This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json) Hash identifier: 3ZF02/L1JT+9fyhd48LdD/3khpGiGM+qeKTFNY2y7I8= Subject key identifier: DE:79:4C:E6:93:5C:59:A0:9D:45:13:D3:C3:DE:56:E9:52:40:A4:1B Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Certificate serial: 019B3BA20E84B297963955D81E311C51ABDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft Manifest number: 1248 Signing time: Sat 20 Dec 2025 12:00:34 +0000 Manifest this update: Sat 20 Dec 2025 12:00:34 +0000 Manifest next update: Sun 21 Dec 2025 12:00:34 +0000 Files and hashes: 1: ZzKeKFnkyYHVYzD_pBU_7j7GG50.roa (hash: eOvLaalF9JX35YbTIgyHeogUDwT0C/FDn0Iw2feFdmo=) 2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: n2hAU9Ne4IdBL5LA1CWHNnLcFwcevawhvLwHP5TomBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:0e:84:b2:97:96:39:55:d8:1e:31:1c:51:ab:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Validity Not Before: Dec 20 12:00:34 2025 GMT Not After : Dec 21 12:00:34 2025 GMT Subject: CN=de794ce6935c59a09d4513d3c3de56e95240a41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:ab:65:cb:07:34:6f:5d:3c:a0:a0:10:e7: 36:8f:1d:8d:a2:07:c4:d3:81:0e:50:44:f9:fa:c6: b7:6f:f2:40:61:d2:d5:66:a3:88:1c:06:fb:ba:45: 59:3d:4e:28:51:a2:d0:a7:ca:bc:9b:d9:31:52:fa: 34:64:f2:c9:75:a6:44:75:d6:3f:c6:fb:23:19:06: 67:9d:f8:4b:6f:6b:e9:40:1b:49:1b:5a:97:de:6c: a2:d3:c7:37:6b:ea:9d:8c:d4:ce:09:0b:95:ef:c0: 5d:b4:2e:d6:41:e4:9d:ff:4a:02:fc:ca:22:f0:09: ab:63:36:2f:70:0f:10:2a:c9:b6:72:34:58:40:97: e1:06:b6:72:10:7d:52:0d:fd:6d:05:51:99:9b:c6: b7:b0:b1:cc:dc:a1:46:8c:47:fc:44:ab:44:dc:f3: 04:72:62:41:37:92:b9:62:d8:ae:ae:9f:69:c6:95: bc:c5:d9:96:ec:29:c6:7a:2b:02:4e:b7:0c:94:de: 1c:95:24:4e:35:fd:b2:06:f4:8e:30:fe:a7:89:03: 7e:07:e5:82:50:0a:4f:c2:d7:ec:8b:d1:24:27:aa: 7d:1c:b3:9d:14:02:46:1f:94:d5:08:73:31:26:2a: dc:14:63:51:71:9d:95:e7:63:c7:96:f9:b8:d4:73: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:4C:E6:93:5C:59:A0:9D:45:13:D3:C3:DE:56:E9:52:40:A4:1B X509v3 Authority Key Identifier: keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f9:a3:63:b4:12:70:b0:49:0f:0e:08:c8:42:37:a9:de:f1: 22:cf:5b:1a:b7:04:4c:2a:7d:cd:df:bf:d5:b3:d2:f2:44:2f: 50:04:3d:df:74:29:de:25:cb:df:dd:aa:34:91:2f:1e:f3:fa: 28:67:1d:09:d3:d2:3c:f4:b4:db:a8:45:73:5f:68:5e:06:81: 2b:2f:ab:6f:91:15:b1:a3:07:96:5c:e3:42:81:81:a0:67:74: ef:8e:4e:41:69:2b:55:59:63:55:1c:d1:c6:aa:6b:f4:81:90: ec:0e:e1:c0:3f:8f:4f:eb:ad:5b:5f:9e:a4:75:5a:27:64:a8: e9:39:80:7c:93:bc:04:ae:99:80:04:f3:2c:b5:96:c0:2b:5d: 18:36:30:19:5c:87:e0:78:a4:8d:02:24:f3:18:b1:01:85:63: db:36:f0:83:07:a7:42:fd:7f:ae:ff:12:55:11:11:0d:7c:96: a7:7e:f0:93:59:fc:91:ea:9e:fd:dd:23:08:bf:be:06:13:1c: 98:59:ce:35:bb:c0:7a:9c:fa:29:cb:90:ee:f1:05:50:25:55: 9a:ea:a1:7e:3f:c0:04:2e:74:58:47:72:f8:f1:65:17:3a:d9: 3e:c2:c8:85:7c:44:a7:33:91:e0:af:c4:f6:25:3f:0c:a7:33: a3:82:c5:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7og6EspeWOVXYHjEcUavcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl ZDIxMzgwHhcNMjUxMjIwMTIwMDM0WhcNMjUxMjIxMTIwMDM0WjAzMTEwLwYDVQQD EyhkZTc5NGNlNjkzNWM1OWEwOWQ0NTEzZDNjM2RlNTZlOTUyNDBhNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7OrZcsHNG9dPKCgEOc2jx2NogfE 04EOUET5+sa3b/JAYdLVZqOIHAb7ukVZPU4oUaLQp8q8m9kxUvo0ZPLJdaZEddY/ xvsjGQZnnfhLb2vpQBtJG1qX3myi08c3a+qdjNTOCQuV78BdtC7WQeSd/0oC/Moi 8AmrYzYvcA8QKsm2cjRYQJfhBrZyEH1SDf1tBVGZm8a3sLHM3KFGjEf8RKtE3PME cmJBN5K5Ytiurp9pxpW8xdmW7CnGeisCTrcMlN4clSRONf2yBvSOMP6niQN+B+WC UApPwtfsi9EkJ6p9HLOdFAJGH5TVCHMxJircFGNRcZ2V52PHlvm41HM4vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN55TOaTXFmgnUUT08PeVulSQKQbMB8GA1UdIwQY MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt ZjM0NjNmYzcyY2I1LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1 LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvmjY7QS cLBJDw4IyEI3qd7xIs9bGrcETCp9zd+/1bPS8kQvUAQ933Qp3iXL392qNJEvHvP6 KGcdCdPSPPS026hFc19oXgaBKy+rb5EVsaMHllzjQoGBoGd0745OQWkrVVljVRzR xqpr9IGQ7A7hwD+PT+utW1+epHVaJ2So6TmAfJO8BK6ZgATzLLWWwCtdGDYwGVyH 4HikjQIk8xixAYVj2zbwgwenQv1/rv8SVRERDXyWp37wk1n8keqe/d0jCL++BhMc mFnONbvAepz6KcuQ7vEFUCVVmuqhfj/ABC50WEdy+PFlFzrZPsLIhXxEpzOR4K/E 9iU/DKczo4LFHQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:19 2025 by rpki-client