This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json) Hash identifier: ZiFRKef5DVDlID3ioi+psf4wAdH4YCflHu1pQlogWt8= Subject key identifier: 88:58:D2:D9:F0:3E:70:CD:FA:0D:F3:B7:76:7F:74:AD:12:10:AD:B0 Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Certificate serial: 019AFCC4489DD6419A2B7773BD6EDF98E54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft Manifest number: 132E Signing time: Mon 08 Dec 2025 07:01:53 +0000 Manifest this update: Mon 08 Dec 2025 07:01:53 +0000 Manifest next update: Tue 09 Dec 2025 07:01:53 +0000 Files and hashes: 1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=) 2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: AXu6a++/X3rUaXIEVt/BYMc2s+DYLpt5lw2Yz4s+Ykg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 07:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:48:9d:d6:41:9a:2b:77:73:bd:6e:df:98:e5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Validity Not Before: Dec 8 07:01:53 2025 GMT Not After : Dec 9 07:01:53 2025 GMT Subject: CN=8858d2d9f03e70cdfa0df3b7767f74ad1210adb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:22:ba:ec:5e:dd:c3:95:2f:5e:07:e5:e8: c7:2c:86:96:9e:d0:20:2e:4e:8f:15:4d:df:bd:62: 76:d8:ff:11:99:68:6c:e4:3f:4d:58:aa:10:c3:17: 53:db:95:2b:02:59:56:cc:56:95:98:60:33:c6:43: 0e:2f:3f:86:f1:14:ee:d8:4d:15:02:5f:39:5b:75: 8d:5b:9e:ae:d2:9e:00:f4:da:5e:be:73:6e:86:25: 5b:b4:aa:9c:b4:a7:a6:af:37:11:27:83:46:e3:28: 95:d9:17:06:ad:b4:0f:7a:26:35:cc:b6:ae:e0:3e: 62:a0:8a:61:be:2f:2f:6a:11:6d:be:a4:0a:b1:e3: 50:02:3b:d7:95:c8:31:3f:10:4c:ca:cb:95:64:ef: 23:56:78:d1:21:5b:18:0a:4e:c3:e4:8e:72:4d:6e: 02:78:2f:75:26:d2:db:7c:64:05:fd:4c:ef:b2:ec: 69:53:f1:82:ad:c1:4e:fc:be:24:7a:0b:77:0f:48: c9:0f:19:87:13:1b:19:4b:73:63:c8:7a:74:6b:f2: 65:4e:c0:03:e5:ee:c0:cc:e0:a8:84:4c:eb:6b:3d: 76:31:8c:f0:e7:10:ce:64:11:11:a6:22:0d:2e:f1: 94:25:c6:9f:c9:8b:2f:f9:b9:e5:b2:89:88:32:3d: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:58:D2:D9:F0:3E:70:CD:FA:0D:F3:B7:76:7F:74:AD:12:10:AD:B0 X509v3 Authority Key Identifier: keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:19:5a:cd:e8:36:ec:16:2f:23:e4:c2:53:4a:a1:51:74:4e: e9:ca:a4:73:aa:cb:17:8f:66:2c:73:04:79:29:cc:a2:a0:68: 2b:2c:bb:23:14:e1:af:f8:f1:ff:05:cc:bb:09:31:fa:21:ea: 2e:09:91:07:4f:f1:cf:02:ce:ea:19:7f:84:54:f3:63:25:ef: 26:d2:0c:b3:28:05:47:04:ac:be:0d:2d:e9:c8:33:ef:15:d3: 06:be:8f:49:fc:55:cf:db:7d:cd:64:83:ca:61:b8:bb:cd:31: 7a:c4:67:21:20:80:b8:7d:35:e0:9e:16:10:ad:45:81:03:cf: 33:c7:ba:a4:60:d8:f9:35:74:ec:5a:1b:5b:6f:6f:81:59:e6: 24:e0:0e:4c:00:b1:44:01:49:7c:bc:30:79:65:9d:e7:c2:4b: 9f:d3:77:a4:f5:0a:80:28:d5:10:ba:dd:98:19:74:68:de:16: 81:a4:37:be:1a:80:24:9d:3a:05:80:53:53:cf:09:19:84:7e: 6d:45:05:34:64:16:21:74:72:f6:37:9c:c2:3b:71:9b:54:ce: 6d:94:04:99:0b:de:a4:f2:37:0f:03:09:74:5a:d4:7e:28:f2: a8:c3:2b:88:eb:eb:7d:d9:04:7f:f1:53:50:79:d5:69:44:0e: 7a:10:db:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xEid1kGaK3dzvW7fmOVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZTRjMTVjODcwN2RmYmRmZGE4M2JlM2E2OTNjMzU5NDdm MTZkNTkwHhcNMjUxMjA4MDcwMTUzWhcNMjUxMjA5MDcwMTUzWjAzMTEwLwYDVQQD Eyg4ODU4ZDJkOWYwM2U3MGNkZmEwZGYzYjc3NjdmNzRhZDEyMTBhZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj8iuuxe3cOVL14H5ejHLIaWntAg Lk6PFU3fvWJ22P8RmWhs5D9NWKoQwxdT25UrAllWzFaVmGAzxkMOLz+G8RTu2E0V Al85W3WNW56u0p4A9NpevnNuhiVbtKqctKemrzcRJ4NG4yiV2RcGrbQPeiY1zLau 4D5ioIphvi8vahFtvqQKseNQAjvXlcgxPxBMysuVZO8jVnjRIVsYCk7D5I5yTW4C eC91JtLbfGQF/UzvsuxpU/GCrcFO/L4kegt3D0jJDxmHExsZS3NjyHp0a/JlTsAD 5e7AzOCohEzraz12MYzw5xDOZBERpiINLvGUJcafyYsv+bnlsomIMj0ZVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhY0tnwPnDN+g3zt3Z/dK0SEK2wMB8GA1UdIwQY MBaAFM7kwVyHB9+9/ag746aTw1lH8W1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2Yt MmQ3Yjg1NzBkZDAzLzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2YtMmQ3Yjg1NzBkZDAz LzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERlazeg2 7BYvI+TCU0qhUXRO6cqkc6rLF49mLHMEeSnMoqBoKyy7IxThr/jx/wXMuwkx+iHq LgmRB0/xzwLO6hl/hFTzYyXvJtIMsygFRwSsvg0t6cgz7xXTBr6PSfxVz9t9zWSD ymG4u80xesRnISCAuH014J4WEK1FgQPPM8e6pGDY+TV07FobW29vgVnmJOAOTACx RAFJfLwweWWd58JLn9N3pPUKgCjVELrdmBl0aN4WgaQ3vhqAJJ06BYBTU88JGYR+ bUUFNGQWIXRy9jecwjtxm1TObZQEmQvepPI3DwMJdFrUfijyqMMriOvrfdkEf/FT UHnVaUQOehDb3A== -----END CERTIFICATE-----Generated at Mon Dec 8 12:40:42 2025 by rpki-client