This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft File: ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json) Hash identifier: j9g9KjpFImYhySdwYrKHaIRUUsvf3K+JlVsc0sIufRc= Subject key identifier: 34:CA:ED:08:1F:B1:83:B4:55:AF:D0:72:E2:4D:18:97:83:EC:94:E2 Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61 Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761 Certificate serial: 019B32D72393DC923383571B52B3FAD3277E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:01:58 +0000 Manifest this update: Thu 18 Dec 2025 19:01:58 +0000 Manifest next update: Fri 19 Dec 2025 19:01:58 +0000 Files and hashes: 1: G6NrW3y5EqOh-RgJpBb737yZLyk.roa (hash: wCHunDZi4NJcQQFd2igk175J53d+RrxOeT27vR93kLI=) 2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: gqpzZPk/ouY+PQEJzeerxFGgUdT6sT5uB2NuWqG94uE=) 3: gzfX_YElaVuorbJFmzrDP83HpJs.roa (hash: /WT8uVeP+a0ogLSqro0SWXG/OOSeISwxGQticrGht7k=) 4: iIuGz7RbK5-6_sH4vM6hDlbmm84.roa (hash: NR09n14cZ06DE+j7XwmogKyYaQjIh4GJAdSuXipSGyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:23:93:dc:92:33:83:57:1b:52:b3:fa:d3:27:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761 Validity Not Before: Dec 18 19:01:58 2025 GMT Not After : Dec 19 19:01:58 2025 GMT Subject: CN=34caed081fb183b455afd072e24d189783ec94e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:98:58:34:e5:5e:90:d8:ce:85:5e:2e:af: f6:b5:49:1a:6a:d1:dc:20:50:7e:ea:2b:73:1f:0b: 0d:3e:3e:c5:f6:5a:4f:3d:7f:39:b7:0d:a6:51:98: 68:bc:20:d6:e3:0e:6c:04:3d:6a:0e:bb:80:5e:34: 72:fd:d7:bf:6b:d5:c4:b5:98:58:29:31:a2:a8:25: 4b:28:b9:80:bf:71:a1:75:7a:87:dd:ac:e6:a7:02: fc:66:76:04:a7:26:f0:d9:8b:50:5f:39:e6:05:b6: b1:44:14:3a:32:b4:f4:c1:44:ad:34:07:a0:60:1f: 49:a9:c7:b6:38:32:34:22:7c:49:ce:bf:33:27:f1: 49:f0:61:4f:58:f8:53:44:7f:28:93:aa:fc:e3:9a: 8d:77:97:dc:72:da:8b:eb:05:8e:3c:e2:e1:b9:cc: cb:3d:36:ea:a8:4e:23:4b:61:f3:32:90:d3:1d:3a: 3c:75:02:e0:cc:be:da:52:b5:de:3f:71:3b:20:9a: 41:cb:ee:c4:09:60:15:a6:09:cc:4c:25:3a:3f:2a: 1d:43:42:0a:7a:dc:42:76:d3:f3:63:c8:fe:e8:19: 79:7f:54:66:c3:d4:3f:14:dd:3d:94:4f:fc:eb:99: 8e:96:12:3a:69:ed:c1:68:c3:aa:9b:5c:2c:cd:89: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CA:ED:08:1F:B1:83:B4:55:AF:D0:72:E2:4D:18:97:83:EC:94:E2 X509v3 Authority Key Identifier: keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1b:b5:ae:33:09:da:1c:30:90:40:2c:1f:83:9f:89:44:4c: 49:c3:0f:6f:62:78:9c:67:30:d9:02:02:87:f6:90:55:cc:53: 1c:fb:fe:40:b8:da:a0:01:6b:54:47:a3:1c:74:dd:c4:57:d7: 3f:ff:d4:74:75:11:f4:be:03:4e:99:c3:6a:eb:a5:96:85:f2: f3:50:69:f4:4c:18:39:89:a6:46:4d:be:93:bb:db:e9:d2:fb: 4e:04:8e:e1:a1:04:07:b2:9a:62:51:2a:bf:04:6a:c9:87:86: 91:55:b0:fa:fa:af:3b:d4:f6:d6:80:7f:5b:6d:f2:b6:61:e8: aa:47:00:79:8a:b7:7e:48:4e:45:70:10:63:83:ab:56:0c:19: 93:f7:9d:11:a7:32:c1:c3:46:c5:1e:9c:ee:19:de:67:65:13: 9f:f9:c8:d0:74:f0:d6:54:7e:26:95:a1:b1:59:37:fa:53:54: 09:33:2a:66:21:00:ce:d5:48:cd:8f:94:cb:23:12:68:5b:b8: 58:9e:66:7b:40:5c:f0:d1:b5:73:23:35:bf:9b:eb:90:a3:d4: 56:5c:e6:28:e6:b5:ad:77:6c:d6:64:a8:c1:be:54:2a:dd:36: b9:6c:bb:9a:1d:de:63:75:e8:72:0f:65:bb:54:0b:7d:ee:88: bd:ce:fc:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1yOT3JIzg1cbUrP60yd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MWJhZDk1Mjc2OTQ3YzdiZTUzNmFmNGM4NzBhMzcyMWYw Yjc3NjEwHhcNMjUxMjE4MTkwMTU4WhcNMjUxMjE5MTkwMTU4WjAzMTEwLwYDVQQD EygzNGNhZWQwODFmYjE4M2I0NTVhZmQwNzJlMjRkMTg5NzgzZWM5NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurWYWDTlXpDYzoVeLq/2tUkaatHc IFB+6itzHwsNPj7F9lpPPX85tw2mUZhovCDW4w5sBD1qDruAXjRy/de/a9XEtZhY KTGiqCVLKLmAv3GhdXqH3azmpwL8ZnYEpybw2YtQXznmBbaxRBQ6MrT0wUStNAeg YB9Jqce2ODI0InxJzr8zJ/FJ8GFPWPhTRH8ok6r845qNd5fcctqL6wWOPOLhuczL PTbqqE4jS2HzMpDTHTo8dQLgzL7aUrXeP3E7IJpBy+7ECWAVpgnMTCU6PyodQ0IK etxCdtPzY8j+6Bl5f1Rmw9Q/FN09lE/865mOlhI6ae3BaMOqm1wszYlvJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTK7QgfsYO0Va/QcuJNGJeD7JTiMB8GA1UdIwQY MBaAFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUt MTk4YjZhNjFjZTg1LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUtMTk4YjZhNjFjZTg1 LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARu1rjMJ 2hwwkEAsH4OfiURMScMPb2J4nGcw2QICh/aQVcxTHPv+QLjaoAFrVEejHHTdxFfX P//UdHUR9L4DTpnDauulloXy81Bp9EwYOYmmRk2+k7vb6dL7TgSO4aEEB7KaYlEq vwRqyYeGkVWw+vqvO9T21oB/W23ytmHoqkcAeYq3fkhORXAQY4OrVgwZk/edEacy wcNGxR6c7hneZ2UTn/nI0HTw1lR+JpWhsVk3+lNUCTMqZiEAztVIzY+UyyMSaFu4 WJ5me0Bc8NG1cyM1v5vrkKPUVlzmKOa1rXds1mSowb5UKt02uWy7mh3eY3Xocg9l u1QLfe6Ivc787Q== -----END CERTIFICATE-----Generated at Fri Dec 19 01:00:53 2025 by rpki-client