This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json) Hash identifier: voTjzFiHtMOuPbFzwlDZ1QF1UYqE38q72j3PM/+kHxI= Subject key identifier: B5:DC:D6:19:B9:FC:C6:FF:9A:BF:F3:EC:C4:26:93:71:44:9B:39:61 Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911 Certificate serial: 019B5A519CD1D986845B91C56200F2B6C566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft Manifest number: 0815 Signing time: Fri 26 Dec 2025 11:00:56 +0000 Manifest this update: Fri 26 Dec 2025 11:00:56 +0000 Manifest next update: Sat 27 Dec 2025 11:00:56 +0000 Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=) 2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: WXszbMcc0gnlZeodpNYldWeZRMWoMSIdABCbLOwRpTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:9c:d1:d9:86:84:5b:91:c5:62:00:f2:b6:c5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6516844d245d4124a22a536b046da86332d0b911 Validity Not Before: Dec 26 11:00:56 2025 GMT Not After : Dec 27 11:00:56 2025 GMT Subject: CN=b5dcd619b9fcc6ff9abff3ecc4269371449b3961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:e3:ee:f5:2d:f4:9d:43:96:54:a9:09:5d: 0b:5b:e7:ca:54:84:4d:cf:fc:7d:00:f2:d4:5b:3f: 08:b6:38:72:2a:be:bf:5c:4f:d2:47:75:44:86:34: 59:5d:4b:9b:f0:3e:90:f1:f5:9a:91:9b:8a:d5:e1: c6:00:27:8d:66:ae:5b:9f:13:be:0a:8c:9f:30:68: e5:c9:5a:2f:05:08:08:fb:e8:52:a0:b4:ce:43:0e: 03:27:d8:11:bb:27:38:46:99:8d:eb:df:57:b6:75: 68:9d:9e:58:f1:c6:95:6f:67:49:af:13:22:d4:c7: b1:11:88:32:79:72:14:34:b8:89:31:bd:de:dd:20: 02:c9:e7:50:aa:b6:35:f5:3e:1c:96:0b:5c:8d:e2: 38:ee:2f:40:74:40:b9:be:3a:ab:03:97:5e:12:82: 34:25:20:04:90:ae:00:51:15:77:39:27:92:46:32: 3e:ef:39:c3:23:31:c3:7c:f3:41:11:a9:fc:7e:b8: 8f:3d:e2:8e:04:d6:7d:d6:4e:83:27:82:10:1f:ac: ce:3e:93:6c:f6:0f:48:05:fc:a8:c5:8a:ca:63:d7: 3e:71:9e:d6:ed:48:a8:00:0c:bb:0f:7b:8b:2d:1e: 0c:59:56:87:f4:39:77:e9:e8:ec:09:86:d6:b6:f2: 49:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DC:D6:19:B9:FC:C6:FF:9A:BF:F3:EC:C4:26:93:71:44:9B:39:61 X509v3 Authority Key Identifier: keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:30:e2:8b:49:8c:34:88:71:5b:99:88:6c:89:00:26:52:e0: fa:59:6b:8d:d0:7e:7b:77:a3:e2:7d:f6:a1:7c:16:5a:eb:83: 6c:35:4a:98:c2:f5:20:39:11:3e:8a:87:9c:e6:8e:b7:90:bf: 9e:5d:52:34:eb:71:ba:02:c5:ab:cb:92:9e:e1:bb:02:0e:11: 87:43:0a:9d:34:a6:5e:2c:d5:c8:b3:81:45:07:45:32:00:7d: 42:24:41:c8:f1:1d:72:e8:b3:5e:ba:39:dc:00:cc:8b:67:ac: 2f:bf:47:77:38:a8:e7:81:76:4f:ee:ef:3e:ae:ef:f7:6c:0f: 17:c0:ea:f8:5f:ed:8a:0c:70:b4:8e:48:99:1b:58:68:ab:98: c2:14:40:aa:57:17:63:6f:be:40:03:b7:19:1e:ae:11:d8:e1: 6b:c9:ce:9e:59:31:14:8e:84:d6:dc:5b:57:82:01:83:cd:c4: 21:bb:d0:a5:bd:78:aa:d1:32:37:af:2e:dc:b0:02:55:58:77: 0c:5a:f0:37:4a:b0:6d:5f:f2:14:6e:bd:86:ac:c4:98:82:93: c6:05:43:4e:81:84:b1:ac:38:af:e9:ff:8c:34:41:f0:84:b7: 95:46:e8:02:85:82:ca:8d:c4:d9:f6:dd:f5:ae:15:7c:9a:c5: 5c:66:11:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZzR2YaEW5HFYgDytsVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTY4NDRkMjQ1ZDQxMjRhMjJhNTM2YjA0NmRhODYzMzJk MGI5MTEwHhcNMjUxMjI2MTEwMDU2WhcNMjUxMjI3MTEwMDU2WjAzMTEwLwYDVQQD EyhiNWRjZDYxOWI5ZmNjNmZmOWFiZmYzZWNjNDI2OTM3MTQ0OWIzOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1rj7vUt9J1DllSpCV0LW+fKVIRN z/x9APLUWz8ItjhyKr6/XE/SR3VEhjRZXUub8D6Q8fWakZuK1eHGACeNZq5bnxO+ CoyfMGjlyVovBQgI++hSoLTOQw4DJ9gRuyc4RpmN699XtnVonZ5Y8caVb2dJrxMi 1MexEYgyeXIUNLiJMb3e3SACyedQqrY19T4clgtcjeI47i9AdEC5vjqrA5deEoI0 JSAEkK4AURV3OSeSRjI+7znDIzHDfPNBEan8friPPeKOBNZ91k6DJ4IQH6zOPpNs 9g9IBfyoxYrKY9c+cZ7W7UioAAy7D3uLLR4MWVaH9Dl36ejsCYbWtvJJHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXc1hm5/Mb/mr/z7MQmk3FEmzlhMB8GA1UdIwQY MBaAFGUWhE0kXUEkoipTawRtqGMy0LkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjIt ZDU3MDQ4M2MzNjhiLzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjItZDU3MDQ4M2MzNjhi LzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATDii0mM NIhxW5mIbIkAJlLg+llrjdB+e3ej4n32oXwWWuuDbDVKmML1IDkRPoqHnOaOt5C/ nl1SNOtxugLFq8uSnuG7Ag4Rh0MKnTSmXizVyLOBRQdFMgB9QiRByPEdcuizXro5 3ADMi2esL79Hdzio54F2T+7vPq7v92wPF8Dq+F/tigxwtI5ImRtYaKuYwhRAqlcX Y2++QAO3GR6uEdjha8nOnlkxFI6E1txbV4IBg83EIbvQpb14qtEyN68u3LACVVh3 DFrwN0qwbV/yFG69hqzEmIKTxgVDToGEsaw4r+n/jDRB8IS3lUboAoWCyo3E2fbd 9a4VfJrFXGYRgg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:34 2025 by rpki-client