This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json) Hash identifier: G+yfwVFn2z1EDaksNZB6gFbo7o7NXIuVcll3cLoseg4= Subject key identifier: 32:78:18:2C:2D:29:A9:50:C2:FF:DE:7F:5A:A3:6A:B0:89:DE:EF:5D Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Certificate serial: 019B4E4E274B9BD6F227E418C3EFA78ED6E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft Manifest number: 179F Signing time: Wed 24 Dec 2025 03:01:43 +0000 Manifest this update: Wed 24 Dec 2025 03:01:43 +0000 Manifest next update: Thu 25 Dec 2025 03:01:43 +0000 Files and hashes: 1: 5CXu0UxRhwNDi1i9NLYtVH_7mdQ.roa (hash: WcXKi4ED+2Y5l6i/lY2xJGAyFqasaSUW3tQSDUT3XN8=) 2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: kjjxoesykFuI4aC1cVdBP1IsZ6YBCQ+1lYIaN1THpxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:27:4b:9b:d6:f2:27:e4:18:c3:ef:a7:8e:d6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Validity Not Before: Dec 24 03:01:43 2025 GMT Not After : Dec 25 03:01:43 2025 GMT Subject: CN=3278182c2d29a950c2ffde7f5aa36ab089deef5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:7d:79:1b:9c:ef:8c:87:a9:d8:24:d9:3e: 07:af:be:4b:58:3a:35:ab:0d:a3:3d:64:00:a3:52: a2:42:da:8b:66:a4:eb:a7:00:d3:8b:78:5f:a7:b3: 6e:aa:80:bd:ff:59:f6:87:58:49:3d:28:95:8a:2a: 1d:bf:af:dd:8a:53:57:67:31:29:0f:db:72:7b:22: c1:f0:d6:bc:a6:84:20:6f:8d:0d:0a:94:3f:68:42: 11:21:c2:65:17:f6:18:f7:f9:c0:42:0a:e3:40:86: 9c:82:56:29:fe:5f:ed:b2:c4:7d:b1:13:30:09:80: 4f:c0:d0:64:50:5a:e1:5b:b2:82:25:1e:27:de:85: dd:35:88:07:5b:4a:16:47:70:0b:20:10:4e:4b:5c: 1b:48:01:ce:3c:cd:d4:9b:98:a9:95:12:af:5e:8b: f1:85:35:bf:c0:ec:0f:0f:75:7a:40:cc:8e:f8:83: e1:c6:4d:d0:26:bf:32:ca:55:99:c0:68:2d:cc:d9: 77:da:b7:c2:4c:62:33:8f:e3:98:c5:90:9c:f9:80: bf:2b:02:77:2e:34:69:68:be:31:4d:53:ce:ac:e8: 7e:c0:d0:99:19:f1:e4:37:d7:b3:65:ff:42:f7:f6: bb:24:6b:9b:5a:cd:48:2b:34:77:04:ec:59:6e:25: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:18:2C:2D:29:A9:50:C2:FF:DE:7F:5A:A3:6A:B0:89:DE:EF:5D X509v3 Authority Key Identifier: keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:61:64:c3:f8:1c:0a:47:5d:7d:37:27:7f:98:a5:4f:cc:a8: 16:7f:de:05:eb:8d:f7:e4:9e:fe:fb:b7:6a:9e:c5:1a:42:61: cf:d5:77:63:f1:d5:d0:e1:60:fc:b3:07:b6:3d:31:50:08:1c: af:b9:2b:81:b5:af:da:2a:36:01:ad:fc:09:5a:2f:b9:b9:54: f2:51:bf:82:da:4f:34:18:57:61:eb:e8:fe:0a:8d:57:2c:0b: ac:b6:49:c9:2b:ae:e9:0f:bf:92:83:30:40:ba:ea:c1:58:cd: 4c:cd:ed:26:a1:b0:58:c2:f1:02:ef:a7:55:fe:4c:97:7e:8d: 38:3e:fa:c6:fa:d9:88:b4:18:12:9c:2a:a4:76:9d:fe:d0:08: 16:37:86:91:48:45:35:19:ee:c5:9c:b7:eb:27:d1:74:ca:a6: 56:06:4a:c9:56:a7:a7:7a:6d:bc:c6:8a:8a:48:2a:b5:f7:e9: 8c:4a:5c:01:e2:f9:02:e8:14:56:1d:a8:4b:65:38:cb:f8:44: d3:8a:90:2a:fe:d5:64:8d:86:71:f7:93:39:d1:58:ee:8f:81: 8d:38:27:62:34:64:0b:c5:7d:b6:da:18:13:02:72:78:1f:0a: 57:6a:02:f6:a7:75:e3:73:bd:80:cd:4f:63:f7:56:9d:7a:d8: 7c:d1:dd:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTidLm9byJ+QYw++njtbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk ZjI3ZTkwHhcNMjUxMjI0MDMwMTQzWhcNMjUxMjI1MDMwMTQzWjAzMTEwLwYDVQQD EygzMjc4MTgyYzJkMjlhOTUwYzJmZmRlN2Y1YWEzNmFiMDg5ZGVlZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM99eRuc74yHqdgk2T4Hr75LWDo1 qw2jPWQAo1KiQtqLZqTrpwDTi3hfp7NuqoC9/1n2h1hJPSiViiodv6/dilNXZzEp D9tyeyLB8Na8poQgb40NCpQ/aEIRIcJlF/YY9/nAQgrjQIacglYp/l/tssR9sRMw CYBPwNBkUFrhW7KCJR4n3oXdNYgHW0oWR3ALIBBOS1wbSAHOPM3Um5iplRKvXovx hTW/wOwPD3V6QMyO+IPhxk3QJr8yylWZwGgtzNl32rfCTGIzj+OYxZCc+YC/KwJ3 LjRpaL4xTVPOrOh+wNCZGfHkN9ezZf9C9/a7JGubWs1IKzR3BOxZbiVxvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ4GCwtKalQwv/ef1qjarCJ3u9dMB8GA1UdIwQY MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1 LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGFkw/gc CkddfTcnf5ilT8yoFn/eBeuN9+Se/vu3ap7FGkJhz9V3Y/HV0OFg/LMHtj0xUAgc r7krgbWv2io2Aa38CVovublU8lG/gtpPNBhXYevo/gqNVywLrLZJySuu6Q+/koMw QLrqwVjNTM3tJqGwWMLxAu+nVf5Ml36NOD76xvrZiLQYEpwqpHad/tAIFjeGkUhF NRnuxZy36yfRdMqmVgZKyVanp3ptvMaKikgqtffpjEpcAeL5AugUVh2oS2U4y/hE 04qQKv7VZI2GcfeTOdFY7o+BjTgnYjRkC8V9ttoYEwJyeB8KV2oC9qd143O9gM1P Y/dWnXrYfNHdfw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:52:30 2025 by rpki-client