This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json) Hash identifier: Wu/J+b1MOzCH1hHFJwgOBz4Xt6k4i+FzlYnXpjBZNS4= Subject key identifier: 8B:BD:FC:0E:F2:6E:D1:40:5A:C5:C8:15:B4:1E:0C:2A:AB:21:FB:B2 Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd Certificate serial: 019B54BD83EFA0665F8EE16AD45AD9B8E199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft Manifest number: 0D52 Signing time: Thu 25 Dec 2025 09:01:04 +0000 Manifest this update: Thu 25 Dec 2025 09:01:04 +0000 Manifest next update: Fri 26 Dec 2025 09:01:04 +0000 Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: ozsub0yy4fIpjiJRX3ot5H/OtlFXeOYCZp8BllPJoTM=) 2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:83:ef:a0:66:5f:8e:e1:6a:d4:5a:d9:b8:e1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd Validity Not Before: Dec 25 09:01:04 2025 GMT Not After : Dec 26 09:01:04 2025 GMT Subject: CN=8bbdfc0ef26ed1405ac5c815b41e0c2aab21fbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:e9:65:74:7f:4c:36:75:71:b1:38:22:01: 99:65:09:fa:76:a8:f0:f0:e5:df:4a:ba:35:25:e4: 48:c6:a5:ab:1c:19:7d:7b:af:1a:07:f3:a9:7a:22: 22:04:34:0d:51:33:1b:4e:6d:8a:2e:f2:f1:6f:27: 2e:3a:81:ba:20:cc:67:00:b2:8b:41:f7:b7:41:44: 35:f7:16:85:39:3b:cf:93:21:07:03:38:86:1b:08: e0:70:dd:e8:a9:29:0e:ba:2c:56:61:65:2d:0c:3f: 4a:ff:f3:43:e3:77:07:95:c3:89:f3:36:23:8c:d9: c7:2a:f1:34:bc:ef:2e:2a:99:46:cb:ac:2c:52:57: 3d:9f:28:e5:5c:9f:9e:07:da:0f:13:1a:14:82:e3: e0:ec:be:52:4d:4e:1c:6a:5d:e1:64:ed:f6:0d:b8: c2:a0:a2:d5:77:a5:bd:25:fa:cb:19:5d:07:ef:43: 82:e7:f6:58:de:a9:6d:61:04:5f:3d:8a:62:eb:7e: b5:9c:34:ec:d6:68:7c:d8:cc:a3:c7:6a:0d:f6:eb: 9e:8a:dc:d5:f4:d9:af:d3:59:70:40:a8:5c:7b:e2: 6e:bc:c6:16:85:cd:bc:ce:d0:23:3d:f3:3c:15:d9: 0d:0b:60:22:72:48:51:3a:60:e6:25:00:75:ef:8a: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BD:FC:0E:F2:6E:D1:40:5A:C5:C8:15:B4:1E:0C:2A:AB:21:FB:B2 X509v3 Authority Key Identifier: keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:be:87:60:66:a5:f9:76:7e:aa:65:f4:b8:5a:3c:8c:e3:99: 96:e3:09:ef:82:ad:47:2b:26:df:ce:79:cd:39:c1:35:5c:54: 8b:ff:c1:c2:fe:b7:0a:19:87:61:24:27:7b:ed:20:8a:ae:f1: 40:09:cc:5b:b7:2a:30:f3:fc:60:d3:8c:04:7d:c7:4e:d3:39: d0:f1:1e:51:39:4c:c5:68:2a:24:19:9e:fa:e4:2f:95:d8:31: 2f:c7:6c:87:3e:34:18:87:96:47:47:0e:f0:69:63:9d:2f:02: a8:7b:29:e5:a5:b7:6e:e9:2b:0e:69:13:fc:96:af:2d:76:0c: 9a:ac:d3:5d:dc:b9:3b:74:f3:fc:f2:ec:e3:2f:6d:7b:82:5d: c3:6a:bf:e9:85:fa:47:37:16:c0:55:f4:fb:33:57:8f:df:19: bc:dd:08:96:bb:30:2a:12:8d:5a:4a:c7:d3:82:6d:cd:85:65: b7:aa:01:7b:44:64:35:c9:83:14:ca:c5:e2:27:a4:08:f6:73: 38:80:0c:51:e3:77:16:1c:04:2e:36:0e:15:38:5d:09:12:78: 1d:c4:b5:2f:07:6b:5c:1a:a0:7c:c9:cd:0f:2c:90:d7:f7:36: cd:4a:bf:92:53:46:79:db:b8:fd:d2:0b:49:cd:91:c8:04:3e: b1:fd:e2:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvYPvoGZfjuFq1FrZuOGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz YzEzYmQwHhcNMjUxMjI1MDkwMTA0WhcNMjUxMjI2MDkwMTA0WjAzMTEwLwYDVQQD Eyg4YmJkZmMwZWYyNmVkMTQwNWFjNWM4MTViNDFlMGMyYWFiMjFmYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUrpZXR/TDZ1cbE4IgGZZQn6dqjw 8OXfSro1JeRIxqWrHBl9e68aB/OpeiIiBDQNUTMbTm2KLvLxbycuOoG6IMxnALKL Qfe3QUQ19xaFOTvPkyEHAziGGwjgcN3oqSkOuixWYWUtDD9K//ND43cHlcOJ8zYj jNnHKvE0vO8uKplGy6wsUlc9nyjlXJ+eB9oPExoUguPg7L5STU4cal3hZO32DbjC oKLVd6W9JfrLGV0H70OC5/ZY3qltYQRfPYpi6361nDTs1mh82Myjx2oN9uueitzV 9Nmv01lwQKhce+JuvMYWhc28ztAjPfM8FdkNC2AickhROmDmJQB174r+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIu9/A7ybtFAWsXIFbQeDCqrIfuyMB8GA1UdIwQY MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt YWQ5ZTFhMDUxMGI5LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5 LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh76HYGal +XZ+qmX0uFo8jOOZluMJ74KtRysm3855zTnBNVxUi//Bwv63ChmHYSQne+0giq7x QAnMW7cqMPP8YNOMBH3HTtM50PEeUTlMxWgqJBme+uQvldgxL8dshz40GIeWR0cO 8GljnS8CqHsp5aW3bukrDmkT/JavLXYMmqzTXdy5O3Tz/PLs4y9te4Jdw2q/6YX6 RzcWwFX0+zNXj98ZvN0IlrswKhKNWkrH04JtzYVlt6oBe0RkNcmDFMrF4iekCPZz OIAMUeN3FhwELjYOFThdCRJ4HcS1LwdrXBqgfMnNDyyQ1/c2zUq/klNGedu4/dIL Sc2RyAQ+sf3ifQ== -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:27 2025 by rpki-client