This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json) Hash identifier: ilfIz5op0DhnBuC3uDY0g+bOi7N9TE7wvSCDFYzwexU= Subject key identifier: CB:F6:92:E2:95:B2:68:C5:BE:5A:DD:A8:2B:A8:5A:43:3B:2B:8D:83 Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d Certificate serial: 019B318C8A41FFF9FD11C3F161637D58BC65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 13:00:52 +0000 Manifest this update: Thu 18 Dec 2025 13:00:52 +0000 Manifest next update: Fri 19 Dec 2025 13:00:52 +0000 Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=) 2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: U29bO5CQFWK9MeYuUzutsQTO0+TWtKNe/+sbk9t1Xh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:8a:41:ff:f9:fd:11:c3:f1:61:63:7d:58:bc:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d Validity Not Before: Dec 18 13:00:52 2025 GMT Not After : Dec 19 13:00:52 2025 GMT Subject: CN=cbf692e295b268c5be5adda82ba85a433b2b8d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:ad:c5:a9:61:38:ab:69:60:ad:f6:88:78: dc:2d:a6:75:6a:0e:f0:7f:20:e9:d4:97:07:04:9f: 1a:40:fa:8f:91:50:c1:8f:fd:19:cb:e3:0c:29:cc: e4:78:42:09:d4:8d:e2:45:92:de:69:82:72:0a:95: a3:48:b6:d7:6b:da:fe:2f:25:58:98:ea:19:71:ee: 05:b2:65:80:0c:ae:e7:10:2c:6c:d8:bc:cf:ac:ba: 76:36:2e:72:9c:0f:68:9e:f1:8e:c8:06:bb:79:b9: 43:95:d6:f7:9c:67:4b:5f:5e:b6:d2:ca:0f:14:9f: 1e:02:41:a5:7d:0f:6c:80:aa:77:48:38:b4:44:dc: 7c:4a:03:81:ee:9e:54:32:e6:53:6a:96:d5:03:8e: 81:83:24:26:88:79:2a:36:96:4c:1f:19:80:45:e9: 3e:fa:a4:87:fe:9e:8a:88:e5:f6:9e:eb:5a:8d:5c: 4d:67:67:96:07:80:97:72:b0:39:a2:81:23:d2:e1: 3b:cb:87:8a:eb:f5:e0:16:f5:21:e5:46:ff:57:f5: e5:0a:fd:b1:4e:0a:e5:01:e0:bc:dc:9b:75:65:6a: 3e:9e:35:9e:ea:f3:77:92:01:bc:59:ac:65:a1:25: 1b:14:8d:f0:4b:c4:f9:dd:18:fe:10:2c:41:78:72: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:92:E2:95:B2:68:C5:BE:5A:DD:A8:2B:A8:5A:43:3B:2B:8D:83 X509v3 Authority Key Identifier: keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c1:5f:e7:2e:7d:33:f0:be:fe:fc:76:a0:2a:f5:66:0a:c3: 86:fc:b3:8a:ab:01:bf:b3:2b:06:b4:93:12:6b:36:16:7c:1c: b5:1a:ec:65:ce:bd:ce:6f:e1:76:3d:9f:f8:37:13:ed:64:10: 68:54:2e:f1:66:ac:46:6b:ca:72:b0:c4:2a:37:71:89:ff:d3: 3e:99:39:cd:44:1f:9e:3d:a4:00:ec:23:98:d0:e3:12:5f:7c: 1e:34:02:db:4e:c6:37:37:76:f4:b5:c8:4b:57:bb:60:c2:de: 04:93:99:e1:a3:c2:63:4b:80:ce:a9:2d:59:9b:f5:54:79:f9: fd:6e:d2:e7:d2:bc:da:7c:73:ea:84:c0:fb:47:af:9d:57:53: 85:81:32:ab:37:09:3a:73:90:e8:3d:02:23:20:5d:2a:c3:06: 75:57:7a:2c:79:ea:25:38:b7:76:b4:91:92:80:e2:81:f0:65: 9c:94:93:a5:90:4d:81:88:37:99:eb:23:c4:70:92:61:cf:a4: d9:41:f9:b7:68:35:35:e2:90:5c:1e:5b:3a:73:7f:65:ba:59: 90:e0:17:a8:14:61:17:4c:f9:ec:55:99:5f:9e:1a:fd:e9:33: d6:d2:2f:1a:51:8f:2b:ef:79:b4:ee:ad:de:2e:4c:87:a6:90: ab:93:73:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjIpB//n9EcPxYWN9WLxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmIxMGQ4OWI1NTM3OTEzNTAzMTI3ZWI4NzIyNmFmYjg5 ZDFiMmQwHhcNMjUxMjE4MTMwMDUyWhcNMjUxMjE5MTMwMDUyWjAzMTEwLwYDVQQD EyhjYmY2OTJlMjk1YjI2OGM1YmU1YWRkYTgyYmE4NWE0MzNiMmI4ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtWtxalhOKtpYK32iHjcLaZ1ag7w fyDp1JcHBJ8aQPqPkVDBj/0Zy+MMKczkeEIJ1I3iRZLeaYJyCpWjSLbXa9r+LyVY mOoZce4FsmWADK7nECxs2LzPrLp2Ni5ynA9onvGOyAa7eblDldb3nGdLX1620soP FJ8eAkGlfQ9sgKp3SDi0RNx8SgOB7p5UMuZTapbVA46BgyQmiHkqNpZMHxmARek+ +qSH/p6KiOX2nutajVxNZ2eWB4CXcrA5ooEj0uE7y4eK6/XgFvUh5Ub/V/XlCv2x TgrlAeC83Jt1ZWo+njWe6vN3kgG8WaxloSUbFI3wS8T53Rj+ECxBeHLEPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv2kuKVsmjFvlrdqCuoWkM7K42DMB8GA1UdIwQY MBaAFM4rENibVTeRNQMSfrhyJq+4nRstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUt MzczZGRhNDNmNzkyLzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUtMzczZGRhNDNmNzky LzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMFf5y59 M/C+/vx2oCr1ZgrDhvyziqsBv7MrBrSTEms2FnwctRrsZc69zm/hdj2f+DcT7WQQ aFQu8WasRmvKcrDEKjdxif/TPpk5zUQfnj2kAOwjmNDjEl98HjQC207GNzd29LXI S1e7YMLeBJOZ4aPCY0uAzqktWZv1VHn5/W7S59K82nxz6oTA+0evnVdThYEyqzcJ OnOQ6D0CIyBdKsMGdVd6LHnqJTi3drSRkoDigfBlnJSTpZBNgYg3mesjxHCSYc+k 2UH5t2g1NeKQXB5bOnN/ZbpZkOAXqBRhF0z57FWZX54a/ekz1tIvGlGPK+95tO6t 3i5Mh6aQq5Nzzg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:23:18 2025 by rpki-client