This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json) Hash identifier: w+kn1BeVCnMWRFyPWfYqD8BFxn8jSSwGNL6fbYMX8lo= Subject key identifier: F5:58:82:9E:6B:3A:F6:E1:D5:FC:C1:DE:13:2A:46:24:46:6B:FF:82 Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Certificate serial: 019B552AEC851FD9F71C6015B662AE8069DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 11:00:34 +0000 Manifest this update: Thu 25 Dec 2025 11:00:34 +0000 Manifest next update: Fri 26 Dec 2025 11:00:34 +0000 Files and hashes: 1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=) 2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=) 3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=) 4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=) 5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: xmKy2nc7WLZ7kAUsYjVOYGFTxr7TlgJtwECp3Adij6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2a:ec:85:1f:d9:f7:1c:60:15:b6:62:ae:80:69:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Validity Not Before: Dec 25 11:00:34 2025 GMT Not After : Dec 26 11:00:34 2025 GMT Subject: CN=f558829e6b3af6e1d5fcc1de132a4624466bff82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:02:59:ed:07:76:8e:d5:08:20:9b:6e:42: 89:77:12:da:1d:44:7f:fa:e9:89:73:87:ed:38:cc: 3a:b7:f0:36:d4:30:2c:68:ee:71:eb:e1:33:57:55: 91:4c:7b:20:f0:66:69:6d:c0:3c:72:46:f9:36:da: 53:5a:23:19:1f:08:69:1d:ad:db:60:e3:f9:95:27: 66:3b:d2:a8:df:cf:2d:18:12:6c:93:91:1e:63:1c: 54:a9:f0:32:e6:27:50:59:32:52:a5:7f:8d:20:9f: aa:9f:03:2b:56:87:d7:69:7f:16:03:e1:59:5e:ab: 99:fe:88:4b:75:87:e5:ce:a8:36:fe:cb:c0:28:5a: fd:c3:fb:b1:58:5b:ef:ba:0a:02:15:ce:cf:6e:c0: 45:24:29:03:04:85:d3:25:2f:5d:f8:be:08:8e:ee: ba:1e:38:9e:1a:71:2b:36:ad:27:90:f9:b0:c5:f2: ed:4a:10:bb:cc:c1:87:69:6d:83:52:4f:77:05:3d: b8:2d:9f:b5:af:8a:b2:23:31:65:f7:2d:ef:30:dd: 8c:f7:7c:7b:e8:7f:27:0b:b7:e7:61:e2:fb:85:3f: 26:1f:f7:c2:81:f8:26:3e:26:83:fa:1d:84:1c:f8: a8:80:11:54:08:64:64:66:a2:e0:08:8a:51:8e:bf: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:58:82:9E:6B:3A:F6:E1:D5:FC:C1:DE:13:2A:46:24:46:6B:FF:82 X509v3 Authority Key Identifier: keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fc:aa:10:4c:b8:a0:0a:62:c0:32:bc:c5:eb:4c:d8:a2:42: 98:dd:a2:78:92:f7:b3:49:ac:6f:1c:a4:48:dc:c8:96:22:1c: 28:54:ff:0d:90:61:9f:65:27:ae:1b:1e:40:7d:8d:d1:18:1f: eb:3f:8d:db:94:9f:6e:d0:f8:88:6a:8c:7e:f6:d2:70:c3:19: 88:9d:44:ec:51:49:05:86:21:d2:7d:0b:a9:d5:27:71:b2:73: 13:2f:43:59:b7:76:a6:b1:7f:86:ec:b8:6f:f4:18:a1:a8:39: 6d:55:ed:14:45:e1:e0:b9:de:00:6f:f0:75:10:5f:42:d8:0c: 1f:28:9d:c5:38:4a:d3:4c:11:2d:bb:4b:04:a9:42:bf:9d:65: ca:ee:75:4c:87:2b:a1:c3:40:ed:e0:9f:46:af:12:1b:c7:78: f9:ee:1b:ac:0f:fa:b4:93:50:5f:df:3c:24:10:69:2c:cd:58: bc:6b:d2:7c:0f:ad:84:08:02:46:ba:63:96:a5:29:86:11:78: 32:26:09:9c:07:ee:fc:d9:4b:50:37:f8:8f:dd:9b:65:00:96: 78:61:ad:70:1c:03:e3:61:af:12:28:f0:39:03:a3:cd:67:e5: 57:91:8a:9b:48:9f:ec:94:83:70:f8:ba:57:23:ef:ff:3e:56: d4:41:8f:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKuyFH9n3HGAVtmKugGneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4 YzJkM2IwHhcNMjUxMjI1MTEwMDM0WhcNMjUxMjI2MTEwMDM0WjAzMTEwLwYDVQQD EyhmNTU4ODI5ZTZiM2FmNmUxZDVmY2MxZGUxMzJhNDYyNDQ2NmJmZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDQCWe0Hdo7VCCCbbkKJdxLaHUR/ +umJc4ftOMw6t/A21DAsaO5x6+EzV1WRTHsg8GZpbcA8ckb5NtpTWiMZHwhpHa3b YOP5lSdmO9Ko388tGBJsk5EeYxxUqfAy5idQWTJSpX+NIJ+qnwMrVofXaX8WA+FZ XquZ/ohLdYflzqg2/svAKFr9w/uxWFvvugoCFc7PbsBFJCkDBIXTJS9d+L4Iju66 HjieGnErNq0nkPmwxfLtShC7zMGHaW2DUk93BT24LZ+1r4qyIzFl9y3vMN2M93x7 6H8nC7fnYeL7hT8mH/fCgfgmPiaD+h2EHPiogBFUCGRkZqLgCIpRjr9bLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVYgp5rOvbh1fzB3hMqRiRGa/+CMB8GA1UdIwQY MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt MTU1ZmIzZmUyODdlLzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfyqEEy4 oApiwDK8xetM2KJCmN2ieJL3s0msbxykSNzIliIcKFT/DZBhn2UnrhseQH2N0Rgf 6z+N25SfbtD4iGqMfvbScMMZiJ1E7FFJBYYh0n0LqdUncbJzEy9DWbd2prF/huy4 b/QYoag5bVXtFEXh4LneAG/wdRBfQtgMHyidxThK00wRLbtLBKlCv51lyu51TIcr ocNA7eCfRq8SG8d4+e4brA/6tJNQX988JBBpLM1YvGvSfA+thAgCRrpjlqUphhF4 MiYJnAfu/NlLUDf4j92bZQCWeGGtcBwD42GvEijwOQOjzWflV5GKm0if7JSDcPi6 VyPv/z5W1EGPQQ== -----END CERTIFICATE-----Generated at Thu Dec 25 15:42:38 2025 by rpki-client