This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json) Hash identifier: jZiyyqte9ukeTBfb2CSTJw4nlCek5g0hyLKTPtYKI1A= Subject key identifier: BC:E2:AD:6E:4F:A5:54:78:91:F0:3B:8B:4B:31:9B:A7:2F:A0:6B:9B Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d Certificate serial: 019B6242A0803324CD193D7576A0D2C40C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 00:01:32 +0000 Manifest this update: Sun 28 Dec 2025 00:01:32 +0000 Manifest next update: Mon 29 Dec 2025 00:01:32 +0000 Files and hashes: 1: VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa (hash: Nan6DQGHyzFA7VJDUyPb17ZowHybZxaUB4pA1mJmnaY=) 2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: iYiaS9l0EA61ZMFEpYQfrv9T6JbID6TM7Su8yin0PXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:a0:80:33:24:cd:19:3d:75:76:a0:d2:c4:0c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d Validity Not Before: Dec 28 00:01:32 2025 GMT Not After : Dec 29 00:01:32 2025 GMT Subject: CN=bce2ad6e4fa5547891f03b8b4b319ba72fa06b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:bf:d8:51:cd:68:78:7a:ea:e3:11:3f:5e: 86:0e:1d:98:02:cd:6f:c9:55:b2:16:60:13:13:ca: 9b:de:6b:60:8c:00:8f:7a:2c:18:21:4d:ca:2d:0b: 31:e6:83:fe:62:19:44:59:28:7e:22:55:9b:bd:f5: 8d:80:2c:85:22:cc:bd:ca:5a:f3:49:18:ac:52:ec: 98:aa:b3:63:69:07:1a:ed:27:70:34:fd:04:ef:b5: c3:93:5b:54:63:dc:8a:1a:6d:6d:8f:4b:dd:e6:6e: ba:ba:93:a3:c3:86:aa:b7:ac:25:0c:4b:f1:e7:cd: 37:55:bc:71:15:d8:ad:47:51:ac:60:4d:f8:7a:e2: e0:4e:1c:49:51:ef:f3:1d:44:12:52:43:32:27:63: 20:c7:4a:02:54:81:12:0a:d3:e4:e8:00:fc:8c:a9: 92:31:41:89:c1:5e:37:2d:78:a8:be:f6:49:c2:50: 4c:d8:bf:27:65:f0:d4:86:64:10:e3:f3:35:1b:7e: 11:bd:a2:84:9e:8d:af:c3:7a:b3:78:ad:98:5a:7c: ff:9d:d5:93:b5:95:76:5d:49:87:e3:55:01:1a:14: 4d:8c:c8:30:cd:b9:67:31:76:b4:73:df:5a:d2:dd: 02:2d:4d:e1:78:4e:77:15:83:9b:86:d9:b0:47:8c: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E2:AD:6E:4F:A5:54:78:91:F0:3B:8B:4B:31:9B:A7:2F:A0:6B:9B X509v3 Authority Key Identifier: keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d1:92:6c:4e:a9:cc:3b:87:bc:3a:87:ee:ed:a2:2c:11:90: 20:b8:94:dd:5a:1e:6d:43:b0:aa:48:3e:f9:1e:a6:ad:6b:19: f0:ca:15:5f:67:28:70:93:fc:5e:5e:25:6a:ee:b2:c1:ef:d1: fb:6e:4b:09:02:c4:45:d3:ba:57:f7:f1:a1:1a:23:1c:93:c2: 01:78:55:f1:5e:ec:9c:a4:a4:4d:be:d7:f3:f1:5f:fc:19:e4: c7:5d:03:00:2b:cd:91:17:c8:2f:f9:e7:ae:fc:9b:6b:c6:af: c4:b9:68:ed:48:4b:31:8a:e3:43:3d:13:99:72:e7:80:93:f9: 1e:67:b6:ad:97:f2:bc:65:8d:f3:ea:c0:d3:26:86:4c:a0:fc: 22:e0:64:7d:81:2e:ab:ce:7c:2c:ee:6c:2b:92:7b:79:28:89: 14:af:cf:5c:68:37:41:46:67:dc:3b:2f:58:e3:10:f8:66:cb: e2:61:98:7e:03:b4:a0:ac:76:3e:e6:74:68:b0:39:eb:0b:41: c4:7e:de:79:70:05:66:40:14:40:9c:8f:ef:7d:26:43:ae:ea: d5:81:11:68:90:0c:55:d6:73:f6:10:93:aa:9a:41:46:a7:78: 22:25:90:bc:47:77:50:cf:bf:a2:d2:d6:ca:18:6f:d3:86:5e: b9:39:9b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQqCAMyTNGT11dqDSxAx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri ODQ3NGQwHhcNMjUxMjI4MDAwMTMyWhcNMjUxMjI5MDAwMTMyWjAzMTEwLwYDVQQD EyhiY2UyYWQ2ZTRmYTU1NDc4OTFmMDNiOGI0YjMxOWJhNzJmYTA2YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwO/2FHNaHh66uMRP16GDh2YAs1v yVWyFmATE8qb3mtgjACPeiwYIU3KLQsx5oP+YhlEWSh+IlWbvfWNgCyFIsy9ylrz SRisUuyYqrNjaQca7SdwNP0E77XDk1tUY9yKGm1tj0vd5m66upOjw4aqt6wlDEvx 5803VbxxFditR1GsYE34euLgThxJUe/zHUQSUkMyJ2Mgx0oCVIESCtPk6AD8jKmS MUGJwV43LXiovvZJwlBM2L8nZfDUhmQQ4/M1G34RvaKEno2vw3qzeK2YWnz/ndWT tZV2XUmH41UBGhRNjMgwzblnMXa0c99a0t0CLU3heE53FYObhtmwR4w8yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzirW5PpVR4kfA7i0sxm6cvoGubMB8GA1UdIwQY MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt ODQyMWQ3ODFiMDNiLzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetGSbE6p zDuHvDqH7u2iLBGQILiU3VoebUOwqkg++R6mrWsZ8MoVX2cocJP8Xl4lau6ywe/R +25LCQLERdO6V/fxoRojHJPCAXhV8V7snKSkTb7X8/Ff/Bnkx10DACvNkRfIL/nn rvyba8avxLlo7UhLMYrjQz0TmXLngJP5Hme2rZfyvGWN8+rA0yaGTKD8IuBkfYEu q858LO5sK5J7eSiJFK/PXGg3QUZn3DsvWOMQ+GbL4mGYfgO0oKx2PuZ0aLA56wtB xH7eeXAFZkAUQJyP730mQ67q1YERaJAMVdZz9hCTqppBRqd4IiWQvEd3UM+/otLW yhhv04ZeuTmbNA== -----END CERTIFICATE-----Generated at Sun Dec 28 01:14:46 2025 by rpki-client