This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json) Hash identifier: EoDmxFAVq/AdZwnJpBqpfco1NGGjt00FlVZNk4I+yY0= Subject key identifier: 22:D6:01:68:C8:95:66:DD:68:B7:12:92:61:85:D1:2B:F1:FD:AA:DD Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Certificate serial: 019B3AFE0C29EF961FABB4FAD3A50774AB4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 09:01:26 +0000 Manifest this update: Sat 20 Dec 2025 09:01:26 +0000 Manifest next update: Sun 21 Dec 2025 09:01:26 +0000 Files and hashes: 1: 5CXu0UxRhwNDi1i9NLYtVH_7mdQ.roa (hash: WcXKi4ED+2Y5l6i/lY2xJGAyFqasaSUW3tQSDUT3XN8=) 2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: yXtf2B3JeLBQ4GxDjZcbXcfRu0tzh+aN1Tx+PCN28Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:0c:29:ef:96:1f:ab:b4:fa:d3:a5:07:74:ab:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Validity Not Before: Dec 20 09:01:26 2025 GMT Not After : Dec 21 09:01:26 2025 GMT Subject: CN=22d60168c89566dd68b712926185d12bf1fdaadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0a:54:d6:e1:18:79:d9:7b:e2:a6:68:84:53: b4:7a:c4:f2:0b:1b:b8:08:7a:b3:63:37:35:e2:ae: 2f:95:9a:00:b1:47:aa:d9:e1:59:01:58:af:82:9d: 13:ec:51:97:c2:84:8a:18:34:2a:e2:67:a2:10:6d: 87:fd:92:b9:be:4b:66:34:0b:3e:49:96:ea:47:97: e8:f9:c6:ce:a0:30:c9:35:e1:11:d4:cf:98:62:45: 95:d4:b1:16:25:5d:f9:cb:88:be:32:26:2a:e4:91: 36:a6:aa:33:9b:83:31:87:35:1d:7f:6a:94:b9:a2: fe:de:9c:74:c7:7b:62:f3:8b:56:20:3e:74:ee:15: 6b:dd:ff:70:cc:df:2d:1a:94:7a:9e:ee:bc:ce:13: d8:e3:cf:e9:93:c8:cd:5a:78:0c:d4:12:90:20:bc: 85:fa:2e:05:fd:d8:d1:79:ac:08:80:72:e0:94:8e: 17:0b:cc:f5:97:33:b6:1e:87:35:d4:ee:0e:fa:42: f5:1a:ad:f1:a1:d1:0c:cc:bb:c0:9b:1a:7a:60:0d: 5d:24:91:18:5b:c6:fc:40:14:61:2f:8a:0f:5c:88: 05:fb:85:f2:1c:e2:9a:ec:9c:46:d0:4c:a8:ef:85: f2:44:ca:8d:97:15:ad:05:93:17:29:21:00:c0:f7: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:01:68:C8:95:66:DD:68:B7:12:92:61:85:D1:2B:F1:FD:AA:DD X509v3 Authority Key Identifier: keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a5:ba:12:42:30:5b:33:3d:1f:22:a1:e9:9c:35:97:49:68: da:b8:83:9f:0a:69:89:91:7f:72:42:46:fc:1b:d1:5c:1b:bf: 43:ca:71:42:33:f7:f0:48:bb:d8:2b:a7:0a:c4:98:5d:f8:2b: 5c:d3:f9:50:39:6b:15:d6:2a:79:37:bc:2d:86:79:b1:76:5d: 27:38:a7:f2:b9:19:64:d0:89:ae:ef:17:a2:2d:59:86:a2:03: d0:6f:96:ab:cb:f6:12:26:03:91:c5:f6:8d:bd:52:17:a8:6f: 99:1d:ad:2b:06:3e:35:31:e1:bd:b6:35:ea:8c:c8:73:95:72: 2e:d1:ac:46:ea:c2:72:9e:66:4a:b9:c0:88:f9:f2:27:54:2a: e5:a9:ea:93:67:2e:dc:45:fb:4b:4f:a3:0d:01:47:6f:fc:f2: 94:ac:0f:29:8b:ea:c9:d2:e3:87:24:ba:5f:01:46:c0:7a:e5: 3a:dd:6b:c5:4f:06:e6:90:52:1b:78:54:a6:36:a0:95:e8:34: 32:09:47:73:3c:8c:ad:48:e1:82:28:7f:55:68:e0:0f:f5:c1: 75:f6:4f:7e:d4:ea:d4:a9:c8:98:f4:6b:7e:32:22:3a:d5:5d: 5d:22:c4:6e:31:3c:53:4d:4a:0e:76:64:64:d9:d3:25:77:9b: 0c:dd:7d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/gwp75Yfq7T606UHdKtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk ZjI3ZTkwHhcNMjUxMjIwMDkwMTI2WhcNMjUxMjIxMDkwMTI2WjAzMTEwLwYDVQQD EygyMmQ2MDE2OGM4OTU2NmRkNjhiNzEyOTI2MTg1ZDEyYmYxZmRhYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ApU1uEYedl74qZohFO0esTyCxu4 CHqzYzc14q4vlZoAsUeq2eFZAVivgp0T7FGXwoSKGDQq4meiEG2H/ZK5vktmNAs+ SZbqR5fo+cbOoDDJNeER1M+YYkWV1LEWJV35y4i+MiYq5JE2pqozm4MxhzUdf2qU uaL+3px0x3ti84tWID507hVr3f9wzN8tGpR6nu68zhPY48/pk8jNWngM1BKQILyF +i4F/djReawIgHLglI4XC8z1lzO2Hoc11O4O+kL1Gq3xodEMzLvAmxp6YA1dJJEY W8b8QBRhL4oPXIgF+4XyHOKa7JxG0Eyo74XyRMqNlxWtBZMXKSEAwPej/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLWAWjIlWbdaLcSkmGF0Svx/ardMB8GA1UdIwQY MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1 LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaW6EkIw WzM9HyKh6Zw1l0lo2riDnwppiZF/ckJG/BvRXBu/Q8pxQjP38Ei72CunCsSYXfgr XNP5UDlrFdYqeTe8LYZ5sXZdJzin8rkZZNCJru8Xoi1ZhqID0G+Wq8v2EiYDkcX2 jb1SF6hvmR2tKwY+NTHhvbY16ozIc5VyLtGsRurCcp5mSrnAiPnyJ1Qq5anqk2cu 3EX7S0+jDQFHb/zylKwPKYvqydLjhyS6XwFGwHrlOt1rxU8G5pBSG3hUpjagleg0 MglHczyMrUjhgih/VWjgD/XBdfZPftTq1KnImPRrfjIiOtVdXSLEbjE8U01KDnZk ZNnTJXebDN19/g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:06:03 2025 by rpki-client