This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json) Hash identifier: my4x5jzWqarj/u/Shckw8sKE0+XDVFG0Jvg8kWYcux4= Subject key identifier: A3:9B:94:BA:29:9C:61:92:6F:CD:71:AA:6C:73:40:94:69:0A:14:99 Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Certificate serial: 019AF509CC6B9E6759F0D18A1794117AB931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft Manifest number: 10CF Signing time: Sat 06 Dec 2025 19:00:51 +0000 Manifest this update: Sat 06 Dec 2025 19:00:51 +0000 Manifest next update: Sun 07 Dec 2025 19:00:51 +0000 Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=) 2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: rE7YhXv3yvrO6bCVsZDUSSpW+zNND2xa+LAo1oNGYjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:cc:6b:9e:67:59:f0:d1:8a:17:94:11:7a:b9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Validity Not Before: Dec 6 19:00:51 2025 GMT Not After : Dec 7 19:00:51 2025 GMT Subject: CN=a39b94ba299c61926fcd71aa6c734094690a1499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:2f:df:2f:01:83:82:6b:40:a3:8b:8a:ff: 6e:1a:91:fd:4f:9d:46:19:33:d7:9d:f3:a9:b1:f6: 9e:97:ad:4a:4b:8d:95:c3:dc:d8:67:98:dc:be:79: a7:23:3e:95:90:3c:23:ae:8b:55:4b:ed:4e:eb:0d: 5c:0d:0c:88:cc:22:40:4c:8c:f2:f3:12:4b:7b:aa: cc:b0:0b:ed:a0:36:b5:22:01:4f:3e:bb:44:b8:47: 0f:4a:af:f7:6d:42:75:c9:8a:cb:08:08:4d:ed:7d: a3:18:ff:4f:d9:07:e4:73:f0:8e:76:f0:32:d8:a2: 6b:05:69:7b:d0:89:c6:fe:c2:4d:d9:1a:35:22:6b: 80:a4:97:66:44:9d:fa:27:45:6c:8a:1c:d9:e8:4b: ab:5b:7d:13:37:0d:37:7d:d2:63:9e:71:26:f0:7f: 00:ce:ef:2b:7b:cb:fe:ee:8f:a8:f9:f9:a0:98:f6: fa:5f:bc:83:2c:65:11:08:7b:3d:c9:f6:27:25:55: 47:5d:b0:3d:2f:2a:c8:88:99:b7:68:19:13:d2:a8: 17:2d:bb:af:57:ad:f6:02:62:8e:69:af:dc:3d:98: 8f:65:a0:d9:3d:f7:1c:b9:c8:af:32:a8:4e:f2:19: 1f:fc:bf:42:6d:63:74:b5:34:41:47:19:1d:c0:b8: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:94:BA:29:9C:61:92:6F:CD:71:AA:6C:73:40:94:69:0A:14:99 X509v3 Authority Key Identifier: keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:12:60:0f:fc:16:97:46:de:11:f0:71:24:9c:34:55:6b:5c: 56:ee:a5:bc:10:75:e2:17:20:18:7c:f4:18:2d:61:9e:77:f5: 46:07:3d:6d:bc:66:71:e6:82:7f:7e:52:7d:51:fd:1f:a0:8b: 5d:bc:a4:c1:e8:3c:22:31:2e:16:95:a6:77:30:b0:51:f9:2a: 44:bf:a8:52:37:90:44:0b:64:54:2d:42:7f:0c:6c:5a:1b:0a: 25:2a:9f:e2:c7:0e:22:72:eb:c5:b4:ef:22:d7:77:dc:5e:74: 8a:8c:02:0c:4c:07:55:1b:40:c0:fc:0b:1a:30:63:7e:f6:86: 7f:39:1b:83:9f:67:e4:46:27:da:3a:38:2c:e6:30:6f:f6:f5: 7d:e5:5d:21:73:ff:09:5b:f1:98:f7:8e:9a:cc:73:04:75:0b: 41:ba:44:9c:c5:73:e7:be:7b:e1:d3:e0:e6:bb:10:4c:db:d1: 17:20:ba:8d:76:40:f6:c7:28:98:12:e8:3f:c3:45:ba:60:37: 98:7f:a0:79:08:63:9e:99:9c:f2:97:b7:2b:39:23:3a:f2:ee: 54:4d:84:f8:fa:6b:93:79:ec:24:23:c2:db:cc:14:d7:99:8b: fc:f0:ef:41:0a:48:7f:4a:b0:c4:9e:82:0e:ea:a8:7e:66:95: 78:92:6c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcxrnmdZ8NGKF5QRerkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTU4MWQyNzQ4YWZjZjc3OTY2Nzk3N2Y3YjY3MzllZTRm OWZjMGQwHhcNMjUxMjA2MTkwMDUxWhcNMjUxMjA3MTkwMDUxWjAzMTEwLwYDVQQD EyhhMzliOTRiYTI5OWM2MTkyNmZjZDcxYWE2YzczNDA5NDY5MGExNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT8v3y8Bg4JrQKOLiv9uGpH9T51G GTPXnfOpsfael61KS42Vw9zYZ5jcvnmnIz6VkDwjrotVS+1O6w1cDQyIzCJATIzy 8xJLe6rMsAvtoDa1IgFPPrtEuEcPSq/3bUJ1yYrLCAhN7X2jGP9P2Qfkc/COdvAy 2KJrBWl70InG/sJN2Ro1ImuApJdmRJ36J0VsihzZ6EurW30TNw03fdJjnnEm8H8A zu8re8v+7o+o+fmgmPb6X7yDLGURCHs9yfYnJVVHXbA9LyrIiJm3aBkT0qgXLbuv V632AmKOaa/cPZiPZaDZPfccucivMqhO8hkf/L9CbWN0tTRBRxkdwLi2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOblLopnGGSb81xqmxzQJRpChSZMB8GA1UdIwQY MBaAFM5VgdJ0ivz3eWZ5d/e2c57k+fwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTkt ZDc2OGE3N2Q1N2Y0LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTktZDc2OGE3N2Q1N2Y0 LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBJgD/wW l0beEfBxJJw0VWtcVu6lvBB14hcgGHz0GC1hnnf1Rgc9bbxmceaCf35SfVH9H6CL Xbykweg8IjEuFpWmdzCwUfkqRL+oUjeQRAtkVC1CfwxsWhsKJSqf4scOInLrxbTv Itd33F50iowCDEwHVRtAwPwLGjBjfvaGfzkbg59n5EYn2jo4LOYwb/b1feVdIXP/ CVvxmPeOmsxzBHULQbpEnMVz57574dPg5rsQTNvRFyC6jXZA9scomBLoP8NFumA3 mH+geQhjnpmc8pe3KzkjOvLuVE2E+Pprk3nsJCPC28wU15mL/PDvQQpIf0qwxJ6C DuqofmaVeJJsCw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:51 2025 by rpki-client