This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json) Hash identifier: Fn0k+BpbGK1odIwmByi+boxpx2i21qY2LxtZW+OrOKU= Subject key identifier: 05:15:97:91:5C:E2:26:AF:1A:37:E5:75:68:83:FA:65:EE:4C:25:0C Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911 Certificate serial: 019B3F484328352921BFF83A3669EBECF340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft Manifest number: 0807 Signing time: Sun 21 Dec 2025 05:00:58 +0000 Manifest this update: Sun 21 Dec 2025 05:00:58 +0000 Manifest next update: Mon 22 Dec 2025 05:00:58 +0000 Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=) 2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: Wt3azwu3zhskrIHsOf+WVNH9BHzrsty7yTdB16DkHuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:43:28:35:29:21:bf:f8:3a:36:69:eb:ec:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6516844d245d4124a22a536b046da86332d0b911 Validity Not Before: Dec 21 05:00:58 2025 GMT Not After : Dec 22 05:00:58 2025 GMT Subject: CN=051597915ce226af1a37e5756883fa65ee4c250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:5a:9a:83:90:9a:7d:29:97:75:db:0d:1b: 2e:f4:25:4c:89:45:4c:96:c9:6c:32:40:ef:ac:64: a0:8d:fd:19:f4:89:e9:4e:f0:d9:2b:23:5e:ae:00: 5b:6b:fe:75:4b:27:75:b1:db:2d:cb:71:3c:39:a6: 3a:f3:8b:92:2d:dc:51:4e:7d:29:c4:54:f2:78:09: 31:70:1e:07:7c:b7:5a:84:53:49:68:8b:39:f1:37: 65:78:42:aa:72:52:9a:f1:24:d7:23:8a:d8:10:43: 8d:c7:13:cb:86:07:89:19:3c:c6:a9:89:72:dc:1f: 14:d1:fa:f3:15:b8:a6:3d:6c:db:e2:55:df:df:77: 11:dd:76:4c:11:d8:47:fa:64:51:d2:bd:a9:f4:9c: 25:6b:b9:98:33:5f:15:f9:48:d1:c0:72:63:09:1c: 1c:f8:7e:98:a2:3a:bd:cb:56:d0:b7:74:08:a2:13: 88:82:3f:40:e5:04:b3:f8:fd:78:7e:1c:70:38:c5: d1:35:e5:ae:85:37:d0:16:d9:28:41:92:3d:23:cc: 68:39:81:3f:80:48:99:e8:26:9f:5d:f9:54:49:0a: 69:96:8a:58:6e:32:bf:6b:90:ca:ae:01:e8:1c:0a: e0:b2:9e:ca:67:2c:9e:4f:41:50:c6:c0:b7:90:ed: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:15:97:91:5C:E2:26:AF:1A:37:E5:75:68:83:FA:65:EE:4C:25:0C X509v3 Authority Key Identifier: keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:14:ed:bb:59:aa:e8:a9:a3:0a:1d:ba:6e:bd:f9:51:b5:c6: b1:24:3f:3e:38:59:28:4e:72:a5:3d:42:70:cc:51:42:14:5f: 80:08:2e:af:09:c0:b8:cc:9e:cb:68:40:12:26:c6:a4:76:87: cf:33:d0:59:1c:56:2e:b7:64:7f:8e:2f:2b:6a:e1:7f:8e:53: e6:ab:26:02:0e:b8:fd:72:56:06:be:08:46:1b:d2:cd:66:9a: 2b:52:98:53:54:0f:43:1a:eb:3b:af:43:2f:91:31:52:bc:4d: b2:e3:85:83:38:1f:e5:b2:4e:0b:44:4c:59:a6:e6:e7:c5:1e: 35:33:a8:a4:c2:11:e1:4a:dd:69:73:f8:f6:a3:64:69:b8:b7: 88:07:15:bf:de:e8:8e:9f:7f:83:7b:6a:61:b1:a0:51:26:e9: 41:e6:22:6a:ea:4a:39:60:15:97:d1:cd:4b:4c:72:11:a8:27: 2f:b2:d8:03:8a:63:80:11:89:bf:38:da:7c:45:98:e8:89:28: 9e:04:1d:d5:ca:2b:fc:cd:53:6a:79:e7:51:36:c6:22:63:26: 9c:3e:b2:74:05:bc:e1:db:8a:53:70:30:c5:0b:a2:42:26:a7: 2c:4f:31:59:dc:01:52:ca:c0:fd:fd:68:8c:16:77:66:28:5b: 5f:38:3a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SEMoNSkhv/g6Nmnr7PNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTY4NDRkMjQ1ZDQxMjRhMjJhNTM2YjA0NmRhODYzMzJk MGI5MTEwHhcNMjUxMjIxMDUwMDU4WhcNMjUxMjIyMDUwMDU4WjAzMTEwLwYDVQQD EygwNTE1OTc5MTVjZTIyNmFmMWEzN2U1NzU2ODgzZmE2NWVlNGMyNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIpamoOQmn0pl3XbDRsu9CVMiUVM lslsMkDvrGSgjf0Z9InpTvDZKyNergBba/51Syd1sdsty3E8OaY684uSLdxRTn0p xFTyeAkxcB4HfLdahFNJaIs58TdleEKqclKa8STXI4rYEEONxxPLhgeJGTzGqYly 3B8U0frzFbimPWzb4lXf33cR3XZMEdhH+mRR0r2p9Jwla7mYM18V+UjRwHJjCRwc +H6Yojq9y1bQt3QIohOIgj9A5QSz+P14fhxwOMXRNeWuhTfQFtkoQZI9I8xoOYE/ gEiZ6CafXflUSQpplopYbjK/a5DKrgHoHArgsp7KZyyeT0FQxsC3kO1YNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUVl5Fc4iavGjfldWiD+mXuTCUMMB8GA1UdIwQY MBaAFGUWhE0kXUEkoipTawRtqGMy0LkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjIt ZDU3MDQ4M2MzNjhiLzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjItZDU3MDQ4M2MzNjhi LzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhTtu1mq 6KmjCh26br35UbXGsSQ/PjhZKE5ypT1CcMxRQhRfgAgurwnAuMyey2hAEibGpHaH zzPQWRxWLrdkf44vK2rhf45T5qsmAg64/XJWBr4IRhvSzWaaK1KYU1QPQxrrO69D L5ExUrxNsuOFgzgf5bJOC0RMWabm58UeNTOopMIR4UrdaXP49qNkabi3iAcVv97o jp9/g3tqYbGgUSbpQeYiaupKOWAVl9HNS0xyEagnL7LYA4pjgBGJvzjafEWY6Iko ngQd1cor/M1TannnUTbGImMmnD6ydAW84duKU3AwxQuiQianLE8xWdwBUsrA/f1o jBZ3ZihbXzg6lw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:37 2025 by rpki-client