This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json) Hash identifier: f9VJdCUvlT6dkgI7I/tVY8d9gGinsunDq0Tg8eYp8K0= Subject key identifier: 90:E3:86:73:81:FD:FB:FC:D4:2F:9E:A0:CC:B4:95:BD:57:AB:66:D7 Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Certificate serial: 019B4A7191E126EC992B02009AD26C57DD83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 09:01:55 +0000 Manifest this update: Tue 23 Dec 2025 09:01:55 +0000 Manifest next update: Wed 24 Dec 2025 09:01:55 +0000 Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=) 2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: XDkGL0XSdPUYX5sfRU+/Sb2EEgB1p7JstJdgYDAGMps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:91:e1:26:ec:99:2b:02:00:9a:d2:6c:57:dd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Validity Not Before: Dec 23 09:01:55 2025 GMT Not After : Dec 24 09:01:55 2025 GMT Subject: CN=90e3867381fdfbfcd42f9ea0ccb495bd57ab66d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:d0:5e:fb:9b:02:4b:15:2d:cd:f2:be:06: 72:64:8c:ad:a8:37:9d:30:09:15:82:de:41:cb:78: 26:98:59:07:76:5c:74:cd:53:2a:b1:56:6e:95:4c: 4d:79:96:cd:08:58:8b:c3:4c:ec:53:3d:5b:4c:53: 0b:7a:95:3f:51:50:10:c6:5f:72:52:67:fa:85:c5: ea:4a:aa:be:46:2c:36:df:42:d9:3f:25:76:54:f1: 51:82:df:6a:ba:97:8a:32:d1:ff:98:94:5b:17:58: 17:7f:44:d6:88:ad:23:75:ec:c4:4d:be:52:0c:22: fd:02:41:90:d2:1e:f7:14:32:a2:47:26:14:b9:97: b8:ea:11:08:e6:9a:73:35:eb:8c:b0:ba:a4:c3:c0: 83:fc:3a:2b:1c:1d:c3:9e:dd:c3:1f:ff:9c:0f:ea: 08:09:87:bc:ef:4d:e3:0f:77:87:f9:6d:73:0e:92: a0:a2:b8:5b:48:44:b3:c4:da:95:48:f4:eb:19:bb: 4b:0b:32:05:ee:ba:c2:f2:21:84:98:f5:82:31:a1: 28:3b:f8:61:9a:0c:62:6e:d2:50:80:7b:ea:c0:5d: b6:66:26:28:b7:26:62:5b:0d:d2:e1:31:66:aa:d1: 86:5b:4c:49:d2:40:1c:ea:13:64:8b:a0:02:d3:eb: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E3:86:73:81:FD:FB:FC:D4:2F:9E:A0:CC:B4:95:BD:57:AB:66:D7 X509v3 Authority Key Identifier: keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d1:5b:f4:22:66:ad:f0:5a:ac:5a:92:30:4a:01:68:1a:9b: 2c:67:b8:da:90:c3:16:39:11:da:f7:0d:67:fc:d7:a5:ee:31: f9:ce:38:33:da:87:45:2d:bb:50:c8:51:37:31:bc:71:a2:5d: d5:99:d6:7a:0d:27:8a:14:ec:65:c7:f4:2c:aa:96:03:9f:f3: 29:93:44:63:8c:b2:93:16:dd:06:4e:38:2c:84:17:c9:9d:49: 17:57:54:a2:d2:8b:c4:8f:57:e2:6a:68:82:2f:7d:47:67:53: 31:b2:12:1a:de:4a:af:8c:df:29:12:ed:2f:54:ae:b4:f7:78: df:68:e7:71:bb:28:c5:6b:b0:9f:df:4d:2a:b4:13:d7:dd:24: 0c:af:3a:40:48:ad:24:1a:20:d2:7a:ae:7d:3f:2e:d0:e1:6a: c8:c6:f0:e4:5a:f9:0d:bb:e4:81:84:b8:b5:36:7a:59:8b:3c: a7:2a:78:f9:01:f7:7f:f8:ca:06:2a:32:cb:23:df:51:60:bf: 45:2f:bc:75:ff:97:8a:0d:02:43:1e:a1:c7:28:ba:0a:cb:a2: 6f:68:1a:b7:22:4b:59:04:e6:a1:c1:1b:ed:61:b5:9b:d2:91: 67:64:dd:f5:5c:dd:5e:1f:80:2d:5b:eb:e2:f2:8d:a8:2c:f9: 03:72:9b:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcZHhJuyZKwIAmtJsV92DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY4ZDZkZWMzOTIwYmM3M2YwOTdmZGY1NmNhZjEwYjUy ZGI0NTUwHhcNMjUxMjIzMDkwMTU1WhcNMjUxMjI0MDkwMTU1WjAzMTEwLwYDVQQD Eyg5MGUzODY3MzgxZmRmYmZjZDQyZjllYTBjY2I0OTViZDU3YWI2NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22PQXvubAksVLc3yvgZyZIytqDed MAkVgt5By3gmmFkHdlx0zVMqsVZulUxNeZbNCFiLw0zsUz1bTFMLepU/UVAQxl9y Umf6hcXqSqq+Riw230LZPyV2VPFRgt9qupeKMtH/mJRbF1gXf0TWiK0jdezETb5S DCL9AkGQ0h73FDKiRyYUuZe46hEI5ppzNeuMsLqkw8CD/DorHB3Dnt3DH/+cD+oI CYe8703jD3eH+W1zDpKgorhbSESzxNqVSPTrGbtLCzIF7rrC8iGEmPWCMaEoO/hh mgxibtJQgHvqwF22ZiYotyZiWw3S4TFmqtGGW0xJ0kAc6hNki6AC0+thgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDjhnOB/fv81C+eoMy0lb1Xq2bXMB8GA1UdIwQY MBaAFM6/jW3sOSC8c/CX/fVsrxC1LbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEt YjVlNTcwMGZjNzc0LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEtYjVlNTcwMGZjNzc0 LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdFb9CJm rfBarFqSMEoBaBqbLGe42pDDFjkR2vcNZ/zXpe4x+c44M9qHRS27UMhRNzG8caJd 1ZnWeg0nihTsZcf0LKqWA5/zKZNEY4yykxbdBk44LIQXyZ1JF1dUotKLxI9X4mpo gi99R2dTMbISGt5Kr4zfKRLtL1SutPd432jncbsoxWuwn99NKrQT190kDK86QEit JBog0nqufT8u0OFqyMbw5Fr5DbvkgYS4tTZ6WYs8pyp4+QH3f/jKBioyyyPfUWC/ RS+8df+Xig0CQx6hxyi6Csuib2gatyJLWQTmocEb7WG1m9KRZ2Td9VzdXh+ALVvr 4vKNqCz5A3Kb3w== -----END CERTIFICATE-----Generated at Tue Dec 23 16:56:09 2025 by rpki-client