This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft File: zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json) Hash identifier: eWORhwPFS7pVBKBoFvK9LKu9yNysFSaTOl/ebPdsrXk= Subject key identifier: F6:96:7F:6D:DA:9F:9C:1A:7C:3E:C3:51:65:AF:21:39:48:9B:CC:4B Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019B49949075590071BA149188CFDF87C9A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft Manifest number: 17B9 Signing time: Tue 23 Dec 2025 05:00:31 +0000 Manifest this update: Tue 23 Dec 2025 05:00:31 +0000 Manifest next update: Wed 24 Dec 2025 05:00:31 +0000 Files and hashes: 1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=) 2: L3miZv_CtPpguqIiqcWbsGSBH70.roa (hash: chmReLLtPVDHneAMVjdRBmMn8npZbp0myeVRl6KrMkU=) 3: SzzlHogGw5EWuez7OZv1qG7OcKg.roa (hash: H29VJ6cf+NYN1aHzV70qmMe4haFT+yUYtpiwpA4ElP4=) 4: oesqmmJPK6TenMK59Izh-PTrjQI.roa (hash: 3a81J7V4OXRfNvBRc8fr9Sr4De6AZGIFq09/t+K9UHA=) 5: piZIF0KhX5XUtlQlqZTOR6AEy34.roa (hash: ujmr+91E+fV9iYaYCXUQDR9ydJcOnbl/xIHSG/UHIJM=) 6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: mtOVqFv9au3MoBXB7p6uoHKyztIY9mtNab5si6Lp/lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:90:75:59:00:71:ba:14:91:88:cf:df:87:c9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Dec 23 05:00:31 2025 GMT Not After : Dec 24 05:00:31 2025 GMT Subject: CN=f6967f6dda9f9c1a7c3ec35165af2139489bcc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:7a:dc:6f:fc:5e:aa:5b:7d:83:28:82:08: 6f:3d:09:d0:92:b0:9c:b8:49:f5:c9:f4:d3:e8:c2: fc:09:be:9f:c8:23:62:68:84:3d:0a:be:98:59:44: 35:0d:fe:05:14:0e:04:0e:64:0e:63:cf:32:54:d8: 45:ed:30:a2:d3:aa:eb:2d:3a:fb:0d:e1:36:4e:e6: ae:1e:1b:17:c8:9b:59:46:cf:f9:cf:99:36:cf:e9: 8b:dc:5d:77:be:00:67:98:6a:c0:fd:dd:63:fa:61: eb:ff:c4:ae:e1:a1:ec:ae:8c:90:d6:85:4d:ac:79: 68:62:ba:ab:b1:84:c6:b7:f6:6f:3b:87:6e:7c:25: f7:4d:cd:91:75:89:94:32:bf:7f:3f:29:63:a9:98: e6:36:1a:9e:3b:aa:c3:d8:ab:21:eb:f1:82:5f:aa: 1d:14:1b:88:13:55:98:0d:ed:f7:85:e4:b9:7d:dd: 77:4b:2e:32:b9:4f:91:eb:c5:ab:f1:39:0f:d5:c3: 92:53:3b:b1:87:27:1a:4d:62:3c:54:fe:35:6b:7b: e4:4d:c9:11:d3:42:20:2e:3d:59:37:d4:c8:bc:f2: 00:ea:71:29:ff:dc:0f:49:87:fe:cf:a0:cf:21:f2: 36:78:68:a6:c3:f8:a9:87:fe:bb:91:d0:cb:60:28: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:96:7F:6D:DA:9F:9C:1A:7C:3E:C3:51:65:AF:21:39:48:9B:CC:4B X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1b:96:b4:3b:66:c6:40:5c:1c:3b:bb:c9:16:4b:05:32:31: ca:9e:2c:16:9c:c6:d9:e9:2b:84:c0:00:7a:11:e7:1b:f8:cc: 3c:bb:f6:d5:7f:64:ae:6d:38:19:66:67:da:7e:05:c8:fa:4f: fa:b1:e1:b4:e1:5e:45:93:50:9f:51:ae:33:f2:d8:fd:e0:62: 2b:9e:9c:8a:58:0e:8d:0c:6c:5b:27:e9:46:a5:6d:e0:89:85: eb:dd:e3:e3:d5:46:c6:f5:3f:b3:d9:bb:e5:ba:d7:e8:aa:76: 31:b7:56:c5:f2:ea:96:dd:a9:f1:4f:08:f0:0a:11:21:87:8d: 45:a4:fd:67:32:20:89:5e:0a:bd:8c:b2:1f:ef:9d:55:ab:3b: a7:ef:8a:c7:e2:13:37:88:f1:41:22:80:d9:88:d8:cf:49:50: 89:9c:c1:af:6f:3a:22:53:b5:b5:65:98:1b:3d:e7:a8:88:a2: cf:31:50:b9:7e:cf:ad:f1:c8:51:ee:5d:36:72:66:10:8a:94: 3f:18:8d:73:bd:48:c3:42:fa:33:0b:c6:00:3c:4e:ea:f7:59: cd:d7:d9:97:1b:df:6e:5a:aa:d6:d8:76:b6:6a:47:54:f7:6b: fc:c4:bf:ed:31:7a:3b:19:86:13:44:f7:8c:1c:81:ad:fe:f3: 59:12:a1:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlJB1WQBxuhSRiM/fh8mpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjUxMjIzMDUwMDMxWhcNMjUxMjI0MDUwMDMxWjAzMTEwLwYDVQQD EyhmNjk2N2Y2ZGRhOWY5YzFhN2MzZWMzNTE2NWFmMjEzOTQ4OWJjYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7163G/8XqpbfYMogghvPQnQkrCc uEn1yfTT6ML8Cb6fyCNiaIQ9Cr6YWUQ1Df4FFA4EDmQOY88yVNhF7TCi06rrLTr7 DeE2TuauHhsXyJtZRs/5z5k2z+mL3F13vgBnmGrA/d1j+mHr/8Su4aHsroyQ1oVN rHloYrqrsYTGt/ZvO4dufCX3Tc2RdYmUMr9/PyljqZjmNhqeO6rD2Ksh6/GCX6od FBuIE1WYDe33heS5fd13Sy4yuU+R68Wr8TkP1cOSUzuxhycaTWI8VP41a3vkTckR 00IgLj1ZN9TIvPIA6nEp/9wPSYf+z6DPIfI2eGimw/iph/67kdDLYCiOYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaWf23an5wafD7DUWWvITlIm8xLMB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxuWtDtm xkBcHDu7yRZLBTIxyp4sFpzG2ekrhMAAehHnG/jMPLv21X9krm04GWZn2n4FyPpP +rHhtOFeRZNQn1GuM/LY/eBiK56cilgOjQxsWyfpRqVt4ImF693j49VGxvU/s9m7 5brX6Kp2MbdWxfLqlt2p8U8I8AoRIYeNRaT9ZzIgiV4KvYyyH++dVas7p++Kx+IT N4jxQSKA2YjYz0lQiZzBr286IlO1tWWYGz3nqIiizzFQuX7PrfHIUe5dNnJmEIqU PxiNc71Iw0L6MwvGADxO6vdZzdfZlxvfblqq1th2tmpHVPdr/MS/7TF6OxmGE0T3 jByBrf7zWRKh0g== -----END CERTIFICATE-----Generated at Tue Dec 23 09:14:43 2025 by rpki-client