This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json) Hash identifier: +WjyHhFR42gZu/f4bC3+56o10xB1en/lQXDtteP45t0= Subject key identifier: A6:63:1F:D0:41:08:94:7D:2C:E7:87:DF:CE:A0:46:90:2A:55:7D:D1 Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Certificate serial: 019B2551BBCF757575B5BDD30E5A704E1839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft Manifest number: 018F Signing time: Tue 16 Dec 2025 04:01:12 +0000 Manifest this update: Tue 16 Dec 2025 04:01:12 +0000 Manifest next update: Wed 17 Dec 2025 04:01:12 +0000 Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=) 2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: LOnYB7mr+KlrqfuXZVhQjH1tecikVG8h/1fYMMAZOak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:bb:cf:75:75:75:b5:bd:d3:0e:5a:70:4e:18:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Validity Not Before: Dec 16 04:01:12 2025 GMT Not After : Dec 17 04:01:12 2025 GMT Subject: CN=a6631fd04108947d2ce787dfcea046902a557dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:af:89:4e:28:ae:97:df:94:a5:f6:6b:4d: dd:de:c6:99:09:79:7a:82:f8:f0:2c:1b:f7:6f:87: 77:39:f9:6b:bc:44:b8:19:11:ce:cc:26:eb:bf:56: 1d:7e:c2:1d:2a:51:5c:ee:87:1e:c7:7b:7b:03:66: c4:85:09:6c:aa:5e:d2:a9:51:13:ba:4c:47:7c:f2: 5c:69:0a:e5:75:43:a5:8e:49:25:92:de:75:46:f5: 0b:be:28:2c:e6:a7:e7:24:d9:ca:af:7b:8f:08:73: 97:b1:f1:5f:eb:f5:54:d5:d3:76:fa:44:9b:60:40: 3f:06:ea:b7:12:38:21:c5:64:0d:62:15:29:77:8d: 77:36:58:ea:4e:4a:b7:89:ca:df:06:0b:9d:f4:9d: b1:a4:09:42:07:54:36:61:ee:e1:33:49:b3:27:2e: 1a:ff:8b:0e:77:9d:56:35:38:bb:95:9e:22:e1:bd: 03:1c:17:59:ca:ce:a2:1f:83:3c:80:dc:81:9e:be: e6:a5:bb:c0:ed:5c:07:fe:04:7e:04:db:96:36:8c: e2:80:ce:d0:f8:82:60:12:89:bb:a4:7b:74:ed:fc: bb:65:ae:f3:27:a9:46:64:42:c6:d0:ea:9e:da:c7: 77:c3:3b:77:d9:d6:17:8d:4f:5e:47:6b:73:5e:0c: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:63:1F:D0:41:08:94:7D:2C:E7:87:DF:CE:A0:46:90:2A:55:7D:D1 X509v3 Authority Key Identifier: keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9a:71:d0:4d:b5:b9:fd:45:f0:47:98:0d:3b:e0:a5:ff:ff: 5b:81:ca:22:8f:c1:e4:c4:a5:34:79:ef:f8:b5:bd:87:8e:a3: 44:54:f1:f0:97:2d:3e:e4:50:2b:fb:40:b0:4e:8f:19:8a:76: 9d:55:fd:69:00:ea:d5:89:f9:29:71:b9:3f:e3:f5:c7:64:97: 17:23:bd:88:57:23:b2:2c:83:b0:bb:2e:5f:45:1f:49:bd:24: 2c:f8:ac:36:ad:0a:72:14:95:0c:72:32:10:32:df:a4:3f:83: fd:21:a0:e4:1a:c2:0c:34:2d:87:a0:dd:5c:1b:46:42:37:b0: 4d:24:49:03:fd:ba:b4:69:25:99:33:9d:87:d9:10:68:fc:85: 77:8a:21:89:64:9b:96:5a:66:21:0b:53:99:2d:8e:a8:ad:64: 08:95:e7:10:05:a3:0b:ed:08:60:77:62:89:a8:bf:d4:08:2e: 20:40:91:c1:d5:90:8d:d5:00:6b:fb:ec:1a:0f:e3:3e:3f:9c: 00:d7:54:cf:ee:28:8a:0e:4c:4a:fe:1d:ca:1e:44:41:ce:b7: e3:10:6b:9c:35:73:8e:b9:9d:f0:d8:5c:98:08:f7:47:11:48: ac:69:ef:bd:65:33:fd:bd:b7:2d:d8:38:ed:ff:d9:c1:21:4c: f5:63:b7:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUbvPdXV1tb3TDlpwThg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjhlZmQzZTMxNjZlODFhYWNmMTU4MGUyZjBiOTRkYTI5 YjNkYjQwHhcNMjUxMjE2MDQwMTEyWhcNMjUxMjE3MDQwMTEyWjAzMTEwLwYDVQQD EyhhNjYzMWZkMDQxMDg5NDdkMmNlNzg3ZGZjZWEwNDY5MDJhNTU3ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KuviU4orpfflKX2a03d3saZCXl6 gvjwLBv3b4d3OflrvES4GRHOzCbrv1YdfsIdKlFc7ocex3t7A2bEhQlsql7SqVET ukxHfPJcaQrldUOljkklkt51RvULvigs5qfnJNnKr3uPCHOXsfFf6/VU1dN2+kSb YEA/Buq3EjghxWQNYhUpd413NljqTkq3icrfBgud9J2xpAlCB1Q2Ye7hM0mzJy4a /4sOd51WNTi7lZ4i4b0DHBdZys6iH4M8gNyBnr7mpbvA7VwH/gR+BNuWNozigM7Q +IJgEom7pHt07fy7Za7zJ6lGZELG0Oqe2sd3wzt32dYXjU9eR2tzXgy8UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZjH9BBCJR9LOeH386gRpAqVX3RMB8GA1UdIwQY MBaAFM3479PjFm6Bqs8VgOLwuU2imz20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMt YTAzYWQ1Mjk5OTdjLzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMtYTAzYWQ1Mjk5OTdj LzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlppx0E21 uf1F8EeYDTvgpf//W4HKIo/B5MSlNHnv+LW9h46jRFTx8JctPuRQK/tAsE6PGYp2 nVX9aQDq1Yn5KXG5P+P1x2SXFyO9iFcjsiyDsLsuX0UfSb0kLPisNq0KchSVDHIy EDLfpD+D/SGg5BrCDDQth6DdXBtGQjewTSRJA/26tGklmTOdh9kQaPyFd4ohiWSb llpmIQtTmS2OqK1kCJXnEAWjC+0IYHdiiai/1AguIECRwdWQjdUAa/vsGg/jPj+c ANdUz+4oig5MSv4dyh5EQc634xBrnDVzjrmd8NhcmAj3RxFIrGnvvWUz/b23Ldg4 7f/ZwSFM9WO30Q== -----END CERTIFICATE-----Generated at Tue Dec 16 09:03:41 2025 by rpki-client