This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json) Hash identifier: rVXA3f+lwh4diZFWX2Em5jm6cGCmZ7IKd/6viQzF+Mg= Subject key identifier: 29:38:E3:D8:D3:05:C2:88:D5:46:A8:08:77:F3:92:5D:AF:9B:0B:9D Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Certificate serial: 019B3A90A5D06124BA1662E7C36CBF32D264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft Manifest number: 10F3 Signing time: Sat 20 Dec 2025 07:01:56 +0000 Manifest this update: Sat 20 Dec 2025 07:01:56 +0000 Manifest next update: Sun 21 Dec 2025 07:01:56 +0000 Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=) 2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: 2+qycwyKMbbrFEbU9Z+rppp+7NnDYXuzH9RAvo7uozE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:a5:d0:61:24:ba:16:62:e7:c3:6c:bf:32:d2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Validity Not Before: Dec 20 07:01:56 2025 GMT Not After : Dec 21 07:01:56 2025 GMT Subject: CN=2938e3d8d305c288d546a80877f3925daf9b0b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:ff:89:df:38:b5:5f:8c:4f:5b:76:e2:75: bb:96:ca:49:59:9f:25:b3:9d:54:43:fe:bf:b0:60: 53:56:69:49:6f:8d:f4:83:6d:10:d2:1d:4c:e8:26: a3:1b:5f:39:bb:4e:1c:42:3a:30:51:2c:3a:8d:ee: 6c:3b:9a:a3:32:c3:e3:7c:bb:bf:4f:6d:be:da:02: c3:5b:4c:c5:86:b0:ba:a3:2c:41:5c:a8:33:ea:9f: 25:0a:9c:24:98:20:25:f5:03:fd:f8:82:f7:5a:e2: 77:3e:c3:1c:1c:97:8c:94:a0:9b:f6:9a:b4:52:a9: 42:d9:33:d2:1e:b0:47:bc:67:0d:bb:cb:d5:2f:43: 31:50:eb:6d:7e:83:a7:47:06:03:37:6d:fc:2d:9a: c8:66:d2:24:ef:8f:d2:0b:c6:77:2d:ff:65:bc:01: 95:35:e4:a2:bd:6f:9a:24:f9:74:bf:43:b1:ff:58: e3:58:a5:f9:20:a5:4f:0c:99:14:b9:e2:a9:18:8c: 9a:af:c5:1f:7a:e8:dc:95:ff:fc:3b:51:ff:6b:b8: d5:e8:8d:b5:66:c7:01:65:6e:96:cf:fb:d4:46:40: 69:f8:93:82:bf:a7:37:24:69:fa:b5:30:1d:98:77: d4:9b:3a:de:f6:9d:1c:3e:5d:49:24:a5:32:f3:f8: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:E3:D8:D3:05:C2:88:D5:46:A8:08:77:F3:92:5D:AF:9B:0B:9D X509v3 Authority Key Identifier: keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2c:e6:b8:31:b4:8b:0d:0e:40:5c:75:5d:f2:38:e6:8e:8d: 7e:af:85:e1:1b:d0:f6:b8:85:28:c3:97:28:c6:35:bd:16:56: 12:44:a1:5d:1e:96:c1:71:eb:8a:bf:08:c9:be:2c:5e:0b:d3: 5f:b1:12:90:d6:1e:23:e8:50:19:37:49:9f:a5:03:a3:6b:63: 97:d4:9e:81:62:8f:38:3a:1f:ff:3a:b3:53:95:0f:3d:66:b1: 6f:5b:4e:5b:cd:e7:6d:35:e4:a9:ae:e6:c3:c8:77:7d:f4:07: 55:71:6d:17:94:b1:46:7e:20:68:d5:7d:88:8b:9a:ed:d4:b4: 04:04:69:d5:0e:8b:40:f1:1d:40:97:44:9a:d1:5b:9d:cc:75: f0:71:2b:2e:90:16:a5:9f:92:9d:4b:e0:63:cb:07:64:be:0f: b7:55:59:81:62:b3:17:95:d2:da:97:fc:fb:4e:28:7e:c2:b7: a1:20:d5:8e:b8:ff:f5:de:e9:fd:df:76:de:07:11:b2:88:e6: 0a:4b:4d:79:85:9d:13:82:85:4b:33:82:d1:a2:f3:34:92:84: d0:f9:18:e7:53:49:dc:84:38:ce:78:ca:6a:72:47:cf:fe:ad: 48:63:df:24:12:f4:89:4b:e8:5c:86:5b:b0:a5:dc:71:c2:37: d8:76:e9:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kKXQYSS6FmLnw2y/MtJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTU4MWQyNzQ4YWZjZjc3OTY2Nzk3N2Y3YjY3MzllZTRm OWZjMGQwHhcNMjUxMjIwMDcwMTU2WhcNMjUxMjIxMDcwMTU2WjAzMTEwLwYDVQQD EygyOTM4ZTNkOGQzMDVjMjg4ZDU0NmE4MDg3N2YzOTI1ZGFmOWIwYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYT/id84tV+MT1t24nW7lspJWZ8l s51UQ/6/sGBTVmlJb430g20Q0h1M6CajG185u04cQjowUSw6je5sO5qjMsPjfLu/ T22+2gLDW0zFhrC6oyxBXKgz6p8lCpwkmCAl9QP9+IL3WuJ3PsMcHJeMlKCb9pq0 UqlC2TPSHrBHvGcNu8vVL0MxUOttfoOnRwYDN238LZrIZtIk74/SC8Z3Lf9lvAGV NeSivW+aJPl0v0Ox/1jjWKX5IKVPDJkUueKpGIyar8Ufeujclf/8O1H/a7jV6I21 ZscBZW6Wz/vURkBp+JOCv6c3JGn6tTAdmHfUmzre9p0cPl1JJKUy8/gmawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk449jTBcKI1UaoCHfzkl2vmwudMB8GA1UdIwQY MBaAFM5VgdJ0ivz3eWZ5d/e2c57k+fwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTkt ZDc2OGE3N2Q1N2Y0LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTktZDc2OGE3N2Q1N2Y0 LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABizmuDG0 iw0OQFx1XfI45o6Nfq+F4RvQ9riFKMOXKMY1vRZWEkShXR6WwXHrir8Iyb4sXgvT X7ESkNYeI+hQGTdJn6UDo2tjl9SegWKPODof/zqzU5UPPWaxb1tOW83nbTXkqa7m w8h3ffQHVXFtF5SxRn4gaNV9iIua7dS0BARp1Q6LQPEdQJdEmtFbncx18HErLpAW pZ+SnUvgY8sHZL4Pt1VZgWKzF5XS2pf8+04ofsK3oSDVjrj/9d7p/d923gcRsojm CktNeYWdE4KFSzOC0aLzNJKE0PkY51NJ3IQ4znjKanJHz/6tSGPfJBL0iUvoXIZb sKXcccI32Hbpbw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:21 2025 by rpki-client