This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json) Hash identifier: NwYRBl6Z3cZCrMNLljckw7CVhCemFMckyWe83TYPXvo= Subject key identifier: 10:1B:2B:D3:FE:D7:DE:71:FD:C5:B2:DF:69:EA:B9:BD:2E:C7:8D:8D Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Certificate serial: 019B45EED94CCFC58D877F69ABD319DF8821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 12:00:39 +0000 Manifest this update: Mon 22 Dec 2025 12:00:39 +0000 Manifest next update: Tue 23 Dec 2025 12:00:39 +0000 Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: f6pA/h2GTe/tMon4TcE2edHd4mIS/NRTeWlQ0zTYQd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:d9:4c:cf:c5:8d:87:7f:69:ab:d3:19:df:88:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Validity Not Before: Dec 22 12:00:39 2025 GMT Not After : Dec 23 12:00:39 2025 GMT Subject: CN=101b2bd3fed7de71fdc5b2df69eab9bd2ec78d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:59:9b:5b:2d:d6:a9:a7:39:97:3c:d3:fe: 83:a7:ee:7e:fb:e6:a8:24:b4:d5:59:98:c9:14:75: e9:c9:d1:31:3d:d4:79:3c:60:c4:92:01:4d:e3:7f: 75:b0:35:34:da:eb:5c:a6:fd:89:b3:11:11:4e:ab: ae:91:44:f4:df:94:91:47:3e:09:ce:a6:15:95:82: 45:91:c1:e7:60:ba:c2:6e:9f:5f:f4:76:73:64:a1: 39:23:46:bd:fd:34:34:5b:72:11:4c:85:a4:83:97: 17:f4:7a:24:77:f6:21:c7:b0:f2:c4:b1:9c:1a:10: 5a:f2:fd:e9:84:9d:cc:5b:03:42:fb:27:c9:7b:75: a9:44:ed:b6:c4:7b:7a:b8:cc:8c:9b:1b:fb:75:4f: 5a:58:e6:b9:5c:0f:99:f9:02:cc:aa:ee:6a:fc:4c: c7:f4:c7:11:02:93:89:b2:db:83:a0:04:e4:c5:02: a8:29:ef:ea:ed:f4:f4:ab:d5:96:a5:41:ec:04:8f: 57:49:08:bc:03:fc:62:c6:39:c4:85:93:74:db:c5: 36:42:1e:57:a5:df:1c:b2:b6:0c:57:4b:48:fb:ce: 04:ac:cf:0e:24:2e:d2:2d:c1:25:bb:b1:28:bc:f5: f2:0a:12:39:db:e9:74:2d:12:61:b7:4f:7f:09:eb: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:2B:D3:FE:D7:DE:71:FD:C5:B2:DF:69:EA:B9:BD:2E:C7:8D:8D X509v3 Authority Key Identifier: keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a5:fc:9e:18:56:22:3b:bd:3a:14:0f:3b:06:4b:07:8d:da: 30:ce:29:88:d1:19:01:5a:1a:43:61:4e:e1:24:87:ee:c0:cb: 79:2e:de:97:05:6e:d0:a7:32:99:e9:ea:d4:94:4f:d4:13:50: e9:b3:8b:c1:3a:02:51:66:e1:70:3c:a2:43:3a:37:cc:60:41: d5:46:80:c1:cc:b6:e8:1e:08:bc:a3:7d:b2:28:b2:d7:65:c2: 0b:e2:d8:e8:c6:21:4f:a4:b7:ea:e1:82:24:79:57:05:a3:05: c2:c7:c1:77:00:b6:5f:0d:8a:57:d9:0e:2c:62:73:8b:4a:26: e6:e2:c2:f2:88:d7:24:12:1f:63:b2:05:2c:0f:e1:96:1d:7d: 29:a0:37:38:a2:5d:2e:e0:06:af:b8:b1:ea:2b:f3:f0:77:d1: ad:1d:55:7c:cb:b7:dc:e0:0e:12:da:e7:0d:e9:05:23:f4:2e: e9:27:64:09:13:99:c1:ba:c1:92:13:81:99:4d:9f:34:2d:67: ae:98:2b:47:d5:1f:82:b4:6b:60:ee:20:7b:96:0d:b7:dd:16: 76:44:c9:da:d5:d2:81:3f:51:d2:eb:44:79:ee:47:0c:53:03: da:bf:fd:88:cb:c5:94:4b:7c:5b:95:69:bb:ac:b2:4e:ab:b8: 45:b7:c9:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7tlMz8WNh39pq9MZ34ghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1 NzA1NDAwHhcNMjUxMjIyMTIwMDM5WhcNMjUxMjIzMTIwMDM5WjAzMTEwLwYDVQQD EygxMDFiMmJkM2ZlZDdkZTcxZmRjNWIyZGY2OWVhYjliZDJlYzc4ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nlZm1st1qmnOZc80/6Dp+5+++ao JLTVWZjJFHXpydExPdR5PGDEkgFN4391sDU02utcpv2JsxERTquukUT035SRRz4J zqYVlYJFkcHnYLrCbp9f9HZzZKE5I0a9/TQ0W3IRTIWkg5cX9Hokd/Yhx7DyxLGc GhBa8v3phJ3MWwNC+yfJe3WpRO22xHt6uMyMmxv7dU9aWOa5XA+Z+QLMqu5q/EzH 9McRApOJstuDoATkxQKoKe/q7fT0q9WWpUHsBI9XSQi8A/xixjnEhZN028U2Qh5X pd8csrYMV0tI+84ErM8OJC7SLcElu7EovPXyChI52+l0LRJht09/Cet++QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAbK9P+195x/cWy32nqub0ux42NMB8GA1UdIwQY MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2 LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6X8nhhW Iju9OhQPOwZLB43aMM4piNEZAVoaQ2FO4SSH7sDLeS7elwVu0Kcymenq1JRP1BNQ 6bOLwToCUWbhcDyiQzo3zGBB1UaAwcy26B4IvKN9siiy12XCC+LY6MYhT6S36uGC JHlXBaMFwsfBdwC2Xw2KV9kOLGJzi0om5uLC8ojXJBIfY7IFLA/hlh19KaA3OKJd LuAGr7ix6ivz8HfRrR1VfMu33OAOEtrnDekFI/Qu6SdkCROZwbrBkhOBmU2fNC1n rpgrR9UfgrRrYO4ge5YNt90WdkTJ2tXSgT9R0utEee5HDFMD2r/9iMvFlEt8W5Vp u6yyTqu4RbfJfA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:07:09 2025 by rpki-client