This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json) Hash identifier: 9I0er3D5lxFxUxgOpEMb5kHjQjkioOA7epMGbJU+XgY= Subject key identifier: 8B:84:25:69:96:23:92:3B:4E:22:40:7E:73:EF:D3:0C:C4:D1:F3:83 Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Certificate serial: 019B2176CCB1CC4872251CBA4EF20B62F307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft Manifest number: 12BB Signing time: Mon 15 Dec 2025 10:03:12 +0000 Manifest this update: Mon 15 Dec 2025 10:03:12 +0000 Manifest next update: Tue 16 Dec 2025 10:03:12 +0000 Files and hashes: 1: 1DNJXUdN9aHYwhJ0OLj39VSopnQ.roa (hash: QBTrHThXdQY8h/nmwy8ckGzuWyt8cYLb33EN8JyG6aE=) 2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: AWmhc4bV2URVbnNZOd4v9COLqTd/NL5ukLMWuP6CR4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:cc:b1:cc:48:72:25:1c:ba:4e:f2:0b:62:f3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Validity Not Before: Dec 15 10:03:12 2025 GMT Not After : Dec 16 10:03:12 2025 GMT Subject: CN=8b8425699623923b4e22407e73efd30cc4d1f383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:b2:e3:b8:df:5e:9a:01:99:e3:e5:cb:f4: c2:3d:49:2b:8c:6d:b2:53:0d:09:eb:3b:b4:ca:52: 87:ee:10:64:52:c5:6c:b6:85:0b:69:88:8a:09:e7: 0c:03:e2:f5:11:cf:cf:a6:16:8e:a6:60:bb:c2:46: 36:d4:a6:6c:3c:e3:cf:1c:44:3e:30:5c:b4:da:f4: 7b:0d:8c:8b:a0:7a:fa:a1:96:08:94:de:62:a4:39: bb:f3:91:03:02:c5:8d:1a:e8:72:46:34:bd:eb:da: cf:19:c0:7a:0e:39:0d:5d:7c:2b:21:23:f2:3b:5b: b7:14:d5:13:6e:ba:0c:7d:9e:d9:97:4c:2d:15:c5: 9f:50:63:ee:f9:e1:db:4b:b5:2d:9c:30:45:2a:02: 84:86:c5:71:f4:c7:a8:5a:ca:cd:10:eb:83:90:a2: 84:cf:7d:57:4c:3e:99:10:de:1b:b7:5b:b7:26:fd: f3:e1:e1:64:ca:19:af:7a:c5:4b:bb:1e:2d:92:08: 88:bf:c8:ef:8d:43:bf:c2:9f:d7:99:6e:18:92:b6: bb:1e:fe:2c:c9:7e:47:1f:5c:2f:32:75:84:2e:42: ec:3b:d1:be:61:f0:94:cf:e1:8d:cf:7b:f7:a2:46: 1f:ef:03:ce:6e:6b:83:c2:84:22:34:01:d5:18:1c: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:84:25:69:96:23:92:3B:4E:22:40:7E:73:EF:D3:0C:C4:D1:F3:83 X509v3 Authority Key Identifier: keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:18:73:95:ae:79:47:de:6a:b6:3a:2a:44:79:9b:74:15:31: 38:f0:5c:dc:9b:4c:d7:43:54:c9:61:1f:3f:21:f0:29:38:b4: 49:ef:d5:43:88:72:59:22:13:e7:7a:3e:9b:5b:59:42:8f:09: b0:8a:fc:28:1e:b5:d6:fe:b2:21:6a:6b:a9:a8:8f:74:5b:ef: d1:dd:7c:19:bc:28:e6:74:de:de:f8:3e:e1:a2:50:2f:33:5d: 13:05:ff:fd:f6:50:5e:17:c8:70:51:31:f4:1a:54:80:b3:ef: 5f:29:92:31:e3:15:2b:b0:dd:9b:ce:6b:c6:70:a2:24:2d:54: 85:c9:bc:5d:3a:cf:a6:67:3a:a4:f7:ae:73:3b:55:46:0d:4a: c1:32:a7:8b:18:aa:7b:58:3c:aa:19:29:09:b7:53:cd:4c:c2: a9:fe:f2:33:3f:4f:bd:ce:bb:21:19:8e:78:7a:4f:69:5a:dc: d4:c9:a1:e4:9c:5c:eb:a8:d2:d3:40:05:bc:2a:2b:a5:ca:a4: 2d:68:6d:77:5f:5a:e1:da:bf:17:c7:b9:b8:81:74:06:37:3d: b2:ea:57:04:27:c2:90:2f:19:da:82:39:4e:e5:db:96:8e:50: e2:d8:b4:fa:e0:a4:55:33:3d:cb:17:05:15:17:ca:49:9a:69: 7e:11:4c:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdsyxzEhyJRy6TvILYvMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZTAwNjJlNTRhNWZjYjZhMGM5OWU1OTg1NTdmZWQ2ZjM3 YTQ2MjkwHhcNMjUxMjE1MTAwMzEyWhcNMjUxMjE2MTAwMzEyWjAzMTEwLwYDVQQD Eyg4Yjg0MjU2OTk2MjM5MjNiNGUyMjQwN2U3M2VmZDMwY2M0ZDFmMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRKy47jfXpoBmePly/TCPUkrjG2y Uw0J6zu0ylKH7hBkUsVstoULaYiKCecMA+L1Ec/PphaOpmC7wkY21KZsPOPPHEQ+ MFy02vR7DYyLoHr6oZYIlN5ipDm785EDAsWNGuhyRjS969rPGcB6DjkNXXwrISPy O1u3FNUTbroMfZ7Zl0wtFcWfUGPu+eHbS7UtnDBFKgKEhsVx9MeoWsrNEOuDkKKE z31XTD6ZEN4bt1u3Jv3z4eFkyhmvesVLux4tkgiIv8jvjUO/wp/XmW4Ykra7Hv4s yX5HH1wvMnWELkLsO9G+YfCUz+GNz3v3okYf7wPObmuDwoQiNAHVGBwJswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuEJWmWI5I7TiJAfnPv0wzE0fODMB8GA1UdIwQY MBaAFGXgBi5Upfy2oMmeWYVX/tbzekYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDIt YWFlOTdlNjUwMTVjLzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDItYWFlOTdlNjUwMTVj LzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhhzla55 R95qtjoqRHmbdBUxOPBc3JtM10NUyWEfPyHwKTi0Se/VQ4hyWSIT53o+m1tZQo8J sIr8KB611v6yIWprqaiPdFvv0d18Gbwo5nTe3vg+4aJQLzNdEwX//fZQXhfIcFEx 9BpUgLPvXymSMeMVK7Ddm85rxnCiJC1Uhcm8XTrPpmc6pPeucztVRg1KwTKnixiq e1g8qhkpCbdTzUzCqf7yMz9Pvc67IRmOeHpPaVrc1Mmh5Jxc66jS00AFvCorpcqk LWhtd19a4dq/F8e5uIF0Bjc9supXBCfCkC8Z2oI5TuXblo5Q4ti0+uCkVTM9yxcF FRfKSZppfhFMug== -----END CERTIFICATE-----Generated at Mon Dec 15 19:52:15 2025 by rpki-client