This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json) Hash identifier: FIxOEX911jp5Rc14iC8BoNTKA7CPXWKyfRgbEq/1L/4= Subject key identifier: BC:67:3B:11:14:C1:4C:70:3D:29:CD:4D:32:C8:00:52:63:43:FC:68 Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Certificate serial: 019B4A03BA988B377AF98C12E41D1E809132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft Manifest number: 10FB Signing time: Tue 23 Dec 2025 07:01:56 +0000 Manifest this update: Tue 23 Dec 2025 07:01:56 +0000 Manifest next update: Wed 24 Dec 2025 07:01:56 +0000 Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=) 2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: OhVVhpKg7CcVsTJtXDKnf2F+rzYzGmrCr2gREqJ3AfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:ba:98:8b:37:7a:f9:8c:12:e4:1d:1e:80:91:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Validity Not Before: Dec 23 07:01:56 2025 GMT Not After : Dec 24 07:01:56 2025 GMT Subject: CN=bc673b1114c14c703d29cd4d32c800526343fc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:08:89:5f:0a:18:9e:0b:0b:51:4d:18:d0: c5:50:39:4a:98:75:82:a3:c0:6d:47:61:50:df:23: 34:4d:fc:8d:6a:07:01:54:4c:38:ca:cf:a4:a9:8e: fb:54:45:80:04:f5:eb:34:dc:0e:1a:75:b4:30:c1: de:ae:af:29:e6:17:f1:0e:25:c7:22:32:a3:ce:43: 1a:a5:ca:3a:85:30:58:d6:d2:e9:c6:bc:1f:be:84: ca:2a:7e:64:c7:65:48:28:90:1d:05:cb:93:c7:e8: 99:ce:bc:cf:d7:19:ae:1e:e6:a5:c9:34:d0:20:e4: 91:bb:b7:44:03:15:bb:35:5d:7c:18:5a:37:be:83: b4:e8:90:e5:03:4f:c5:3d:15:38:74:5f:5f:34:d6: dd:c8:d5:9c:29:ba:99:67:45:df:90:99:bc:d7:51: 5e:f1:4b:c7:fe:e9:da:9d:3e:20:ae:18:4e:c1:cb: c1:94:a8:6e:c7:67:0e:81:ef:68:dc:ec:5a:58:a9: 12:41:22:51:6e:5c:85:fb:74:c0:4a:8d:6b:00:6b: 08:ec:1a:a8:25:e2:55:74:21:7b:da:2d:92:3c:f3: f0:f1:72:05:01:89:fd:7d:cc:0f:c7:d1:91:a6:f1: a9:3b:8b:c7:da:14:ff:e3:25:09:db:a7:d1:73:17: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:67:3B:11:14:C1:4C:70:3D:29:CD:4D:32:C8:00:52:63:43:FC:68 X509v3 Authority Key Identifier: keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:17:4c:ad:83:69:a0:b8:76:4c:5b:d1:c0:16:32:5f:3e:33: 1a:87:7b:26:05:65:67:36:5f:01:0f:cb:b0:7d:c3:26:45:89: 11:ce:05:94:4c:ab:78:4d:80:c5:9b:84:3a:4c:b5:da:f5:37: a1:98:78:6b:cf:4c:8f:d7:9f:70:29:1c:75:65:15:49:f7:18: 61:de:a3:ad:c8:99:d8:7f:e9:1a:e2:c6:49:72:f1:0a:42:ca: bb:77:22:4f:78:a6:0a:b4:42:de:42:51:39:97:f0:c4:d9:fc: c6:52:93:ba:52:28:1d:6d:eb:06:9c:fb:18:71:f0:35:f0:d3: f9:e8:1d:ae:90:32:48:97:ba:7e:e3:7e:60:84:ec:f2:87:38: be:5e:7d:86:cc:e0:7c:0c:fd:b1:8c:dd:69:d4:48:3a:af:b2: 91:f9:db:75:f4:fc:b2:ea:fd:14:de:1b:90:69:eb:9c:0a:1c: d0:82:f9:c7:16:31:9b:15:09:2a:8a:e5:b3:39:eb:15:37:65: 5f:2c:90:3d:ed:23:19:0f:d9:b0:e8:3f:37:9b:d2:a7:88:a2: d8:30:5c:44:b0:35:cb:69:88:ce:ea:5e:5c:55:e5:b2:f3:be: 44:e6:6a:4d:19:dd:0d:99:f9:d0:a5:33:a1:e7:82:12:80:58: fc:c4:fe:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA7qYizd6+YwS5B0egJEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTU4MWQyNzQ4YWZjZjc3OTY2Nzk3N2Y3YjY3MzllZTRm OWZjMGQwHhcNMjUxMjIzMDcwMTU2WhcNMjUxMjI0MDcwMTU2WjAzMTEwLwYDVQQD EyhiYzY3M2IxMTE0YzE0YzcwM2QyOWNkNGQzMmM4MDA1MjYzNDNmYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMcIiV8KGJ4LC1FNGNDFUDlKmHWC o8BtR2FQ3yM0TfyNagcBVEw4ys+kqY77VEWABPXrNNwOGnW0MMHerq8p5hfxDiXH IjKjzkMapco6hTBY1tLpxrwfvoTKKn5kx2VIKJAdBcuTx+iZzrzP1xmuHualyTTQ IOSRu7dEAxW7NV18GFo3voO06JDlA0/FPRU4dF9fNNbdyNWcKbqZZ0XfkJm811Fe 8UvH/unanT4grhhOwcvBlKhux2cOge9o3OxaWKkSQSJRblyF+3TASo1rAGsI7Bqo JeJVdCF72i2SPPPw8XIFAYn9fcwPx9GRpvGpO4vH2hT/4yUJ26fRcxeuyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxnOxEUwUxwPSnNTTLIAFJjQ/xoMB8GA1UdIwQY MBaAFM5VgdJ0ivz3eWZ5d/e2c57k+fwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTkt ZDc2OGE3N2Q1N2Y0LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTktZDc2OGE3N2Q1N2Y0 LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhdMrYNp oLh2TFvRwBYyXz4zGod7JgVlZzZfAQ/LsH3DJkWJEc4FlEyreE2AxZuEOky12vU3 oZh4a89Mj9efcCkcdWUVSfcYYd6jrciZ2H/pGuLGSXLxCkLKu3ciT3imCrRC3kJR OZfwxNn8xlKTulIoHW3rBpz7GHHwNfDT+egdrpAySJe6fuN+YITs8oc4vl59hszg fAz9sYzdadRIOq+ykfnbdfT8sur9FN4bkGnrnAoc0IL5xxYxmxUJKorlsznrFTdl XyyQPe0jGQ/ZsOg/N5vSp4ii2DBcRLA1y2mIzupeXFXlsvO+ROZqTRndDZn50KUz oeeCEoBY/MT+dQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:15 2025 by rpki-client