3:b4:35:e0:25:77:a0:5b:45:f5:5c:b8:e9:86:33:a7: ac:af:0a:f5:4f:69:65:f9:6f:12:d1:7b:ad:c2:df:17:ca:19: d5:d3:84:06:47:85:94:dd:15:d6:99:7e:a7:60:ce:ff:b6:ca: 48:07:19:da:ba:5f:51:3e:55:85:3f:25:b3:3f:1f:5b:85:99: f5:91:9b:c2:e6:de:b5:29:1c:30:fe:63:72:8c:7e:90:e7:cf: 85:16:85:9c:ba:5f:8f:30:2a:81:72:fd:74:45:50:09:12:58: 71:c5:5e:11:59:1b:0d:35:a3:83:bd:9b:39:87:db:31:32:87: 59:3e:0a:df:83:9d:9c:68:9d:a4:24:6a:76:6e:f6:ed:df:ee: 4b:5d:28:9d:2c:06:0c:18:8c:c9:10:ca:5f:0c:dc:bf:d6:ef: f3:66:bd:47:fe:69:ba:81:a6:b2:0d:29:d3:7a:b4:e1:b0:20: 4e:e0:1c:2c:ec:33:0a:68:c7:46:de:e8:68:5e:7d:e6:3e:2f: 38:4c:72:ea:5d:39:60:9d:fa:ed:28:4c:ae:da:a6:c5:84:32: d8:92:c7:c4:5b:55:d8:fe:73:bd:98:6a:f0:3a:cf:9c:5e:5d: 4a:a6:95:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAPLdDQ6tCb1AJEE1nBXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTc5OGE4ZGE5OTk5ZGRmNTNhM2M4ZDM4ZjM2ZjE3ZWNk NDU0MzIwHhcNMjUxMjExMjAwMTE4WhcNMjUxMjEyMjAwMTE4WjAzMTEwLwYDVQQD EyhiNmExNDk4MDQwNjkzZGYwNGMxYzQ1MTg1ZGNmYTdkMjJmN2UxNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxC+J7h7aG4cHQmwEz85dFQVQprq flECATfITJQHOXdJoIr5VNHkmg9iAmYh+9nQXNlbUhfOwCMocesFqEHqXoy4UT3N Kma1/GeaA1GCMLL2L4hyW/RAUu6az26YL+/HvAAoMOOXyxDDizZ98EVltT+bvRsb hMkePLA14RNZLQhxb42Ifn0Fu7eR6u12lGAzaTp90aG0TpgYx5LM2Yd/Fwbip7Im AD6Ktg+hJ3Ymer09hbldJw+nVNN30LbKoFQzFSX4R3zhRn3PgHaDGxuX9l6t0j4S 7CgI1xuYogT7GIR9F148I4B52YZSqhpUYrWckVLz+nrWrTN9iDwvh+1MiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLahSYBAaT3wTBxFGF3Pp9IvfhTDMB8GA1UdIwQY MBaAFM6XmKjamZnd9To8jTjzbxfs1FQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYt OThmY2IzYThiYzllLzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYtOThmY2IzYThiYzll LzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtN6Tv476 rzK2umPlIAwxFhyatpLjtDXgJXegW0X1XLjphjOnrK8K9U9pZflvEtF7rcLfF8oZ 1dOEBkeFlN0V1pl+p2DO/7bKSAcZ2rpfUT5VhT8lsz8fW4WZ9ZGbwubetSkcMP5j cox+kOfPhRaFnLpfjzAqgXL9dEVQCRJYccVeEVkbDTWjg72bOYfbMTKHWT4K34Od nGidpCRqdm727d/uS10onSwGDBiMyRDKXwzcv9bv82a9R/5puoGmsg0p03q04bAg TuAcLOwzCmjHRt7oaF595j4vOExy6l05YJ367ShMrtqmxYQy2JLHxFtV2P5zvZhq 8DrPnF5dSqaVzQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:35:20 2025 by rpki-client