This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json) Hash identifier: ovVttlXjtBOAEELUe7DdgM/HCWI1J0xaikU+FpJbR1A= Subject key identifier: E3:D0:96:05:3C:6B:F0:EC:4C:F5:59:D5:C7:D2:E4:FB:A3:31:55:95 Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Certificate serial: 019B33443FC5AE12E6CFC93104C557749D7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 21:01:09 +0000 Manifest this update: Thu 18 Dec 2025 21:01:09 +0000 Manifest next update: Fri 19 Dec 2025 21:01:09 +0000 Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=) 2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: hWJtGChpHK6mSynJ8DsvISjPFn3hr8eg6IIh0gcsX/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:3f:c5:ae:12:e6:cf:c9:31:04:c5:57:74:9d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Validity Not Before: Dec 18 21:01:09 2025 GMT Not After : Dec 19 21:01:09 2025 GMT Subject: CN=e3d096053c6bf0ec4cf559d5c7d2e4fba3315595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:2e:8c:ee:6d:ec:e4:b7:37:b6:53:89:38: 00:97:f2:31:f3:a3:e9:0f:ed:b4:7d:70:35:30:67: 38:6b:c7:cc:71:2b:65:69:31:9e:47:72:a9:60:36: 24:f5:b3:bd:a2:f5:e5:23:a0:e3:d0:47:91:bb:3d: 8c:22:7d:31:15:3b:b1:32:f8:88:17:ce:17:fc:ab: 41:70:1e:62:8c:7b:48:e1:5b:87:a8:fb:9a:7b:13: 99:d6:79:65:ea:b8:27:54:87:88:ce:39:c5:c6:eb: 3b:54:b8:3c:41:9b:a0:f9:19:97:74:9d:70:d4:83: 71:a5:ec:a5:aa:b6:f5:d0:f1:a5:00:ee:84:3e:c4: aa:49:69:cd:0f:bf:8f:47:b1:2a:d8:1a:c9:77:2a: 9a:eb:d0:f7:1f:8e:cb:66:e5:3a:b4:4a:7a:53:7f: d1:ad:00:3f:d6:86:53:80:73:d5:7b:7e:11:42:44: 64:93:9f:37:73:0c:88:f6:67:44:56:89:a9:f7:28: 28:15:07:1e:a3:a8:e6:0d:02:50:4d:8d:19:98:98: b6:8b:d2:b7:4c:2c:54:40:eb:58:d5:c5:16:b9:89: a9:41:de:af:62:ce:fe:b8:eb:3d:2c:6b:cd:40:d0: bd:69:9c:99:b4:2a:96:02:bf:4a:c2:79:42:5a:48: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D0:96:05:3C:6B:F0:EC:4C:F5:59:D5:C7:D2:E4:FB:A3:31:55:95 X509v3 Authority Key Identifier: keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f2:45:70:b8:19:76:be:3a:2f:c3:4c:fd:4a:35:94:43:f1: 4b:c0:56:5d:1b:b9:57:c9:25:f2:59:66:2d:73:43:11:71:52: ab:02:fd:98:bc:62:73:07:43:a7:c9:4a:7e:b7:35:eb:df:86: 2b:24:68:37:fc:e0:3a:0a:8d:75:56:df:4d:de:a2:82:2e:dd: 5b:95:b1:c8:fe:5b:b6:0c:a3:81:55:95:9c:33:57:2d:82:da: 5d:e3:32:49:46:62:31:f7:1d:0f:d6:07:d4:4e:7d:0e:cb:98: da:d0:3c:1e:2d:ee:d0:de:df:d9:92:2b:fe:23:0f:60:3a:e7: e0:52:1c:4e:5e:fc:55:8c:05:67:bd:1d:b9:45:00:35:75:62: 6a:1c:8f:ff:9a:24:58:4a:01:a2:ef:e1:d4:3f:24:0f:67:1c: f0:ea:ca:2d:53:fd:e4:08:f2:2d:3c:8e:35:82:95:10:e8:ed: fd:97:18:d6:33:ae:0b:92:ca:85:80:ca:4a:ed:6b:ff:05:c9: 82:ab:49:b2:68:79:0d:0a:24:71:f0:51:53:a1:aa:96:1d:af: 97:5a:5b:50:94:bb:d4:a5:81:0a:34:3e:50:c9:50:89:9e:30: 67:3e:8b:a9:4d:60:af:f4:b9:f2:fa:d5:a3:a2:71:5d:bd:f9: ca:83:bd:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRD/FrhLmz8kxBMVXdJ1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY4ZDZkZWMzOTIwYmM3M2YwOTdmZGY1NmNhZjEwYjUy ZGI0NTUwHhcNMjUxMjE4MjEwMTA5WhcNMjUxMjE5MjEwMTA5WjAzMTEwLwYDVQQD EyhlM2QwOTYwNTNjNmJmMGVjNGNmNTU5ZDVjN2QyZTRmYmEzMzE1NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzasujO5t7OS3N7ZTiTgAl/Ix86Pp D+20fXA1MGc4a8fMcStlaTGeR3KpYDYk9bO9ovXlI6Dj0EeRuz2MIn0xFTuxMviI F84X/KtBcB5ijHtI4VuHqPuaexOZ1nll6rgnVIeIzjnFxus7VLg8QZug+RmXdJ1w 1INxpeylqrb10PGlAO6EPsSqSWnND7+PR7Eq2BrJdyqa69D3H47LZuU6tEp6U3/R rQA/1oZTgHPVe34RQkRkk583cwyI9mdEVomp9ygoFQceo6jmDQJQTY0ZmJi2i9K3 TCxUQOtY1cUWuYmpQd6vYs7+uOs9LGvNQNC9aZyZtCqWAr9KwnlCWkglswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPQlgU8a/DsTPVZ1cfS5PujMVWVMB8GA1UdIwQY MBaAFM6/jW3sOSC8c/CX/fVsrxC1LbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEt YjVlNTcwMGZjNzc0LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEtYjVlNTcwMGZjNzc0 LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvJFcLgZ dr46L8NM/Uo1lEPxS8BWXRu5V8kl8llmLXNDEXFSqwL9mLxicwdDp8lKfrc169+G KyRoN/zgOgqNdVbfTd6igi7dW5WxyP5btgyjgVWVnDNXLYLaXeMySUZiMfcdD9YH 1E59DsuY2tA8Hi3u0N7f2ZIr/iMPYDrn4FIcTl78VYwFZ70duUUANXViahyP/5ok WEoBou/h1D8kD2cc8OrKLVP95AjyLTyONYKVEOjt/ZcY1jOuC5LKhYDKSu1r/wXJ gqtJsmh5DQokcfBRU6Gqlh2vl1pbUJS71KWBCjQ+UMlQiZ4wZz6LqU1gr/S58vrV o6JxXb35yoO9Sg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:44:42 2025 by rpki-client