This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json) Hash identifier: IXpdq1PoEKyEk1Tevjdw2eHFFMTc3WRJQoqBrchPvwg= Subject key identifier: B2:85:FB:8E:E7:4C:EF:EC:F0:84:6C:E8:5D:BF:A0:5D:CA:27:36:D7 Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Certificate serial: 019B39B41B518DBA62FD0CA8A8A900D2712C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft Manifest number: 0CD1 Signing time: Sat 20 Dec 2025 03:01:03 +0000 Manifest this update: Sat 20 Dec 2025 03:01:03 +0000 Manifest next update: Sun 21 Dec 2025 03:01:03 +0000 Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=) 2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=) 3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=) 4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: Ep7jnTUMgNyCUIjHIxLcGdpp/r3pe6ybeKT2TOom6Y0=) 5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=) 6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=) 7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:1b:51:8d:ba:62:fd:0c:a8:a8:a9:00:d2:71:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Validity Not Before: Dec 20 03:01:03 2025 GMT Not After : Dec 21 03:01:03 2025 GMT Subject: CN=b285fb8ee74cefecf0846ce85dbfa05dca2736d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:41:75:69:1f:85:d0:c1:77:aa:ec:5f:1e: cb:c0:86:19:31:b0:c5:72:48:b3:df:06:8e:59:92: c3:dc:c3:9c:f5:a4:aa:07:03:b6:b4:ee:1b:4a:14: e6:86:6b:0f:3c:48:8b:fd:32:9f:d1:b1:c6:26:f0: 9d:72:da:db:e3:1f:38:02:7a:9b:46:96:c3:df:73: 75:62:2d:4a:e8:47:6b:bc:c4:c5:a1:b1:10:57:e5: 84:ad:9e:eb:a8:05:8e:2a:90:ed:c7:d3:b8:9d:13: 5e:ab:a4:33:02:c4:fc:f9:ff:13:c8:ce:cc:1c:1f: 5c:4a:db:62:dd:56:5c:a9:c2:38:18:31:f3:2a:49: b3:30:f9:e9:8a:17:61:c4:2b:e9:d8:9c:33:02:be: 16:46:75:63:80:1c:b5:6e:8d:a4:fc:81:49:c0:63: 9b:b0:9d:16:40:0e:0c:da:b7:ae:7b:5f:27:eb:c8: 07:30:3a:b1:b7:55:29:19:29:27:1f:c8:ef:32:48: 52:b9:dc:d0:74:04:e9:08:77:84:55:f9:7e:74:a5: 87:de:e9:10:7f:32:08:da:32:dd:70:e2:d5:89:6a: 03:af:38:5c:bf:c7:d5:c6:fd:7b:f4:12:8b:a7:6b: e8:c6:f6:ee:02:f4:7a:26:0d:8c:24:34:65:6b:a9: e7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:85:FB:8E:E7:4C:EF:EC:F0:84:6C:E8:5D:BF:A0:5D:CA:27:36:D7 X509v3 Authority Key Identifier: keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a9:93:29:23:88:c3:79:6e:69:c6:0c:45:c9:a0:65:13:84: 07:53:0c:f1:63:19:bb:68:f8:e6:c6:e2:bb:05:17:89:dd:09: fe:5d:5f:0c:b6:ce:9c:a5:ba:90:15:15:d6:71:31:e4:03:4c: cf:5c:3e:3d:39:cd:5f:72:bd:dd:aa:f7:bb:4a:58:f4:46:99: 31:8d:e4:26:a7:ee:b9:3f:c2:80:7a:00:b3:55:76:ab:13:f8: da:c9:6c:b6:b0:5f:56:e7:2a:0b:90:7c:6a:46:3b:8d:2e:76: 03:d2:ca:af:09:37:76:6c:7a:23:64:90:17:53:9b:11:47:95: 84:d8:7a:7d:72:69:f0:84:f9:06:b6:8e:78:f5:b0:b4:07:6a: e5:f9:ca:ad:64:d0:fd:9a:2a:f7:d4:66:0b:cb:0b:3f:fe:7f: ac:7c:9a:b1:65:6d:2c:f6:af:60:ff:78:b8:4c:7e:71:9d:ca: 7f:5e:10:f7:24:b4:32:36:ec:97:e4:b4:11:57:87:07:0d:ee: da:71:72:5b:a4:53:d6:b8:73:08:66:57:06:73:4d:80:9a:8f: e4:66:7e:d6:11:28:3d:ac:d4:5a:60:70:69:0c:e8:fd:bc:b0: 7c:ac:17:30:c6:9f:e0:2b:fe:96:70:dc:96:75:35:3b:f1:26: 96:c3:40:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tBtRjbpi/QyoqKkA0nEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0 YjViMTEwHhcNMjUxMjIwMDMwMTAzWhcNMjUxMjIxMDMwMTAzWjAzMTEwLwYDVQQD EyhiMjg1ZmI4ZWU3NGNlZmVjZjA4NDZjZTg1ZGJmYTA1ZGNhMjczNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA1BdWkfhdDBd6rsXx7LwIYZMbDF ckiz3waOWZLD3MOc9aSqBwO2tO4bShTmhmsPPEiL/TKf0bHGJvCdctrb4x84Anqb RpbD33N1Yi1K6EdrvMTFobEQV+WErZ7rqAWOKpDtx9O4nRNeq6QzAsT8+f8TyM7M HB9cStti3VZcqcI4GDHzKkmzMPnpihdhxCvp2JwzAr4WRnVjgBy1bo2k/IFJwGOb sJ0WQA4M2reue18n68gHMDqxt1UpGSknH8jvMkhSudzQdATpCHeEVfl+dKWH3ukQ fzII2jLdcOLViWoDrzhcv8fVxv179BKLp2voxvbuAvR6Jg2MJDRla6nnLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKF+47nTO/s8IRs6F2/oF3KJzbXMB8GA1UdIwQY MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKmTKSOI w3luacYMRcmgZROEB1MM8WMZu2j45sbiuwUXid0J/l1fDLbOnKW6kBUV1nEx5ANM z1w+PTnNX3K93ar3u0pY9EaZMY3kJqfuuT/CgHoAs1V2qxP42slstrBfVucqC5B8 akY7jS52A9LKrwk3dmx6I2SQF1ObEUeVhNh6fXJp8IT5BraOePWwtAdq5fnKrWTQ /Zoq99RmC8sLP/5/rHyasWVtLPavYP94uEx+cZ3Kf14Q9yS0Mjbsl+S0EVeHBw3u 2nFyW6RT1rhzCGZXBnNNgJqP5GZ+1hEoPazUWmBwaQzo/bywfKwXMMaf4Cv+lnDc lnU1O/EmlsNASQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:49 2025 by rpki-client