This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json) Hash identifier: cMHk5sgFIl7XI3xXM7dnLIJdGSCqmUGA79fY1PEa4Tw= Subject key identifier: 10:C9:F6:1B:95:B3:44:09:65:19:24:D6:DC:04:AA:62:A3:9A:11:37 Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97 Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97 Certificate serial: 019B21E29C5ADC8AECA7FE1271F87AEE19CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft Manifest number: 072A Signing time: Mon 15 Dec 2025 12:00:57 +0000 Manifest this update: Mon 15 Dec 2025 12:00:57 +0000 Manifest next update: Tue 16 Dec 2025 12:00:57 +0000 Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=) 2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=) 3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: Vu3KLoDt3Qp5s+0GsEYojvnAleoMppjJnPJCtXwE/sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:9c:5a:dc:8a:ec:a7:fe:12:71:f8:7a:ee:19:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97 Validity Not Before: Dec 15 12:00:57 2025 GMT Not After : Dec 16 12:00:57 2025 GMT Subject: CN=10c9f61b95b34409651924d6dc04aa62a39a1137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:29:5e:35:63:1c:74:c6:11:cf:56:cc:f2: b3:6a:b6:cb:48:3b:17:85:86:0b:11:22:f2:f3:f3: bd:6f:6f:88:55:60:22:77:ab:91:d0:43:51:1d:64: a9:dd:cd:ed:a5:f2:25:b5:c4:52:51:05:8d:9d:fd: 35:37:78:46:e1:34:76:03:b2:3a:bb:55:fb:0a:0c: 25:e9:d5:e0:0b:b3:fd:c9:59:da:8d:5a:81:f1:8c: 56:fd:ee:57:8f:af:ca:8c:a8:30:0a:9b:92:0a:c6: ac:1c:41:c6:d6:c9:03:37:1e:70:12:b5:c5:2b:d9: 08:9b:c0:44:8c:ee:3a:17:58:7a:9a:50:ad:4d:ed: 22:1c:dc:a7:b0:0d:35:92:a8:e5:06:3e:55:f9:03: a8:63:12:53:7d:f2:02:dd:6e:4c:6d:b5:3c:00:76: ab:49:3d:c3:78:01:12:eb:1d:f3:e0:8a:99:e4:eb: 31:48:98:bb:70:ec:82:5e:7a:c8:30:8f:f5:18:c8: 7c:0e:72:b7:52:0d:c6:7c:52:a6:b6:00:b4:3d:1e: 46:f8:cd:dd:ef:d0:c7:3e:88:f2:58:11:49:3a:31: 59:fe:82:f7:ad:5d:3f:a2:74:33:f0:79:fd:8d:e4: ef:61:fc:59:72:3d:ee:93:45:6a:c0:60:d1:8c:32: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:F6:1B:95:B3:44:09:65:19:24:D6:DC:04:AA:62:A3:9A:11:37 X509v3 Authority Key Identifier: keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:39:e3:88:7d:33:9f:3f:b7:7a:70:51:03:b6:9f:c4:1e:66: c7:11:7a:26:cf:da:89:74:3e:13:89:9d:bd:88:be:0d:cd:7e: fb:e1:cc:bb:a5:7d:f6:ff:5d:64:3d:d7:74:ff:b0:0f:e2:09: 6a:23:f0:df:ed:af:fb:8e:db:89:e7:9e:a2:60:9b:f6:96:1d: 8d:3d:d0:5b:80:1f:92:24:af:9b:2e:34:8c:72:05:a9:b4:5b: 0c:06:c8:95:80:23:30:ab:92:aa:bb:cb:55:fa:1b:ff:5e:5c: 29:7e:40:87:79:14:53:31:73:d5:74:d5:34:8b:67:c6:41:a7: 14:a2:f9:4d:d2:e3:f1:23:ec:c1:88:c5:05:2d:f1:41:a8:22: cb:87:d8:c9:21:37:d6:8f:bf:8b:7e:45:57:43:17:9b:5e:c7: b7:15:be:3a:77:97:3b:3f:a0:15:59:8f:f3:0e:61:4c:c4:3d: b9:2a:7c:a7:5a:79:a0:11:96:41:1f:35:13:37:ec:28:60:1a: 19:66:83:74:0a:ef:10:6a:0d:d1:e6:d2:02:4f:b1:a3:98:73: 90:50:fe:e1:25:e3:4e:83:c0:a3:4c:4e:b6:94:3b:ee:c3:29: 26:3a:c6:b3:fd:00:91:d6:75:36:15:37:68:1a:88:03:0f:ab: 9f:e8:60:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4pxa3Irsp/4Scfh67hnPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk MGRjOTcwHhcNMjUxMjE1MTIwMDU3WhcNMjUxMjE2MTIwMDU3WjAzMTEwLwYDVQQD EygxMGM5ZjYxYjk1YjM0NDA5NjUxOTI0ZDZkYzA0YWE2MmEzOWExMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkncpXjVjHHTGEc9WzPKzarbLSDsX hYYLESLy8/O9b2+IVWAid6uR0ENRHWSp3c3tpfIltcRSUQWNnf01N3hG4TR2A7I6 u1X7Cgwl6dXgC7P9yVnajVqB8YxW/e5Xj6/KjKgwCpuSCsasHEHG1skDNx5wErXF K9kIm8BEjO46F1h6mlCtTe0iHNynsA01kqjlBj5V+QOoYxJTffIC3W5MbbU8AHar ST3DeAES6x3z4IqZ5OsxSJi7cOyCXnrIMI/1GMh8DnK3Ug3GfFKmtgC0PR5G+M3d 79DHPojyWBFJOjFZ/oL3rV0/onQz8Hn9jeTvYfxZcj3uk0VqwGDRjDLpvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDJ9huVs0QJZRkk1twEqmKjmhE3MB8GA1UdIwQY MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2 LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTnjiH0z nz+3enBRA7afxB5mxxF6Js/aiXQ+E4mdvYi+Dc1+++HMu6V99v9dZD3XdP+wD+IJ aiPw3+2v+47bieeeomCb9pYdjT3QW4AfkiSvmy40jHIFqbRbDAbIlYAjMKuSqrvL Vfob/15cKX5Ah3kUUzFz1XTVNItnxkGnFKL5TdLj8SPswYjFBS3xQagiy4fYySE3 1o+/i35FV0MXm17HtxW+OneXOz+gFVmP8w5hTMQ9uSp8p1p5oBGWQR81EzfsKGAa GWaDdArvEGoN0ebSAk+xo5hzkFD+4SXjToPAo0xOtpQ77sMpJjrGs/0AkdZ1NhU3 aBqIAw+rn+hgYg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:31:38 2025 by rpki-client