This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json) Hash identifier: sf2hfcpNbO35uJrs7rWQyhOf4LYrWsTuuV5t9xyHogQ= Subject key identifier: 5A:05:01:45:2D:C0:78:E1:8E:08:C8:FD:75:3A:27:AC:E2:D9:39:4D Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Certificate serial: 019B3644DECFE121F3B2EBC4AC4120A2F8E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 11:00:41 +0000 Manifest this update: Fri 19 Dec 2025 11:00:41 +0000 Manifest next update: Sat 20 Dec 2025 11:00:41 +0000 Files and hashes: 1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=) 2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=) 3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=) 4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=) 5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: xwrcWoCIMtUMYp9jbSjO8lCdCVKSAyQnyEV/D38Tt9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:de:cf:e1:21:f3:b2:eb:c4:ac:41:20:a2:f8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Validity Not Before: Dec 19 11:00:41 2025 GMT Not After : Dec 20 11:00:41 2025 GMT Subject: CN=5a0501452dc078e18e08c8fd753a27ace2d9394d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:68:4b:de:5e:b7:4f:d8:38:16:e5:60:b1: d0:66:29:dd:e7:fd:8f:73:69:cf:d7:c4:ca:c2:ba: de:dc:bd:50:3c:bc:e4:94:f6:62:9c:3c:8e:b5:b9: 66:d8:95:36:cb:b8:d4:50:66:d7:5a:70:57:9e:29: 8b:77:cd:c4:1c:c2:e4:63:2a:57:37:2e:cb:8d:07: 84:0f:21:17:75:0e:92:d7:cf:d0:49:56:fb:cd:18: 51:b8:4f:c7:c7:c4:4e:b3:e8:6e:4b:5d:19:2e:fe: a9:75:fe:f5:04:07:4c:dd:5b:dd:23:c6:bf:db:e3: 09:98:c5:41:ec:2c:8c:ac:6f:ed:75:36:eb:3b:66: 57:6d:96:16:16:38:b0:30:a3:bf:ba:e3:1d:7f:db: b9:24:f2:0a:2b:4f:87:cd:c2:e3:73:55:0f:81:68: 07:c6:7a:c2:87:71:3e:bb:fb:dd:1c:7c:18:39:cb: 0a:4c:ee:52:ba:18:f9:2b:1c:e2:8b:d5:36:61:03: 52:05:a3:44:69:6c:e4:1b:e9:17:5f:5e:68:d2:dc: 5d:d0:83:88:5f:9d:7f:2e:e2:04:2b:49:7e:94:b8: 67:e8:e9:88:eb:bd:c4:fb:75:47:25:07:d3:db:f1: d5:0e:3f:de:e9:32:1a:5c:af:8f:76:8e:20:8d:c2: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:01:45:2D:C0:78:E1:8E:08:C8:FD:75:3A:27:AC:E2:D9:39:4D X509v3 Authority Key Identifier: keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:8a:cb:cf:9b:81:83:d3:7e:31:e8:25:65:56:7d:1f:d2: 0b:65:8b:2d:bb:ea:2c:72:51:95:5b:52:b5:37:10:39:e5:b7: 8c:58:cb:08:0f:fd:59:5f:e9:fa:c5:d8:f7:d8:da:6e:ed:82: 9f:66:2f:c4:14:f8:e3:a4:4b:54:97:a9:ee:31:84:e9:55:5d: 86:b6:41:77:6b:ec:0a:80:d6:4b:2b:f1:eb:6c:64:5c:28:99: 39:1e:cf:a9:e3:60:f5:34:6a:ea:69:57:01:f2:91:a3:3a:28: cd:b3:04:2e:6b:08:46:f2:fb:04:f9:5e:f0:bb:34:e2:f6:06: 1b:e9:e3:c6:61:e3:f7:38:65:6d:fc:18:51:55:25:b5:97:12: 23:aa:1e:eb:cc:70:0b:75:44:80:53:45:53:d7:62:40:32:af: 0a:70:ef:5d:05:b0:f0:92:21:c2:9e:7d:a0:62:40:fb:99:54: 45:b4:90:12:50:31:fe:e6:13:c5:7c:8a:ac:e4:96:71:39:0f: f3:f9:e7:07:c3:68:ba:1c:b3:6f:be:ba:27:8c:47:74:47:83: e3:c6:40:1e:a0:20:3a:56:5e:a0:f7:02:8c:19:03:4b:14:85: e9:74:07:03:66:33:01:c4:28:72:53:b1:5e:db:b9:c0:43:30: cd:48:c4:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RN7P4SHzsuvErEEgovjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4 YzJkM2IwHhcNMjUxMjE5MTEwMDQxWhcNMjUxMjIwMTEwMDQxWjAzMTEwLwYDVQQD Eyg1YTA1MDE0NTJkYzA3OGUxOGUwOGM4ZmQ3NTNhMjdhY2UyZDkzOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWxoS95et0/YOBblYLHQZind5/2P c2nP18TKwrre3L1QPLzklPZinDyOtblm2JU2y7jUUGbXWnBXnimLd83EHMLkYypX Ny7LjQeEDyEXdQ6S18/QSVb7zRhRuE/Hx8ROs+huS10ZLv6pdf71BAdM3VvdI8a/ 2+MJmMVB7CyMrG/tdTbrO2ZXbZYWFjiwMKO/uuMdf9u5JPIKK0+HzcLjc1UPgWgH xnrCh3E+u/vdHHwYOcsKTO5Suhj5Kxzii9U2YQNSBaNEaWzkG+kXX15o0txd0IOI X51/LuIEK0l+lLhn6OmI673E+3VHJQfT2/HVDj/e6TIaXK+Pdo4gjcIrMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoFAUUtwHjhjgjI/XU6J6zi2TlNMB8GA1UdIwQY MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt MTU1ZmIzZmUyODdlLzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPeKy8+b gYPTfjHoJWVWfR/SC2WLLbvqLHJRlVtStTcQOeW3jFjLCA/9WV/p+sXY99jabu2C n2YvxBT446RLVJep7jGE6VVdhrZBd2vsCoDWSyvx62xkXCiZOR7PqeNg9TRq6mlX AfKRozoozbMELmsIRvL7BPle8Ls04vYGG+njxmHj9zhlbfwYUVUltZcSI6oe68xw C3VEgFNFU9diQDKvCnDvXQWw8JIhwp59oGJA+5lURbSQElAx/uYTxXyKrOSWcTkP 8/nnB8Nouhyzb766J4xHdEeD48ZAHqAgOlZeoPcCjBkDSxSF6XQHA2YzAcQoclOx Xtu5wEMwzUjE/g== -----END CERTIFICATE-----Generated at Fri Dec 19 14:54:29 2025 by rpki-client