This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json) Hash identifier: VO4Cu0YQVrH6hUwwEJAfiyfune6SY+d6EXtNbSLw+98= Subject key identifier: 9B:43:2E:7B:10:48:85:6C:D2:1E:CB:E6:A2:6D:F5:58:AB:30:32:18 Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7 Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7 Certificate serial: 019B59773502231C759910FD45882428CD39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft Manifest number: 0405 Signing time: Fri 26 Dec 2025 07:02:22 +0000 Manifest this update: Fri 26 Dec 2025 07:02:22 +0000 Manifest next update: Sat 27 Dec 2025 07:02:22 +0000 Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=) 2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: RB2/qCKzQdsC8mmjVQVGHsVKati35gfSwA0hWQ1AoXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:35:02:23:1c:75:99:10:fd:45:88:24:28:cd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7 Validity Not Before: Dec 26 07:02:22 2025 GMT Not After : Dec 27 07:02:22 2025 GMT Subject: CN=9b432e7b1048856cd21ecbe6a26df558ab303218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:82:bd:3e:be:c4:7c:f7:4e:58:1e:fd:3e: 0f:a7:92:2d:b5:d2:31:03:a4:05:fe:2d:33:46:fb: a6:07:f7:4c:84:bf:65:27:15:a7:35:d5:e0:ad:b5: 6c:fc:c6:43:96:56:e6:57:b2:85:79:ca:ae:20:24: e7:05:5e:20:4b:7e:97:aa:be:48:24:7d:b5:ca:2c: 3d:1f:71:6f:47:08:8a:c5:ca:6b:c2:18:bb:b9:21: bb:70:b1:ba:0b:a8:dc:f4:a1:20:fd:d3:46:8a:40: dd:23:f7:01:f0:31:b7:26:ce:c6:c1:61:90:e1:0d: b9:35:83:4a:e0:2a:3f:23:d0:3d:c3:58:95:60:0d: cb:46:c4:71:a0:89:75:9b:5c:7e:7f:da:29:d7:20: 6c:9b:89:31:e4:40:48:06:d9:8e:37:73:74:e4:21: c5:bb:df:70:c8:b4:28:9e:c0:30:3c:63:73:c2:bb: e6:77:d7:a0:1b:20:4f:d7:3e:31:00:5a:77:fb:11: 26:d6:eb:9b:57:93:27:d5:fa:dc:ad:c7:a9:9f:d0: c9:a7:45:49:18:7b:0a:db:fc:d1:20:35:b9:87:b7: 35:3b:42:a7:e1:a7:9a:ca:29:de:30:f5:00:80:3d: 1e:e6:7b:73:32:bb:96:02:21:83:d5:ac:8e:aa:89: 85:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:43:2E:7B:10:48:85:6C:D2:1E:CB:E6:A2:6D:F5:58:AB:30:32:18 X509v3 Authority Key Identifier: keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ea:6e:8a:b4:b2:bf:46:87:cb:16:fd:cd:e1:a4:52:bc:0d: 76:f1:3f:48:9f:81:ea:06:bf:20:dd:0d:b1:cf:ca:c4:c5:39: 77:47:36:71:03:1c:67:1d:dc:4f:e8:48:23:79:c5:d8:2b:96: ab:2f:34:55:6f:5d:db:5b:d1:6d:d8:56:f1:a0:6a:58:f7:34: 93:36:14:df:82:97:a8:19:56:14:7d:f9:93:b1:e3:24:39:e4: 9c:e8:d4:e3:f0:0d:5a:3c:c6:e7:c9:85:4e:9e:69:80:e8:a8: 01:98:ad:ad:c7:d4:1b:0d:2a:5d:35:40:d9:1c:ab:fc:c0:44: ff:4e:a8:e4:53:91:9f:07:bd:aa:67:eb:59:24:7d:ac:be:12: 4e:04:64:17:a1:6d:c0:68:67:75:b7:cd:96:16:ec:e9:e0:eb: 18:c8:74:34:b6:c3:13:42:20:a4:ff:6f:5b:3e:e1:4c:7b:a0: 32:56:9f:7e:04:6d:dd:46:8f:d2:ea:e1:3c:78:27:b6:be:9b: 3f:42:25:49:8f:6c:0e:8f:38:f7:82:1e:1b:67:bd:08:86:bc: 0d:78:f2:e7:ad:a0:49:44:bf:09:9f:da:ae:89:25:67:63:c3: 7b:14:25:e6:a7:f9:7d:77:23:46:6e:94:e4:40:b1:c3:f2:9e: f9:b0:d7:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdzUCIxx1mRD9RYgkKM05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOWFlMzc2MTdmM2ZiZTQ4ODgwYjIzMGZlN2M3Y2UwZjBk YzQxYzcwHhcNMjUxMjI2MDcwMjIyWhcNMjUxMjI3MDcwMjIyWjAzMTEwLwYDVQQD Eyg5YjQzMmU3YjEwNDg4NTZjZDIxZWNiZTZhMjZkZjU1OGFiMzAzMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjuCvT6+xHz3Tlge/T4Pp5IttdIx A6QF/i0zRvumB/dMhL9lJxWnNdXgrbVs/MZDllbmV7KFecquICTnBV4gS36Xqr5I JH21yiw9H3FvRwiKxcprwhi7uSG7cLG6C6jc9KEg/dNGikDdI/cB8DG3Js7GwWGQ 4Q25NYNK4Co/I9A9w1iVYA3LRsRxoIl1m1x+f9op1yBsm4kx5EBIBtmON3N05CHF u99wyLQonsAwPGNzwrvmd9egGyBP1z4xAFp3+xEm1uubV5Mn1frcrcepn9DJp0VJ GHsK2/zRIDW5h7c1O0Kn4aeayineMPUAgD0e5ntzMruWAiGD1ayOqomF9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtDLnsQSIVs0h7L5qJt9VirMDIYMB8GA1UdIwQY MBaAFP2a43YX8/vkiICyMP58fODw3EHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jOGY0MWQtZWE3My00YTAzLWJhNzIt MGY1MDc3M2IwZWRlLzEvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jOGY0MWQtZWE3My00YTAzLWJhNzItMGY1MDc3M2IwZWRl LzEvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHupuirSy v0aHyxb9zeGkUrwNdvE/SJ+B6ga/IN0Nsc/KxMU5d0c2cQMcZx3cT+hII3nF2CuW qy80VW9d21vRbdhW8aBqWPc0kzYU34KXqBlWFH35k7HjJDnknOjU4/ANWjzG58mF Tp5pgOioAZitrcfUGw0qXTVA2Ryr/MBE/06o5FORnwe9qmfrWSR9rL4STgRkF6Ft wGhndbfNlhbs6eDrGMh0NLbDE0IgpP9vWz7hTHugMlaffgRt3UaP0urhPHgntr6b P0IlSY9sDo8494IeG2e9CIa8DXjy562gSUS/CZ/aroklZ2PDexQl5qf5fXcjRm6U 5ECxw/Ke+bDX+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:21 2025 by rpki-client