This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft File: zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json) Hash identifier: QEdQ2qFqZYpoMxO262LHvoHPO+/RhotllN0Hf5mHD6o= Subject key identifier: 77:17:89:B6:E6:48:E5:30:4E:9B:40:F3:C6:E6:12:7F:36:38:22:CE Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019B3DFE89AE354085A19BE40FDB7011A2AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft Manifest number: 17B3 Signing time: Sat 20 Dec 2025 23:00:49 +0000 Manifest this update: Sat 20 Dec 2025 23:00:49 +0000 Manifest next update: Sun 21 Dec 2025 23:00:49 +0000 Files and hashes: 1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=) 2: L3miZv_CtPpguqIiqcWbsGSBH70.roa (hash: chmReLLtPVDHneAMVjdRBmMn8npZbp0myeVRl6KrMkU=) 3: SzzlHogGw5EWuez7OZv1qG7OcKg.roa (hash: H29VJ6cf+NYN1aHzV70qmMe4haFT+yUYtpiwpA4ElP4=) 4: oesqmmJPK6TenMK59Izh-PTrjQI.roa (hash: 3a81J7V4OXRfNvBRc8fr9Sr4De6AZGIFq09/t+K9UHA=) 5: piZIF0KhX5XUtlQlqZTOR6AEy34.roa (hash: ujmr+91E+fV9iYaYCXUQDR9ydJcOnbl/xIHSG/UHIJM=) 6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: 1xbcMdj4ef5cpJOEacjFcKflYccdtQHMzSax9rseOz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:89:ae:35:40:85:a1:9b:e4:0f:db:70:11:a2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Dec 20 23:00:49 2025 GMT Not After : Dec 21 23:00:49 2025 GMT Subject: CN=771789b6e648e5304e9b40f3c6e6127f363822ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:6b:79:58:70:7e:0c:cf:9d:ed:f3:f4:bc: 41:b0:1b:75:7c:f1:ff:13:55:ad:c6:ef:a4:f5:eb: d8:76:99:fb:aa:be:41:ed:7a:c3:3a:81:ab:1d:49: 9f:9f:f6:e7:08:b4:35:a3:b9:e4:17:c4:0e:e9:38: 86:f1:8d:0b:5b:e1:b8:73:b0:0f:41:3c:3b:94:13: 20:53:5a:77:ac:4a:b2:da:af:87:a5:4e:2d:0d:f1: 3e:94:5f:28:be:97:47:bb:b1:2e:dc:75:9c:fb:9c: d7:4c:38:73:4d:a7:e6:f2:bc:9f:1d:3d:1e:74:4f: 67:ec:e9:6d:b0:13:50:34:e2:bb:c6:63:27:a9:11: 8a:09:96:6e:1c:7a:62:b3:fa:1b:cc:0c:1e:11:46: 67:ee:2f:03:c8:61:a8:99:cd:dc:a5:03:e0:98:d5: 9b:e9:76:60:78:e9:fd:ef:5b:14:d6:71:0d:d5:10: 9c:67:99:bd:11:5e:04:67:57:ca:b4:02:9a:98:33: be:24:01:76:93:fa:15:00:6c:71:ee:5a:f5:2e:a8: a6:a6:6b:80:03:87:06:4c:86:25:7e:a6:e6:00:70: b7:66:aa:5d:38:10:99:16:c0:02:85:e9:4d:4f:bf: 04:9c:bc:4e:03:e6:3f:9e:09:9f:1c:a1:0d:c9:fc: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:17:89:B6:E6:48:E5:30:4E:9B:40:F3:C6:E6:12:7F:36:38:22:CE X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:20:87:f4:c4:c8:5c:cf:ed:bf:bb:c3:d2:ce:da:84:bf:41: ba:56:91:c8:f7:e9:65:ee:27:28:d5:92:10:bf:f0:fc:fd:b8: 40:14:42:13:4b:88:50:ca:e2:43:07:4b:9a:47:ba:9d:cc:67: e5:7c:80:98:d3:e2:a2:7f:21:85:b0:dd:25:b9:6c:67:dd:85: 83:94:a9:9c:27:5b:b4:36:e6:86:19:62:45:69:79:97:91:46: 56:ee:35:95:98:83:22:b2:00:be:4b:a6:5d:36:17:5c:5c:d3: 7c:91:3b:f8:81:79:b8:e8:bc:a1:3c:da:e9:45:ed:98:37:c9: 27:92:1f:ce:3e:f1:fc:73:53:10:21:62:ad:9a:b2:fe:e2:19: 32:62:ba:96:22:ec:be:b2:6b:03:91:85:e0:cc:8a:67:6c:86: 73:d5:03:43:e9:8d:a5:ef:0d:13:1c:28:3d:d8:34:e2:b4:88: 0e:14:c5:37:bf:8a:9d:18:19:93:17:c0:26:ff:91:0e:42:a9: 53:5f:7b:5a:6e:a3:3a:35:bc:4d:43:62:cf:46:c0:ac:39:f6: 3a:39:b5:14:04:34:0b:8b:9f:57:f0:95:2f:f6:08:7d:bc:3b: 8c:20:44:a9:6c:d0:73:5c:fd:37:d8:9b:06:22:b8:3b:52:67: 42:84:eb:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/omuNUCFoZvkD9twEaKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjUxMjIwMjMwMDQ5WhcNMjUxMjIxMjMwMDQ5WjAzMTEwLwYDVQQD Eyg3NzE3ODliNmU2NDhlNTMwNGU5YjQwZjNjNmU2MTI3ZjM2MzgyMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4preVhwfgzPne3z9LxBsBt1fPH/ E1Wtxu+k9evYdpn7qr5B7XrDOoGrHUmfn/bnCLQ1o7nkF8QO6TiG8Y0LW+G4c7AP QTw7lBMgU1p3rEqy2q+HpU4tDfE+lF8ovpdHu7Eu3HWc+5zXTDhzTafm8ryfHT0e dE9n7OltsBNQNOK7xmMnqRGKCZZuHHpis/obzAweEUZn7i8DyGGomc3cpQPgmNWb 6XZgeOn971sU1nEN1RCcZ5m9EV4EZ1fKtAKamDO+JAF2k/oVAGxx7lr1LqimpmuA A4cGTIYlfqbmAHC3ZqpdOBCZFsAChelNT78EnLxOA+Y/ngmfHKENyfynVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcXibbmSOUwTptA88bmEn82OCLOMB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiCH9MTI XM/tv7vD0s7ahL9BulaRyPfpZe4nKNWSEL/w/P24QBRCE0uIUMriQwdLmke6ncxn 5XyAmNPion8hhbDdJblsZ92Fg5SpnCdbtDbmhhliRWl5l5FGVu41lZiDIrIAvkum XTYXXFzTfJE7+IF5uOi8oTza6UXtmDfJJ5Ifzj7x/HNTECFirZqy/uIZMmK6liLs vrJrA5GF4MyKZ2yGc9UDQ+mNpe8NExwoPdg04rSIDhTFN7+KnRgZkxfAJv+RDkKp U197Wm6jOjW8TUNiz0bArDn2Ojm1FAQ0C4ufV/CVL/YIfbw7jCBEqWzQc1z9N9ib BiK4O1JnQoTr4A== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:02 2025 by rpki-client