This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json) Hash identifier: D/xofh8E3wJJeJRf82q8aIZhPeHqxadJmMSjDT2FoQs= Subject key identifier: 5D:1E:7B:68:E9:52:ED:EE:5F:CF:30:03:F3:79:61:84:C7:70:E0:3A Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911 Certificate serial: 019B7749309348D708E3DC3D4930B2273B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft Manifest number: 0824 Signing time: Thu 01 Jan 2026 02:00:43 +0000 Manifest this update: Thu 01 Jan 2026 02:00:43 +0000 Manifest next update: Fri 02 Jan 2026 02:00:43 +0000 Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=) 2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: 7qEQD8U0i8KfR2ksEQmkp0I80CU/w7zrjfdUHqWjyyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:49:30:93:48:d7:08:e3:dc:3d:49:30:b2:27:3b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6516844d245d4124a22a536b046da86332d0b911 Validity Not Before: Jan 1 02:00:43 2026 GMT Not After : Jan 2 02:00:43 2026 GMT Subject: CN=5d1e7b68e952edee5fcf3003f3796184c770e03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:31:c1:1b:6a:1f:53:37:0f:f3:37:4f:bd: c1:ce:81:d0:43:90:f0:7d:80:b9:20:90:98:d6:5b: a0:eb:96:bd:28:94:cf:6a:71:07:32:cd:9a:e2:6d: a2:ca:a6:1a:e5:fc:f0:41:d3:92:d4:2d:bb:71:e4: 0c:97:35:ac:cc:8c:81:83:a5:4c:f2:ac:f1:15:ad: 3c:de:a3:d1:ee:e2:bd:f5:22:89:a0:b9:9d:6e:8e: a4:58:78:9c:70:0a:46:8e:6a:96:92:07:cc:47:e6: 08:35:f8:6a:c9:ec:af:88:73:35:09:d6:65:8a:44: 8c:5d:00:41:c6:b5:2c:f9:64:54:50:c0:db:bf:ab: 02:9b:4e:cd:c6:57:62:c2:b6:de:0c:dc:0d:f2:06: 17:2a:ea:90:bc:9a:b8:e1:dd:41:c5:5a:b9:4c:4f: 61:79:d1:27:8d:54:68:4b:c4:f6:be:1a:d5:51:95: 30:d6:41:08:dd:ff:37:0c:d1:2d:34:d1:25:35:4d: 79:6e:f0:cb:cd:77:a2:78:9d:d6:6f:6c:35:40:a3: 44:40:7d:f9:00:eb:c4:67:cc:77:49:ef:bf:d9:7c: b2:c1:92:69:21:b0:ad:81:99:35:43:eb:f5:ae:b7: 5c:ac:04:43:de:f9:cb:85:0d:ed:0d:1e:7c:b0:8e: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:7B:68:E9:52:ED:EE:5F:CF:30:03:F3:79:61:84:C7:70:E0:3A X509v3 Authority Key Identifier: keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d4:7c:48:c2:b2:0c:3b:51:59:e9:e2:dc:bf:ff:d8:5c:d9: 3c:dc:76:a0:0b:6c:0f:07:6d:9e:b5:33:7f:89:9a:69:10:eb: 45:88:ba:47:af:19:4b:4d:81:17:c9:3d:13:14:60:34:b6:dc: f4:6d:39:25:64:8d:06:06:40:a5:dc:03:68:72:57:c2:1d:7b: fb:ca:a6:82:2e:fa:03:ac:1a:45:80:c7:b6:c1:17:43:b7:61: 91:68:77:cf:5e:bd:6b:9c:cd:c8:ff:85:bd:ab:57:bb:69:7e: f5:26:10:76:79:58:9c:8e:2f:05:ce:dd:ed:87:0d:7b:e9:e1: 43:e3:29:f6:89:bf:38:10:a0:ba:fd:13:d9:07:0f:58:a8:39: ee:8a:8d:b3:ba:c2:d2:56:1b:bb:29:50:83:4c:32:3c:1f:7c: 9d:1d:a3:cb:49:cd:a4:83:1d:86:52:4d:ed:35:9d:2b:26:24: 3e:13:56:3c:25:a4:21:2e:a7:a8:9d:dc:9b:cf:08:70:77:58: 0a:6f:75:14:4d:c2:f1:24:9e:01:a0:40:8c:c5:4b:47:4e:70: 78:22:14:6c:8c:5b:98:5a:75:43:c1:54:14:e6:c4:91:e6:72: 74:87:d9:42:17:69:81:cc:2a:ce:4a:b4:d4:b2:61:33:e5:b7: 67:7d:ed:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3STCTSNcI49w9STCyJztCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTY4NDRkMjQ1ZDQxMjRhMjJhNTM2YjA0NmRhODYzMzJk MGI5MTEwHhcNMjYwMTAxMDIwMDQzWhcNMjYwMTAyMDIwMDQzWjAzMTEwLwYDVQQD Eyg1ZDFlN2I2OGU5NTJlZGVlNWZjZjMwMDNmMzc5NjE4NGM3NzBlMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPcxwRtqH1M3D/M3T73BzoHQQ5Dw fYC5IJCY1lug65a9KJTPanEHMs2a4m2iyqYa5fzwQdOS1C27ceQMlzWszIyBg6VM 8qzxFa083qPR7uK99SKJoLmdbo6kWHiccApGjmqWkgfMR+YINfhqyeyviHM1CdZl ikSMXQBBxrUs+WRUUMDbv6sCm07NxldiwrbeDNwN8gYXKuqQvJq44d1BxVq5TE9h edEnjVRoS8T2vhrVUZUw1kEI3f83DNEtNNElNU15bvDLzXeieJ3Wb2w1QKNEQH35 AOvEZ8x3Se+/2XyywZJpIbCtgZk1Q+v1rrdcrARD3vnLhQ3tDR58sI7oZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0ee2jpUu3uX88wA/N5YYTHcOA6MB8GA1UdIwQY MBaAFGUWhE0kXUEkoipTawRtqGMy0LkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjIt ZDU3MDQ4M2MzNjhiLzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjItZDU3MDQ4M2MzNjhi LzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9R8SMKy DDtRWeni3L//2FzZPNx2oAtsDwdtnrUzf4maaRDrRYi6R68ZS02BF8k9ExRgNLbc 9G05JWSNBgZApdwDaHJXwh17+8qmgi76A6waRYDHtsEXQ7dhkWh3z169a5zNyP+F vatXu2l+9SYQdnlYnI4vBc7d7YcNe+nhQ+Mp9om/OBCguv0T2QcPWKg57oqNs7rC 0lYbuylQg0wyPB98nR2jy0nNpIMdhlJN7TWdKyYkPhNWPCWkIS6nqJ3cm88IcHdY Cm91FE3C8SSeAaBAjMVLR05weCIUbIxbmFp1Q8FUFObEkeZydIfZQhdpgcwqzkq0 1LJhM+W3Z33tDQ== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:39 2026 by rpki-client