This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json) Hash identifier: cCEVx5GUBiHS4sAk3RfzkElcZcOCVhpXyj+5AMFuzKk= Subject key identifier: 5D:B7:4C:91:B5:BC:CE:CD:96:E3:0F:39:FA:09:58:0A:17:FA:D0:5C Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Certificate serial: 019B3CEBEAD1F1DAC84F76C5238B211C749F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft Manifest number: 171D Signing time: Sat 20 Dec 2025 18:00:52 +0000 Manifest this update: Sat 20 Dec 2025 18:00:52 +0000 Manifest next update: Sun 21 Dec 2025 18:00:52 +0000 Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=) 2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: idF0Q8YAHlJmZDRb0XGaUorLuqr0OXMT+Ffxms+pc50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ea:d1:f1:da:c8:4f:76:c5:23:8b:21:1c:74:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13 Validity Not Before: Dec 20 18:00:52 2025 GMT Not After : Dec 21 18:00:52 2025 GMT Subject: CN=5db74c91b5bccecd96e30f39fa09580a17fad05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:42:ed:36:ac:c8:ae:2c:68:7b:d0:1c:34:1b: b0:09:16:65:06:50:67:19:8c:94:82:06:22:85:6d: 81:e7:94:88:a5:0e:f8:8e:47:5a:da:01:d4:ce:f5: e3:de:96:cd:b4:c3:4a:77:a2:fa:ac:1b:5e:62:b2: 40:cd:df:35:26:c9:9e:1a:9c:93:22:02:df:17:8f: 1f:55:dd:a6:29:e1:78:5c:db:c4:47:07:b2:61:85: 36:67:73:66:2a:af:13:50:71:41:67:68:73:5a:ef: b7:23:55:b5:37:c8:65:07:dc:e7:50:31:97:d8:22: 23:87:b6:9f:ae:c4:8b:17:80:97:f8:bf:a4:f9:fb: 39:19:ea:31:af:83:ec:4f:33:3b:dc:cb:ba:96:5a: e8:fb:c9:fa:0d:02:2e:47:4b:ec:c2:e7:a0:13:80: 78:cf:f7:9c:d7:71:24:7e:9f:64:d9:01:8b:eb:8f: 58:1b:a3:f7:8f:59:a7:c7:c5:46:6d:9a:fa:77:75: 6c:aa:7a:55:ae:5e:73:ea:07:58:5e:a0:d3:97:03: 2f:ea:3d:0c:bb:57:0c:87:00:8d:39:47:62:52:e8: bc:c1:31:de:52:e1:3a:56:fb:bd:21:66:36:11:b6: 2d:2f:59:1d:0e:5f:5e:31:2f:16:b7:e4:d9:2f:39: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B7:4C:91:B5:BC:CE:CD:96:E3:0F:39:FA:09:58:0A:17:FA:D0:5C X509v3 Authority Key Identifier: keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1d:d9:de:31:6e:46:77:1e:35:7e:cb:0a:c0:1d:21:20:a0: 2f:4a:29:e4:21:82:d5:2f:9c:66:20:f6:ec:53:9e:f3:74:65: ca:be:ac:a5:f8:16:5b:2f:b0:07:3b:ea:ed:2a:41:20:cb:65: 49:1b:c4:91:73:74:d4:42:f2:38:61:98:63:ca:bc:8b:6b:df: 80:8a:1a:85:5b:69:17:e3:64:f3:02:b0:60:1d:0f:d8:d2:f3: 8f:9a:33:7d:83:14:ae:11:01:c7:84:cb:c5:c8:88:96:1e:61: 24:d3:a1:68:11:c3:52:34:0e:17:a1:47:c5:f7:dd:53:f8:6d: 2c:b1:b6:24:a2:79:5d:68:a4:93:64:51:6d:4a:8e:b9:81:32: 53:e2:b8:25:8c:c9:b5:b1:f1:a1:cc:61:df:e4:a3:2a:c4:55: c8:7a:61:fd:84:c2:cf:71:f6:e8:1a:2e:81:d5:04:a9:99:be: 1b:b2:01:84:5c:75:c0:d7:2e:8f:b1:7f:c4:13:5e:98:49:33: f6:13:c4:40:83:dd:e2:36:fe:7d:71:62:e7:55:c7:62:84:62: 8a:9f:e0:bc:4e:8b:b6:65:48:40:c6:75:8f:71:c1:be:92:44: 43:7d:3c:dc:ce:be:be:1b:ef:2e:3f:ad:3d:b1:63:4a:06:69: 03:ed:4d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+rR8drIT3bFI4shHHSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzQ3ODhiMmI2OTJjNzEwM2IxY2I5ZTE2MTdmOGIzNjY5 MTBmMTMwHhcNMjUxMjIwMTgwMDUyWhcNMjUxMjIxMTgwMDUyWjAzMTEwLwYDVQQD Eyg1ZGI3NGM5MWI1YmNjZWNkOTZlMzBmMzlmYTA5NTgwYTE3ZmFkMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30LtNqzIrixoe9AcNBuwCRZlBlBn GYyUggYihW2B55SIpQ74jkda2gHUzvXj3pbNtMNKd6L6rBteYrJAzd81JsmeGpyT IgLfF48fVd2mKeF4XNvERweyYYU2Z3NmKq8TUHFBZ2hzWu+3I1W1N8hlB9znUDGX 2CIjh7afrsSLF4CX+L+k+fs5Geoxr4PsTzM73Mu6llro+8n6DQIuR0vswuegE4B4 z/ec13Ekfp9k2QGL649YG6P3j1mnx8VGbZr6d3VsqnpVrl5z6gdYXqDTlwMv6j0M u1cMhwCNOUdiUui8wTHeUuE6Vvu9IWY2EbYtL1kdDl9eMS8Wt+TZLzlGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF23TJG1vM7NluMPOfoJWAoX+tBcMB8GA1UdIwQY MBaAFM7EeIsraSxxA7HLnhYX+LNmkQ8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMt YzY4MmI1YmUwZTUzLzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMtYzY4MmI1YmUwZTUz LzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABR3Z3jFu RnceNX7LCsAdISCgL0op5CGC1S+cZiD27FOe83Rlyr6spfgWWy+wBzvq7SpBIMtl SRvEkXN01ELyOGGYY8q8i2vfgIoahVtpF+Nk8wKwYB0P2NLzj5ozfYMUrhEBx4TL xciIlh5hJNOhaBHDUjQOF6FHxffdU/htLLG2JKJ5XWikk2RRbUqOuYEyU+K4JYzJ tbHxocxh3+SjKsRVyHph/YTCz3H26BougdUEqZm+G7IBhFx1wNcuj7F/xBNemEkz 9hPEQIPd4jb+fXFi51XHYoRiip/gvE6LtmVIQMZ1j3HBvpJEQ3083M6+vhvvLj+t PbFjSgZpA+1NaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:00 2025 by rpki-client