This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json) Hash identifier: C3z4mCqkFsom6/rOXNvY90c84weL3z4pq3DnRCjX2VA= Subject key identifier: B4:87:B8:E0:F6:8E:08:D1:8E:FB:B9:6F:E9:FB:41:E7:41:0A:29:01 Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Certificate serial: 019B6DD873F0E8B19D6C394B5C311DED354C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft Manifest number: 1262 Signing time: Tue 30 Dec 2025 06:01:00 +0000 Manifest this update: Tue 30 Dec 2025 06:01:00 +0000 Manifest next update: Wed 31 Dec 2025 06:01:00 +0000 Files and hashes: 1: ZzKeKFnkyYHVYzD_pBU_7j7GG50.roa (hash: eOvLaalF9JX35YbTIgyHeogUDwT0C/FDn0Iw2feFdmo=) 2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: qbqMajActJp6ZILzcgEgzuMmxJT7junhBVgBl167Azs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:73:f0:e8:b1:9d:6c:39:4b:5c:31:1d:ed:35:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Validity Not Before: Dec 30 06:01:00 2025 GMT Not After : Dec 31 06:01:00 2025 GMT Subject: CN=b487b8e0f68e08d18efbb96fe9fb41e7410a2901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:42:b8:4d:f6:70:97:75:fe:40:9c:05:2e: 6f:8c:fa:4f:2e:99:bd:64:32:81:9f:de:14:c5:29: 04:94:93:88:f2:b7:07:e1:4b:a7:25:72:de:79:f7: 68:c6:14:e8:71:41:7a:8e:d5:b6:cc:db:a9:3c:cc: d3:ff:a9:ac:fe:93:28:5d:37:b4:46:9d:28:e9:11: b0:12:67:f0:b8:ef:62:7d:10:35:e3:5e:ec:ae:4f: f0:03:ad:52:3f:e5:e7:07:b8:63:62:98:71:2d:25: 1d:fc:3f:04:1f:04:4c:70:fb:fc:7a:c1:66:c0:2e: bd:2e:6a:98:9a:a8:1e:40:6f:df:b9:2d:96:a4:ff: be:b1:ad:4e:bc:26:da:06:f7:68:a4:7a:d9:9b:93: 2c:a5:46:82:7f:c5:2a:3f:f4:5a:5d:05:ca:8a:62: 50:79:66:d9:65:5e:1e:d0:3b:6f:1d:86:f0:4a:88: 1e:d4:3c:ab:c2:b2:e9:b7:e4:eb:7b:ad:bf:f7:c3: d1:07:01:48:e5:06:04:fb:51:2f:05:98:15:18:a6: 6c:8c:9b:60:b4:ba:0d:a3:2d:96:c2:09:43:92:fa: 7f:cc:d0:ce:c1:9b:0f:58:82:da:59:d1:0a:32:96: e4:55:0b:ff:a7:a8:c7:f5:a9:b6:16:13:c8:7d:5a: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:B8:E0:F6:8E:08:D1:8E:FB:B9:6F:E9:FB:41:E7:41:0A:29:01 X509v3 Authority Key Identifier: keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:24:26:7f:89:0b:7a:03:15:3c:59:59:5f:77:36:1e:ac:27: 41:81:6a:16:c6:de:0a:fb:c8:ed:74:51:1b:6a:37:4c:b2:89: f8:af:c1:60:cf:e5:13:49:8c:2c:03:d5:1c:3e:06:b0:83:00: d0:0b:09:51:53:a9:f7:9f:db:6f:f2:3d:d5:c1:06:4b:26:88: f5:20:61:48:8b:c6:c1:0e:f6:ef:7a:99:d2:52:8c:29:ae:85: 81:04:ce:fb:b0:f7:ea:21:c6:b5:5f:bf:30:71:05:94:e9:39: 02:47:a8:cb:2b:04:e4:f4:3b:71:96:24:4d:fe:f9:59:a3:b4: c6:d1:d1:f6:2a:e0:da:66:ae:c2:90:22:b1:03:55:6d:71:d0: 08:08:09:53:39:48:75:9c:ca:e7:b4:d3:09:e0:b1:0b:3a:24: 9c:4e:6b:36:1a:73:61:76:e8:d5:a5:8a:02:00:8c:c8:af:15: 32:55:3c:52:dc:ec:19:21:36:1e:fa:d6:e8:27:6a:cc:2d:8c: 37:09:a6:2e:8e:92:16:4f:69:a0:56:28:76:81:fd:77:af:f4: ff:88:6e:a1:0d:9b:62:a8:81:1e:45:80:42:e8:12:21:2d:00: 73:db:bf:0f:b0:67:f7:a5:e8:50:c4:28:69:ce:41:1c:e7:91: 58:98:11:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2HPw6LGdbDlLXDEd7TVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl ZDIxMzgwHhcNMjUxMjMwMDYwMTAwWhcNMjUxMjMxMDYwMTAwWjAzMTEwLwYDVQQD EyhiNDg3YjhlMGY2OGUwOGQxOGVmYmI5NmZlOWZiNDFlNzQxMGEyOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS5CuE32cJd1/kCcBS5vjPpPLpm9 ZDKBn94UxSkElJOI8rcH4UunJXLeefdoxhTocUF6jtW2zNupPMzT/6ms/pMoXTe0 Rp0o6RGwEmfwuO9ifRA1417srk/wA61SP+XnB7hjYphxLSUd/D8EHwRMcPv8esFm wC69LmqYmqgeQG/fuS2WpP++sa1OvCbaBvdopHrZm5MspUaCf8UqP/RaXQXKimJQ eWbZZV4e0DtvHYbwSoge1DyrwrLpt+Tre62/98PRBwFI5QYE+1EvBZgVGKZsjJtg tLoNoy2WwglDkvp/zNDOwZsPWILaWdEKMpbkVQv/p6jH9am2FhPIfVpgXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSHuOD2jgjRjvu5b+n7QedBCikBMB8GA1UdIwQY MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt ZjM0NjNmYzcyY2I1LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1 LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiQmf4kL egMVPFlZX3c2HqwnQYFqFsbeCvvI7XRRG2o3TLKJ+K/BYM/lE0mMLAPVHD4GsIMA 0AsJUVOp95/bb/I91cEGSyaI9SBhSIvGwQ7273qZ0lKMKa6FgQTO+7D36iHGtV+/ MHEFlOk5AkeoyysE5PQ7cZYkTf75WaO0xtHR9irg2mauwpAisQNVbXHQCAgJUzlI dZzK57TTCeCxCzoknE5rNhpzYXbo1aWKAgCMyK8VMlU8UtzsGSE2HvrW6CdqzC2M NwmmLo6SFk9poFYodoH9d6/0/4huoQ2bYqiBHkWAQugSIS0Ac9u/D7Bn96XoUMQo ac5BHOeRWJgRxA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:52 2025 by rpki-client