This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft File: zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json) Hash identifier: 3CIA82GQcTobJnuNIi8j4P4FVd+/78JKRQtIOm+5a2I= Subject key identifier: F3:53:6A:7B:D1:5F:32:18:54:70:11:4B:E2:C0:20:80:7C:E1:8B:6D Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019AF0BF3C204CC02B8F004CCD0DFA2D43D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft Manifest number: 178B Signing time: Fri 05 Dec 2025 23:00:55 +0000 Manifest this update: Fri 05 Dec 2025 23:00:55 +0000 Manifest next update: Sat 06 Dec 2025 23:00:55 +0000 Files and hashes: 1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=) 2: L3miZv_CtPpguqIiqcWbsGSBH70.roa (hash: chmReLLtPVDHneAMVjdRBmMn8npZbp0myeVRl6KrMkU=) 3: SzzlHogGw5EWuez7OZv1qG7OcKg.roa (hash: H29VJ6cf+NYN1aHzV70qmMe4haFT+yUYtpiwpA4ElP4=) 4: oesqmmJPK6TenMK59Izh-PTrjQI.roa (hash: 3a81J7V4OXRfNvBRc8fr9Sr4De6AZGIFq09/t+K9UHA=) 5: piZIF0KhX5XUtlQlqZTOR6AEy34.roa (hash: ujmr+91E+fV9iYaYCXUQDR9ydJcOnbl/xIHSG/UHIJM=) 6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: Y5GmF0hLBCoVhySlOn+tr7UEj1PA8Zu3RET7A5+ulZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3c:20:4c:c0:2b:8f:00:4c:cd:0d:fa:2d:43:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Dec 5 23:00:55 2025 GMT Not After : Dec 6 23:00:55 2025 GMT Subject: CN=f3536a7bd15f32185470114be2c020807ce18b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:23:fe:ff:b6:cf:e7:43:c7:1a:df:05:46: 53:9e:da:0c:be:83:d2:ec:c7:d7:bd:7a:43:77:42: 75:13:b6:c2:43:9c:74:22:95:a0:af:be:6d:c7:95: 2c:a5:fe:e0:4b:8a:be:8c:e8:4a:e3:23:b3:da:67: 29:73:f8:a8:fe:44:65:6c:5d:d6:d5:0d:83:b3:c9: e5:ef:1f:fe:86:33:11:1f:e6:2d:21:32:63:29:49: 35:2b:34:a9:65:13:b7:9c:ae:08:4e:29:5f:e0:6f: 67:09:3b:55:43:0d:a3:23:fe:a6:03:2f:b6:1b:4a: a3:eb:db:68:70:44:cd:d4:70:af:40:35:1c:c3:49: 40:16:58:fc:a4:22:55:64:78:f3:91:10:d5:89:53: 3c:2f:31:a4:e5:8d:ee:8c:3c:a2:0d:fe:65:38:5c: 40:85:e3:17:8f:a9:72:a0:21:09:ed:dd:80:86:75: b1:b3:80:05:74:ab:02:74:a2:4c:e1:29:c3:a1:d0: 16:f9:c9:f5:31:4e:9a:b6:15:7b:61:6e:2e:48:21: 23:2f:6f:a8:6d:dc:c6:24:39:ad:9f:57:ba:a5:28: 38:89:73:04:f1:e2:e2:4e:bb:de:18:ed:41:fc:50: 1a:16:d0:cd:e6:36:ec:14:ab:43:c9:b6:18:23:b8: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:53:6A:7B:D1:5F:32:18:54:70:11:4B:E2:C0:20:80:7C:E1:8B:6D X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ff:79:e4:67:aa:99:f3:04:4e:fc:4d:4b:66:24:02:5e:44: 66:52:72:d0:24:8e:e8:9f:ef:13:c7:79:44:f4:75:d3:68:eb: b5:a4:fb:ff:43:61:5f:fc:86:99:af:32:a0:c7:52:fc:b2:b3: eb:43:2f:89:eb:8f:14:42:28:76:a5:26:f5:32:dc:57:11:09: 17:96:c4:bc:63:c6:77:23:39:54:8c:26:a1:af:9b:4d:2c:98: 1a:59:97:e9:98:bb:25:e1:aa:a5:3c:3c:0d:e6:01:c5:b4:36: 46:c1:a4:81:b2:dd:f5:87:0f:2a:64:61:aa:52:92:36:44:ad: b3:d8:97:c5:21:44:06:55:71:b4:11:7c:cd:7d:9f:94:92:68: 87:71:da:75:d6:5b:19:36:88:13:9a:e3:f6:d1:bd:10:bc:93: 0a:50:39:fa:b8:76:af:1b:eb:0c:06:c2:37:9d:fa:4f:ad:0b: 54:0b:5a:aa:5d:72:02:1c:83:0f:56:49:ed:fb:a0:13:e7:0d: ba:cd:33:b7:e6:9c:9b:fb:c7:10:2d:1e:a3:79:84:5b:7c:62: 3a:ca:be:ad:68:7c:ad:fe:f4:a6:29:5b:de:29:5a:97:14:26: cc:59:3f:c3:76:8f:03:55:9f:fc:9f:6a:e5:90:e3:3f:1f:59: af:5b:9a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzwgTMArjwBMzQ36LUPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjUxMjA1MjMwMDU1WhcNMjUxMjA2MjMwMDU1WjAzMTEwLwYDVQQD EyhmMzUzNmE3YmQxNWYzMjE4NTQ3MDExNGJlMmMwMjA4MDdjZTE4YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R4j/v+2z+dDxxrfBUZTntoMvoPS 7MfXvXpDd0J1E7bCQ5x0IpWgr75tx5Uspf7gS4q+jOhK4yOz2mcpc/io/kRlbF3W 1Q2Ds8nl7x/+hjMRH+YtITJjKUk1KzSpZRO3nK4ITilf4G9nCTtVQw2jI/6mAy+2 G0qj69tocETN1HCvQDUcw0lAFlj8pCJVZHjzkRDViVM8LzGk5Y3ujDyiDf5lOFxA heMXj6lyoCEJ7d2AhnWxs4AFdKsCdKJM4SnDodAW+cn1MU6athV7YW4uSCEjL2+o bdzGJDmtn1e6pSg4iXME8eLiTrveGO1B/FAaFtDN5jbsFKtDybYYI7gGHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNTanvRXzIYVHARS+LAIIB84YttMB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOP955Geq mfMETvxNS2YkAl5EZlJy0CSO6J/vE8d5RPR102jrtaT7/0NhX/yGma8yoMdS/LKz 60MvieuPFEIodqUm9TLcVxEJF5bEvGPGdyM5VIwmoa+bTSyYGlmX6Zi7JeGqpTw8 DeYBxbQ2RsGkgbLd9YcPKmRhqlKSNkSts9iXxSFEBlVxtBF8zX2flJJoh3HaddZb GTaIE5rj9tG9ELyTClA5+rh2rxvrDAbCN536T60LVAtaql1yAhyDD1ZJ7fugE+cN us0zt+acm/vHEC0eo3mEW3xiOsq+rWh8rf70pilb3ilalxQmzFk/w3aPA1Wf/J9q 5ZDjPx9Zr1uaLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:59 2025 by rpki-client