This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json) Hash identifier: q9G8RAtK2E26kGBE2OCQs0aXbk+C9Ur3AFhRSqbZhFc= Subject key identifier: 81:9A:4E:E8:E6:62:8F:DD:27:32:D8:24:2C:CB:37:06:F8:80:99:87 Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61 Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61 Certificate serial: 019B05C70D223FD2AA64F8F8BC9ACDE9EFD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft Manifest number: 1198 Signing time: Wed 10 Dec 2025 01:01:29 +0000 Manifest this update: Wed 10 Dec 2025 01:01:29 +0000 Manifest next update: Thu 11 Dec 2025 01:01:29 +0000 Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: 7mEHJdyYRDerymQP8Y0cDMn5SyZnm2K/3WLEw+a2/ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c7:0d:22:3f:d2:aa:64:f8:f8:bc:9a:cd:e9:ef:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61 Validity Not Before: Dec 10 01:01:29 2025 GMT Not After : Dec 11 01:01:29 2025 GMT Subject: CN=819a4ee8e6628fdd2732d8242ccb3706f8809987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:ae:11:e6:85:4f:df:1d:79:8b:c6:38:83: 4a:4c:9b:26:a5:cd:34:95:83:f9:e7:42:9a:48:a2: bd:29:0c:8e:e0:a8:b5:eb:84:ff:ad:7c:2a:e9:ac: d7:1c:85:65:c9:92:9a:8b:31:b8:4d:c3:0e:17:39: 9c:fb:90:89:37:27:06:71:04:31:9a:ae:3e:06:db: 5f:1e:2e:a7:dd:7a:0b:7c:60:96:58:e4:ce:1a:e7: cd:1d:b3:b3:a6:fa:c2:a2:57:a2:c9:6e:a8:d5:1a: f9:d7:f4:1b:e3:bc:60:da:f6:e9:35:77:5f:cc:2c: 48:08:e4:d5:fa:3f:b6:9c:6a:1c:12:be:58:e6:24: 56:f0:85:a0:37:2b:16:d9:6c:c3:e6:20:40:21:f5: 6f:71:9a:f6:c5:f9:56:8f:2f:d6:49:11:69:42:bc: cc:f4:aa:d0:f2:53:b3:36:81:53:f1:59:c4:ad:ca: fa:a5:b3:8f:16:5b:8d:73:06:77:1b:1c:55:b6:41: a2:63:34:b3:ba:20:7d:c2:91:61:bf:7d:2e:b7:79: f7:20:2b:3a:90:c7:dd:5c:fa:ba:b7:6c:c5:16:b7: 5b:f8:da:67:44:3f:57:7f:8c:15:f7:f4:0a:3a:83: f7:8b:4e:36:b2:ca:be:aa:61:86:db:d4:fb:68:82: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:4E:E8:E6:62:8F:DD:27:32:D8:24:2C:CB:37:06:F8:80:99:87 X509v3 Authority Key Identifier: keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2d:21:11:ca:1b:d4:1b:fe:7d:8c:71:ba:bb:ac:9a:74:34: 99:a4:8f:9e:1e:16:91:40:26:b6:e0:86:5d:b6:5a:72:63:ad: d3:58:a2:60:e3:ae:05:c0:bf:0a:f1:5d:07:c5:dd:58:ec:d4: dd:ca:6a:fd:43:33:c2:85:0d:c5:32:9a:a5:39:fa:06:31:ec: 4a:2e:14:59:7e:8d:63:25:79:0a:bf:50:0e:b1:b0:83:b1:d8: 48:00:20:88:78:ff:40:8c:40:f3:e0:69:54:f1:93:b8:8c:a8: 4d:62:8d:20:42:90:cf:59:4a:8f:c5:1d:44:d5:af:23:cb:5b: 7d:f5:92:f9:de:11:1c:a7:bf:2f:6f:d0:ba:26:9b:64:ab:8b: ac:bb:92:5f:ce:23:21:55:b5:a8:00:ef:22:a7:fd:8c:52:3a: 75:e9:6c:ff:6a:a0:f2:cd:83:c1:20:48:14:0c:29:08:0e:01: 3b:24:dd:3f:c4:ea:8e:56:e1:25:28:ba:8e:fc:b2:9a:13:7a: e4:f8:91:c5:64:6b:e8:94:6e:e8:f6:61:12:49:6b:3e:c5:fc: bc:39:a3:8b:7f:c7:07:45:63:ac:53:05:10:d3:af:39:35:be: fb:85:2d:50:b5:50:e5:3f:b5:d8:39:e6:85:5b:aa:50:1d:ec: 55:e7:41:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxw0iP9KqZPj4vJrN6e/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDFmNmVlNjcxZWVhNTM1OGU3MWNlN2ZjMTFjOTM2Y2Mz NzZjNjEwHhcNMjUxMjEwMDEwMTI5WhcNMjUxMjExMDEwMTI5WjAzMTEwLwYDVQQD Eyg4MTlhNGVlOGU2NjI4ZmRkMjczMmQ4MjQyY2NiMzcwNmY4ODA5OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+iuEeaFT98deYvGOINKTJsmpc00 lYP550KaSKK9KQyO4Ki164T/rXwq6azXHIVlyZKaizG4TcMOFzmc+5CJNycGcQQx mq4+BttfHi6n3XoLfGCWWOTOGufNHbOzpvrColeiyW6o1Rr51/Qb47xg2vbpNXdf zCxICOTV+j+2nGocEr5Y5iRW8IWgNysW2WzD5iBAIfVvcZr2xflWjy/WSRFpQrzM 9KrQ8lOzNoFT8VnErcr6pbOPFluNcwZ3GxxVtkGiYzSzuiB9wpFhv30ut3n3ICs6 kMfdXPq6t2zFFrdb+NpnRD9Xf4wV9/QKOoP3i042ssq+qmGG29T7aIKuUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGaTujmYo/dJzLYJCzLNwb4gJmHMB8GA1UdIwQY MBaAFMxB9u5nHupTWOcc5/wRyTbMN2xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84ODU3YTMtZGExZS00NTQ5LWFlYzAt NmYyZTc5ZDgyN2UwLzEvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC84ODU3YTMtZGExZS00NTQ5LWFlYzAtNmYyZTc5ZDgyN2Uw LzEvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASy0hEcob 1Bv+fYxxurusmnQ0maSPnh4WkUAmtuCGXbZacmOt01iiYOOuBcC/CvFdB8XdWOzU 3cpq/UMzwoUNxTKapTn6BjHsSi4UWX6NYyV5Cr9QDrGwg7HYSAAgiHj/QIxA8+Bp VPGTuIyoTWKNIEKQz1lKj8UdRNWvI8tbffWS+d4RHKe/L2/QuiabZKuLrLuSX84j IVW1qADvIqf9jFI6dels/2qg8s2DwSBIFAwpCA4BOyTdP8TqjlbhJSi6jvyymhN6 5PiRxWRr6JRu6PZhEklrPsX8vDmji3/HB0VjrFMFENOvOTW++4UtULVQ5T+12Dnm hVuqUB3sVedBZg== -----END CERTIFICATE-----Generated at Wed Dec 10 09:25:47 2025 by rpki-client