This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json) Hash identifier: YUNyfLTwu2xylTD6A8BmytN/XdKk8Q9THy7bmFTUiiM= Subject key identifier: E7:FE:2E:CB:5F:1A:A6:FE:9C:AD:61:4E:49:23:25:03:50:DC:55:0E Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Certificate serial: 019B631EF5C4834872905E1051621C05FC25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft Manifest number: 14DC Signing time: Sun 28 Dec 2025 04:02:11 +0000 Manifest this update: Sun 28 Dec 2025 04:02:11 +0000 Manifest next update: Mon 29 Dec 2025 04:02:11 +0000 Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=) 2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: BOdqLRDEE+5zvRKoelKsGO0U+t1w7U8oNdCQaBRAGZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:f5:c4:83:48:72:90:5e:10:51:62:1c:05:fc:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Validity Not Before: Dec 28 04:02:11 2025 GMT Not After : Dec 29 04:02:11 2025 GMT Subject: CN=e7fe2ecb5f1aa6fe9cad614e4923250350dc550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c9:26:35:9f:6d:16:51:88:78:9e:cc:28:e6: 17:e5:f7:2f:be:8d:1c:c5:19:50:fc:c4:8f:d9:94: 63:b1:5e:23:a5:43:1c:83:12:d6:54:da:65:b6:b8: 45:a7:0b:7c:05:ee:2d:b6:6d:7d:ff:d7:33:ab:7b: 16:83:a1:f0:99:0d:d2:85:b9:0d:51:26:bb:73:78: 62:64:36:ad:db:d5:05:b0:5b:07:65:c8:93:db:a3: 01:bc:c2:2f:8c:e9:fd:dd:cd:4f:37:93:40:e9:ae: 83:13:c6:a2:ac:42:9a:5b:5d:ef:db:d9:9b:f8:65: d0:76:c3:0d:0b:e5:78:09:d4:93:d8:a9:e0:ad:f9: 00:3f:ef:96:8e:da:f3:9c:9d:90:55:7d:f8:0d:a5: 4b:6b:c0:b4:38:1a:84:68:be:57:5f:f5:76:c1:d3: 92:22:c9:87:cf:0f:10:26:9c:5d:f7:a9:d0:8d:24: b7:f7:26:26:6f:1c:9a:4a:42:f2:2d:06:37:3e:9a: 20:43:9e:c5:5d:6a:08:52:6d:c4:c2:e2:de:b4:3d: d3:ad:28:69:21:c7:40:6a:3a:81:c9:7c:a6:c0:a9: 7d:eb:d1:4b:55:97:91:72:1f:f4:3e:b1:91:6f:8d: 30:3d:f6:25:fa:b0:23:20:30:e8:14:c4:2c:4f:8c: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FE:2E:CB:5F:1A:A6:FE:9C:AD:61:4E:49:23:25:03:50:DC:55:0E X509v3 Authority Key Identifier: keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:44:43:2a:a1:b8:69:c6:a1:de:39:9f:0b:ab:05:ad:5a:f7: 48:e5:af:a6:83:9a:7e:7a:49:e3:c3:fd:cb:94:d0:5d:40:45: be:35:17:b4:5e:9d:80:5e:76:3e:43:a6:59:81:62:23:6a:f0: 37:b8:5e:83:7e:f4:79:51:38:88:74:3b:8b:55:bb:52:ee:00: 84:0a:00:12:dc:32:c9:1c:ed:d2:b9:c5:d0:52:0e:ba:29:0e: 12:15:58:a0:15:2e:53:d5:d2:38:99:7a:fa:06:65:fb:4c:99: f2:9b:e2:04:c1:2e:c5:72:5e:4e:67:33:1b:b0:9f:25:ef:5c: c8:86:74:d1:5e:aa:51:3e:c2:87:e3:c3:f3:eb:58:c4:89:18: 03:9f:cf:fe:19:8b:3c:2d:58:a1:8a:78:43:84:83:bb:4a:14: 12:a8:9d:1a:f8:2c:0b:81:23:54:de:3b:f7:4a:4b:49:1f:51: f1:80:9c:cd:6d:dc:f8:bc:11:01:ba:47:ae:42:91:4b:8b:e9: d4:83:4b:40:d4:ff:0b:2a:32:d8:6f:ab:61:21:97:c1:c4:fa: 10:e6:eb:cd:8b:ed:0c:7b:4d:d0:4c:f5:3a:a3:75:fb:7e:49: 13:45:bb:ff:52:6e:0a:69:89:84:e5:01:c0:f6:af:f6:51:ee: 6e:36:ec:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHvXEg0hykF4QUWIcBfwlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx YjRhMjAwHhcNMjUxMjI4MDQwMjExWhcNMjUxMjI5MDQwMjExWjAzMTEwLwYDVQQD EyhlN2ZlMmVjYjVmMWFhNmZlOWNhZDYxNGU0OTIzMjUwMzUwZGM1NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MkmNZ9tFlGIeJ7MKOYX5fcvvo0c xRlQ/MSP2ZRjsV4jpUMcgxLWVNpltrhFpwt8Be4ttm19/9czq3sWg6HwmQ3ShbkN USa7c3hiZDat29UFsFsHZciT26MBvMIvjOn93c1PN5NA6a6DE8airEKaW13v29mb +GXQdsMNC+V4CdST2KngrfkAP++WjtrznJ2QVX34DaVLa8C0OBqEaL5XX/V2wdOS IsmHzw8QJpxd96nQjSS39yYmbxyaSkLyLQY3PpogQ57FXWoIUm3EwuLetD3TrShp IcdAajqByXymwKl969FLVZeRch/0PrGRb40wPfYl+rAjIDDoFMQsT4yItwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf+LstfGqb+nK1hTkkjJQNQ3FUOMB8GA1UdIwQY MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkRDKqG4 acah3jmfC6sFrVr3SOWvpoOafnpJ48P9y5TQXUBFvjUXtF6dgF52PkOmWYFiI2rw N7heg370eVE4iHQ7i1W7Uu4AhAoAEtwyyRzt0rnF0FIOuikOEhVYoBUuU9XSOJl6 +gZl+0yZ8pviBMEuxXJeTmczG7CfJe9cyIZ00V6qUT7Ch+PD8+tYxIkYA5/P/hmL PC1YoYp4Q4SDu0oUEqidGvgsC4EjVN4790pLSR9R8YCczW3c+LwRAbpHrkKRS4vp 1INLQNT/Cyoy2G+rYSGXwcT6EObrzYvtDHtN0Ez1OqN1+35JE0W7/1JuCmmJhOUB wPav9lHubjbs2g== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:43 2025 by rpki-client