This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft File: zH_FX_DsJGI0pOPK_maqzyg6j2k.mft (raw, json) Hash identifier: cqj/5SAZfro3gv2skaO+/E1YkmN4b92vmzBoNvldn/A= Subject key identifier: 28:EE:2C:BC:E8:CA:81:20:E2:F2:92:14:52:77:39:A2:B0:4B:8E:D4 Authority key identifier: CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69 Certificate issuer: /CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69 Certificate serial: 019B5A51FECB7E4C5CE2ED1FF69F195940E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft Manifest number: 15 Signing time: Fri 26 Dec 2025 11:01:21 +0000 Manifest this update: Fri 26 Dec 2025 11:01:21 +0000 Manifest next update: Sat 27 Dec 2025 11:01:21 +0000 Files and hashes: 1: W5YPZIWt_0e5pMIwE3ftH-7D8_c.roa (hash: t67PIpwJMoJ8jovrWD6X9Mx3ZJ5TJP9SELrIwjLAx8k=) 2: zH_FX_DsJGI0pOPK_maqzyg6j2k.crl (hash: hI227Y/visfBC/1nKpZhhmxArlMGnkICVs/LNYYtwcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:fe:cb:7e:4c:5c:e2:ed:1f:f6:9f:19:59:40:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69 Validity Not Before: Dec 26 11:01:21 2025 GMT Not After : Dec 27 11:01:21 2025 GMT Subject: CN=28ee2cbce8ca8120e2f29214527739a2b04b8ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:40:9a:f2:c7:b0:ce:2c:ef:6d:6b:61:ba: 9c:0a:85:65:76:af:fa:75:b3:51:02:50:c6:0e:67: 2f:3c:23:5d:8b:73:7b:85:85:54:c7:ec:cb:f8:4e: 95:f2:ff:9c:71:fa:ac:09:3c:21:6d:3d:0b:25:96: 6a:a8:c9:ca:a1:e6:74:df:86:73:82:df:b4:40:98: 68:27:b4:f8:50:6a:53:8d:fd:b4:e1:12:1b:ee:f5: b2:0d:5b:ab:54:33:65:2b:92:1a:1d:7f:f5:8a:c2: 4a:fa:6d:fc:64:61:6b:e9:77:e0:66:0a:f0:51:0b: 50:65:c1:be:bc:f2:ea:fd:25:ff:25:d6:a7:c6:21: 68:59:08:75:54:46:ab:8f:0e:d9:a9:67:d9:d0:d3: 97:fc:e9:67:85:83:22:49:54:28:41:88:03:58:08: 0d:1b:d7:ca:f7:ea:87:1e:a8:3d:6a:d0:2d:23:6a: a3:8d:8e:5b:d6:c6:b4:e7:35:ae:24:3e:93:8e:cf: b9:70:bd:24:51:6a:b9:c1:ef:26:6c:7b:96:7f:43: 90:52:79:a9:14:5f:0e:a4:41:72:40:97:51:68:0e: 5a:2c:c0:bb:42:37:0f:f8:57:9c:60:b2:9c:75:a8: c4:cd:a3:f8:0e:f8:1a:80:9f:06:14:34:0d:fa:e7: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EE:2C:BC:E8:CA:81:20:E2:F2:92:14:52:77:39:A2:B0:4B:8E:D4 X509v3 Authority Key Identifier: keyid:CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:62:a0:2a:54:d3:8c:02:60:58:c6:45:01:bf:1b:13:ab:c1: fc:d4:04:3e:5d:c9:e2:36:6a:5e:a6:a1:40:1b:c2:cd:fa:97: 50:b2:96:01:2a:f2:01:2b:2d:b1:03:c9:3d:a3:0b:47:f2:93: 86:01:25:1a:94:d7:56:26:27:01:1f:45:e9:35:96:53:31:79: 8f:03:b5:19:a0:61:87:4d:0a:00:ed:e9:76:f9:33:5d:a5:f4: a9:68:10:e7:e2:4c:c1:20:7e:67:a4:a7:b1:91:4c:e6:f8:ef: 2c:71:3c:f5:54:f6:23:a9:6b:12:15:fd:09:41:ca:17:76:20: a3:21:4c:c7:e4:89:fe:ff:7a:8f:22:99:57:f7:d4:ef:a8:87: 0a:4f:61:63:85:c6:a8:74:2c:21:64:38:60:1b:ec:72:7e:cb: 31:d7:06:25:fc:76:a9:44:02:77:84:12:0a:96:75:c5:49:7e: 99:cc:f4:c4:7f:0b:2c:12:31:c2:26:b6:1a:c4:3e:e3:37:d1: 5f:90:d2:46:81:a9:7c:3a:81:f8:2b:cb:6b:5d:d6:bc:74:fc: 2b:8d:35:33:9f:5b:d6:7c:ed:93:0b:92:14:db:2d:73:a7:8a: e0:80:3c:b6:93:57:aa:72:e3:a7:37:af:07:54:79:86:63:1d: f0:38:6b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUf7Lfkxc4u0f9p8ZWUDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjN2ZjNTVmZjBlYzI0NjIzNGE0ZTNjYWZlNjZhYWNmMjgz YThmNjkwHhcNMjUxMjI2MTEwMTIxWhcNMjUxMjI3MTEwMTIxWjAzMTEwLwYDVQQD EygyOGVlMmNiY2U4Y2E4MTIwZTJmMjkyMTQ1Mjc3MzlhMmIwNGI4ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZAmvLHsM4s721rYbqcCoVldq/6 dbNRAlDGDmcvPCNdi3N7hYVUx+zL+E6V8v+ccfqsCTwhbT0LJZZqqMnKoeZ034Zz gt+0QJhoJ7T4UGpTjf204RIb7vWyDVurVDNlK5IaHX/1isJK+m38ZGFr6XfgZgrw UQtQZcG+vPLq/SX/JdanxiFoWQh1VEarjw7ZqWfZ0NOX/OlnhYMiSVQoQYgDWAgN G9fK9+qHHqg9atAtI2qjjY5b1sa05zWuJD6Tjs+5cL0kUWq5we8mbHuWf0OQUnmp FF8OpEFyQJdRaA5aLMC7QjcP+FecYLKcdajEzaP4DvgagJ8GFDQN+ucHJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjuLLzoyoEg4vKSFFJ3OaKwS47UMB8GA1UdIwQY MBaAFMx/xV/w7CRiNKTjyv5mqs8oOo9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82NTMxMjgtNTQ5MS00NTk0LTk4MGYt NDcwZDJiODQ2MzkzLzEvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82NTMxMjgtNTQ5MS00NTk0LTk4MGYtNDcwZDJiODQ2Mzkz LzEvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGKgKlTT jAJgWMZFAb8bE6vB/NQEPl3J4jZqXqahQBvCzfqXULKWASryASstsQPJPaMLR/KT hgElGpTXViYnAR9F6TWWUzF5jwO1GaBhh00KAO3pdvkzXaX0qWgQ5+JMwSB+Z6Sn sZFM5vjvLHE89VT2I6lrEhX9CUHKF3YgoyFMx+SJ/v96jyKZV/fU76iHCk9hY4XG qHQsIWQ4YBvscn7LMdcGJfx2qUQCd4QSCpZ1xUl+mcz0xH8LLBIxwia2GsQ+4zfR X5DSRoGpfDqB+CvLa13WvHT8K401M59b1nztkwuSFNstc6eK4IA8tpNXqnLjpzev B1R5hmMd8Dhr8w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client