This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft File: zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json) Hash identifier: 9lEy3p0OZD/qLHoWVPYP/OnTfeJqMTdsGU4QKBLOcTQ= Subject key identifier: 4C:FF:CA:BE:C6:FB:1C:6A:F2:3E:35:C2:0A:2E:E8:4C:E1:D7:AE:C8 Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019B0FA55BBCC670A109BA2F6A09395EB453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft Manifest number: 179B Signing time: Thu 11 Dec 2025 23:00:53 +0000 Manifest this update: Thu 11 Dec 2025 23:00:53 +0000 Manifest next update: Fri 12 Dec 2025 23:00:53 +0000 Files and hashes: 1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=) 2: L3miZv_CtPpguqIiqcWbsGSBH70.roa (hash: chmReLLtPVDHneAMVjdRBmMn8npZbp0myeVRl6KrMkU=) 3: SzzlHogGw5EWuez7OZv1qG7OcKg.roa (hash: H29VJ6cf+NYN1aHzV70qmMe4haFT+yUYtpiwpA4ElP4=) 4: oesqmmJPK6TenMK59Izh-PTrjQI.roa (hash: 3a81J7V4OXRfNvBRc8fr9Sr4De6AZGIFq09/t+K9UHA=) 5: piZIF0KhX5XUtlQlqZTOR6AEy34.roa (hash: ujmr+91E+fV9iYaYCXUQDR9ydJcOnbl/xIHSG/UHIJM=) 6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: lGdhgD/ElKWpI5i17oHmm6W3yz85Ls4aU51LyErZCsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:5b:bc:c6:70:a1:09:ba:2f:6a:09:39:5e:b4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Dec 11 23:00:53 2025 GMT Not After : Dec 12 23:00:53 2025 GMT Subject: CN=4cffcabec6fb1c6af23e35c20a2ee84ce1d7aec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:f9:ea:4f:29:d4:2c:37:63:a7:02:2d:c1: ad:97:78:5a:16:9f:a4:90:45:5f:65:28:0f:9c:17: 84:b0:3d:5c:76:ba:0a:ff:12:49:bc:af:f4:8e:f4: d4:0b:9f:53:4d:57:b5:a4:53:54:f3:db:3c:f5:9a: 1e:88:f4:61:87:05:e2:29:73:1c:eb:0e:93:d8:3b: e7:b1:b9:c3:a6:8e:79:c9:db:f2:63:c0:f2:e7:24: 3d:b3:6e:7e:4e:9f:9c:8b:a6:7a:99:0b:9d:9b:a3: cd:82:90:de:f8:71:fa:cf:94:9b:76:19:f5:40:b9: 92:d6:ec:05:96:56:22:f5:3b:c9:cd:d0:ac:06:70: 5b:c0:39:ac:84:0e:dd:aa:49:f6:ec:c6:b7:4a:27: 00:07:10:80:6b:42:b2:43:70:8a:79:69:7a:2d:7c: a8:ad:09:b3:2f:b9:32:18:79:e5:ca:64:6b:15:9d: 38:fb:b2:6a:2a:91:1b:bc:ec:5d:7f:eb:72:79:4b: 96:a7:4e:e1:d8:a9:3d:80:ff:23:d9:32:6e:2d:2f: 5c:89:7c:69:25:6e:87:bb:48:eb:1d:e5:46:fa:0d: f3:e1:38:6a:d4:a3:55:77:b0:c4:15:58:98:3a:2d: ba:47:53:c0:cb:c0:03:65:3e:6a:c9:36:77:7b:03: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FF:CA:BE:C6:FB:1C:6A:F2:3E:35:C2:0A:2E:E8:4C:E1:D7:AE:C8 X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b9:d9:7b:cb:88:3c:ca:fd:47:1f:36:bf:5f:06:d1:b6:02: 32:0a:db:da:de:93:48:ba:c8:02:e3:9a:c8:96:d8:18:7b:b9: cc:ea:77:37:81:2e:54:f4:e3:bb:1b:d0:49:14:1b:ef:3a:db: 05:c6:41:ba:8f:89:8a:a4:2a:bd:99:66:3a:b1:f3:fd:7f:60: fd:6f:71:f6:50:bf:2c:c3:d0:f3:50:81:0e:a3:8b:8f:c9:e4: 3a:17:14:e6:38:78:be:78:42:e9:16:10:84:d8:45:1c:8f:50: 3a:f8:a4:8f:72:df:10:6c:9b:40:60:c6:e9:3b:a2:a4:ec:59: 50:d6:4b:39:55:f5:17:8d:a1:19:d4:5d:dd:3d:35:31:f1:d8: 6b:a6:3f:6f:b9:0a:14:9a:9e:ae:ea:e6:73:ca:f5:0a:08:e1: c4:79:17:0a:2e:ed:f6:bf:d0:cb:72:3b:b1:0f:35:5e:7f:2e: 01:ff:8d:64:5b:8c:24:73:1c:e6:bf:24:75:e4:05:1f:08:ae: e6:d1:7b:3b:3a:34:0c:05:1a:03:f0:bd:35:de:67:d5:c8:bb: ec:8e:86:be:2f:4c:ac:2e:9c:87:ec:cd:39:14:eb:6c:2f:ff: 56:52:0f:d0:44:2b:3b:6a:9e:3b:a8:6a:60:c2:87:81:0a:a7: 05:0c:49:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpVu8xnChCbovagk5XrRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjUxMjExMjMwMDUzWhcNMjUxMjEyMjMwMDUzWjAzMTEwLwYDVQQD Eyg0Y2ZmY2FiZWM2ZmIxYzZhZjIzZTM1YzIwYTJlZTg0Y2UxZDdhZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1f56k8p1Cw3Y6cCLcGtl3haFp+k kEVfZSgPnBeEsD1cdroK/xJJvK/0jvTUC59TTVe1pFNU89s89ZoeiPRhhwXiKXMc 6w6T2DvnsbnDpo55ydvyY8Dy5yQ9s25+Tp+ci6Z6mQudm6PNgpDe+HH6z5Sbdhn1 QLmS1uwFllYi9TvJzdCsBnBbwDmshA7dqkn27Ma3SicABxCAa0KyQ3CKeWl6LXyo rQmzL7kyGHnlymRrFZ04+7JqKpEbvOxdf+tyeUuWp07h2Kk9gP8j2TJuLS9ciXxp JW6Hu0jrHeVG+g3z4Thq1KNVd7DEFViYOi26R1PAy8ADZT5qyTZ3ewOO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz/yr7G+xxq8j41wgou6Ezh167IMB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbnZe8uI PMr9Rx82v18G0bYCMgrb2t6TSLrIAuOayJbYGHu5zOp3N4EuVPTjuxvQSRQb7zrb BcZBuo+JiqQqvZlmOrHz/X9g/W9x9lC/LMPQ81CBDqOLj8nkOhcU5jh4vnhC6RYQ hNhFHI9QOvikj3LfEGybQGDG6TuipOxZUNZLOVX1F42hGdRd3T01MfHYa6Y/b7kK FJqerurmc8r1CgjhxHkXCi7t9r/Qy3I7sQ81Xn8uAf+NZFuMJHMc5r8kdeQFHwiu 5tF7Ozo0DAUaA/C9Nd5n1ci77I6Gvi9MrC6ch+zNORTrbC//VlIP0EQrO2qeO6hq YMKHgQqnBQxJLg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:14:09 2025 by rpki-client