This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json) Hash identifier: 9rhGhVanEgfm3k5S38Eq0gbkQVbHNnWTDoJhpKx2X+A= Subject key identifier: 2D:89:5B:CF:BF:4B:3D:5D:24:38:7F:94:BD:A1:0D:E8:6C:B0:B3:7A Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Certificate serial: 019B27AE422D7E8AFF6ED98D9CBFF28C4D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft Manifest number: 03CE Signing time: Tue 16 Dec 2025 15:01:30 +0000 Manifest this update: Tue 16 Dec 2025 15:01:30 +0000 Manifest next update: Wed 17 Dec 2025 15:01:30 +0000 Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=) 2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=) 3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: yiqlR6k06iY0kvjxL1uhDKRp8hy+qwAiaU+259piPZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:42:2d:7e:8a:ff:6e:d9:8d:9c:bf:f2:8c:4d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Validity Not Before: Dec 16 15:01:30 2025 GMT Not After : Dec 17 15:01:30 2025 GMT Subject: CN=2d895bcfbf4b3d5d24387f94bda10de86cb0b37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:25:fa:bc:d4:6a:10:cb:43:c7:70:3b:49: 65:19:de:01:aa:3d:e8:26:90:48:c7:b9:98:c6:7e: 6f:92:9d:22:a4:ad:10:db:70:94:f1:7b:20:f7:da: 3e:7e:e2:0f:b3:c2:69:25:31:9f:06:a1:cf:e6:a3: 39:47:bb:05:d3:02:7b:df:be:8b:67:1a:08:d2:db: af:60:57:e8:e5:00:19:a5:23:99:ba:fe:bd:91:3c: 10:97:55:7c:72:9e:c9:ac:4a:a9:fb:ed:5b:c7:d2: 2a:bd:5b:41:c5:4d:6c:a9:37:29:b8:24:8b:a4:a7: 8d:5e:d3:62:1c:ab:c7:cb:87:27:a2:b9:03:c4:3b: 82:98:0e:b3:91:72:0e:a7:68:aa:06:7f:ea:73:3d: d4:0d:80:27:27:68:39:c6:c3:5e:11:43:3d:79:99: 3a:4b:f0:99:2b:13:14:1d:03:1e:a1:b2:2d:98:61: 75:b5:8c:87:4e:15:ff:2c:63:ca:8d:9f:e8:96:87: 7b:7b:a6:d2:8b:55:08:32:2e:3b:85:8f:55:25:87: b4:64:57:a7:44:d6:6b:78:0a:fd:d7:40:e3:d3:e9: 3d:4d:8c:40:0c:38:b3:f0:92:9b:b8:6d:99:86:3c: 4a:cb:18:68:4f:71:cc:1e:f2:3e:8e:c6:e7:23:c3: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:89:5B:CF:BF:4B:3D:5D:24:38:7F:94:BD:A1:0D:E8:6C:B0:B3:7A X509v3 Authority Key Identifier: keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6f:13:46:c4:ec:fd:09:c6:8b:05:ef:fc:85:30:69:1f:3b: 50:61:e8:70:06:b5:e0:5b:5d:b7:5a:3c:b0:f7:ee:00:95:1b: 44:3f:c2:28:48:fb:46:73:89:c8:e0:b3:30:46:5c:5d:36:bb: 32:cb:b2:5b:a1:66:6e:c8:24:e0:10:dc:e9:94:0f:52:7d:60: ed:d4:a7:1e:b9:91:aa:a2:06:05:4e:19:99:bb:79:c4:61:e4: 2b:50:77:81:6e:01:a3:fb:f1:3f:b5:ee:2f:ab:67:f7:7c:81: 94:14:c4:13:35:17:a5:d3:52:bd:ae:af:d8:f4:f2:ba:71:4a: 8e:98:c7:9f:c6:76:de:4a:8b:c2:08:6d:25:2b:6c:b5:aa:fd: e7:53:16:38:02:2c:d9:61:98:a3:7b:40:2a:77:d0:b8:88:2d: 50:8c:f9:db:ee:86:16:37:98:3a:12:3d:e8:fc:11:05:f1:d4: 28:74:81:cb:58:85:43:a3:c9:19:08:07:d3:a5:09:11:1f:3d: e9:6c:38:23:a9:a0:d7:12:7f:cd:43:f6:5a:bb:9d:f5:3a:77: 2c:9e:e8:1e:4e:1f:ce:4f:6d:80:0d:65:f5:b5:6a:be:4a:8e: 6a:77:1f:46:df:dc:20:cc:3a:32:ee:fe:d3:16:93:eb:88:15: e8:dd:9c:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrkItfor/btmNnL/yjE2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5 ZTcwZjIwHhcNMjUxMjE2MTUwMTMwWhcNMjUxMjE3MTUwMTMwWjAzMTEwLwYDVQQD EygyZDg5NWJjZmJmNGIzZDVkMjQzODdmOTRiZGExMGRlODZjYjBiMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMkl+rzUahDLQ8dwO0llGd4Bqj3o JpBIx7mYxn5vkp0ipK0Q23CU8Xsg99o+fuIPs8JpJTGfBqHP5qM5R7sF0wJ7376L ZxoI0tuvYFfo5QAZpSOZuv69kTwQl1V8cp7JrEqp++1bx9IqvVtBxU1sqTcpuCSL pKeNXtNiHKvHy4cnorkDxDuCmA6zkXIOp2iqBn/qcz3UDYAnJ2g5xsNeEUM9eZk6 S/CZKxMUHQMeobItmGF1tYyHThX/LGPKjZ/olod7e6bSi1UIMi47hY9VJYe0ZFen RNZreAr910Dj0+k9TYxADDiz8JKbuG2ZhjxKyxhoT3HMHvI+jsbnI8PbHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2JW8+/Sz1dJDh/lL2hDehssLN6MB8GA1UdIwQY MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG8TRsTs /QnGiwXv/IUwaR87UGHocAa14Ftdt1o8sPfuAJUbRD/CKEj7RnOJyOCzMEZcXTa7 MsuyW6Fmbsgk4BDc6ZQPUn1g7dSnHrmRqqIGBU4Zmbt5xGHkK1B3gW4Bo/vxP7Xu L6tn93yBlBTEEzUXpdNSva6v2PTyunFKjpjHn8Z23kqLwghtJStstar951MWOAIs 2WGYo3tAKnfQuIgtUIz52+6GFjeYOhI96PwRBfHUKHSBy1iFQ6PJGQgH06UJER89 6Ww4I6mg1xJ/zUP2Wrud9Tp3LJ7oHk4fzk9tgA1l9bVqvkqOancfRt/cIMw6Mu7+ 0xaT64gV6N2cJQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:05 2025 by rpki-client