This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json) Hash identifier: n0cwsJ2rMnDBa0mwk1Fk9dfZy47ezhP143M27tIy8Vw= Subject key identifier: 8E:10:C2:AA:F9:73:E7:9B:30:69:5B:1F:9F:02:CF:78:0D:54:2F:91 Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854 Certificate serial: 019B34C5EED8F4E7D15E089166C6A5715CE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:02:25 +0000 Manifest this update: Fri 19 Dec 2025 04:02:25 +0000 Manifest next update: Sat 20 Dec 2025 04:02:25 +0000 Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=) 2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=) 3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: +AV5CBqMOUS26g7TDrArFw0QFF1gNcEl1zeNqXL0bcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:ee:d8:f4:e7:d1:5e:08:91:66:c6:a5:71:5c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854 Validity Not Before: Dec 19 04:02:25 2025 GMT Not After : Dec 20 04:02:25 2025 GMT Subject: CN=8e10c2aaf973e79b30695b1f9f02cf780d542f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:43:33:84:a2:9d:4c:59:78:be:6e:02:5c: 61:23:89:99:f4:9e:d2:6a:65:40:17:cb:ff:25:81: e4:04:e1:36:8b:da:77:9a:4e:b5:c1:f6:23:7d:09: 43:44:32:ac:f1:52:79:e0:06:6a:c2:02:9e:40:6a: 0c:ac:45:cd:c2:b0:25:a0:d7:97:9d:15:21:13:07: 41:21:9f:9b:34:be:e8:62:5e:82:e7:b8:a2:35:e5: 96:57:46:eb:81:34:c8:48:12:03:a5:3d:10:ba:48: bf:65:bc:99:f2:bf:d3:41:e1:00:1d:49:4f:37:0d: e4:3d:a2:c5:0f:c0:96:40:54:94:34:af:9d:f8:b6: 61:8a:96:89:20:97:31:a4:21:04:d6:b1:73:51:66: 10:76:fb:5e:c7:99:59:03:d9:a2:92:ba:ea:b3:ed: 2c:4e:f2:83:79:91:8f:37:9a:df:f5:5b:e5:95:f7: 51:5f:60:2f:2e:27:64:b9:ba:19:c0:13:81:cc:bc: 14:8d:11:4b:bd:55:6f:97:db:b7:c2:83:4a:0e:51: 0c:99:15:7d:d7:77:a7:77:b9:32:e0:08:12:6e:5e: f4:d5:8e:10:f3:17:31:b0:34:58:79:b4:30:7d:fe: 94:cd:ce:98:8b:8f:71:bb:61:72:06:0e:10:eb:4d: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:10:C2:AA:F9:73:E7:9B:30:69:5B:1F:9F:02:CF:78:0D:54:2F:91 X509v3 Authority Key Identifier: keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:61:59:bd:33:12:89:b2:c3:63:f8:74:cb:26:4a:6f:86:f7: 9e:fe:ce:4e:63:d8:89:f9:bc:f9:aa:76:62:88:d0:80:04:ec: 14:da:78:f3:90:ff:71:0b:3a:20:3b:ea:47:a9:90:05:47:77: f5:8d:d7:47:34:4a:49:3c:9a:14:62:cd:13:b0:bc:f9:71:58: c8:d5:39:c7:fb:36:3e:c5:0f:ab:04:ef:a7:8c:80:fc:61:02: 04:87:40:24:76:87:e5:6d:0e:95:eb:4e:99:fe:d7:a1:8d:17: c7:fa:cd:4b:b4:9f:d8:70:30:a2:48:25:a9:24:35:96:c8:a6: 69:f7:f2:9f:07:06:d5:76:2e:ec:9f:a7:d3:ed:0f:8e:2d:72: 76:be:30:c1:46:60:91:cc:2b:14:44:5d:8b:ad:cd:4b:f9:ec: 68:f0:a8:b0:f8:e7:f4:f4:b3:d9:b4:db:75:9b:b2:6f:40:b6: 44:3f:5d:f6:2e:3a:6c:97:de:8a:37:f9:ce:b3:7d:2b:b2:54: d4:2c:10:9e:aa:0d:1a:15:9a:ad:0b:76:d7:d6:d4:d4:4f:fd: c4:ba:70:72:f6:7e:19:c5:ba:87:25:ef:11:d5:a0:79:99:f1: 29:48:03:a6:5e:09:a0:f7:6e:7b:4b:64:66:6c:7d:d9:82:82: 26:5b:4d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xe7Y9OfRXgiRZsalcVzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx MDc4NTQwHhcNMjUxMjE5MDQwMjI1WhcNMjUxMjIwMDQwMjI1WjAzMTEwLwYDVQQD Eyg4ZTEwYzJhYWY5NzNlNzliMzA2OTViMWY5ZjAyY2Y3ODBkNTQyZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq5DM4SinUxZeL5uAlxhI4mZ9J7S amVAF8v/JYHkBOE2i9p3mk61wfYjfQlDRDKs8VJ54AZqwgKeQGoMrEXNwrAloNeX nRUhEwdBIZ+bNL7oYl6C57iiNeWWV0brgTTISBIDpT0Quki/ZbyZ8r/TQeEAHUlP Nw3kPaLFD8CWQFSUNK+d+LZhipaJIJcxpCEE1rFzUWYQdvtex5lZA9mikrrqs+0s TvKDeZGPN5rf9VvllfdRX2AvLidkuboZwBOBzLwUjRFLvVVvl9u3woNKDlEMmRV9 13end7ky4AgSbl701Y4Q8xcxsDRYebQwff6Uzc6Yi49xu2FyBg4Q601PRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4Qwqr5c+ebMGlbH58Cz3gNVC+RMB8GA1UdIwQY MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt Y2YwMTI0Y2VkNGQ2LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2 LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmFZvTMS ibLDY/h0yyZKb4b3nv7OTmPYifm8+ap2YojQgATsFNp485D/cQs6IDvqR6mQBUd3 9Y3XRzRKSTyaFGLNE7C8+XFYyNU5x/s2PsUPqwTvp4yA/GECBIdAJHaH5W0OletO mf7XoY0Xx/rNS7Sf2HAwokglqSQ1lsimaffynwcG1XYu7J+n0+0Pji1ydr4wwUZg kcwrFERdi63NS/nsaPCosPjn9PSz2bTbdZuyb0C2RD9d9i46bJfeijf5zrN9K7JU 1CwQnqoNGhWarQt219bU1E/9xLpwcvZ+GcW6hyXvEdWgeZnxKUgDpl4JoPdue0tk Zmx92YKCJltN5w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:47 2025 by rpki-client