This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json) Hash identifier: yGd8jLIviVYP6xLNMu/6V6/OwzbLFLEP0Qh8sLjurjI= Subject key identifier: EF:D8:D1:3F:B7:83:54:16:C2:64:9C:3F:60:D6:2E:BB:DA:04:C7:25 Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Certificate serial: 019B353258E8CD6F7C85FE4232754A0A64DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft Manifest number: 03D5 Signing time: Fri 19 Dec 2025 06:00:50 +0000 Manifest this update: Fri 19 Dec 2025 06:00:50 +0000 Manifest next update: Sat 20 Dec 2025 06:00:50 +0000 Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=) 2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=) 3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: gtFSEP7xvM8cUOScquandidh8gttwZqDAYbB1pd+dS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:58:e8:cd:6f:7c:85:fe:42:32:75:4a:0a:64:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2 Validity Not Before: Dec 19 06:00:50 2025 GMT Not After : Dec 20 06:00:50 2025 GMT Subject: CN=efd8d13fb7835416c2649c3f60d62ebbda04c725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:66:cd:40:94:9e:de:bb:14:92:ef:c9:c9: e9:b3:de:ac:c6:15:1a:8f:34:17:e5:c7:72:86:00: 37:8e:0c:64:55:59:5f:68:c8:49:57:a1:2c:92:d6: c5:94:84:4f:54:8a:76:dc:76:b8:a3:1d:8b:7c:04: 33:a5:cf:2a:e3:91:90:46:12:b8:49:14:38:64:8f: 0b:74:ad:1a:93:2c:63:2b:e7:57:45:77:9e:25:35: bd:9d:0a:57:c7:b7:ca:e8:2a:86:da:96:ba:1a:c9: 9b:e8:f6:38:d0:60:b4:9e:fc:97:43:35:d8:23:ce: af:60:46:ec:34:4e:62:a7:b5:d8:ef:26:2c:c9:0f: 19:4b:e0:2d:e7:b3:f4:bd:da:b2:62:71:a8:cc:a2: 0b:30:77:1a:df:c5:75:78:a3:94:10:1e:6e:2f:51: 89:17:63:0e:5a:00:62:93:93:b9:bb:64:6d:fc:88: 4a:bf:57:55:31:e1:6c:d1:dd:6b:54:f8:0d:b8:a8: ad:12:db:03:f1:b5:82:12:c8:ca:ff:46:eb:05:df: 1a:d6:f8:d2:1a:ac:26:49:9a:a1:89:6b:55:e6:67: ae:68:56:87:1c:da:85:41:b1:42:7f:ff:44:15:24: df:4e:45:b6:a0:ad:83:25:f7:45:0d:af:53:e6:04: 6a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D8:D1:3F:B7:83:54:16:C2:64:9C:3F:60:D6:2E:BB:DA:04:C7:25 X509v3 Authority Key Identifier: keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7e:89:30:f7:b2:6b:13:77:9c:fa:ec:4a:4a:62:8e:d7:d5: 93:14:d6:a4:82:36:1f:63:44:d8:b7:be:fb:93:f9:d5:8f:33: 09:48:61:24:d7:87:73:ec:b8:94:89:3e:c8:ea:36:d4:0c:14: a2:67:09:9f:45:47:95:f1:85:d8:c7:27:23:8f:41:14:f6:0c: 89:f1:17:d2:f5:31:e7:56:e2:fa:5f:12:be:7d:cd:b4:71:4b: 54:9e:cf:19:70:52:b1:cc:f1:6f:84:47:94:65:41:4c:7b:59: e2:24:7e:32:89:85:80:c1:4c:c0:e8:22:52:2f:ba:e2:59:8a: f9:b3:f8:be:84:eb:66:05:ef:27:e3:f0:15:28:3b:44:e4:c1: c4:89:bd:2d:ac:eb:76:03:a8:c2:07:5e:47:8d:3a:bd:4f:f0: 1f:df:32:4c:1f:76:1a:9c:cd:11:ce:80:85:4b:9d:20:1a:18: 06:33:0f:29:bc:14:87:ea:18:aa:78:19:06:26:9c:cf:d0:41: 80:db:48:b4:64:be:97:89:96:e3:a2:a7:91:a8:6b:1f:99:05: 4c:f2:41:59:36:12:0e:11:c1:50:26:25:67:08:1d:37:52:80: d0:69:91:89:f5:df:40:eb:32:64:13:2c:cb:24:b9:0d:4b:1c: 6d:5e:4b:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MljozW98hf5CMnVKCmTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5 ZTcwZjIwHhcNMjUxMjE5MDYwMDUwWhcNMjUxMjIwMDYwMDUwWjAzMTEwLwYDVQQD EyhlZmQ4ZDEzZmI3ODM1NDE2YzI2NDljM2Y2MGQ2MmViYmRhMDRjNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTxmzUCUnt67FJLvycnps96sxhUa jzQX5cdyhgA3jgxkVVlfaMhJV6EsktbFlIRPVIp23Ha4ox2LfAQzpc8q45GQRhK4 SRQ4ZI8LdK0akyxjK+dXRXeeJTW9nQpXx7fK6CqG2pa6Gsmb6PY40GC0nvyXQzXY I86vYEbsNE5ip7XY7yYsyQ8ZS+At57P0vdqyYnGozKILMHca38V1eKOUEB5uL1GJ F2MOWgBik5O5u2Rt/IhKv1dVMeFs0d1rVPgNuKitEtsD8bWCEsjK/0brBd8a1vjS GqwmSZqhiWtV5meuaFaHHNqFQbFCf/9EFSTfTkW2oK2DJfdFDa9T5gRq2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/Y0T+3g1QWwmScP2DWLrvaBMclMB8GA1UdIwQY MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj36JMPey axN3nPrsSkpijtfVkxTWpII2H2NE2Le++5P51Y8zCUhhJNeHc+y4lIk+yOo21AwU omcJn0VHlfGF2McnI49BFPYMifEX0vUx51bi+l8Svn3NtHFLVJ7PGXBSsczxb4RH lGVBTHtZ4iR+MomFgMFMwOgiUi+64lmK+bP4voTrZgXvJ+PwFSg7ROTBxIm9Lazr dgOowgdeR406vU/wH98yTB92GpzNEc6AhUudIBoYBjMPKbwUh+oYqngZBiacz9BB gNtItGS+l4mW46KnkahrH5kFTPJBWTYSDhHBUCYlZwgdN1KA0GmRifXfQOsyZBMs yyS5DUscbV5LvQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:44:52 2025 by rpki-client