This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json) Hash identifier: vP89DGyh4aQB8SqWrpOK3+0bISJdu3fFIF9X6wUOC70= Subject key identifier: 11:F2:8A:07:DB:EE:C5:20:58:91:00:0C:49:3A:30:64:5F:FD:C4:3A Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d Certificate serial: 019B1A28F0566DA1D17EAF9989F9BCA8C2D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 00:00:49 +0000 Manifest this update: Sun 14 Dec 2025 00:00:49 +0000 Manifest next update: Mon 15 Dec 2025 00:00:49 +0000 Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=) 2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: HBEeHdoJQJ0hHtgs4ns7e/E6GVmXBYbKpB3MSlroKXM=) 3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=) 4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:f0:56:6d:a1:d1:7e:af:99:89:f9:bc:a8:c2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d Validity Not Before: Dec 14 00:00:49 2025 GMT Not After : Dec 15 00:00:49 2025 GMT Subject: CN=11f28a07dbeec5205891000c493a30645ffdc43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:94:29:f8:65:1a:05:23:f8:f4:fb:3b:5e: 5c:2c:e0:b3:77:97:a8:d0:9f:a3:0f:94:1b:08:c9: 87:80:a4:cb:d9:7a:28:80:1a:e6:9f:cd:6a:42:f5: 94:78:fe:24:c4:41:67:18:ff:1f:55:a9:e1:fe:23: d8:f5:3c:b8:44:88:c8:73:60:00:b3:97:3f:7c:d0: 57:f6:16:40:f8:9f:3f:b7:14:8d:ca:32:b1:64:dc: c1:e5:ed:94:b1:88:4d:d6:26:6e:ea:85:64:30:fb: 0d:37:6a:e3:28:5c:ca:5a:a5:80:12:6a:f8:12:94: 15:f2:6b:d6:64:03:1d:3c:af:41:75:a2:39:36:06: 4a:82:72:dd:93:4d:da:e0:22:dc:21:be:36:ed:38: ad:be:18:a5:1f:4a:0f:ec:bc:50:54:cf:92:10:b9: 48:21:1c:a7:db:5a:eb:44:60:68:76:e6:18:3a:df: fd:9d:c8:4c:cc:9a:96:f2:2d:d4:22:83:16:2d:bd: 96:00:92:42:37:ef:98:6d:07:cf:26:ee:bb:c3:20: 48:aa:b0:a5:8a:d4:93:14:74:d0:6b:69:82:f7:b7: 84:ec:23:84:25:a5:cb:d1:8b:07:4c:54:5d:1b:95: 18:3d:30:a9:b5:ef:ff:18:d1:97:d8:12:30:04:51: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F2:8A:07:DB:EE:C5:20:58:91:00:0C:49:3A:30:64:5F:FD:C4:3A X509v3 Authority Key Identifier: keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:2b:5a:8d:c5:f1:d5:6a:f3:06:ba:5d:0b:0b:71:7c:e0:22: f7:6c:ed:98:03:6d:d8:de:9d:41:53:7e:b9:a3:1e:2d:55:2d: 93:1a:08:bd:fa:1b:ca:03:88:3f:31:21:66:71:db:51:22:b8: 71:fd:b1:64:86:65:0c:72:46:09:77:33:05:31:11:5c:8a:86: 17:f7:77:68:52:ae:41:05:1f:a3:7f:e0:6f:d6:69:9d:9a:c4: 14:1e:64:ec:25:89:31:0f:fb:5e:01:d0:d2:35:03:04:19:59: 8d:77:88:da:5b:5c:28:d2:8f:54:52:f3:39:32:00:fd:fe:d3: 7c:af:6a:a7:4a:2b:a5:69:55:a6:82:5f:e8:e9:20:68:61:76: 93:80:44:62:dc:16:48:02:47:3f:91:5d:b4:45:24:7e:45:66: ac:9d:25:1d:f4:6c:9c:9b:1d:3a:19:40:d8:5a:18:e4:21:d4: 68:b0:dd:cf:9a:6b:0f:74:11:9c:04:2d:9c:69:de:a3:c6:68: 25:31:e2:6d:ec:17:e7:b7:38:0e:98:fc:d1:5e:6a:43:fc:50: c8:74:c2:a3:01:1b:04:52:0c:4c:e2:3b:81:3e:88:a4:7e:a1: ed:62:86:01:9b:10:37:1e:62:05:ad:4c:2f:63:8e:ee:cc:ac: d9:a7:11:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKPBWbaHRfq+Zifm8qMLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw MTQxMmQwHhcNMjUxMjE0MDAwMDQ5WhcNMjUxMjE1MDAwMDQ5WjAzMTEwLwYDVQQD EygxMWYyOGEwN2RiZWVjNTIwNTg5MTAwMGM0OTNhMzA2NDVmZmRjNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj6UKfhlGgUj+PT7O15cLOCzd5eo 0J+jD5QbCMmHgKTL2XoogBrmn81qQvWUeP4kxEFnGP8fVanh/iPY9Ty4RIjIc2AA s5c/fNBX9hZA+J8/txSNyjKxZNzB5e2UsYhN1iZu6oVkMPsNN2rjKFzKWqWAEmr4 EpQV8mvWZAMdPK9BdaI5NgZKgnLdk03a4CLcIb427TitvhilH0oP7LxQVM+SELlI IRyn21rrRGBoduYYOt/9nchMzJqW8i3UIoMWLb2WAJJCN++YbQfPJu67wyBIqrCl itSTFHTQa2mC97eE7COEJaXL0YsHTFRdG5UYPTCpte//GNGX2BIwBFEgMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHyigfb7sUgWJEADEk6MGRf/cQ6MB8GA1UdIwQY MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt MDYxNjM5ODEyYzc0LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0 LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCtajcXx 1WrzBrpdCwtxfOAi92ztmANt2N6dQVN+uaMeLVUtkxoIvfobygOIPzEhZnHbUSK4 cf2xZIZlDHJGCXczBTERXIqGF/d3aFKuQQUfo3/gb9ZpnZrEFB5k7CWJMQ/7XgHQ 0jUDBBlZjXeI2ltcKNKPVFLzOTIA/f7TfK9qp0orpWlVpoJf6OkgaGF2k4BEYtwW SAJHP5FdtEUkfkVmrJ0lHfRsnJsdOhlA2FoY5CHUaLDdz5prD3QRnAQtnGneo8Zo JTHibewX57c4Dpj80V5qQ/xQyHTCowEbBFIMTOI7gT6IpH6h7WKGAZsQNx5iBa1M L2OO7sys2acRQg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:00 2025 by rpki-client