This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json) Hash identifier: GkgAdd2mzkzN3tVlQy09Eq2/aSoK46lvRPN0D0J5+hc= Subject key identifier: 8E:77:27:E0:01:C2:A5:A5:F7:F8:44:7F:1C:EA:90:AB:6A:88:F4:EE Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67 Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367 Certificate serial: 019B59E3F0049D44E8534C8ABE434E871451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:01:08 +0000 Manifest this update: Fri 26 Dec 2025 09:01:08 +0000 Manifest next update: Sat 27 Dec 2025 09:01:08 +0000 Files and hashes: 1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=) 2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: loVBxDuEzbx2xI7RaUsxtkQecp5F0qRMlbTNN9s27Ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f0:04:9d:44:e8:53:4c:8a:be:43:4e:87:14:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367 Validity Not Before: Dec 26 09:01:08 2025 GMT Not After : Dec 27 09:01:08 2025 GMT Subject: CN=8e7727e001c2a5a5f7f8447f1cea90ab6a88f4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:7c:8a:ce:e5:58:a2:9f:75:c1:68:ab:6e: 70:83:72:aa:64:36:44:fb:b7:79:2f:56:0e:6f:35: 47:2f:d9:18:0f:fc:32:71:9d:56:45:66:be:38:81: 17:9d:12:6a:5b:b0:49:d6:e9:5a:e0:9c:3f:8f:db: 16:0e:a0:48:85:4a:87:87:06:0c:0c:3e:d3:9f:28: 66:50:aa:eb:eb:21:c7:cb:3b:72:c8:3d:10:73:2c: 3b:b0:71:16:0a:50:6f:43:c2:c8:e8:ad:3e:81:5b: ac:f8:4a:0f:2c:26:11:cb:7a:2e:6d:e6:dc:b9:df: a6:96:b3:91:60:92:3d:cd:9d:c7:1c:45:43:e3:8d: 19:39:48:2b:7d:e1:2f:e6:1a:14:36:1f:79:f6:89: ae:81:fc:00:c1:f9:38:bc:9e:33:9f:ac:51:6b:e0: 58:be:dd:b4:fe:52:81:18:ab:2a:13:c0:e0:f7:d1: 51:03:7c:72:2b:19:1e:23:94:92:0f:df:1d:c0:b4: 09:20:3d:04:76:31:e9:02:7f:eb:98:df:fb:7b:6a: 4e:86:da:42:37:bb:f7:ca:02:53:69:76:cb:64:9f: 29:4b:80:37:6c:b5:24:5d:a5:9a:b0:3c:f2:ce:cd: cc:fd:96:7d:33:c0:ad:15:2a:ec:31:ce:00:5e:77: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:77:27:E0:01:C2:A5:A5:F7:F8:44:7F:1C:EA:90:AB:6A:88:F4:EE X509v3 Authority Key Identifier: keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:61:90:59:81:f5:e5:be:0a:c7:7d:0b:2c:3a:54:ee:3b:b9: c2:45:21:ff:0a:b5:1a:a6:3e:3b:29:df:7b:02:08:56:d0:77: b8:9a:6f:df:e9:85:9b:dd:97:e3:39:c2:c9:10:a9:cb:95:a9: de:cd:46:e2:8e:15:57:a7:c2:97:9f:dd:11:22:91:aa:1c:b3: c5:9e:aa:88:00:48:e9:a3:9e:09:e8:f6:86:19:7b:e3:f8:f4: b7:b8:d8:f6:b3:fb:9e:88:e3:b4:b3:07:69:c3:3c:d2:84:d4: de:5b:23:2b:cb:9e:d5:a5:89:83:17:a6:71:41:98:65:b4:95: 69:b2:e0:ad:14:cb:f9:28:07:55:25:08:fd:b8:48:24:60:74: fe:0b:23:5d:2c:6f:2e:fa:4c:d0:89:32:f5:9e:44:f2:70:28: 46:f8:f2:12:56:33:b5:5e:e2:28:32:99:64:90:86:a7:de:a5: 67:b7:d4:8a:4d:3e:59:86:67:0f:31:a3:c6:91:2b:d2:e1:7a: 95:57:37:84:77:30:71:af:b1:70:b2:89:6f:82:18:33:3c:9d: af:ef:1b:a3:6e:d3:c9:4c:92:a0:21:bc:0e:4b:63:04:59:15: 47:a3:df:79:4f:6d:ae:e9:f7:71:e7:10:28:64:8c:a0:7a:b8: bf:24:84:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/AEnUToU0yKvkNOhxRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTY0OWRiYmE1OTJmMWM5ZjNmMjg4OWJjZjgxZmQyMjU5 ODkzNjcwHhcNMjUxMjI2MDkwMTA4WhcNMjUxMjI3MDkwMTA4WjAzMTEwLwYDVQQD Eyg4ZTc3MjdlMDAxYzJhNWE1ZjdmODQ0N2YxY2VhOTBhYjZhODhmNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyex8is7lWKKfdcFoq25wg3KqZDZE +7d5L1YObzVHL9kYD/wycZ1WRWa+OIEXnRJqW7BJ1ula4Jw/j9sWDqBIhUqHhwYM DD7TnyhmUKrr6yHHyztyyD0Qcyw7sHEWClBvQ8LI6K0+gVus+EoPLCYRy3oubebc ud+mlrORYJI9zZ3HHEVD440ZOUgrfeEv5hoUNh959omugfwAwfk4vJ4zn6xRa+BY vt20/lKBGKsqE8Dg99FRA3xyKxkeI5SSD98dwLQJID0EdjHpAn/rmN/7e2pOhtpC N7v3ygJTaXbLZJ8pS4A3bLUkXaWasDzyzs3M/ZZ9M8CtFSrsMc4AXnfEewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI53J+ABwqWl9/hEfxzqkKtqiPTuMB8GA1UdIwQY MBaAFM5WSdu6WS8cnz8oibz4H9IlmJNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAt YzY3YWI4M2FjMWY1LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAtYzY3YWI4M2FjMWY1 LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2GQWYH1 5b4Kx30LLDpU7ju5wkUh/wq1GqY+OynfewIIVtB3uJpv3+mFm92X4znCyRCpy5Wp 3s1G4o4VV6fCl5/dESKRqhyzxZ6qiABI6aOeCej2hhl74/j0t7jY9rP7nojjtLMH acM80oTU3lsjK8ue1aWJgxemcUGYZbSVabLgrRTL+SgHVSUI/bhIJGB0/gsjXSxv LvpM0Iky9Z5E8nAoRvjyElYztV7iKDKZZJCGp96lZ7fUik0+WYZnDzGjxpEr0uF6 lVc3hHcwca+xcLKJb4IYMzydr+8bo27TyUySoCG8DktjBFkVR6PfeU9trun3cecQ KGSMoHq4vySEwQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:51 2025 by rpki-client