This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json) Hash identifier: KiGS2uVSTREK3XuTox8xJj/Us/4BJRhJPiiGK1Xtw8k= Subject key identifier: 6F:82:88:C7:3C:AA:5D:68:9E:34:76:AF:93:DD:0B:25:00:6E:90:63 Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f Certificate serial: 019B5A51850481A92932494EA29D87F3431E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:00:50 +0000 Manifest this update: Fri 26 Dec 2025 11:00:50 +0000 Manifest next update: Sat 27 Dec 2025 11:00:50 +0000 Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=) 2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: IeW68IEuXgWslTbHTEP8lRYQ0yG4sonP7WRtegSpVp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:85:04:81:a9:29:32:49:4e:a2:9d:87:f3:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f Validity Not Before: Dec 26 11:00:50 2025 GMT Not After : Dec 27 11:00:50 2025 GMT Subject: CN=6f8288c73caa5d689e3476af93dd0b25006e9063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:6d:1f:e4:17:75:6b:2a:19:49:40:b1:13: c5:b4:42:6c:33:b7:c8:75:6d:eb:da:77:4b:d1:6c: 38:ba:b0:ff:c5:78:e1:7e:a5:95:7a:2a:d3:5e:a1: dd:e8:28:9a:dc:62:a6:9f:e4:d9:e8:4a:a7:ea:33: 22:49:dd:3f:86:ff:33:ee:96:48:7c:53:96:2e:e1: 59:e5:25:5e:fa:04:9e:24:fc:95:57:07:80:67:9d: ab:3c:66:20:15:0b:1a:ba:20:b0:22:84:de:48:b2: 4d:3a:5c:41:29:0d:1e:23:95:ce:ed:fb:f3:b8:27: ca:b9:a2:6f:0e:e9:f9:08:98:f2:6d:75:e6:9f:cc: 90:9c:ab:14:36:f1:87:c8:4f:39:a3:70:4f:ec:20: c5:0c:22:8e:6a:f3:44:0c:ca:c8:73:2a:53:15:98: 67:39:ef:ae:09:ec:a7:76:02:bb:58:d1:e1:44:0e: 5a:8c:6e:5c:41:ed:f2:40:2c:23:6a:76:75:34:30: b7:8b:83:28:c8:aa:c9:c8:6f:d1:51:21:21:58:95: 3a:aa:d1:e4:8c:21:6d:5b:4a:db:46:7c:7e:9f:13: 98:88:30:1b:1b:4f:bf:25:34:2f:93:48:59:82:9d: 67:63:f5:5a:0f:21:16:cf:1b:74:41:f3:ad:60:06: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:82:88:C7:3C:AA:5D:68:9E:34:76:AF:93:DD:0B:25:00:6E:90:63 X509v3 Authority Key Identifier: keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:df:43:a3:50:03:09:23:3f:cf:09:c4:6b:a5:27:50:69:26: 7b:31:e3:30:c8:8f:9c:35:0f:58:66:d4:70:89:70:1a:1f:d5: bd:d9:02:69:8c:a5:06:55:34:f2:0b:31:35:a7:7a:a8:1f:1b: 11:4e:7a:ac:42:ca:73:e2:6a:96:7d:e0:2e:b9:bb:ce:c6:54: 72:22:0e:da:a6:53:c5:b2:24:3c:a6:3b:f9:88:7b:46:05:76: e4:06:f2:de:70:51:3b:c3:61:97:26:5a:d5:9c:df:ff:45:de: 4a:68:60:a7:fe:14:cb:bf:1e:e2:52:9d:5b:1d:be:c0:13:20: 12:cc:89:00:fb:8d:49:cc:25:1d:a8:5e:0c:f3:d0:08:1f:1e: 32:57:b6:1f:33:00:24:97:05:79:0e:6f:0c:9a:9d:a1:f1:73: c6:95:0f:dd:cb:16:45:9f:ea:b0:0b:26:4e:5e:af:8e:e6:33: cb:71:5c:4f:d8:00:31:51:1a:68:ed:89:fc:00:46:b7:fb:23: a3:b4:5e:5e:ad:7b:c5:8d:d9:10:b1:77:30:ac:e9:12:ec:0d: 7b:6d:f3:93:87:5d:d5:a9:5b:64:02:40:31:67:72:49:9f:d2: 3b:36:5c:a9:a6:96:ca:d6:c6:98:07:77:ad:ca:ea:73:f2:d5: 81:45:b3:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYUEgakpMklOop2H80MeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmQ4MmJhMTg4MWFkNjRmNTI0ZTMzZWNlMTJhZGE0YjNi NWQ1N2YwHhcNMjUxMjI2MTEwMDUwWhcNMjUxMjI3MTEwMDUwWjAzMTEwLwYDVQQD Eyg2ZjgyODhjNzNjYWE1ZDY4OWUzNDc2YWY5M2RkMGIyNTAwNmU5MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+htH+QXdWsqGUlAsRPFtEJsM7fI dW3r2ndL0Ww4urD/xXjhfqWVeirTXqHd6Cia3GKmn+TZ6Eqn6jMiSd0/hv8z7pZI fFOWLuFZ5SVe+gSeJPyVVweAZ52rPGYgFQsauiCwIoTeSLJNOlxBKQ0eI5XO7fvz uCfKuaJvDun5CJjybXXmn8yQnKsUNvGHyE85o3BP7CDFDCKOavNEDMrIcypTFZhn Oe+uCeyndgK7WNHhRA5ajG5cQe3yQCwjanZ1NDC3i4MoyKrJyG/RUSEhWJU6qtHk jCFtW0rbRnx+nxOYiDAbG0+/JTQvk0hZgp1nY/VaDyEWzxt0QfOtYAZ0/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+CiMc8ql1onjR2r5PdCyUAbpBjMB8GA1UdIwQY MBaAFGa9groYga1k9STjPs4SraSztdV/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMt YmEyYjkwZDQ5NTQ3LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMtYmEyYjkwZDQ5NTQ3 LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATd9Do1AD CSM/zwnEa6UnUGkmezHjMMiPnDUPWGbUcIlwGh/VvdkCaYylBlU08gsxNad6qB8b EU56rELKc+Jqln3gLrm7zsZUciIO2qZTxbIkPKY7+Yh7RgV25Aby3nBRO8NhlyZa 1Zzf/0XeSmhgp/4Uy78e4lKdWx2+wBMgEsyJAPuNScwlHaheDPPQCB8eMle2HzMA JJcFeQ5vDJqdofFzxpUP3csWRZ/qsAsmTl6vjuYzy3FcT9gAMVEaaO2J/ABGt/sj o7ReXq17xY3ZELF3MKzpEuwNe23zk4dd1albZAJAMWdySZ/SOzZcqaaWytbGmAd3 rcrqc/LVgUWzjA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:05 2025 by rpki-client