This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json) Hash identifier: PhEEFlXCk9VSDv9V60J0OuE38IDtBc+136qMXGUsx+Y= Subject key identifier: 19:B6:0C:45:2A:B4:B9:D0:95:B8:29:E9:FE:09:CA:B2:5A:4C:F1:EF Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Certificate serial: 019B1125FE86FAD9557D4AFC3118226BB4CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft Manifest number: 0CBC Signing time: Fri 12 Dec 2025 06:01:01 +0000 Manifest this update: Fri 12 Dec 2025 06:01:01 +0000 Manifest next update: Sat 13 Dec 2025 06:01:01 +0000 Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=) 2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=) 3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=) 4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: q1XOokOaSmzkflb4R7xmjbNfTej/jeYM8sK3W7kaliI=) 5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=) 6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=) 7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:fe:86:fa:d9:55:7d:4a:fc:31:18:22:6b:b4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Validity Not Before: Dec 12 06:01:01 2025 GMT Not After : Dec 13 06:01:01 2025 GMT Subject: CN=19b60c452ab4b9d095b829e9fe09cab25a4cf1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:d4:91:22:4f:d6:97:58:fe:ba:f5:ba:8c: 15:29:15:9e:89:cd:89:ef:5d:fb:d5:8e:87:76:fa: 48:4f:ff:b1:08:49:6c:75:ea:2c:19:89:58:95:7a: 33:a0:d9:85:25:2f:ce:20:7b:86:64:45:29:e2:9d: 84:1b:67:d9:89:32:47:e1:aa:5a:34:8c:a3:eb:7b: 5f:22:5b:c9:c2:18:fd:68:4e:24:1b:a3:d7:08:56: 2c:e2:5b:54:73:b6:1f:85:65:c2:de:34:95:a5:ed: 25:05:39:7b:6c:83:f1:b5:dd:1d:87:83:0e:84:4e: 1e:d4:a2:01:7a:9b:9a:44:bd:b8:ea:74:ec:15:10: 8f:73:fe:30:38:df:35:ac:b9:ca:d8:a2:dc:6b:12: eb:46:77:ed:f8:55:75:ea:95:65:5f:93:4a:cb:0a: 03:2f:a6:c0:36:d7:51:0c:bc:5a:0f:73:7a:0b:fd: 64:9c:5b:b3:03:e3:0c:01:dd:be:4c:2e:14:78:19: 06:9b:a4:53:e2:57:14:85:14:5e:18:77:d8:5d:b0: 49:bf:f1:98:81:78:a8:7c:c1:ba:85:1c:e8:a5:66: 76:8b:a2:99:bd:e8:4f:e9:be:6f:63:5a:58:a2:33: c9:04:c3:f9:6a:38:a1:9e:87:51:20:6f:05:5a:44: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B6:0C:45:2A:B4:B9:D0:95:B8:29:E9:FE:09:CA:B2:5A:4C:F1:EF X509v3 Authority Key Identifier: keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:75:76:3b:12:1e:e3:cc:4d:cf:b4:ff:a4:b1:31:68:80:ec: 1b:ef:ac:ad:b2:7c:70:d7:cc:a6:13:0d:76:e5:b6:fa:ed:f5: 2d:fc:b9:77:88:db:14:72:94:72:49:33:61:10:34:b9:e6:14: 50:93:a2:79:64:66:d2:30:d5:84:40:cd:a0:57:5d:47:6e:35: f9:37:23:a9:09:b9:57:1d:77:5f:0a:c2:98:90:e4:1a:e4:3d: ce:75:63:86:9c:10:02:dd:c9:6d:2f:56:60:b7:e4:1d:69:5f: 30:09:69:00:4a:45:8a:96:64:4c:f6:86:2c:fa:91:30:d8:ca: a5:4e:4f:28:69:9f:4b:47:63:c4:d3:b9:87:7d:c3:66:d8:c1: 78:08:8d:7e:e9:44:3c:8d:69:20:d2:e2:35:0f:ff:9b:75:e7: eb:7d:54:91:92:bb:97:16:01:e3:31:e3:79:d5:27:e0:26:87: 2c:70:0f:bc:a7:e3:51:dc:33:1b:13:83:3f:ee:26:6f:90:8d: b1:b8:e2:ce:14:79:3a:49:13:e2:19:61:06:55:69:98:e9:3d: fe:82:c7:d2:dd:d2:fa:67:a0:84:64:6e:d7:6f:56:5a:5a:fd: b5:c7:fe:13:d4:a9:d3:63:e0:da:15:6f:ea:8b:ca:14:0a:41: a6:b8:e1:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJf6G+tlVfUr8MRgia7TOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0 YjViMTEwHhcNMjUxMjEyMDYwMTAxWhcNMjUxMjEzMDYwMTAxWjAzMTEwLwYDVQQD EygxOWI2MGM0NTJhYjRiOWQwOTViODI5ZTlmZTA5Y2FiMjVhNGNmMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUTUkSJP1pdY/rr1uowVKRWeic2J 71371Y6HdvpIT/+xCElsdeosGYlYlXozoNmFJS/OIHuGZEUp4p2EG2fZiTJH4apa NIyj63tfIlvJwhj9aE4kG6PXCFYs4ltUc7YfhWXC3jSVpe0lBTl7bIPxtd0dh4MO hE4e1KIBepuaRL246nTsFRCPc/4wON81rLnK2KLcaxLrRnft+FV16pVlX5NKywoD L6bANtdRDLxaD3N6C/1knFuzA+MMAd2+TC4UeBkGm6RT4lcUhRReGHfYXbBJv/GY gXiofMG6hRzopWZ2i6KZvehP6b5vY1pYojPJBMP5ajihnodRIG8FWkQmcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm2DEUqtLnQlbgp6f4JyrJaTPHvMB8GA1UdIwQY MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHV2OxIe 48xNz7T/pLExaIDsG++srbJ8cNfMphMNduW2+u31Lfy5d4jbFHKUckkzYRA0ueYU UJOieWRm0jDVhEDNoFddR241+TcjqQm5Vx13XwrCmJDkGuQ9znVjhpwQAt3JbS9W YLfkHWlfMAlpAEpFipZkTPaGLPqRMNjKpU5PKGmfS0djxNO5h33DZtjBeAiNfulE PI1pINLiNQ//m3Xn631UkZK7lxYB4zHjedUn4CaHLHAPvKfjUdwzGxODP+4mb5CN sbjizhR5OkkT4hlhBlVpmOk9/oLH0t3S+meghGRu129WWlr9tcf+E9Sp02Pg2hVv 6ovKFApBprjhxA== -----END CERTIFICATE-----Generated at Fri Dec 12 07:39:13 2025 by rpki-client