This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft File: zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json) Hash identifier: Xru/pyGpKx+aZV3hQ1IeUMEPSp2ns6Y/YkIJCMnqpmY= Subject key identifier: 6B:EE:E2:59:5E:A1:A2:F3:EB:16:69:4F:57:02:12:02:91:A2:5E:3A Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F Certificate issuer: /CN=cc4500091efcd905e72ea45f278248661f225b2f Certificate serial: 019B43C9DC2235D2AC35AB7CBF8E43997E75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft Manifest number: 0240 Signing time: Mon 22 Dec 2025 02:01:01 +0000 Manifest this update: Mon 22 Dec 2025 02:01:01 +0000 Manifest next update: Tue 23 Dec 2025 02:01:01 +0000 Files and hashes: 1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: ku0aQ495Wf6M7Nix0aG38MTM2WRPFaWDILc9fmFPVOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:dc:22:35:d2:ac:35:ab:7c:bf:8e:43:99:7e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f Validity Not Before: Dec 22 02:01:01 2025 GMT Not After : Dec 23 02:01:01 2025 GMT Subject: CN=6beee2595ea1a2f3eb16694f5702120291a25e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:51:46:05:d2:30:f1:06:e0:35:43:b9:58: 77:97:d3:4b:c0:f1:39:40:b5:23:bf:29:bd:d8:97: ab:54:8c:8f:b2:c0:dd:bd:f1:f8:3b:69:85:94:bd: 5d:31:0b:72:ce:a2:7b:4e:36:69:3c:8a:81:31:73: d1:0e:cf:25:56:07:3d:bb:25:bd:af:42:e7:14:86: e9:72:19:b2:f4:b7:a9:d5:6d:55:6d:30:3b:e1:47: e4:d6:16:cf:86:01:e3:71:39:cd:37:a2:06:15:da: af:88:30:1d:e5:4f:eb:3e:3f:9f:5e:7c:c8:35:61: 8f:93:02:6a:2b:35:4d:74:e2:ef:f4:7a:7f:77:19: 3b:8e:a8:c1:12:be:d6:ff:96:43:56:24:01:8d:26: ff:d8:12:9f:80:49:fe:05:4c:6f:82:b2:6e:df:2a: 1e:cb:cd:8b:35:b9:ef:65:58:62:31:e6:c8:c4:39: 31:5a:4a:a4:94:09:3f:b4:e3:33:30:9e:d4:28:5c: f4:4e:79:fd:60:c0:27:4b:a6:29:b8:09:ca:6e:c0: 61:2b:59:7b:05:08:6e:91:99:42:6b:b4:99:b3:91: 5b:97:01:73:7c:09:2b:cb:ae:68:b8:9f:18:2a:db: 26:b6:f5:b3:ea:3d:b6:ed:53:d6:82:cd:de:b5:0b: e1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EE:E2:59:5E:A1:A2:F3:EB:16:69:4F:57:02:12:02:91:A2:5E:3A X509v3 Authority Key Identifier: keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2a:d6:6a:5d:fb:9b:b1:d0:54:73:ec:30:ce:71:3d:fc:3c: be:66:50:b5:0a:33:44:31:6c:73:19:97:d6:24:37:42:ce:50: ef:1b:ed:e6:13:7a:18:c8:d6:8c:05:41:07:56:2d:8e:c6:99: 0c:45:3c:f3:ea:1d:a3:f3:a3:7b:d7:90:ad:3a:b9:eb:d7:9c: 36:3b:64:db:3a:f0:30:9e:a3:bf:f3:b4:06:e9:d9:de:16:74: bd:9d:4a:ed:ed:45:db:1c:b2:6e:b2:1d:1a:07:38:50:30:e3: 63:e2:d7:34:c7:24:02:b1:f1:90:86:c4:c5:83:01:3b:72:81: a7:d9:ce:36:e3:75:f0:ea:07:b7:1a:1e:5e:83:a8:39:fe:e1: 92:81:a8:63:87:34:92:91:5f:a7:5e:5f:bf:af:0b:1e:2c:f1: 1d:8d:ed:8b:7f:a2:0c:bc:05:df:d7:9a:f0:1c:6d:86:d1:39: 4a:56:98:a1:67:0d:4f:9a:2f:75:85:ae:19:d3:5b:e8:dc:73: 6a:1a:92:4e:80:ed:9f:91:b5:0c:a3:b7:d2:f0:7d:23:45:34: 15:c0:87:dd:4e:93:93:ca:49:8d:1c:c3:62:22:93:e2:37:14: b5:5f:72:ec:2c:af:1d:15:e8:6e:fb:f5:9e:79:40:1a:1e:b6: 5b:95:de:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDydwiNdKsNat8v45DmX51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDUwMDA5MWVmY2Q5MDVlNzJlYTQ1ZjI3ODI0ODY2MWYy MjViMmYwHhcNMjUxMjIyMDIwMTAxWhcNMjUxMjIzMDIwMTAxWjAzMTEwLwYDVQQD Eyg2YmVlZTI1OTVlYTFhMmYzZWIxNjY5NGY1NzAyMTIwMjkxYTI1ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYNRRgXSMPEG4DVDuVh3l9NLwPE5 QLUjvym92JerVIyPssDdvfH4O2mFlL1dMQtyzqJ7TjZpPIqBMXPRDs8lVgc9uyW9 r0LnFIbpchmy9Lep1W1VbTA74Ufk1hbPhgHjcTnNN6IGFdqviDAd5U/rPj+fXnzI NWGPkwJqKzVNdOLv9Hp/dxk7jqjBEr7W/5ZDViQBjSb/2BKfgEn+BUxvgrJu3yoe y82LNbnvZVhiMebIxDkxWkqklAk/tOMzMJ7UKFz0Tnn9YMAnS6YpuAnKbsBhK1l7 BQhukZlCa7SZs5FblwFzfAkry65ouJ8YKtsmtvWz6j227VPWgs3etQvh5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvu4lleoaLz6xZpT1cCEgKRol46MB8GA1UdIwQY MBaAFMxFAAke/NkF5y6kXyeCSGYfIlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzct NDQ5MTQwMWVkYzIyLzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzctNDQ5MTQwMWVkYzIy LzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApirWal37 m7HQVHPsMM5xPfw8vmZQtQozRDFscxmX1iQ3Qs5Q7xvt5hN6GMjWjAVBB1YtjsaZ DEU88+odo/Oje9eQrTq569ecNjtk2zrwMJ6jv/O0BunZ3hZ0vZ1K7e1F2xyybrId Ggc4UDDjY+LXNMckArHxkIbExYMBO3KBp9nONuN18OoHtxoeXoOoOf7hkoGoY4c0 kpFfp15fv68LHizxHY3ti3+iDLwF39ea8BxthtE5SlaYoWcNT5ovdYWuGdNb6Nxz ahqSToDtn5G1DKO30vB9I0U0FcCH3U6Tk8pJjRzDYiKT4jcUtV9y7CyvHRXobvv1 nnlAGh62W5XexQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:06:51 2025 by rpki-client