This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json) Hash identifier: Nt4T+HtImtsCaY4Bz+/+88vgzlA/tc6u1jM1owHNc70= Subject key identifier: C7:C0:C0:49:57:12:32:6A:A8:70:26:2E:D1:29:D0:70:49:45:42:20 Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67 Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367 Certificate serial: 019AF19B43196A4CD8880E6EAFC6684A5898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=) 2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: pf3I4v4NAJLGJ8z/KvQcgGiU3ki7wCFZ4vA+WrPy2kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:43:19:6a:4c:d8:88:0e:6e:af:c6:68:4a:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=c7c0c0495712326aa870262ed129d07049454220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:8b:cf:f8:8f:2b:ee:d0:12:43:92:0f:12: da:a5:e8:4c:91:32:fa:db:b2:fc:23:7f:be:2e:d2: bf:11:c6:74:60:6a:52:64:5e:05:8a:05:e4:d5:d4: d3:00:09:be:ba:14:46:46:4a:30:6e:1c:28:74:90: 80:ea:76:ee:e4:5c:db:79:37:79:66:d9:63:9b:8e: 09:29:43:e6:3c:78:06:0a:bf:b5:9e:5d:3b:48:4a: 95:b2:2d:41:58:d2:9d:23:64:b9:8b:4a:07:bd:6d: dc:f4:15:58:bd:3b:7f:73:9e:d0:17:98:b9:f0:25: 19:33:aa:6d:86:cb:53:0e:c4:b8:d3:45:ee:89:25: a9:be:fd:92:38:20:7c:0f:7b:ac:cc:b2:e8:21:08: 1b:10:5d:2f:e6:9c:aa:de:bd:08:4f:c2:60:f3:5d: 0a:28:cb:35:89:73:69:c9:45:04:4e:b9:8d:ab:b3: 0e:c3:dd:77:94:61:94:35:9c:7f:7f:ae:29:05:88: 43:28:92:a3:5b:26:a7:51:06:57:90:96:b4:65:74: be:b0:d7:6c:b7:44:79:28:dd:10:23:60:23:f1:c4: 84:01:d2:e7:30:e2:41:8f:41:e8:0f:dc:f0:fe:b4: 37:42:8f:a7:03:75:03:6a:79:da:22:92:66:b9:b0: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C0:C0:49:57:12:32:6A:A8:70:26:2E:D1:29:D0:70:49:45:42:20 X509v3 Authority Key Identifier: keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:56:ac:27:5e:8f:d9:13:8b:e1:29:fa:df:47:6b:40:06:0e: 82:5c:5c:d1:05:ff:a7:13:bf:73:f2:30:1d:f3:f0:e6:b2:cb: dd:c7:f7:87:2e:78:c7:af:74:07:ff:d1:ae:ad:25:e9:dc:dd: ba:7f:fb:d0:df:1b:8e:cd:2e:e9:d3:0b:bd:f4:63:23:ea:a0: 56:e1:88:c1:b9:94:54:f6:79:45:66:b3:c5:c5:fa:ee:37:3d: 89:2f:4d:c2:3e:ec:f5:26:81:3b:8a:06:95:f5:c4:37:ff:52: cf:55:64:7a:d7:aa:0a:0f:12:3c:69:14:7b:b8:70:5a:fb:0a: 23:0e:0f:7c:88:8a:84:b1:f1:56:32:5f:d6:37:6a:e7:1d:06: 50:4f:5e:16:26:41:75:cf:24:54:d3:1f:2d:7c:e7:c4:c3:8c: 8b:6a:f1:f3:25:0d:51:b5:a1:9a:7d:7b:6b:d2:d4:61:c5:76: c3:2d:27:33:86:b2:78:81:9c:73:b0:8e:97:07:14:e9:5d:ce: 96:87:9c:4d:10:b0:e8:c3:06:39:28:eb:b2:ca:05:4e:60:38: 48:5a:9a:9e:07:c2:fc:b7:d0:54:cf:4d:88:f1:7e:60:a5:2b: ab:1d:83:bf:37:0f:1e:83:c7:4c:ff:e9:17:a4:a0:45:85:25: 87:6e:7a:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0MZakzYiA5ur8ZoSliYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTY0OWRiYmE1OTJmMWM5ZjNmMjg4OWJjZjgxZmQyMjU5 ODkzNjcwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhjN2MwYzA0OTU3MTIzMjZhYTg3MDI2MmVkMTI5ZDA3MDQ5NDU0MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprGLz/iPK+7QEkOSDxLapehMkTL6 27L8I3++LtK/EcZ0YGpSZF4FigXk1dTTAAm+uhRGRkowbhwodJCA6nbu5FzbeTd5 Ztljm44JKUPmPHgGCr+1nl07SEqVsi1BWNKdI2S5i0oHvW3c9BVYvTt/c57QF5i5 8CUZM6pthstTDsS400XuiSWpvv2SOCB8D3uszLLoIQgbEF0v5pyq3r0IT8Jg810K KMs1iXNpyUUETrmNq7MOw913lGGUNZx/f64pBYhDKJKjWyanUQZXkJa0ZXS+sNds t0R5KN0QI2Aj8cSEAdLnMOJBj0HoD9zw/rQ3Qo+nA3UDannaIpJmubDotwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfAwElXEjJqqHAmLtEp0HBJRUIgMB8GA1UdIwQY MBaAFM5WSdu6WS8cnz8oibz4H9IlmJNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAt YzY3YWI4M2FjMWY1LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAtYzY3YWI4M2FjMWY1 LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyFasJ16P 2ROL4Sn630drQAYOglxc0QX/pxO/c/IwHfPw5rLL3cf3hy54x690B//Rrq0l6dzd un/70N8bjs0u6dMLvfRjI+qgVuGIwbmUVPZ5RWazxcX67jc9iS9Nwj7s9SaBO4oG lfXEN/9Sz1VketeqCg8SPGkUe7hwWvsKIw4PfIiKhLHxVjJf1jdq5x0GUE9eFiZB dc8kVNMfLXznxMOMi2rx8yUNUbWhmn17a9LUYcV2wy0nM4ayeIGcc7COlwcU6V3O loecTRCw6MMGOSjrssoFTmA4SFqangfC/LfQVM9NiPF+YKUrqx2DvzcPHoPHTP/p F6SgRYUlh256zg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:48 2025 by rpki-client