This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json) Hash identifier: cJKKRIY/Kj7buFPDBfZ9cK/kfIzpGuRYy+BVGXizmoU= Subject key identifier: 8C:53:79:36:6D:03:8F:61:FA:30:B2:3C:6C:F1:96:61:BF:44:A2:E7 Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Certificate serial: 019B59E3A1BEF353944D151CF4DBA924C26D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft Manifest number: 172C Signing time: Fri 26 Dec 2025 09:00:48 +0000 Manifest this update: Fri 26 Dec 2025 09:00:48 +0000 Manifest next update: Sat 27 Dec 2025 09:00:48 +0000 Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=) 2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: 4J+AFznlPra3yikopQjkyJ7TM3w5wbYnB+yG5+jqhNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a1:be:f3:53:94:4d:15:1c:f4:db:a9:24:c2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Validity Not Before: Dec 26 09:00:48 2025 GMT Not After : Dec 27 09:00:48 2025 GMT Subject: CN=8c5379366d038f61fa30b23c6cf19661bf44a2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:32:9f:ae:fa:ce:34:60:21:8e:3e:bb:c1: af:7e:7a:d1:ba:38:94:e0:4e:ef:e7:93:df:86:41: cb:34:bb:95:b1:21:c5:8e:b0:0a:3f:3c:ab:c3:70: f5:4b:ef:61:92:2e:f4:51:02:fa:94:7e:a0:53:6f: 2e:47:c9:68:fa:51:38:d5:51:79:31:be:3b:a8:93: 95:4a:47:63:38:b5:8f:5d:d2:5d:01:df:e8:3e:1a: 93:e8:15:a4:e9:c1:ff:19:63:0e:e4:7b:3d:76:ce: 7b:6c:b3:6a:94:b1:fe:a9:34:58:f1:54:68:40:65: ac:d1:b4:85:cc:73:b8:07:3a:94:89:11:bb:9a:ae: 16:6f:d7:79:ff:91:90:fa:ac:2b:c5:5f:0c:e7:91: d6:92:53:ac:84:3f:5c:6a:2b:57:3c:cd:fb:0e:90: 05:cc:94:12:bd:df:43:1d:7f:2d:0a:5d:02:c6:06: 5e:1d:99:c7:37:64:44:78:f2:e4:a1:ac:55:9d:8e: aa:57:07:5a:cf:f6:e4:5b:b2:4c:fd:bd:56:e8:ab: 26:e7:12:5f:ab:49:88:8b:08:3d:66:1b:4f:41:e7: 2f:25:ac:ff:e7:c5:c0:ea:8d:29:a3:b3:22:b4:14: 65:d6:a2:9c:33:d7:7b:23:98:e2:24:e5:ff:2d:99: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:53:79:36:6D:03:8F:61:FA:30:B2:3C:6C:F1:96:61:BF:44:A2:E7 X509v3 Authority Key Identifier: keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1a:28:02:19:34:c7:b6:45:e1:85:7b:52:9e:1f:8f:dc:fd: ba:44:24:46:79:96:42:3a:94:dc:f4:78:75:dc:34:f2:4f:08: 8a:61:ad:a8:cc:75:1f:10:34:2a:06:55:d2:86:3f:df:b8:2c: b9:0a:3f:31:1e:d8:60:a9:06:14:9f:31:7b:22:27:33:a2:ca: 86:11:74:67:b6:2d:b5:cc:16:b3:52:74:ff:7e:76:74:ff:a9: d1:a8:0b:61:10:39:a8:19:ca:60:8e:ed:e6:ac:b7:53:68:7f: 24:ac:c7:2b:16:35:1f:d3:db:9a:ab:9c:9f:83:e3:3f:b6:41: dc:54:c5:78:2b:19:75:ca:1a:f8:2f:a4:bb:e6:6e:ef:1e:10: f3:50:f8:34:62:e4:60:d6:22:12:46:50:e3:7f:2e:6e:c4:7a: 97:9a:5e:5b:8c:4f:9a:4d:33:95:95:9d:9a:bb:f8:d8:4d:f2: 74:1d:f1:02:5a:17:4a:19:11:b8:8b:71:da:8e:c4:14:a8:e0: 49:76:2a:68:3f:32:81:fc:27:e8:5d:cd:d4:5f:25:c0:1e:3b: 01:64:bb:1e:e7:5f:73:68:68:2c:bd:93:86:4b:38:17:66:eb: 42:9f:9f:92:1c:86:4d:0b:ef:e7:96:63:fb:a6:85:28:25:58: 16:8a:34:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46G+81OUTRUc9NupJMJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzQ3ODhiMmI2OTJjNzEwM2IxY2I5ZTE2MTdmOGIzNjY5 MTBmMTMwHhcNMjUxMjI2MDkwMDQ4WhcNMjUxMjI3MDkwMDQ4WjAzMTEwLwYDVQQD Eyg4YzUzNzkzNjZkMDM4ZjYxZmEzMGIyM2M2Y2YxOTY2MWJmNDRhMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhkyn676zjRgIY4+u8GvfnrRujiU 4E7v55PfhkHLNLuVsSHFjrAKPzyrw3D1S+9hki70UQL6lH6gU28uR8lo+lE41VF5 Mb47qJOVSkdjOLWPXdJdAd/oPhqT6BWk6cH/GWMO5Hs9ds57bLNqlLH+qTRY8VRo QGWs0bSFzHO4BzqUiRG7mq4Wb9d5/5GQ+qwrxV8M55HWklOshD9caitXPM37DpAF zJQSvd9DHX8tCl0CxgZeHZnHN2REePLkoaxVnY6qVwdaz/bkW7JM/b1W6Ksm5xJf q0mIiwg9ZhtPQecvJaz/58XA6o0po7MitBRl1qKcM9d7I5jiJOX/LZm8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxTeTZtA49h+jCyPGzxlmG/RKLnMB8GA1UdIwQY MBaAFM7EeIsraSxxA7HLnhYX+LNmkQ8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMt YzY4MmI1YmUwZTUzLzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMtYzY4MmI1YmUwZTUz LzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABooAhk0 x7ZF4YV7Up4fj9z9ukQkRnmWQjqU3PR4ddw08k8IimGtqMx1HxA0KgZV0oY/37gs uQo/MR7YYKkGFJ8xeyInM6LKhhF0Z7YttcwWs1J0/352dP+p0agLYRA5qBnKYI7t 5qy3U2h/JKzHKxY1H9Pbmqucn4PjP7ZB3FTFeCsZdcoa+C+ku+Zu7x4Q81D4NGLk YNYiEkZQ438ubsR6l5peW4xPmk0zlZWdmrv42E3ydB3xAloXShkRuItx2o7EFKjg SXYqaD8ygfwn6F3N1F8lwB47AWS7Hudfc2hoLL2Thks4F2brQp+fkhyGTQvv55Zj +6aFKCVYFoo0Mg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:12 2025 by rpki-client