This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json) Hash identifier: I9u879cXTZHhZVis/lHkj597AA4nY6smTEFZkFAZ3Hg= Subject key identifier: 3E:8B:E8:49:B8:E3:3A:0D:3A:8C:4D:E0:27:7E:91:2F:6A:7A:7A:AB Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Certificate serial: 019AF19AF34922C474206046B101AA634599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=) 2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: dwQvlbC1SB0Q+wPmVkya212jA6SWQzj7NJCI5LrKRGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f3:49:22:c4:74:20:60:46:b1:01:aa:63:45:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=3e8be849b8e33a0d3a8c4de0277e912f6a7a7aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:74:a0:34:62:be:fe:15:14:3d:df:f9:b1: 0b:0e:59:88:64:f8:a3:34:8f:e4:4f:a3:44:27:b6: 44:96:2d:1f:4e:fc:58:bb:86:21:1f:ce:ab:6f:96: e2:4d:b9:dd:dd:34:b4:9c:3e:17:92:0a:30:b4:fc: 9f:90:6b:df:64:ba:78:29:4b:cd:59:18:f5:cd:b2: e0:c6:41:18:ef:d7:c5:65:6a:0f:73:6f:fa:af:32: d1:e7:4e:10:23:44:cd:45:a3:a8:7d:89:ae:9b:20: 64:81:cf:75:db:f3:51:94:67:48:9e:e8:f1:b7:1f: 42:e2:68:92:b8:2d:75:cd:54:d0:5a:2c:43:32:31: fd:9f:34:bc:a8:07:89:6a:5a:06:38:81:55:00:ae: 49:64:43:71:8d:9f:e5:3f:3a:96:ab:1b:62:77:c9: 32:2c:f6:7a:07:f6:b2:3f:15:26:29:67:aa:5a:1c: 7f:da:eb:a0:f5:a5:85:0d:4d:23:89:db:da:a9:1a: 72:6c:5d:3b:20:1a:d9:f8:e9:70:d3:0c:09:df:d1: 5b:e1:d7:85:b3:f8:19:f9:c5:4d:ba:42:01:70:39: ad:f2:9a:b8:ee:8c:68:ac:25:00:bd:4a:1d:cf:6c: 27:4b:48:ae:69:b8:bc:f5:57:48:31:9c:dd:29:88: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8B:E8:49:B8:E3:3A:0D:3A:8C:4D:E0:27:7E:91:2F:6A:7A:7A:AB X509v3 Authority Key Identifier: keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0a:85:3d:28:da:6d:08:4b:16:cc:09:a7:9f:d5:c8:99:ec: 5f:70:37:91:00:e0:4e:5c:59:ed:a9:31:35:48:ac:aa:dd:a4: ad:5a:8b:cf:65:8b:42:0b:ce:73:b1:24:08:6c:eb:49:30:1c: fe:5e:a7:6e:bb:c1:73:83:98:42:35:59:aa:1d:a1:76:46:f1: b0:cf:1c:b7:c7:5c:8f:9f:50:c4:23:a5:09:2c:e9:ce:ca:61: 3b:12:60:d5:5f:27:0e:f9:37:9d:bb:db:16:d1:7d:da:ea:7a: 73:60:d7:aa:fd:2c:71:0b:f6:b7:5f:67:44:41:4d:41:c1:30: 5f:7f:b9:fd:d1:9e:76:e4:69:19:ce:d3:ff:7d:cc:00:8e:a4: 9d:4a:a4:11:bf:6a:65:72:b8:4b:aa:ff:0d:fe:29:3f:a5:a6: f1:86:2c:4e:ea:97:6a:03:5a:e2:c1:f9:e9:f4:d5:e9:0e:a2: bc:f6:6f:b9:4d:c5:7e:99:2e:6f:c2:99:fd:d1:f6:70:0f:b6: 47:a1:1d:f4:b3:cc:5c:28:1f:1a:3d:90:67:5a:c3:55:33:65: 52:b2:e5:b3:22:97:79:96:08:59:d3:f7:d9:37:92:4e:9d:48: 54:68:1a:cc:07:49:73:8c:93:bd:bf:f2:fb:9e:6f:46:15:da: ad:5d:9b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvNJIsR0IGBGsQGqY0WZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzQ3ODhiMmI2OTJjNzEwM2IxY2I5ZTE2MTdmOGIzNjY5 MTBmMTMwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygzZThiZTg0OWI4ZTMzYTBkM2E4YzRkZTAyNzdlOTEyZjZhN2E3YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGp0oDRivv4VFD3f+bELDlmIZPij NI/kT6NEJ7ZEli0fTvxYu4YhH86rb5biTbnd3TS0nD4XkgowtPyfkGvfZLp4KUvN WRj1zbLgxkEY79fFZWoPc2/6rzLR504QI0TNRaOofYmumyBkgc912/NRlGdInujx tx9C4miSuC11zVTQWixDMjH9nzS8qAeJaloGOIFVAK5JZENxjZ/lPzqWqxtid8ky LPZ6B/ayPxUmKWeqWhx/2uug9aWFDU0jidvaqRpybF07IBrZ+Olw0wwJ39Fb4deF s/gZ+cVNukIBcDmt8pq47oxorCUAvUodz2wnS0iuabi89VdIMZzdKYit6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6L6Em44zoNOoxN4Cd+kS9qenqrMB8GA1UdIwQY MBaAFM7EeIsraSxxA7HLnhYX+LNmkQ8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMt YzY4MmI1YmUwZTUzLzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMtYzY4MmI1YmUwZTUz LzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAqFPSja bQhLFswJp5/VyJnsX3A3kQDgTlxZ7akxNUisqt2krVqLz2WLQgvOc7EkCGzrSTAc /l6nbrvBc4OYQjVZqh2hdkbxsM8ct8dcj59QxCOlCSzpzsphOxJg1V8nDvk3nbvb FtF92up6c2DXqv0scQv2t19nREFNQcEwX3+5/dGeduRpGc7T/33MAI6knUqkEb9q ZXK4S6r/Df4pP6Wm8YYsTuqXagNa4sH56fTV6Q6ivPZvuU3Ffpkub8KZ/dH2cA+2 R6Ed9LPMXCgfGj2QZ1rDVTNlUrLlsyKXeZYIWdP32TeSTp1IVGgazAdJc4yTvb/y +55vRhXarV2b6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:12 2025 by rpki-client