This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json) Hash identifier: 3qx7EjFKCtfmk9xOGA2roRCFEwrjAC1kIKq1EyswRKo= Subject key identifier: 5D:95:15:58:3E:83:A9:0A:DA:82:F0:30:28:A3:FC:12:B2:68:F9:3F Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Certificate serial: 019B544F9F170D88530AE781CD2C296C5D86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft Manifest number: 1320 Signing time: Thu 25 Dec 2025 07:01:02 +0000 Manifest this update: Thu 25 Dec 2025 07:01:02 +0000 Manifest next update: Fri 26 Dec 2025 07:01:02 +0000 Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=) 2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: jkYf+SBjQwbZzj3Z/MLBFoPlQcEmo+KdGx48IWOgVAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:9f:17:0d:88:53:0a:e7:81:cd:2c:29:6c:5d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Validity Not Before: Dec 25 07:01:02 2025 GMT Not After : Dec 26 07:01:02 2025 GMT Subject: CN=5d9515583e83a90ada82f03028a3fc12b268f93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:ab:13:bd:73:a2:23:df:db:e4:6e:cf:69: b7:14:c0:81:ab:bc:65:ce:9b:3a:aa:86:61:ae:5a: 3e:2b:2f:3f:42:8b:60:fb:f4:f8:f7:dc:f1:1f:fa: 70:90:60:dc:02:76:ac:ba:3d:96:0b:0f:0e:b8:21: a1:e6:4c:4a:47:64:d4:3b:3c:c2:2f:ca:c3:5f:72: 63:ed:38:2b:e1:90:b2:d7:70:d9:4a:c3:09:6f:98: 75:4c:c6:60:f7:a7:80:85:8b:39:8b:7b:c5:d8:31: 28:7e:b6:fe:90:ae:2e:07:67:ef:98:19:bf:5e:bc: 2f:e9:b9:ab:c7:27:20:4c:89:19:b4:bc:fd:f8:be: f3:bc:31:03:e2:4d:2d:5a:82:e9:8a:0e:a7:cc:b9: 91:63:9f:7d:9f:9f:1b:a8:42:67:f8:e8:23:ca:7b: 15:4d:35:a9:32:1f:0c:6f:94:ac:6d:77:d6:ca:9f: 9a:fe:ef:41:16:27:a1:ed:05:4b:d6:3b:a4:72:2e: 38:80:61:ee:5b:f7:f9:ba:8c:2f:9a:e7:ae:d1:9e: 5d:1d:1c:67:3f:7e:b3:a0:7b:58:42:0f:1a:9f:b9: ec:83:3c:69:e8:5c:e2:c8:8b:f4:d4:9b:66:50:ca: 5a:2a:a8:1c:28:ca:1e:2a:12:5a:db:00:3d:fa:d8: be:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:95:15:58:3E:83:A9:0A:DA:82:F0:30:28:A3:FC:12:B2:68:F9:3F X509v3 Authority Key Identifier: keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ca:f8:05:8b:01:84:d7:1b:53:9a:7b:fb:b2:5c:05:cd:8d: 70:a4:05:06:87:ba:77:66:e8:bb:b3:cf:d0:09:43:60:76:4e: 8f:ef:81:a9:f7:50:30:b7:1d:59:d5:6c:55:eb:a2:e1:d7:3b: f5:22:6b:dd:19:c9:18:22:25:3e:81:f0:1e:0d:9e:5a:ac:ea: 13:1a:d3:fe:ca:30:b6:ea:46:e6:43:a9:ff:eb:e1:c5:6e:22: 5d:37:c2:45:cf:c0:19:9d:ff:05:7f:c1:82:b8:6e:5c:a5:fc: be:64:77:54:5f:1b:59:06:b6:e8:f0:1f:13:74:9f:30:07:60: 69:63:94:2b:62:e0:87:87:a5:c4:e8:b5:e8:bc:6c:d9:30:44: f3:26:00:d7:9f:cb:77:f3:3e:51:9a:dc:46:f2:3a:26:3d:ba: 33:f9:49:b9:d6:ca:fd:b8:d8:eb:fb:a5:8e:b3:a8:a3:28:1c: e5:5c:21:bc:8d:e0:64:3c:8a:ea:b9:a8:41:0e:31:62:09:f9: f5:ca:9b:6c:df:4b:89:88:79:13:c7:05:e2:57:1b:0e:11:2a: d2:a8:50:64:02:b2:e6:4e:c0:71:00:0a:13:64:e7:a9:5f:4d: ae:b5:85:ae:7d:a3:c5:46:6f:91:c3:41:84:62:78:4e:9a:de: 89:7c:8f:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT58XDYhTCueBzSwpbF2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh YWVlMTQwHhcNMjUxMjI1MDcwMTAyWhcNMjUxMjI2MDcwMTAyWjAzMTEwLwYDVQQD Eyg1ZDk1MTU1ODNlODNhOTBhZGE4MmYwMzAyOGEzZmMxMmIyNjhmOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv26rE71zoiPf2+Ruz2m3FMCBq7xl zps6qoZhrlo+Ky8/Qotg+/T499zxH/pwkGDcAnasuj2WCw8OuCGh5kxKR2TUOzzC L8rDX3Jj7Tgr4ZCy13DZSsMJb5h1TMZg96eAhYs5i3vF2DEofrb+kK4uB2fvmBm/ Xrwv6bmrxycgTIkZtLz9+L7zvDED4k0tWoLpig6nzLmRY599n58bqEJn+OgjynsV TTWpMh8Mb5SsbXfWyp+a/u9BFieh7QVL1jukci44gGHuW/f5uowvmueu0Z5dHRxn P36zoHtYQg8an7nsgzxp6FziyIv01JtmUMpaKqgcKMoeKhJa2wA9+ti+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2VFVg+g6kK2oLwMCij/BKyaPk/MB8GA1UdIwQY MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt NjQyMzZmYzM2ZDFkLzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcr4BYsB hNcbU5p7+7JcBc2NcKQFBoe6d2bou7PP0AlDYHZOj++BqfdQMLcdWdVsVeui4dc7 9SJr3RnJGCIlPoHwHg2eWqzqExrT/sowtupG5kOp/+vhxW4iXTfCRc/AGZ3/BX/B grhuXKX8vmR3VF8bWQa26PAfE3SfMAdgaWOUK2Lgh4elxOi16Lxs2TBE8yYA15/L d/M+UZrcRvI6Jj26M/lJudbK/bjY6/uljrOooygc5VwhvI3gZDyK6rmoQQ4xYgn5 9cqbbN9LiYh5E8cF4lcbDhEq0qhQZAKy5k7AcQAKE2TnqV9NrrWFrn2jxUZvkcNB hGJ4TpreiXyPaQ== -----END CERTIFICATE-----Generated at Thu Dec 25 13:58:04 2025 by rpki-client