This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json) Hash identifier: hIZ/W2epN7TUcoEWEl/GCKIRg+XqSFT97iq2fMQUtRk= Subject key identifier: 4F:3B:39:80:FD:08:B4:DD:A0:B4:34:A3:B2:3B:40:82:1D:E3:E0:C3 Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Certificate serial: 019B13F13FCD5DD3150049E8EBBEEB87AC6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft Manifest number: 0386 Signing time: Fri 12 Dec 2025 19:02:16 +0000 Manifest this update: Fri 12 Dec 2025 19:02:16 +0000 Manifest next update: Sat 13 Dec 2025 19:02:16 +0000 Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=) 2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: RllIDRVmraZFUeTdV7tPfngQRckXzwZ+PA28Wf8wBBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:f1:3f:cd:5d:d3:15:00:49:e8:eb:be:eb:87:ac:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Validity Not Before: Dec 12 19:02:16 2025 GMT Not After : Dec 13 19:02:16 2025 GMT Subject: CN=4f3b3980fd08b4dda0b434a3b23b40821de3e0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:52:66:1c:00:3a:37:e5:5d:b8:4a:fe:43: 69:2e:e9:39:79:29:92:37:0b:9b:93:2a:ab:79:10: b4:4c:ec:5f:65:ee:44:23:48:71:c7:47:6c:ce:ea: f4:8c:f8:90:c4:f3:0a:c1:80:c1:fd:6f:6b:15:85: fe:c3:b8:bd:a8:d3:ca:26:8e:50:2a:30:fc:15:cb: 44:b4:c8:c8:89:8d:6a:59:45:47:c8:c0:20:fd:21: a4:bc:78:20:0f:f5:36:ba:8d:3f:1c:72:b7:c1:7e: 11:81:a2:6c:4e:67:c9:df:56:3c:2d:86:e3:e0:1c: 55:94:52:09:d2:ce:f5:37:bb:17:bf:39:7c:bb:01: 3c:06:25:50:76:45:f4:31:34:2c:cc:e3:19:a8:2a: 5d:0c:55:38:15:79:38:aa:9a:7e:9c:a1:14:97:8b: d3:45:94:ac:bb:3c:a4:5b:66:df:38:02:1b:7c:82: 70:5e:18:13:d0:38:65:4d:3e:67:00:b8:0a:90:ec: 31:81:bf:1c:36:c4:dd:9a:c7:4e:97:13:58:88:66: df:d0:cf:83:62:6d:c8:56:1b:c9:7d:f3:75:fc:01: 1e:15:ef:18:e6:a0:ba:ae:ea:a2:66:96:ac:56:2b: 1b:01:50:d4:06:c4:69:1d:99:66:95:25:b9:ee:38: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:39:80:FD:08:B4:DD:A0:B4:34:A3:B2:3B:40:82:1D:E3:E0:C3 X509v3 Authority Key Identifier: keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dc:10:51:31:ba:9c:45:8c:23:22:9c:9c:88:73:47:eb:5b: 3d:b6:3c:95:19:32:d5:3b:f2:76:b7:3b:66:5f:c3:28:bc:2d: 4a:91:01:1d:3e:e8:1f:0e:92:7d:70:e0:c7:09:ab:2c:b9:91: 22:92:73:0a:0c:24:3c:07:e4:4f:c5:a4:89:88:ca:94:d6:28: 0f:64:55:e1:df:a4:ec:d7:05:e9:7c:d4:06:14:ba:82:f7:c7: c2:5d:2f:80:68:fe:48:21:b6:6f:a5:79:09:ad:45:7c:b5:ae: 2d:5e:53:70:33:2a:6d:50:f4:a8:4c:c7:8f:d3:e1:6a:24:99: 53:b2:79:92:a2:f9:d4:90:1e:e2:9a:7a:11:69:20:ee:43:83: 4b:36:60:e7:f2:30:3e:a8:b6:8a:c2:d4:4a:2a:73:ed:bb:d7: ec:cc:1f:fa:28:8e:43:2b:71:56:3d:9b:ea:d1:34:22:f1:c9: fd:cd:45:60:ef:b6:15:69:43:de:39:52:cf:9d:d8:d7:54:35: 8c:90:13:f8:ba:ce:98:6e:06:3a:d8:3c:b3:fe:ba:fa:00:cb: 1c:56:02:bc:a4:de:b5:cd:de:8f:c0:8c:17:1a:24:8f:38:a7: 9f:dc:6c:25:03:b4:ea:97:ff:d9:e2:39:88:a7:82:13:92:fa: 74:d8:74:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT8T/NXdMVAEno677rh6xrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm OTM4MjcwHhcNMjUxMjEyMTkwMjE2WhcNMjUxMjEzMTkwMjE2WjAzMTEwLwYDVQQD Eyg0ZjNiMzk4MGZkMDhiNGRkYTBiNDM0YTNiMjNiNDA4MjFkZTNlMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszJSZhwAOjflXbhK/kNpLuk5eSmS NwubkyqreRC0TOxfZe5EI0hxx0dszur0jPiQxPMKwYDB/W9rFYX+w7i9qNPKJo5Q KjD8FctEtMjIiY1qWUVHyMAg/SGkvHggD/U2uo0/HHK3wX4RgaJsTmfJ31Y8LYbj 4BxVlFIJ0s71N7sXvzl8uwE8BiVQdkX0MTQszOMZqCpdDFU4FXk4qpp+nKEUl4vT RZSsuzykW2bfOAIbfIJwXhgT0DhlTT5nALgKkOwxgb8cNsTdmsdOlxNYiGbf0M+D Ym3IVhvJffN1/AEeFe8Y5qC6ruqiZpasVisbAVDUBsRpHZlmlSW57jjtfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE87OYD9CLTdoLQ0o7I7QIId4+DDMB8GA1UdIwQY MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9wQUTG6 nEWMIyKcnIhzR+tbPbY8lRky1Tvydrc7Zl/DKLwtSpEBHT7oHw6SfXDgxwmrLLmR IpJzCgwkPAfkT8WkiYjKlNYoD2RV4d+k7NcF6XzUBhS6gvfHwl0vgGj+SCG2b6V5 Ca1FfLWuLV5TcDMqbVD0qEzHj9PhaiSZU7J5kqL51JAe4pp6EWkg7kODSzZg5/Iw Pqi2isLUSipz7bvX7Mwf+iiOQytxVj2b6tE0IvHJ/c1FYO+2FWlD3jlSz53Y11Q1 jJAT+LrOmG4GOtg8s/66+gDLHFYCvKTetc3ej8CMFxokjzinn9xsJQO06pf/2eI5 iKeCE5L6dNh00w== -----END CERTIFICATE-----Generated at Sat Dec 13 02:25:06 2025 by rpki-client