This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json) Hash identifier: eYeuzAHe1Qc+PkQL/1bTEm0yLFp4PjQpS064EISB6xA= Subject key identifier: D4:D8:DB:6F:DE:92:EA:15:70:7D:19:6A:CA:7B:A7:63:8F:01:B1:F2 Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Certificate serial: 019B36B308AE6A0710EC9E0210E20FDECA36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 13:01:01 +0000 Manifest this update: Fri 19 Dec 2025 13:01:01 +0000 Manifest next update: Sat 20 Dec 2025 13:01:01 +0000 Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=) 2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: GanTgoJ+ZYb+PC8347AsCz0D8lZlEdh9bUGjTGQfMBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:08:ae:6a:07:10:ec:9e:02:10:e2:0f:de:ca:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Validity Not Before: Dec 19 13:01:01 2025 GMT Not After : Dec 20 13:01:01 2025 GMT Subject: CN=d4d8db6fde92ea15707d196aca7ba7638f01b1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:c5:de:2a:56:8b:04:c9:59:53:f8:6c:70: 92:82:09:1d:3c:29:cd:d9:30:0d:0a:14:5c:ae:e9: 64:e7:54:19:5b:be:b0:0a:4d:45:42:ea:71:28:b0: 67:eb:1b:ec:aa:63:14:e1:20:33:70:71:2a:94:ee: dc:bf:9e:0c:b3:fd:be:32:6a:01:52:fc:95:e2:a0: 32:57:31:0f:25:33:7f:be:fd:98:03:c9:b1:9a:44: 9a:71:82:f6:ad:d1:c8:b7:b5:bd:74:92:30:68:6b: 57:88:ea:81:cf:c1:7c:ea:bc:37:38:1d:f1:3c:36: ee:e5:89:46:ee:d4:30:02:29:78:63:f7:0e:12:7d: c6:f0:ec:9b:db:1c:0e:03:64:6d:ec:c8:e6:e3:e9: 23:d9:7f:8a:59:d8:bf:be:e1:02:a1:ee:bf:e6:ca: dd:d4:48:b4:b4:b7:60:07:89:35:4b:d0:cd:0f:cb: a2:9f:38:61:d9:f8:2a:00:bc:60:90:9b:e2:fb:87: d7:06:ec:36:97:1f:ed:c8:ed:56:b5:5d:35:fa:b3: c7:85:c1:c1:bf:61:e8:9b:f0:c6:c0:38:b2:3e:fd: 49:73:c4:3d:40:9a:6b:1e:bb:e3:1a:20:31:5d:44: 96:97:ed:82:86:b6:50:71:21:cd:67:ef:51:e8:50: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:DB:6F:DE:92:EA:15:70:7D:19:6A:CA:7B:A7:63:8F:01:B1:F2 X509v3 Authority Key Identifier: keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ca:cc:52:91:9d:70:1e:f7:40:f4:ff:1e:bf:9f:e6:86:a9: 25:08:58:38:1d:d8:a5:e0:8b:06:73:e7:18:13:af:26:1d:1c: ce:ae:02:63:ff:21:1f:4a:b9:1c:c3:77:74:fa:cd:94:bf:43: 3c:18:ce:d4:32:32:af:89:57:68:9b:ac:49:a8:6a:01:bb:06: dc:8a:29:7c:1c:2a:5d:0a:c0:99:b3:45:6c:d7:76:17:33:25: 08:db:3c:7a:83:03:e5:b3:3b:65:11:1f:98:aa:eb:3b:70:84: 6c:b9:f4:84:29:1e:cb:37:19:42:56:79:b9:86:85:00:27:8a: d8:58:76:63:07:43:c4:bc:c5:6b:f8:5f:62:f5:49:eb:2b:58: d0:39:88:0d:ff:77:5c:58:9a:80:82:3e:2c:dc:cc:18:85:2a: 38:2d:f6:05:d7:00:6d:3b:f9:74:34:9b:01:fb:a7:50:c2:2c: a0:a7:16:0c:89:90:39:36:c5:e2:b6:25:44:05:9e:20:05:ae: d0:a2:08:c6:e9:e7:9f:1f:66:f4:a5:89:d0:28:2c:11:b1:eb: 8b:b9:36:cd:8b:dd:29:59:b6:f8:2f:20:ea:54:1e:2a:a9:9b: 74:88:fe:39:80:9e:d6:55:80:d6:3f:7c:b2:0a:b1:45:36:63: 25:55:89:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2swiuagcQ7J4CEOIP3so2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWM0MWExMjM3NjRjZjdkYzBmMmRiOTg0MWY3MzJhM2I5 NjEzNDMwHhcNMjUxMjE5MTMwMTAxWhcNMjUxMjIwMTMwMTAxWjAzMTEwLwYDVQQD EyhkNGQ4ZGI2ZmRlOTJlYTE1NzA3ZDE5NmFjYTdiYTc2MzhmMDFiMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC/F3ipWiwTJWVP4bHCSggkdPCnN 2TANChRcrulk51QZW76wCk1FQupxKLBn6xvsqmMU4SAzcHEqlO7cv54Ms/2+MmoB UvyV4qAyVzEPJTN/vv2YA8mxmkSacYL2rdHIt7W9dJIwaGtXiOqBz8F86rw3OB3x PDbu5YlG7tQwAil4Y/cOEn3G8Oyb2xwOA2Rt7Mjm4+kj2X+KWdi/vuECoe6/5srd 1Ei0tLdgB4k1S9DND8uinzhh2fgqALxgkJvi+4fXBuw2lx/tyO1WtV01+rPHhcHB v2Hom/DGwDiyPv1Jc8Q9QJprHrvjGiAxXUSWl+2ChrZQcSHNZ+9R6FAMrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTY22/ekuoVcH0Zasp7p2OPAbHyMB8GA1UdIwQY MBaAFMycQaEjdkz33A8tuYQfcyo7lhNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUt MDYyNDdhOTc4ZDY5LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUtMDYyNDdhOTc4ZDY5 LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMrMUpGd cB73QPT/Hr+f5oapJQhYOB3YpeCLBnPnGBOvJh0czq4CY/8hH0q5HMN3dPrNlL9D PBjO1DIyr4lXaJusSahqAbsG3IopfBwqXQrAmbNFbNd2FzMlCNs8eoMD5bM7ZREf mKrrO3CEbLn0hCkeyzcZQlZ5uYaFACeK2Fh2YwdDxLzFa/hfYvVJ6ytY0DmIDf93 XFiagII+LNzMGIUqOC32BdcAbTv5dDSbAfunUMIsoKcWDImQOTbF4rYlRAWeIAWu 0KIIxunnnx9m9KWJ0CgsEbHri7k2zYvdKVm2+C8g6lQeKqmbdIj+OYCe1lWA1j98 sgqxRTZjJVWJMg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:24 2025 by rpki-client