This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json) Hash identifier: wSAJcC6DNQmwIrk/tVVEEf5rvgLP6Ewn9k3BH3CxRD4= Subject key identifier: DF:AC:80:D5:80:ED:2D:F6:B1:38:25:17:B1:E9:A1:BC:8D:6C:6B:D8 Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67 Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367 Certificate serial: 019B42B79BD631D260EF6A4D3D5F67B323BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 21:01:27 +0000 Manifest this update: Sun 21 Dec 2025 21:01:27 +0000 Manifest next update: Mon 22 Dec 2025 21:01:27 +0000 Files and hashes: 1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=) 2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: 6SNpBvKSS8f4u1MitYXukojHkwEkacWv6Ic7+zr+SlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:9b:d6:31:d2:60:ef:6a:4d:3d:5f:67:b3:23:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367 Validity Not Before: Dec 21 21:01:27 2025 GMT Not After : Dec 22 21:01:27 2025 GMT Subject: CN=dfac80d580ed2df6b1382517b1e9a1bc8d6c6bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:db:4b:a3:f7:67:bd:04:5c:18:82:e5:53: 74:1a:90:23:f6:94:7b:b3:0f:b6:cb:fb:ef:21:51: d3:3d:9e:33:3a:9e:f2:8a:b1:e7:4e:05:7f:75:43: 7f:ee:da:f3:f4:d3:e1:18:43:23:8f:27:b5:ff:7c: d9:89:b6:22:3d:78:07:b5:26:7b:a7:56:0c:b1:5b: 0c:bb:d5:2e:03:52:9c:4c:fe:cc:6a:82:2c:87:c1: 53:16:b3:8f:a2:4e:82:78:c0:36:a0:0b:dc:93:70: 15:ba:79:fe:a3:8e:03:f1:91:c6:34:58:4d:e2:a4: dd:96:d9:5e:af:9c:6f:45:7f:39:c2:90:a9:8c:db: 07:b0:f6:2b:34:25:9a:49:f4:87:b8:1e:d7:48:5d: 6c:ba:c3:9a:ae:ce:bc:e6:7c:b8:b1:24:b8:d9:7e: f3:04:4c:e2:11:0a:37:af:20:26:00:b8:89:10:0e: 07:e3:04:08:2d:27:e3:42:70:8f:7e:d6:21:e3:0c: e6:fb:59:94:70:f7:7a:4b:83:58:29:48:bb:16:b1: aa:28:60:4f:cf:40:4a:e3:10:86:72:11:96:10:80: e4:41:48:ea:3f:6b:70:d9:53:da:e1:93:1b:c5:87: e1:44:78:c0:e8:a6:96:be:f8:55:60:73:e6:f6:b2: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AC:80:D5:80:ED:2D:F6:B1:38:25:17:B1:E9:A1:BC:8D:6C:6B:D8 X509v3 Authority Key Identifier: keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4c:8e:e6:f3:17:8f:4f:67:94:71:e8:eb:e9:38:6f:90:84: 3c:a1:d3:5f:48:1f:b7:fe:19:a5:8f:e2:92:26:5e:3c:14:10: 5f:bb:b1:89:52:72:d7:38:c9:00:9e:ff:97:e3:25:1b:53:70: b0:08:50:36:b1:4a:3b:f2:f5:02:16:4c:9c:b1:a4:b6:9b:0e: ea:d5:b4:b7:67:f1:3a:10:e4:b7:65:a6:b8:23:a9:f8:a8:a8: 24:6f:c3:f6:17:6f:f0:da:e4:9c:9d:4f:61:a7:22:55:45:1f: 90:13:0c:f6:ec:b5:55:48:6b:0a:16:27:7b:08:74:6c:10:b6: 11:0e:62:fb:e8:5c:d0:84:9c:fe:3c:d5:6e:75:9a:3f:28:1a: b6:2f:d9:5e:ee:05:db:32:72:50:fe:88:73:5b:5c:49:fc:75: 82:65:19:bf:d0:92:a1:ac:8d:73:20:14:f1:7a:6a:68:9a:71: 64:e6:29:b0:bb:ee:c6:6c:52:4f:20:e7:6a:df:71:8d:c7:9e: f1:26:9f:8b:5a:41:5d:49:19:d8:5f:29:fc:aa:0a:de:8f:08: 25:57:22:08:fb:a7:8c:2a:71:9f:be:c8:0c:e4:a1:0c:86:60: 3b:ff:67:b1:9a:2e:8f:dd:ae:f4:33:03:b4:23:3d:59:56:d2: 99:98:3d:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt5vWMdJg72pNPV9nsyO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTY0OWRiYmE1OTJmMWM5ZjNmMjg4OWJjZjgxZmQyMjU5 ODkzNjcwHhcNMjUxMjIxMjEwMTI3WhcNMjUxMjIyMjEwMTI3WjAzMTEwLwYDVQQD EyhkZmFjODBkNTgwZWQyZGY2YjEzODI1MTdiMWU5YTFiYzhkNmM2YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZLbS6P3Z70EXBiC5VN0GpAj9pR7 sw+2y/vvIVHTPZ4zOp7yirHnTgV/dUN/7trz9NPhGEMjjye1/3zZibYiPXgHtSZ7 p1YMsVsMu9UuA1KcTP7MaoIsh8FTFrOPok6CeMA2oAvck3AVunn+o44D8ZHGNFhN 4qTdltler5xvRX85wpCpjNsHsPYrNCWaSfSHuB7XSF1susOars685ny4sSS42X7z BEziEQo3ryAmALiJEA4H4wQILSfjQnCPftYh4wzm+1mUcPd6S4NYKUi7FrGqKGBP z0BK4xCGchGWEIDkQUjqP2tw2VPa4ZMbxYfhRHjA6KaWvvhVYHPm9rKg0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+sgNWA7S32sTglF7HpobyNbGvYMB8GA1UdIwQY MBaAFM5WSdu6WS8cnz8oibz4H9IlmJNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAt YzY3YWI4M2FjMWY1LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAtYzY3YWI4M2FjMWY1 LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0yO5vMX j09nlHHo6+k4b5CEPKHTX0gft/4ZpY/ikiZePBQQX7uxiVJy1zjJAJ7/l+MlG1Nw sAhQNrFKO/L1AhZMnLGktpsO6tW0t2fxOhDkt2WmuCOp+KioJG/D9hdv8NrknJ1P YaciVUUfkBMM9uy1VUhrChYnewh0bBC2EQ5i++hc0ISc/jzVbnWaPygati/ZXu4F 2zJyUP6Ic1tcSfx1gmUZv9CSoayNcyAU8XpqaJpxZOYpsLvuxmxSTyDnat9xjcee 8Safi1pBXUkZ2F8p/KoK3o8IJVciCPunjCpxn77IDOShDIZgO/9nsZouj92u9DMD tCM9WVbSmZg9lw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:44:21 2025 by rpki-client