This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json) Hash identifier: wbRKP3Z/nIklo55qWB5ztcecn5b+SNHcsNtKXbISha8= Subject key identifier: 91:84:55:DA:EF:4D:56:7C:3F:31:5E:A1:67:D3:43:34:00:4C:0D:E3 Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Certificate serial: 019B4E4D53D067F1B3DF18197A9E16203487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft Manifest number: 1726 Signing time: Wed 24 Dec 2025 03:00:48 +0000 Manifest this update: Wed 24 Dec 2025 03:00:48 +0000 Manifest next update: Thu 25 Dec 2025 03:00:48 +0000 Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=) 2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: yzEoFT+/VDRoxpkiPrnQdPCnyJ67jxog1MqERW9R+oA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:53:d0:67:f1:b3:df:18:19:7a:9e:16:20:34:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Validity Not Before: Dec 24 03:00:48 2025 GMT Not After : Dec 25 03:00:48 2025 GMT Subject: CN=918455daef4d567c3f315ea167d34334004c0de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:9f:b6:c5:2e:e0:5e:9f:9d:b0:ad:32:a7: c7:f2:1b:5a:d3:61:b5:9b:9c:7b:26:22:a2:08:bd: 02:45:58:55:6f:6f:fc:9a:c2:de:74:64:b3:30:e7: f6:cf:3c:14:20:62:39:20:bb:cb:c2:4b:24:ed:68: f9:6a:e9:63:d8:28:6a:22:5a:ad:0b:86:05:e2:e0: 0b:73:ed:0a:eb:70:f7:4f:2c:be:3e:81:8b:7e:12: ae:b8:8a:95:74:73:5c:eb:d5:49:07:76:f1:12:21: 0b:c5:35:aa:ad:d2:76:1f:5b:6c:d2:06:fe:fa:9b: 93:f7:4e:27:eb:64:36:cd:82:cb:bf:79:ce:d5:8e: cc:cd:c5:58:25:29:df:77:8b:76:3d:83:14:06:f8: 15:b0:bc:00:9a:4b:34:22:ee:2c:39:52:d4:fa:b7: eb:55:c1:99:63:a2:00:c9:d1:52:29:5d:80:19:55: cb:cd:68:5f:13:9f:5e:10:40:b5:a6:9d:c3:82:6f: 67:6e:8b:b9:ec:df:09:f2:bc:25:2d:0f:c5:99:de: 20:da:02:86:2f:a0:0a:72:d7:bc:a9:ba:ad:49:1e: c3:4a:d1:c2:79:24:eb:4e:9e:be:ea:6a:81:cf:cd: 12:a1:e7:70:20:0a:9f:6a:0f:d3:3b:d0:db:d2:7d: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:84:55:DA:EF:4D:56:7C:3F:31:5E:A1:67:D3:43:34:00:4C:0D:E3 X509v3 Authority Key Identifier: keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:79:d8:0d:3c:32:49:a2:9e:ce:39:6b:5d:4a:18:59:75:6a: 11:90:38:44:22:99:a5:42:c9:b6:11:73:30:3a:2b:18:78:62: d6:97:1b:e9:ea:f0:e7:4e:7f:47:97:23:88:d2:99:1d:30:a3: 4c:be:d0:8d:43:18:1d:cd:3e:3c:25:39:37:f9:91:01:93:9d: 36:8d:b6:f6:02:df:e3:f8:61:50:54:d5:3a:ab:70:54:68:0f: c5:31:76:ef:59:2b:cc:f7:85:9c:7e:2a:44:9a:5f:b3:11:26: 81:ee:dc:9b:6d:05:89:c9:72:e1:89:91:b0:a5:ee:c1:61:7e: 2b:2d:df:f6:57:39:62:cc:da:4a:76:b2:80:37:ad:f2:29:ed: a8:ce:24:80:3e:57:3c:92:27:ab:d8:5e:3b:da:33:39:99:08: bd:3f:27:f9:ea:c2:dd:1f:90:51:4f:4a:2a:79:d2:0c:0e:9d: 68:5f:eb:58:8d:93:85:d1:74:47:90:78:bb:37:09:0b:7b:54: 2e:ad:fb:91:f4:71:83:f3:a5:7c:45:74:ea:cc:ec:91:84:a3: 04:00:04:46:9a:bb:de:e9:30:b1:67:09:15:f6:8e:6d:1a:c8: ba:ed:18:49:10:70:5c:66:00:a4:af:c7:9b:28:fd:bc:d2:55: aa:c0:74:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTVPQZ/Gz3xgZep4WIDSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzQ3ODhiMmI2OTJjNzEwM2IxY2I5ZTE2MTdmOGIzNjY5 MTBmMTMwHhcNMjUxMjI0MDMwMDQ4WhcNMjUxMjI1MDMwMDQ4WjAzMTEwLwYDVQQD Eyg5MTg0NTVkYWVmNGQ1NjdjM2YzMTVlYTE2N2QzNDMzNDAwNGMwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jeftsUu4F6fnbCtMqfH8hta02G1 m5x7JiKiCL0CRVhVb2/8msLedGSzMOf2zzwUIGI5ILvLwksk7Wj5aulj2ChqIlqt C4YF4uALc+0K63D3Tyy+PoGLfhKuuIqVdHNc69VJB3bxEiELxTWqrdJ2H1ts0gb+ +puT904n62Q2zYLLv3nO1Y7MzcVYJSnfd4t2PYMUBvgVsLwAmks0Iu4sOVLU+rfr VcGZY6IAydFSKV2AGVXLzWhfE59eEEC1pp3Dgm9nbou57N8J8rwlLQ/Fmd4g2gKG L6AKcte8qbqtSR7DStHCeSTrTp6+6mqBz80SoedwIAqfag/TO9Db0n2U9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGEVdrvTVZ8PzFeoWfTQzQATA3jMB8GA1UdIwQY MBaAFM7EeIsraSxxA7HLnhYX+LNmkQ8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMt YzY4MmI1YmUwZTUzLzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMtYzY4MmI1YmUwZTUz LzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3nYDTwy SaKezjlrXUoYWXVqEZA4RCKZpULJthFzMDorGHhi1pcb6erw505/R5cjiNKZHTCj TL7QjUMYHc0+PCU5N/mRAZOdNo229gLf4/hhUFTVOqtwVGgPxTF271krzPeFnH4q RJpfsxEmge7cm20Ficly4YmRsKXuwWF+Ky3f9lc5YszaSnaygDet8intqM4kgD5X PJInq9heO9ozOZkIvT8n+erC3R+QUU9KKnnSDA6daF/rWI2ThdF0R5B4uzcJC3tU Lq37kfRxg/OlfEV06szskYSjBAAERpq73ukwsWcJFfaObRrIuu0YSRBwXGYApK/H myj9vNJVqsB05Q== -----END CERTIFICATE-----Generated at Wed Dec 24 11:43:09 2025 by rpki-client