This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json) Hash identifier: RJ7dZxdTPNtqan2A6XP1detBq6Sj8lV8xClugRlM8L8= Subject key identifier: 30:01:0C:21:38:4C:B4:AC:69:42:D6:F8:AE:DD:06:96:BE:72:61:EF Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45 Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45 Certificate serial: 019B30E88BB10D583A77FACBF09AAD57108F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft Manifest number: 0A76 Signing time: Thu 18 Dec 2025 10:01:44 +0000 Manifest this update: Thu 18 Dec 2025 10:01:44 +0000 Manifest next update: Fri 19 Dec 2025 10:01:44 +0000 Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=) 2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: Y3V/H6Pu7+i6Wlx9AqKbagB5bNNKVHkbo8db03pBUtU=) 3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:8b:b1:0d:58:3a:77:fa:cb:f0:9a:ad:57:10:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45 Validity Not Before: Dec 18 10:01:44 2025 GMT Not After : Dec 19 10:01:44 2025 GMT Subject: CN=30010c21384cb4ac6942d6f8aedd0696be7261ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:63:e1:8f:23:79:f9:b0:a3:09:33:2e:42: 81:c5:69:f2:e1:b9:5b:94:4a:44:e2:3f:31:09:c1: 76:21:60:23:ab:41:95:b6:81:d2:b1:b3:33:bb:e6: 81:03:31:e3:4e:ad:76:9d:76:e6:eb:69:94:ba:84: 81:d9:5d:8d:ee:4f:9a:22:ab:7b:36:4e:6c:e0:3e: 8a:6e:3d:57:e7:b6:37:bf:05:f9:dd:27:38:70:7f: de:c1:6d:07:58:94:1b:61:3c:30:eb:06:c6:20:4a: 97:10:19:6d:f8:bd:41:89:b5:d0:4b:12:84:c2:84: fb:b8:b5:a9:f1:e1:e1:3f:17:96:c4:1f:fb:68:85: 35:5c:eb:6c:3b:1b:be:05:b4:a9:8b:f8:4a:2f:af: 21:20:4f:1b:18:06:ee:6a:52:cb:ee:92:61:64:07: 7f:d9:2e:ea:2d:7b:c7:ae:cf:33:cb:91:e4:55:39: 2c:9d:33:2f:d9:6b:24:dc:bc:c3:24:0d:9b:c2:a4: f0:d0:34:e1:d0:0f:96:74:42:1a:36:ea:3d:db:33: 4c:48:df:47:7d:7b:95:59:bf:82:32:7d:7d:98:a2: e4:76:17:c2:f6:17:c7:81:d7:e5:f2:24:6b:40:3e: 1f:bf:68:17:dd:ce:9e:60:be:09:d2:2b:e6:b3:93: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:0C:21:38:4C:B4:AC:69:42:D6:F8:AE:DD:06:96:BE:72:61:EF X509v3 Authority Key Identifier: keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fe:97:53:e5:7f:01:04:a4:97:b2:51:ce:f7:12:b5:34:40: 56:a4:69:5c:94:42:b1:51:56:12:c6:5f:9d:2b:08:c3:66:bd: 28:f2:29:d2:b0:d9:28:e6:c6:a3:b5:6d:33:5f:85:c8:4e:bc: 00:43:d2:22:d9:f9:79:e9:63:80:a4:86:eb:35:dc:2f:21:2b: 31:ad:86:d2:e9:2c:ab:7f:93:5e:a3:00:c6:9b:e3:f6:30:e0: 8f:44:d6:b9:6d:31:3b:74:de:d7:ac:9d:3c:1b:a4:fb:87:51: b7:99:99:53:dd:d5:4f:77:d7:cc:0e:1c:01:4b:a6:59:88:4e: a4:e4:16:2a:8f:40:e6:35:16:36:9e:ed:1d:a7:3c:7a:1b:41: 79:cf:df:8c:a7:c8:5f:b4:05:cf:a9:54:52:ad:d9:57:4d:87: 0c:dc:c4:52:2b:4f:d9:74:2b:9f:30:18:b8:e7:ac:e4:d0:77: 25:ea:84:52:e3:77:6e:09:05:0a:d9:bc:bf:d1:40:de:cd:4c: fb:30:58:9a:ea:96:b0:34:67:c3:46:c1:7a:46:56:7c:85:27: 96:5a:39:e2:29:ad:9d:36:37:87:48:c0:d7:35:4d:5a:33:6e: 79:12:0a:b0:3c:6a:5e:f1:47:b1:69:9e:a6:14:a6:f9:fa:78: 7f:16:e2:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6IuxDVg6d/rL8JqtVxCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4 N2RkNDUwHhcNMjUxMjE4MTAwMTQ0WhcNMjUxMjE5MTAwMTQ0WjAzMTEwLwYDVQQD EygzMDAxMGMyMTM4NGNiNGFjNjk0MmQ2ZjhhZWRkMDY5NmJlNzI2MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlJj4Y8jefmwowkzLkKBxWny4blb lEpE4j8xCcF2IWAjq0GVtoHSsbMzu+aBAzHjTq12nXbm62mUuoSB2V2N7k+aIqt7 Nk5s4D6Kbj1X57Y3vwX53Sc4cH/ewW0HWJQbYTww6wbGIEqXEBlt+L1BibXQSxKE woT7uLWp8eHhPxeWxB/7aIU1XOtsOxu+BbSpi/hKL68hIE8bGAbualLL7pJhZAd/ 2S7qLXvHrs8zy5HkVTksnTMv2Wsk3LzDJA2bwqTw0DTh0A+WdEIaNuo92zNMSN9H fXuVWb+CMn19mKLkdhfC9hfHgdfl8iRrQD4fv2gX3c6eYL4J0ivms5Pn9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDABDCE4TLSsaULW+K7dBpa+cmHvMB8GA1UdIwQY MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP6XU+V/ AQSkl7JRzvcStTRAVqRpXJRCsVFWEsZfnSsIw2a9KPIp0rDZKObGo7VtM1+FyE68 AEPSItn5eeljgKSG6zXcLyErMa2G0uksq3+TXqMAxpvj9jDgj0TWuW0xO3Te16yd PBuk+4dRt5mZU93VT3fXzA4cAUumWYhOpOQWKo9A5jUWNp7tHac8ehtBec/fjKfI X7QFz6lUUq3ZV02HDNzEUitP2XQrnzAYuOes5NB3JeqEUuN3bgkFCtm8v9FA3s1M +zBYmuqWsDRnw0bBekZWfIUnllo54imtnTY3h0jA1zVNWjNueRIKsDxqXvFHsWme phSm+fp4fxbiBQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:49:05 2025 by rpki-client