This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json) Hash identifier: khzsNeYepPQt6d7JUk6ucQeIhhnf9ZfzhoygKLkI6PM= Subject key identifier: A2:3E:20:2D:EA:99:2E:4A:5E:40:E4:E0:B6:3E:77:AA:FF:92:F8:6C Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Certificate serial: 019AF19BA73FE24B7395DCFBBCCA1C066B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=) 2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: C/8aPwu0F2lsRHZgYrBA/i7j/BvSwh59cvXofJ4qt9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a7:3f:e2:4b:73:95:dc:fb:bc:ca:1c:06:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=a23e202dea992e4a5e40e4e0b63e77aaff92f86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:71:11:93:0a:99:73:4a:5c:7a:1c:d1:6c: ba:cb:83:b9:cd:c9:0f:92:42:4e:90:69:ee:cc:39: 76:fd:70:f6:9c:60:28:97:b5:70:3c:b6:69:96:1c: b6:95:00:80:08:f2:7b:d4:4a:f1:5d:ba:3c:e8:45: 36:e7:ba:e5:cc:83:2e:9d:11:d5:f2:d7:a4:86:52: dd:fc:90:97:e4:81:0e:6f:0c:6b:ff:c5:d1:af:1b: 98:4c:2e:2e:04:ef:66:8e:b2:f5:74:16:e4:6f:d6: 0c:a7:6f:97:8e:30:ab:e6:1f:a0:85:36:6d:da:a9: e9:59:75:df:cf:b9:d2:5b:62:e6:f5:e2:5e:e3:75: 31:45:42:b7:e6:ed:8c:77:91:98:47:71:af:bc:af: 8b:83:9f:79:71:f6:78:01:42:af:da:b6:e0:63:6f: f3:8b:1e:cf:63:39:ff:64:39:64:1d:4f:3d:32:b9: 98:42:a1:6c:75:13:65:59:70:46:d3:ea:99:23:80: bf:d1:6b:dc:34:75:b2:16:d2:17:03:01:72:7e:22: 6e:6c:8b:81:a8:eb:ec:9b:fb:3b:7e:c2:1d:14:99: 94:ae:f6:61:97:33:b1:26:d2:36:6c:00:57:e6:dd: 52:91:e5:f9:b7:eb:f5:df:8d:8b:0c:68:f0:ad:bb: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3E:20:2D:EA:99:2E:4A:5E:40:E4:E0:B6:3E:77:AA:FF:92:F8:6C X509v3 Authority Key Identifier: keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:36:45:4b:75:25:29:f4:3f:b0:7d:70:c6:35:5b:8a:e8:c7: 2e:ba:d2:6c:6f:5c:04:c4:85:49:85:07:a3:39:16:79:0b:5d: 6c:b5:43:0a:f0:12:b7:17:d9:eb:a4:1f:04:14:44:35:39:d5: b1:88:11:aa:d0:8b:11:e3:22:a6:82:e5:b1:60:fb:a1:e5:40: 79:a2:01:40:33:60:36:32:bb:fb:1f:73:09:ac:91:16:80:1c: 5f:95:63:b1:db:3e:e1:b0:73:ae:87:2c:86:0f:0f:89:ad:6b: 00:c9:5e:3e:d3:1e:f8:64:ac:f1:b5:19:73:4c:6a:84:27:b3: 37:10:40:11:d1:ec:96:c6:3f:23:85:d2:0e:98:24:3c:81:70: 90:af:a7:53:17:a1:3c:72:55:f7:44:39:b4:5d:bf:34:e3:7a: 46:24:8e:f3:18:8e:14:e5:e6:86:f8:50:c6:b6:ff:93:54:38: a4:6d:c9:76:c1:2a:dc:ca:d3:a4:46:0b:e4:18:c8:7a:b3:1c: 6f:95:2c:2a:d5:aa:81:32:0e:12:98:56:d3:66:3c:aa:ef:41: 9a:f3:02:bd:32:a2:55:29:1f:7a:b8:ef:43:3b:41:ab:5c:9c: b2:45:62:2f:50:77:e4:98:1f:56:e1:87:93:a0:fd:f1:a3:f9: b9:fd:5d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6c/4ktzldz7vMocBmsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY4ZDZkZWMzOTIwYmM3M2YwOTdmZGY1NmNhZjEwYjUy ZGI0NTUwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EyhhMjNlMjAyZGVhOTkyZTRhNWU0MGU0ZTBiNjNlNzdhYWZmOTJmODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskpxEZMKmXNKXHoc0Wy6y4O5zckP kkJOkGnuzDl2/XD2nGAol7VwPLZplhy2lQCACPJ71ErxXbo86EU257rlzIMunRHV 8tekhlLd/JCX5IEObwxr/8XRrxuYTC4uBO9mjrL1dBbkb9YMp2+XjjCr5h+ghTZt 2qnpWXXfz7nSW2Lm9eJe43UxRUK35u2Md5GYR3GvvK+Lg595cfZ4AUKv2rbgY2/z ix7PYzn/ZDlkHU89MrmYQqFsdRNlWXBG0+qZI4C/0WvcNHWyFtIXAwFyfiJubIuB qOvsm/s7fsIdFJmUrvZhlzOxJtI2bABX5t1SkeX5t+v1342LDGjwrbtjPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKI+IC3qmS5KXkDk4LY+d6r/kvhsMB8GA1UdIwQY MBaAFM6/jW3sOSC8c/CX/fVsrxC1LbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEt YjVlNTcwMGZjNzc0LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEtYjVlNTcwMGZjNzc0 LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzZFS3Ul KfQ/sH1wxjVbiujHLrrSbG9cBMSFSYUHozkWeQtdbLVDCvAStxfZ66QfBBRENTnV sYgRqtCLEeMipoLlsWD7oeVAeaIBQDNgNjK7+x9zCayRFoAcX5Vjsds+4bBzrocs hg8Pia1rAMlePtMe+GSs8bUZc0xqhCezNxBAEdHslsY/I4XSDpgkPIFwkK+nUxeh PHJV90Q5tF2/NON6RiSO8xiOFOXmhvhQxrb/k1Q4pG3JdsEq3MrTpEYL5BjIerMc b5UsKtWqgTIOEphW02Y8qu9BmvMCvTKiVSkferjvQztBq1ycskViL1B35JgfVuGH k6D98aP5uf1dIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:20 2025 by rpki-client