This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json) Hash identifier: nT69pBBkD5QYBaCJxzcef4Qy8SDx/ylnMgecdXMzp90= Subject key identifier: 61:7B:41:8D:EC:60:38:59:1F:B2:95:7A:58:D9:FD:7F:2C:AC:B4:F9 Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11 Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111 Certificate serial: 019AF12E9C17B4FF3FB117DD5B1A39D4C147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:02:34 +0000 Manifest this update: Sat 06 Dec 2025 01:02:34 +0000 Manifest next update: Sun 07 Dec 2025 01:02:34 +0000 Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=) 2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: N8yXJTewlcqa8PZOnFniCR4jb9MAdp/Thh0KIJnssLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:9c:17:b4:ff:3f:b1:17:dd:5b:1a:39:d4:c1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111 Validity Not Before: Dec 6 01:02:34 2025 GMT Not After : Dec 7 01:02:34 2025 GMT Subject: CN=617b418dec6038591fb2957a58d9fd7f2cacb4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:53:41:74:70:dd:76:8c:ca:82:af:ed:57: 39:f0:7f:bf:25:f8:d2:8b:16:46:3b:b1:5f:6e:45: 52:0e:82:6d:92:80:20:db:fb:86:56:08:73:7e:a2: 1b:7a:37:22:8b:e1:3e:97:f8:88:e7:68:39:83:8e: 31:46:4b:e1:63:00:96:86:c1:10:f6:21:fe:c7:9f: 38:90:19:6e:a2:b1:d6:73:f7:a0:fe:c7:5b:2f:33: 85:86:95:94:43:a0:96:e7:eb:a2:69:71:bd:d3:13: 30:6b:96:27:31:45:a6:dc:5a:64:6a:9a:40:85:8e: 90:c3:50:98:b5:f5:24:a4:22:38:3d:a1:33:12:ba: a6:b7:15:d2:a4:89:4d:23:2b:06:f0:3f:70:a1:e5: 30:4c:55:45:aa:a9:73:fb:3e:12:23:3a:1b:0d:4e: 50:7c:13:73:ce:c9:86:53:10:21:66:de:78:63:d7: 67:7c:c0:ce:31:7b:23:0a:ab:de:d7:93:1e:bb:d7: f8:73:22:27:a3:b3:3c:0b:a8:cf:5f:a7:60:2d:d3: e8:40:a1:97:7e:64:32:1f:6d:64:8b:00:65:2a:1d: 8c:66:0a:f0:4e:4d:d9:27:db:d9:be:f7:ba:8f:5f: 71:61:e3:0b:9a:37:02:68:9b:50:0a:8d:16:30:79: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7B:41:8D:EC:60:38:59:1F:B2:95:7A:58:D9:FD:7F:2C:AC:B4:F9 X509v3 Authority Key Identifier: keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:98:b7:ac:f3:04:59:24:fc:32:27:6b:30:06:aa:fb:3d:87: 5d:44:b8:31:c5:74:06:70:74:4b:cd:7e:4f:d9:68:3d:47:2c: 72:3d:28:ed:cc:73:2d:9b:f5:03:71:49:90:ce:43:33:10:29: e0:3e:b1:ef:f4:a6:6b:5b:ca:e8:56:56:09:e6:71:8b:6c:df: ac:83:01:ca:33:f8:5b:d6:91:2e:e4:04:cd:9e:ab:f2:dd:bd: 75:28:d6:dd:1c:c1:a5:5d:73:b7:32:62:4a:b7:da:86:f1:da: 40:3a:77:ff:97:de:7d:b9:25:f9:cc:29:f7:94:1a:b5:0a:6d: 71:3f:db:ed:6c:eb:b3:c8:ce:54:c5:bb:bb:bd:e5:9c:13:6c: ac:14:13:81:49:38:e1:1c:9a:8a:58:3b:00:f0:f9:38:75:6f: 10:a7:cf:14:b7:71:5f:93:ac:3f:70:b9:0d:f9:d5:a5:c9:f0: 42:1f:2d:d1:f5:37:bd:c0:55:54:85:58:69:c7:96:1e:6b:00: 63:58:82:3b:b9:d8:13:8f:42:17:51:c5:2f:54:43:b6:24:d6: ca:62:43:74:4e:cb:0d:c5:99:f7:86:7e:3a:ab:6a:66:db:d7: 26:46:44:ce:bf:41:72:57:91:82:6e:d6:cc:04:fa:8e:cc:54: 59:77:fc:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpwXtP8/sRfdWxo51MFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjU5MjkzNjFlMWQwZGUxNjBiODcxZjI5YmRkNWE0MDQw Y2ExMTEwHhcNMjUxMjA2MDEwMjM0WhcNMjUxMjA3MDEwMjM0WjAzMTEwLwYDVQQD Eyg2MTdiNDE4ZGVjNjAzODU5MWZiMjk1N2E1OGQ5ZmQ3ZjJjYWNiNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AxTQXRw3XaMyoKv7Vc58H+/JfjS ixZGO7FfbkVSDoJtkoAg2/uGVghzfqIbejcii+E+l/iI52g5g44xRkvhYwCWhsEQ 9iH+x584kBluorHWc/eg/sdbLzOFhpWUQ6CW5+uiaXG90xMwa5YnMUWm3FpkappA hY6Qw1CYtfUkpCI4PaEzErqmtxXSpIlNIysG8D9woeUwTFVFqqlz+z4SIzobDU5Q fBNzzsmGUxAhZt54Y9dnfMDOMXsjCqve15Meu9f4cyIno7M8C6jPX6dgLdPoQKGX fmQyH21kiwBlKh2MZgrwTk3ZJ9vZvve6j19xYeMLmjcCaJtQCo0WMHkaDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF7QY3sYDhZH7KVeljZ/X8srLT5MB8GA1UdIwQY MBaAFM61kpNh4dDeFguHHym91aQEDKERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNGRkZWQtYzUxMC00NzdjLThmYWQt ZjYxNmYwMDk0YjE0LzEvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kNGRkZWQtYzUxMC00NzdjLThmYWQtZjYxNmYwMDk0YjE0 LzEvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpi3rPME WST8MidrMAaq+z2HXUS4McV0BnB0S81+T9loPUcscj0o7cxzLZv1A3FJkM5DMxAp 4D6x7/Sma1vK6FZWCeZxi2zfrIMByjP4W9aRLuQEzZ6r8t29dSjW3RzBpV1ztzJi SrfahvHaQDp3/5fefbkl+cwp95QatQptcT/b7Wzrs8jOVMW7u73lnBNsrBQTgUk4 4Ryailg7APD5OHVvEKfPFLdxX5OsP3C5DfnVpcnwQh8t0fU3vcBVVIVYaceWHmsA Y1iCO7nYE49CF1HFL1RDtiTWymJDdE7LDcWZ94Z+OqtqZtvXJkZEzr9BcleRgm7W zAT6jsxUWXf8eg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:36 2025 by rpki-client