This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json) Hash identifier: EoAOsDzqiYYmC19cGKi6IjOgNJr427EcB9oxJWRBUXA= Subject key identifier: 52:48:C8:49:79:98:94:90:8E:A5:FA:CB:20:C4:CD:6F:AA:39:C0:D3 Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22 Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22 Certificate serial: 019B3CEBB4D2DC513577EB1ABDA24F837A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft Manifest number: 16C8 Signing time: Sat 20 Dec 2025 18:00:38 +0000 Manifest this update: Sat 20 Dec 2025 18:00:38 +0000 Manifest next update: Sun 21 Dec 2025 18:00:38 +0000 Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=) 2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=) 3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: Gr9nL4dDYwgjb3M7+HUnB60SOqJny+VhszakeR27dd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b4:d2:dc:51:35:77:eb:1a:bd:a2:4f:83:7a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22 Validity Not Before: Dec 20 18:00:38 2025 GMT Not After : Dec 21 18:00:38 2025 GMT Subject: CN=5248c849799894908ea5facb20c4cd6faa39c0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:ea:18:63:12:fb:c0:96:4e:e3:e4:e0:d8: 44:67:34:ca:99:8e:8d:a7:b2:84:5a:3b:1f:40:98: c9:d2:5a:ce:84:78:b6:9e:48:d2:02:bc:12:25:9f: c3:ac:1a:cc:c9:a2:54:85:0d:12:cb:b9:27:98:a7: 51:2e:7b:19:aa:f1:c5:a2:d6:25:9e:b9:1d:48:e7: 11:32:46:5f:f7:79:8c:bc:5c:08:b2:a0:c1:a6:04: e9:b8:06:ed:7e:5d:1c:9f:d3:2f:fe:1c:75:1f:63: cd:7e:9c:85:86:b1:1a:64:5a:7f:c7:5a:3a:38:e5: d0:9a:2c:7d:90:b4:a4:8e:69:1b:ec:4a:2f:10:49: 75:64:70:16:81:e1:51:3e:f2:4e:29:91:7f:1f:fc: dd:06:ae:30:5d:c7:bb:0d:36:2d:28:57:fb:b5:63: ff:d6:2b:e8:ab:82:41:aa:41:f5:27:b7:ce:54:c3: a4:b0:28:2a:ec:79:3c:23:01:55:1b:72:d4:63:d0: 28:ed:09:7b:95:1a:bf:1b:11:55:df:a1:54:f6:65: 57:0a:5e:28:09:60:1d:e0:9c:a9:b2:d9:07:f8:3d: 5a:3c:dd:f7:f3:82:ca:2f:5f:cf:27:71:3a:a8:f5: 1f:04:65:8a:8b:06:ce:3d:87:b7:dc:36:a7:c3:a3: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:C8:49:79:98:94:90:8E:A5:FA:CB:20:C4:CD:6F:AA:39:C0:D3 X509v3 Authority Key Identifier: keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3b:98:39:5a:14:69:c5:ee:7c:61:33:0c:15:19:dc:45:72: a6:a2:96:fa:3b:f2:b4:3a:e5:b0:a7:8b:8d:6d:72:a2:f9:93: c1:67:d9:6b:28:71:a0:f6:39:ca:97:fb:dc:0f:55:8a:be:68: f3:b2:78:59:0d:95:f9:97:7f:24:d8:da:6d:46:7f:9f:b2:32: b1:ea:8b:d7:56:6c:15:24:39:02:c3:3f:bb:1f:8c:23:5f:1f: 54:a0:b6:69:a9:3b:fa:29:84:6d:c9:6a:0a:86:0a:b3:21:30: 76:0d:c5:7b:15:0c:f3:37:47:1f:e3:84:d4:cb:ed:5b:ee:e8: 39:c6:c4:a7:f0:e2:f1:f8:06:29:bc:b6:09:fd:4c:8b:76:f1: 1f:7c:5b:98:7d:35:48:2d:d1:0b:63:45:e3:2c:89:f0:d8:28: 15:b8:d0:20:fb:9f:c0:30:4e:72:a3:ab:2e:5c:a2:0f:f5:a2: 64:b0:ff:95:e1:a7:8c:80:2b:71:82:bf:3a:72:70:8f:0c:bf: f3:c6:94:ed:a2:02:e8:e2:e1:75:72:92:52:c0:0c:47:4e:8f: ca:f5:ef:71:98:1f:c4:88:69:93:a4:24:eb:99:92:51:49:71: 16:97:25:35:a6:8d:68:0b:d8:be:39:83:21:f2:2f:19:c9:42: 18:3f:6d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867TS3FE1d+savaJPg3qYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMzdjYTNhYmNhNWUxNGFjMTFiYzdmM2MxNTYyYTY0ZDYz OTFkMjIwHhcNMjUxMjIwMTgwMDM4WhcNMjUxMjIxMTgwMDM4WjAzMTEwLwYDVQQD Eyg1MjQ4Yzg0OTc5OTg5NDkwOGVhNWZhY2IyMGM0Y2Q2ZmFhMzljMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRzqGGMS+8CWTuPk4NhEZzTKmY6N p7KEWjsfQJjJ0lrOhHi2nkjSArwSJZ/DrBrMyaJUhQ0Sy7knmKdRLnsZqvHFotYl nrkdSOcRMkZf93mMvFwIsqDBpgTpuAbtfl0cn9Mv/hx1H2PNfpyFhrEaZFp/x1o6 OOXQmix9kLSkjmkb7EovEEl1ZHAWgeFRPvJOKZF/H/zdBq4wXce7DTYtKFf7tWP/ 1ivoq4JBqkH1J7fOVMOksCgq7Hk8IwFVG3LUY9Ao7Ql7lRq/GxFV36FU9mVXCl4o CWAd4JypstkH+D1aPN3384LKL1/PJ3E6qPUfBGWKiwbOPYe33Danw6M9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJIyEl5mJSQjqX6yyDEzW+qOcDTMB8GA1UdIwQY MBaAFM43yjq8peFKwRvH88FWKmTWOR0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQt MDM4MDM1ZDgwYzBiLzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQtMDM4MDM1ZDgwYzBi LzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATuYOVoU acXufGEzDBUZ3EVypqKW+jvytDrlsKeLjW1yovmTwWfZayhxoPY5ypf73A9Vir5o 87J4WQ2V+Zd/JNjabUZ/n7IyseqL11ZsFSQ5AsM/ux+MI18fVKC2aak7+imEbclq CoYKsyEwdg3FexUM8zdHH+OE1MvtW+7oOcbEp/Di8fgGKby2Cf1Mi3bxH3xbmH01 SC3RC2NF4yyJ8NgoFbjQIPufwDBOcqOrLlyiD/WiZLD/leGnjIArcYK/OnJwjwy/ 88aU7aIC6OLhdXKSUsAMR06PyvXvcZgfxIhpk6Qk65mSUUlxFpclNaaNaAvYvjmD IfIvGclCGD9tsg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:01:33 2025 by rpki-client