This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json) Hash identifier: t7YLexxRENVfT1Ovlj+OwRlW/HAw80l/ZWJAi90vFNk= Subject key identifier: 2C:19:84:24:0D:1C:4A:58:7B:7D:C2:FF:CE:7B:41:48:36:AC:8D:49 Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Certificate serial: 019B48154CB85BA598BC79DA86B396A7E074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft Manifest number: 03A1 Signing time: Mon 22 Dec 2025 22:01:53 +0000 Manifest this update: Mon 22 Dec 2025 22:01:53 +0000 Manifest next update: Tue 23 Dec 2025 22:01:53 +0000 Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=) 2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: nmwrcS2gVCyG8dHeZQkt5kHPN0+IHrq/+k+7ttqluXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:4c:b8:5b:a5:98:bc:79:da:86:b3:96:a7:e0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Validity Not Before: Dec 22 22:01:53 2025 GMT Not After : Dec 23 22:01:53 2025 GMT Subject: CN=2c1984240d1c4a587b7dc2ffce7b414836ac8d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:54:db:3a:bc:27:9d:dd:6f:f9:70:e3:13: 3a:73:70:41:ae:2a:75:4e:ed:fa:71:cb:15:1c:b0: 50:a2:e6:70:1c:08:ff:85:91:04:0b:a0:8a:03:d7: ad:c0:e4:11:fd:06:b4:51:d8:56:8f:e2:5e:a9:a6: 4e:6b:35:1b:e8:d9:d6:a3:bd:d6:08:fe:94:b7:33: 2e:4a:12:e9:44:9e:6b:c4:cb:3e:b2:7a:51:3d:aa: dd:cb:06:93:c7:06:e8:63:26:73:ce:7f:6a:45:00: 89:dc:5c:b5:c7:f5:7e:c5:29:65:9e:94:93:88:22: 73:a2:d1:67:1f:5e:5c:b0:61:12:ae:c5:80:9f:e9: a9:88:9b:f8:0e:de:1d:0b:93:5f:1f:37:84:89:c0: c9:8f:ca:2b:81:a2:af:8f:ca:f8:6d:a3:89:cf:d7: 33:a9:82:d3:d9:5a:ba:62:8f:1b:75:44:25:7b:d5: a5:fb:58:f9:e8:50:f8:b6:35:48:fd:03:f7:28:f4: 13:3a:c8:c9:fa:e4:f3:c7:16:e1:15:08:65:f4:09: a5:fb:73:7c:dc:eb:e0:e3:e1:fb:6b:99:0a:d6:8c: bb:f6:1c:0d:7f:55:75:e4:97:a8:c2:92:43:de:bc: 03:88:e2:23:83:a7:41:45:39:46:1d:41:c2:77:2d: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:19:84:24:0D:1C:4A:58:7B:7D:C2:FF:CE:7B:41:48:36:AC:8D:49 X509v3 Authority Key Identifier: keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:89:b1:33:3e:fc:79:c2:8a:e8:c2:90:6c:97:89:73:69:dc: a9:45:84:61:09:b2:4e:0a:94:59:80:09:80:6a:78:47:a4:45: ac:3b:29:31:32:51:1e:7c:5b:33:df:a2:cc:3a:95:e5:c0:af: da:84:bb:70:67:a0:6f:eb:c0:91:97:83:b2:19:ae:4c:47:42: 2b:f1:1b:64:37:74:29:1f:f7:a5:08:64:7e:19:8c:73:fb:2b: 14:9f:60:8c:31:8b:86:f6:16:0f:3c:d5:bc:a5:19:f4:85:45: 71:f0:1f:a3:d7:95:de:13:02:4b:8b:b0:24:d5:5f:c6:51:28: 2d:11:a5:50:0f:80:2d:77:87:41:2e:df:af:4c:e8:7e:09:98: b0:6a:6f:f8:f3:82:3a:ed:cc:73:5f:a3:22:0f:3d:5b:23:54: 22:f3:b9:ee:c5:fd:98:1c:87:4d:af:65:06:73:22:3d:90:0d: 67:92:b2:30:ce:d3:78:f9:ba:d4:c9:1a:3f:f8:03:5e:d5:4d: 1a:48:96:99:40:32:21:a7:cd:f2:f8:c9:33:e4:a5:ae:88:b3: 8a:32:2d:08:3a:f7:54:ce:4d:52:9e:36:19:eb:c8:60:2a:d4: 21:c9:96:0e:43:1c:a4:5c:f1:0c:81:69:cd:7e:c8:f3:bb:9a: 9c:2e:04:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFUy4W6WYvHnahrOWp+B0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm OTM4MjcwHhcNMjUxMjIyMjIwMTUzWhcNMjUxMjIzMjIwMTUzWjAzMTEwLwYDVQQD EygyYzE5ODQyNDBkMWM0YTU4N2I3ZGMyZmZjZTdiNDE0ODM2YWM4ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SZU2zq8J53db/lw4xM6c3BBrip1 Tu36ccsVHLBQouZwHAj/hZEEC6CKA9etwOQR/Qa0UdhWj+JeqaZOazUb6NnWo73W CP6UtzMuShLpRJ5rxMs+snpRPardywaTxwboYyZzzn9qRQCJ3Fy1x/V+xSllnpST iCJzotFnH15csGESrsWAn+mpiJv4Dt4dC5NfHzeEicDJj8orgaKvj8r4baOJz9cz qYLT2Vq6Yo8bdUQle9Wl+1j56FD4tjVI/QP3KPQTOsjJ+uTzxxbhFQhl9Aml+3N8 3Ovg4+H7a5kK1oy79hwNf1V15JeowpJD3rwDiOIjg6dBRTlGHUHCdy36HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwZhCQNHEpYe33C/857QUg2rI1JMB8GA1UdIwQY MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYmxMz78 ecKK6MKQbJeJc2ncqUWEYQmyTgqUWYAJgGp4R6RFrDspMTJRHnxbM9+izDqV5cCv 2oS7cGegb+vAkZeDshmuTEdCK/EbZDd0KR/3pQhkfhmMc/srFJ9gjDGLhvYWDzzV vKUZ9IVFcfAfo9eV3hMCS4uwJNVfxlEoLRGlUA+ALXeHQS7fr0zofgmYsGpv+POC Ou3Mc1+jIg89WyNUIvO57sX9mByHTa9lBnMiPZANZ5KyMM7TePm61MkaP/gDXtVN GkiWmUAyIafN8vjJM+SlroizijItCDr3VM5NUp42GevIYCrUIcmWDkMcpFzxDIFp zX7I87uanC4EFQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:53:24 2025 by rpki-client