This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json) Hash identifier: kPmGTBeRnuiZ4W2bODPPZLQjctIbV5WWtbJFu6Otb9Y= Subject key identifier: BD:0E:7C:C0:B6:EE:CA:BA:9F:1B:DA:A5:5E:1F:58:01:3B:74:8A:4A Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c Certificate serial: 019B6A32AD189C3C3279771D1AD374032D98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 13:01:04 +0000 Manifest this update: Mon 29 Dec 2025 13:01:04 +0000 Manifest next update: Tue 30 Dec 2025 13:01:04 +0000 Files and hashes: 1: LPoSWmH9lMAQGTklM5DJIT-hXL8.roa (hash: TOrMsZzQDuOs5c3iwWnYNm18JhvhdddP0HuUPukBsu0=) 2: OvOurKu8T2ws1g_rbUDf-nmHO_k.roa (hash: il6P6mcaD6j7wpNIC2MuV0ZyXgmG33aNWz7qa9/JNHg=) 3: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: IQPXzkcQavV0c0txjAsyWWrBQkpMIubYI1sbwWjoJ/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:ad:18:9c:3c:32:79:77:1d:1a:d3:74:03:2d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c Validity Not Before: Dec 29 13:01:04 2025 GMT Not After : Dec 30 13:01:04 2025 GMT Subject: CN=bd0e7cc0b6eecaba9f1bdaa55e1f58013b748a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:fa:4a:fc:86:06:84:18:d3:5c:3b:79:db: 96:06:10:4e:10:86:dd:28:11:7e:57:d0:38:df:13: c1:e5:53:f1:95:1d:d3:a6:4d:5a:26:fd:59:cf:df: 74:1f:62:4b:4a:aa:ec:4b:ef:36:11:74:23:0b:9a: 3c:5e:60:09:c9:8d:47:8c:90:50:61:ad:a2:ce:76: cc:47:b3:aa:27:28:b1:b1:b7:0c:be:b5:ea:39:f6: d8:48:f8:35:38:a5:2c:da:00:2e:ff:ec:5a:4a:8a: 25:1c:b6:19:b7:2a:24:5f:1a:02:70:9c:1f:54:9f: 72:9c:20:0a:36:7d:91:02:1d:cd:99:f0:8c:4d:52: c4:da:cb:8b:44:2e:90:1b:a6:3d:f1:e1:34:eb:68: e7:c0:3e:1b:68:0d:e3:18:0d:04:71:be:1d:aa:72: 3c:6a:8c:8b:31:fe:68:a1:63:d3:47:71:ce:f7:ce: c4:e6:6d:93:bd:0c:f1:d1:fa:59:e3:d5:5c:20:44: ab:c8:8b:a7:b2:de:cc:90:da:5f:22:3b:6c:d3:e4: 63:e3:c6:1d:c5:f1:de:7f:38:84:02:91:1b:61:b5: 1d:44:8d:cd:fc:78:aa:d8:f8:15:4e:46:0a:20:6d: 7a:50:50:76:23:6f:b0:9d:5c:dc:b2:a8:a9:5a:b1: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0E:7C:C0:B6:EE:CA:BA:9F:1B:DA:A5:5E:1F:58:01:3B:74:8A:4A X509v3 Authority Key Identifier: keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:69:c2:c8:f4:a9:dd:3a:2a:8f:f4:f3:3d:cc:cf:79:22:04: 0a:49:38:36:b3:eb:9e:e8:16:4a:c7:b8:cc:79:7a:88:2a:3b: 11:ff:74:65:d6:b5:d2:c1:a5:5b:bc:fc:d5:30:ba:04:fe:8e: 4a:95:6e:e1:42:a1:9f:10:e0:39:11:6c:a8:7a:97:81:e8:d5: 9e:17:c5:f3:ac:e8:87:68:90:67:aa:a5:15:7f:03:02:c9:94: 38:40:0c:de:13:0e:0e:b9:96:11:78:51:5b:17:bc:28:15:8d: 8d:7a:84:b5:1d:52:3b:31:6c:35:15:0d:43:24:b6:9d:38:b3: 10:64:dd:ba:a7:5b:d0:12:02:45:a4:e2:5d:40:fc:5e:c9:cc: 60:02:f7:47:7a:af:11:51:27:b2:f8:5a:8b:dd:9a:69:0f:d2: c5:b2:16:59:8e:b1:31:fa:25:ea:01:35:e9:9a:05:a7:f3:0e: c6:4f:7f:30:bc:e1:d6:01:b8:c6:ec:1a:73:17:93:ff:3c:03: 44:f8:1f:57:cf:fb:bd:2b:47:87:87:d0:56:cf:fd:01:4c:7a: 79:15:f5:93:f7:57:69:3c:fd:04:78:80:6c:59:cb:16:be:4d: ea:ed:10:0e:9b:8c:2e:aa:b8:80:87:87:a0:5d:1b:29:6e:c6: 5a:45:f6:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMq0YnDwyeXcdGtN0Ay2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGNhMWY5MDUxOGQ0MjUzZjMyNTk0N2Q3ZjMyZGI3ODcy MTY0N2MwHhcNMjUxMjI5MTMwMTA0WhcNMjUxMjMwMTMwMTA0WjAzMTEwLwYDVQQD EyhiZDBlN2NjMGI2ZWVjYWJhOWYxYmRhYTU1ZTFmNTgwMTNiNzQ4YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv//6SvyGBoQY01w7eduWBhBOEIbd KBF+V9A43xPB5VPxlR3Tpk1aJv1Zz990H2JLSqrsS+82EXQjC5o8XmAJyY1HjJBQ Ya2iznbMR7OqJyixsbcMvrXqOfbYSPg1OKUs2gAu/+xaSoolHLYZtyokXxoCcJwf VJ9ynCAKNn2RAh3NmfCMTVLE2suLRC6QG6Y98eE062jnwD4baA3jGA0Ecb4dqnI8 aoyLMf5ooWPTR3HO987E5m2TvQzx0fpZ49VcIESryIunst7MkNpfIjts0+Rj48Yd xfHefziEApEbYbUdRI3N/Hiq2PgVTkYKIG16UFB2I2+wnVzcsqipWrF3iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0OfMC27sq6nxvapV4fWAE7dIpKMB8GA1UdIwQY MBaAFGRMofkFGNQlPzJZR9fzLbeHIWR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQt YjkwZDk3NGU1ZmI1LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE1NjQtMzQ2Ni00NzMyLTgzYmQtYjkwZDk3NGU1ZmI1 LzEvWkV5aC1RVVkxQ1VfTWxsSDFfTXR0NGNoWkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGnCyPSp 3Toqj/TzPczPeSIECkk4NrPrnugWSse4zHl6iCo7Ef90Zda10sGlW7z81TC6BP6O SpVu4UKhnxDgORFsqHqXgejVnhfF86zoh2iQZ6qlFX8DAsmUOEAM3hMODrmWEXhR Wxe8KBWNjXqEtR1SOzFsNRUNQyS2nTizEGTduqdb0BICRaTiXUD8XsnMYAL3R3qv EVEnsvhai92aaQ/SxbIWWY6xMfol6gE16ZoFp/MOxk9/MLzh1gG4xuwacxeT/zwD RPgfV8/7vStHh4fQVs/9AUx6eRX1k/dXaTz9BHiAbFnLFr5N6u0QDpuMLqq4gIeH oF0bKW7GWkX2Vg== -----END CERTIFICATE-----Generated at Mon Dec 29 14:39:04 2025 by rpki-client