This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json) Hash identifier: zaSwAU7lCEp4lX5AMF7vKwkplAyQKUvKm6V4shkQ5cE= Subject key identifier: F1:DC:D4:0F:B5:34:56:27:62:CD:EA:39:15:2C:61:06:34:3E:79:C5 Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Certificate serial: 019B2F6724B4668084FB6030677CDF23A96F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft Manifest number: 178F Signing time: Thu 18 Dec 2025 03:00:47 +0000 Manifest this update: Thu 18 Dec 2025 03:00:47 +0000 Manifest next update: Fri 19 Dec 2025 03:00:47 +0000 Files and hashes: 1: 5CXu0UxRhwNDi1i9NLYtVH_7mdQ.roa (hash: WcXKi4ED+2Y5l6i/lY2xJGAyFqasaSUW3tQSDUT3XN8=) 2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: dVspNOnZpOENixlxVcn1p3h/t3uhXWQY4vQ2R6AKNg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:24:b4:66:80:84:fb:60:30:67:7c:df:23:a9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Validity Not Before: Dec 18 03:00:47 2025 GMT Not After : Dec 19 03:00:47 2025 GMT Subject: CN=f1dcd40fb534562762cdea39152c6106343e79c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:7a:ca:8d:b7:dc:c2:60:36:1d:1f:65:2d: c1:3f:d3:db:d8:02:65:58:d9:26:6b:22:6e:6c:61: 87:6b:99:e6:a6:92:d3:bb:59:5f:a8:75:f9:13:7b: ff:fa:6e:3a:7b:d8:b4:c0:b0:42:87:35:53:a9:6e: 2a:ef:69:26:fc:cc:1a:06:15:fe:3d:6e:47:52:90: 2a:5f:11:ef:94:cf:1a:3f:34:fc:7e:38:b1:b4:0b: 7d:df:67:c0:28:55:8b:44:b6:02:88:27:08:38:b7: c1:3e:b8:af:9e:43:d3:89:e2:f9:9d:1e:d4:fc:49: 62:6e:f3:6f:53:aa:20:2b:61:bd:62:3a:6f:47:88: 76:b7:2b:22:8b:6d:d0:0a:cc:14:18:64:62:7c:03: 0c:27:6b:b4:84:ad:6e:34:a6:b2:f2:70:52:89:a8: a6:b5:90:82:2a:e1:db:7d:9b:f8:94:aa:19:c7:f7: 2f:3b:f7:52:74:f8:28:a5:e9:bf:f7:77:bd:0b:11: 7c:23:2b:24:27:2e:44:c2:e8:c9:44:56:71:26:7b: dc:72:bd:15:28:2b:ea:cf:fe:d0:d0:05:e7:d0:d6: 5e:3e:0b:6f:f0:b4:95:8d:4b:5d:19:7d:4b:94:8a: 89:9f:51:2a:0c:23:37:b2:36:60:e6:b6:2d:60:d2: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:D4:0F:B5:34:56:27:62:CD:EA:39:15:2C:61:06:34:3E:79:C5 X509v3 Authority Key Identifier: keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:22:5d:52:d9:ad:ba:7c:db:cd:38:54:b4:dc:53:9a:e5:e4: f8:99:a7:8c:70:99:7f:c3:41:86:7d:69:3e:bc:3d:16:dc:5c: 46:aa:0f:f9:d3:8e:47:ea:9d:5d:a6:4d:11:d9:8d:89:0a:f5: 85:62:39:b6:66:d4:0f:a6:bc:bb:af:81:b0:25:9b:d4:d8:b6: 2e:09:7a:01:db:b1:c3:f8:c1:ae:6f:2a:01:9e:9f:39:cf:e0: 20:94:cd:67:54:c7:2d:2e:94:af:2e:27:f2:79:29:19:f2:c8: c2:f7:0c:18:71:14:b5:be:37:00:47:dd:bf:97:e8:15:93:a3: 6e:ee:02:43:04:de:72:91:1f:0c:3e:fd:59:60:e0:2b:d9:6a: 73:86:22:60:a7:92:8c:53:01:90:0e:e4:82:0b:42:c6:dc:99: f7:0f:9b:ee:22:4c:fb:52:9f:3e:6b:13:d8:15:40:e2:53:a1: b3:e7:9a:a5:2e:34:22:87:a4:24:00:d8:44:a4:af:e4:89:b0: de:82:cc:33:4f:ba:67:f3:2a:aa:4d:c9:fb:8b:45:f1:f4:71: 8d:e6:dd:b6:bd:8e:1e:eb:cd:82:11:2f:f7:92:1a:d5:44:df: 46:2d:2b:ff:c9:08:b4:30:66:99:56:bc:82:ef:b8:c0:e9:0b: e7:97:c0:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyS0ZoCE+2AwZ3zfI6lvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk ZjI3ZTkwHhcNMjUxMjE4MDMwMDQ3WhcNMjUxMjE5MDMwMDQ3WjAzMTEwLwYDVQQD EyhmMWRjZDQwZmI1MzQ1NjI3NjJjZGVhMzkxNTJjNjEwNjM0M2U3OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVt6yo233MJgNh0fZS3BP9Pb2AJl WNkmayJubGGHa5nmppLTu1lfqHX5E3v/+m46e9i0wLBChzVTqW4q72km/MwaBhX+ PW5HUpAqXxHvlM8aPzT8fjixtAt932fAKFWLRLYCiCcIOLfBPrivnkPTieL5nR7U /ElibvNvU6ogK2G9YjpvR4h2tysii23QCswUGGRifAMMJ2u0hK1uNKay8nBSiaim tZCCKuHbfZv4lKoZx/cvO/dSdPgopem/93e9CxF8IyskJy5EwujJRFZxJnvccr0V KCvqz/7Q0AXn0NZePgtv8LSVjUtdGX1LlIqJn1EqDCM3sjZg5rYtYNImiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHc1A+1NFYnYs3qORUsYQY0PnnFMB8GA1UdIwQY MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1 LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyJdUtmt unzbzThUtNxTmuXk+JmnjHCZf8NBhn1pPrw9FtxcRqoP+dOOR+qdXaZNEdmNiQr1 hWI5tmbUD6a8u6+BsCWb1Ni2Lgl6Aduxw/jBrm8qAZ6fOc/gIJTNZ1THLS6Ury4n 8nkpGfLIwvcMGHEUtb43AEfdv5foFZOjbu4CQwTecpEfDD79WWDgK9lqc4YiYKeS jFMBkA7kggtCxtyZ9w+b7iJM+1KfPmsT2BVA4lOhs+eapS40IoekJADYRKSv5Imw 3oLMM0+6Z/Mqqk3J+4tF8fRxjebdtr2OHuvNghEv95Ia1UTfRi0r/8kItDBmmVa8 gu+4wOkL55fAEA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:00:54 2025 by rpki-client