This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json) Hash identifier: XSx2yyouIbwPqgOzc9GPb6L1T63ZS9CPWJrzsWAZ7FI= Subject key identifier: F7:79:55:F3:84:BF:A3:9A:DC:4A:5A:56:D2:3C:B4:F2:BA:30:13:28 Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Certificate serial: 019B37C5EF0754EBC4351E1EE8774B9EA0FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft Manifest number: 02E5 Signing time: Fri 19 Dec 2025 18:01:17 +0000 Manifest this update: Fri 19 Dec 2025 18:01:17 +0000 Manifest next update: Sat 20 Dec 2025 18:01:17 +0000 Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=) 2: 9s50Q9-1ULqilThpHU79jiFEiIA.roa (hash: 5aJJUqP+R3fj8M4AoRNns1YealoNvLa9oSKi6PcBG8E=) 3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: B5xqjPtOSi9X/adOzZJP51VhTSyBugbqJ/4koz/Etak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:ef:07:54:eb:c4:35:1e:1e:e8:77:4b:9e:a0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Validity Not Before: Dec 19 18:01:17 2025 GMT Not After : Dec 20 18:01:17 2025 GMT Subject: CN=f77955f384bfa39adc4a5a56d23cb4f2ba301328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:6f:54:42:00:18:7f:0f:8f:3f:d9:ca:d9: 66:d5:da:f5:48:32:7d:df:f0:4f:97:99:b0:31:f8: 0c:30:48:6e:30:08:14:39:73:97:a7:76:5d:78:3d: b5:21:e2:e0:68:e3:1b:d9:7b:13:1b:b4:60:18:d4: 14:a1:c7:bd:a8:f6:e8:0c:c1:b5:de:1a:35:c5:6b: 3d:eb:a5:0a:df:9e:52:bb:12:68:60:ef:20:9d:ca: db:42:b7:61:06:6c:9d:79:8a:64:de:8b:96:f0:4b: 78:29:45:03:7c:03:d1:65:0f:00:a9:f7:e2:fa:16: a6:59:d7:3b:55:4d:4b:d9:4f:46:66:91:34:40:6c: 11:cc:7f:08:6f:26:82:4b:29:37:cb:58:ef:75:c1: 0d:6b:19:c7:2d:a8:16:77:7f:34:96:c5:3a:df:f1: 48:d9:49:e9:f3:8e:5d:c9:f5:48:16:90:f4:3d:77: d9:b6:c5:d0:47:3e:a1:44:40:12:4d:ac:fb:ef:a7: b4:a4:da:58:2a:ce:b2:99:29:72:04:78:ff:43:61: cc:bc:8c:94:4d:be:9c:b5:c5:99:94:b0:cd:8d:d5: 4e:64:35:c1:a4:a7:fa:54:38:c5:95:34:4f:06:dc: 9b:f5:05:78:35:d5:2f:04:6c:1a:fa:f5:45:2f:12: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:79:55:F3:84:BF:A3:9A:DC:4A:5A:56:D2:3C:B4:F2:BA:30:13:28 X509v3 Authority Key Identifier: keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c8:2c:8b:c6:9c:df:95:ea:29:42:26:c6:1f:23:3c:99:2a: a6:2a:d2:e6:bf:78:d0:f3:d4:f0:d7:f5:09:fc:d6:e8:47:fb: a5:96:de:79:5f:a0:f8:e4:09:ee:20:4c:fa:0b:33:dd:5b:fd: 1a:46:1b:12:33:69:02:95:11:50:f1:cf:b4:de:81:de:f6:01: 08:b2:8d:f1:1b:59:92:c4:99:16:da:5f:64:d1:06:aa:ac:0e: 40:1f:34:29:03:59:8b:1e:f2:d0:78:73:e2:73:6b:bd:dd:46: 35:30:f8:54:e0:51:36:2a:58:05:9f:72:f9:a5:a7:71:93:86: bb:23:dc:3c:4d:44:57:64:8c:0f:23:8e:27:f6:68:35:cc:31: 62:45:ee:41:14:48:ca:4f:5d:9a:70:2a:ad:b7:7a:41:a2:92: 3d:dc:fe:37:5a:b9:5c:48:8f:5f:41:9b:21:1b:11:8c:c1:4a: 4b:99:2f:06:ff:ec:be:de:b6:f4:f5:52:2e:c6:cc:81:5b:07: 37:0e:71:1d:3a:e6:da:bf:8d:d4:dc:9a:84:9f:b8:57:59:14: 30:b6:80:b7:b5:ef:d7:23:55:9f:bd:9e:ac:84:47:cf:0c:4d: 37:28:4e:31:ae:0c:cc:69:94:89:1f:97:c3:ad:3d:f3:72:29: e3:69:2e:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xe8HVOvENR4e6HdLnqD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw ZDJiOTgwHhcNMjUxMjE5MTgwMTE3WhcNMjUxMjIwMTgwMTE3WjAzMTEwLwYDVQQD EyhmNzc5NTVmMzg0YmZhMzlhZGM0YTVhNTZkMjNjYjRmMmJhMzAxMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7FvVEIAGH8Pjz/Zytlm1dr1SDJ9 3/BPl5mwMfgMMEhuMAgUOXOXp3ZdeD21IeLgaOMb2XsTG7RgGNQUoce9qPboDMG1 3ho1xWs966UK355SuxJoYO8gncrbQrdhBmydeYpk3ouW8Et4KUUDfAPRZQ8Aqffi +hamWdc7VU1L2U9GZpE0QGwRzH8IbyaCSyk3y1jvdcENaxnHLagWd380lsU63/FI 2Unp845dyfVIFpD0PXfZtsXQRz6hREASTaz776e0pNpYKs6ymSlyBHj/Q2HMvIyU Tb6ctcWZlLDNjdVOZDXBpKf6VDjFlTRPBtyb9QV4NdUvBGwa+vVFLxJD9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd5VfOEv6Oa3EpaVtI8tPK6MBMoMB8GA1UdIwQY MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct Yzk5NGZkMTc0ZTZlLzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8gsi8ac 35XqKUImxh8jPJkqpirS5r940PPU8Nf1CfzW6Ef7pZbeeV+g+OQJ7iBM+gsz3Vv9 GkYbEjNpApURUPHPtN6B3vYBCLKN8RtZksSZFtpfZNEGqqwOQB80KQNZix7y0Hhz 4nNrvd1GNTD4VOBRNipYBZ9y+aWncZOGuyPcPE1EV2SMDyOOJ/ZoNcwxYkXuQRRI yk9dmnAqrbd6QaKSPdz+N1q5XEiPX0GbIRsRjMFKS5kvBv/svt629PVSLsbMgVsH Nw5xHTrm2r+N1NyahJ+4V1kUMLaAt7Xv1yNVn72erIRHzwxNNyhOMa4MzGmUiR+X w60983Ip42ku2A== -----END CERTIFICATE-----Generated at Fri Dec 19 21:11:22 2025 by rpki-client