This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json) Hash identifier: pxey6SbyT6u4l+gLZKRUm0q1ACBCHfRcaXllCn8yd84= Subject key identifier: 94:A0:E7:23:70:E2:94:0E:A8:11:F7:40:61:2F:47:DD:67:CF:57:0E Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa Certificate serial: 019B3E6E212CEAD3996F454EAA7913C83826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft Manifest number: 10E0 Signing time: Sun 21 Dec 2025 01:02:43 +0000 Manifest this update: Sun 21 Dec 2025 01:02:43 +0000 Manifest next update: Mon 22 Dec 2025 01:02:43 +0000 Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: 61eIJf7rgaRKKLU+7x1t2dNWpVof9vtN3AWSIDZ9wxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:21:2c:ea:d3:99:6f:45:4e:aa:79:13:c8:38:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa Validity Not Before: Dec 21 01:02:43 2025 GMT Not After : Dec 22 01:02:43 2025 GMT Subject: CN=94a0e72370e2940ea811f740612f47dd67cf570e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:c2:a6:01:ea:07:05:6b:bb:5c:8b:61:a2: dc:af:3e:1f:d9:8e:71:68:a0:dc:31:b1:2a:26:84: b5:9c:a8:40:12:af:2b:cf:ff:7b:6e:be:7b:54:5c: 29:c9:5c:34:c5:bd:50:5d:f6:92:a0:b6:b2:0e:0e: ac:c4:e9:d8:45:f7:d8:7c:a4:39:78:ec:b9:0b:e9: d9:41:ad:37:ac:bb:19:c2:aa:ee:4a:4f:10:a6:25: 74:5e:40:9f:01:83:e8:18:fb:47:8d:ff:c6:64:16: b8:62:59:18:ca:f9:df:e2:47:40:fc:4e:eb:d4:0f: b1:e0:9a:fd:84:50:0d:28:67:89:81:4b:c3:0e:9d: 3e:68:1f:af:2f:34:f8:39:24:b4:3d:87:17:91:ed: 18:9d:04:d4:f7:56:2f:ad:9c:b9:3a:5f:97:fb:20: 5f:67:2f:3c:1f:03:aa:77:82:dc:40:a7:02:b6:ec: 5d:b6:0b:7e:0b:d3:cc:96:c1:eb:88:3b:86:61:b8: 03:73:ee:5d:f6:86:7e:c8:33:c7:ae:21:b8:f8:41: 9e:53:82:a5:f8:45:80:e9:38:e6:ba:01:37:0d:07: 73:0b:95:eb:02:d2:a8:b0:4c:fc:ae:26:d4:80:01: 8f:6d:dc:bf:7d:8c:be:be:4d:12:1c:1e:36:e8:3b: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A0:E7:23:70:E2:94:0E:A8:11:F7:40:61:2F:47:DD:67:CF:57:0E X509v3 Authority Key Identifier: keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d0:09:16:4a:fe:7d:98:49:6f:ac:5c:80:3a:3b:c3:e6:4e: 0c:a6:59:da:ab:93:36:ad:27:e7:e1:61:1b:b1:e1:89:00:95: 41:83:41:27:98:f1:67:a2:55:4c:26:50:9a:74:bb:1b:96:ce: 65:4d:2a:c4:97:7e:33:e9:39:d1:0d:bb:2d:1b:03:1a:0b:ae: ef:b5:f5:0a:78:ae:0a:7d:67:43:53:65:ac:1e:51:f6:50:1d: e7:b2:01:a1:4b:db:6e:6d:25:16:e8:df:59:ff:66:ed:8d:e8: b9:0f:bd:dd:2e:85:b4:34:d1:d4:75:84:96:75:18:0b:59:37: fd:85:fd:7f:86:78:de:de:49:09:3f:00:bb:c1:a9:b0:27:95: b2:ea:88:e3:ee:85:ee:c5:c8:de:2f:ce:ca:2e:0e:db:7a:50: 90:88:fc:9b:df:59:f6:0b:28:10:1e:b4:c8:71:0b:02:ad:bf: 01:fa:95:c9:4c:67:25:6e:3a:31:21:55:b9:f1:ad:95:1c:85: e6:e2:61:b1:bc:dd:bc:45:7d:7e:24:91:70:bc:2b:ad:70:80: dd:29:1a:af:93:f1:1d:76:52:28:7c:6b:01:6a:62:43:17:b5: be:54:1f:87:c7:12:f3:37:cd:15:5c:df:b3:19:9f:3e:b6:94: dd:c2:0f:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+biEs6tOZb0VOqnkTyDgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZTIwMmMwMWE4MjkwZWU5NTMyNWQzYTRmMzdmZjQwZTk5 NjQ4ZmEwHhcNMjUxMjIxMDEwMjQzWhcNMjUxMjIyMDEwMjQzWjAzMTEwLwYDVQQD Eyg5NGEwZTcyMzcwZTI5NDBlYTgxMWY3NDA2MTJmNDdkZDY3Y2Y1NzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNzCpgHqBwVru1yLYaLcrz4f2Y5x aKDcMbEqJoS1nKhAEq8rz/97br57VFwpyVw0xb1QXfaSoLayDg6sxOnYRffYfKQ5 eOy5C+nZQa03rLsZwqruSk8QpiV0XkCfAYPoGPtHjf/GZBa4YlkYyvnf4kdA/E7r 1A+x4Jr9hFANKGeJgUvDDp0+aB+vLzT4OSS0PYcXke0YnQTU91YvrZy5Ol+X+yBf Zy88HwOqd4LcQKcCtuxdtgt+C9PMlsHriDuGYbgDc+5d9oZ+yDPHriG4+EGeU4Kl +EWA6TjmugE3DQdzC5XrAtKosEz8ribUgAGPbdy/fYy+vk0SHB426DuZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSg5yNw4pQOqBH3QGEvR91nz1cOMB8GA1UdIwQY MBaAFM3iAsAagpDulTJdOk83/0Dplkj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYt OTQzNzgyYzc5ZDBjLzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYtOTQzNzgyYzc5ZDBj LzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdAJFkr+ fZhJb6xcgDo7w+ZODKZZ2quTNq0n5+FhG7HhiQCVQYNBJ5jxZ6JVTCZQmnS7G5bO ZU0qxJd+M+k50Q27LRsDGguu77X1CniuCn1nQ1NlrB5R9lAd57IBoUvbbm0lFujf Wf9m7Y3ouQ+93S6FtDTR1HWElnUYC1k3/YX9f4Z43t5JCT8Au8GpsCeVsuqI4+6F 7sXI3i/Oyi4O23pQkIj8m99Z9gsoEB60yHELAq2/AfqVyUxnJW46MSFVufGtlRyF 5uJhsbzdvEV9fiSRcLwrrXCA3Skar5PxHXZSKHxrAWpiQxe1vlQfh8cS8zfNFVzf sxmfPraU3cIPpg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:39 2025 by rpki-client