This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json) Hash identifier: HIJa7O06cyHoc/jbcGHWEGnp00HUVbFkTv0PIkM4GFg= Subject key identifier: 0A:09:6D:01:72:BD:B6:E9:8B:3D:E4:39:C8:46:C2:DD:66:B6:B7:43 Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Certificate serial: 019B52987D945B9F8FE70C90CB9588B18AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft Manifest number: 13FA Signing time: Wed 24 Dec 2025 23:01:23 +0000 Manifest this update: Wed 24 Dec 2025 23:01:23 +0000 Manifest next update: Thu 25 Dec 2025 23:01:23 +0000 Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=) 2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=) 3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: l6aUuXPD2UvCEYd6zhXkF4q93eHvn9QRsr+JrnO7FEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:7d:94:5b:9f:8f:e7:0c:90:cb:95:88:b1:8a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Validity Not Before: Dec 24 23:01:23 2025 GMT Not After : Dec 25 23:01:23 2025 GMT Subject: CN=0a096d0172bdb6e98b3de439c846c2dd66b6b743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:a8:1f:3d:07:ac:1a:ac:bf:8f:e8:4b:65: 8b:b4:db:b0:b8:5a:5b:ee:b9:a3:07:c4:e9:2d:7a: 71:a8:1c:87:8d:a7:8e:5a:da:07:9e:5f:05:40:17: f3:27:2d:ca:6d:db:71:62:4c:c2:73:d3:12:74:5b: 3b:aa:21:1d:b3:68:e0:6c:57:12:90:48:2d:5b:cd: 09:7a:f1:31:90:76:a0:12:a4:e0:6a:42:99:da:70: d8:38:cf:c7:0c:a3:24:8c:1e:aa:4d:c5:ef:df:e5: 8a:9d:29:64:1a:b4:3f:21:88:0f:d6:4c:b4:65:9a: 96:89:6a:5b:56:03:b8:3e:a1:65:ea:47:91:4d:3a: f7:33:9f:c2:49:a9:67:1d:58:0f:40:db:d9:9e:8f: a6:64:e5:d6:20:eb:e5:95:c8:51:32:80:dc:87:f5: fc:a5:1d:5a:ac:71:ed:a5:1f:4d:24:1e:79:1f:e1: 47:11:ff:19:fd:86:df:2a:13:f3:55:0d:5c:13:f7: 89:86:e8:02:ea:db:2d:3e:b1:7b:87:81:77:10:90: 4d:29:a3:eb:93:54:1a:28:5a:8b:b8:33:2b:2e:67: 29:93:36:3c:8c:22:f5:cc:9c:5b:fe:91:cb:0b:0e: ce:22:4b:a4:d1:5a:41:95:25:e1:61:e8:31:35:3b: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:6D:01:72:BD:B6:E9:8B:3D:E4:39:C8:46:C2:DD:66:B6:B7:43 X509v3 Authority Key Identifier: keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c6:24:82:da:3d:4f:80:3d:47:5a:7e:1f:dc:86:ab:d7:30: 6f:a1:20:4b:06:71:ef:02:75:4c:aa:83:16:d1:ba:ff:05:1c: e5:3b:1c:30:d4:5c:ae:87:06:ac:5b:cc:5a:da:f6:1a:d8:3f: 28:79:68:fd:ff:90:df:d7:d5:af:d5:42:31:a0:f8:09:27:46: 36:b3:ac:67:fa:b1:41:4c:60:62:c1:fb:bf:54:62:7f:bd:72: 1e:c4:16:75:99:70:79:6a:d6:86:d5:1f:f6:18:a3:ca:e9:74: 63:98:05:2f:7f:b2:68:7b:f5:8c:d9:95:7e:44:22:c5:8d:f8: 65:33:78:78:51:84:55:fe:4d:77:b9:6b:06:b2:16:20:92:78: 52:dc:02:30:3b:3a:56:57:22:c5:de:bc:6d:c9:aa:87:ac:4f: 69:68:8c:6d:79:dd:69:48:66:48:df:72:57:ab:66:29:f3:4e: 17:a8:b8:7a:38:cc:8c:45:8a:25:62:a9:94:73:16:b3:61:8e: 6a:5e:d4:7b:7f:71:a0:c2:ae:26:d5:15:e0:f8:40:01:03:cb: 0a:69:f5:df:13:7b:d1:c2:c6:bf:db:e8:36:00:4f:17:82:23: 49:6d:2a:0b:6b:df:74:6a:d8:bf:30:75:f0:3e:78:ee:05:2c: 74:38:ad:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmH2UW5+P5wyQy5WIsYrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTEzNWRmZWQwYmI2MzM1ZDE5ZGRkNmQ3ZTk5ZjQ4YWZi ZTNjMDEwHhcNMjUxMjI0MjMwMTIzWhcNMjUxMjI1MjMwMTIzWjAzMTEwLwYDVQQD EygwYTA5NmQwMTcyYmRiNmU5OGIzZGU0MzljODQ2YzJkZDY2YjZiNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqaoHz0HrBqsv4/oS2WLtNuwuFpb 7rmjB8TpLXpxqByHjaeOWtoHnl8FQBfzJy3KbdtxYkzCc9MSdFs7qiEds2jgbFcS kEgtW80JevExkHagEqTgakKZ2nDYOM/HDKMkjB6qTcXv3+WKnSlkGrQ/IYgP1ky0 ZZqWiWpbVgO4PqFl6keRTTr3M5/CSalnHVgPQNvZno+mZOXWIOvllchRMoDch/X8 pR1arHHtpR9NJB55H+FHEf8Z/YbfKhPzVQ1cE/eJhugC6tstPrF7h4F3EJBNKaPr k1QaKFqLuDMrLmcpkzY8jCL1zJxb/pHLCw7OIkuk0VpBlSXhYegxNTuBTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoJbQFyvbbpiz3kOchGwt1mtrdDMB8GA1UdIwQY MBaAFM6RNd/tC7YzXRnd1tfpn0ivvjwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgt YzExZWM2ZWE4NmI4LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgtYzExZWM2ZWE4NmI4 LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8Ykgto9 T4A9R1p+H9yGq9cwb6EgSwZx7wJ1TKqDFtG6/wUc5TscMNRcrocGrFvMWtr2Gtg/ KHlo/f+Q39fVr9VCMaD4CSdGNrOsZ/qxQUxgYsH7v1Rif71yHsQWdZlweWrWhtUf 9hijyul0Y5gFL3+yaHv1jNmVfkQixY34ZTN4eFGEVf5Nd7lrBrIWIJJ4UtwCMDs6 Vlcixd68bcmqh6xPaWiMbXndaUhmSN9yV6tmKfNOF6i4ejjMjEWKJWKplHMWs2GO al7Ue39xoMKuJtUV4PhAAQPLCmn13xN70cLGv9voNgBPF4IjSW0qC2vfdGrYvzB1 8D547gUsdDitNg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:26 2025 by rpki-client