This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json) Hash identifier: iDiv50Ob5IEY8HQJ13flVlAL/8ICYbMy3ZUhFl/tOHk= Subject key identifier: 66:EF:C9:D3:E6:DF:29:14:A1:20:C8:89:8C:DD:83:5E:7D:95:AD:32 Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b Certificate serial: 019B1CBC4EEB213BCB13978B8833F06676E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 12:01:01 +0000 Manifest this update: Sun 14 Dec 2025 12:01:01 +0000 Manifest next update: Mon 15 Dec 2025 12:01:01 +0000 Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=) 2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=) 3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: 5OUaG0uRFk/ExYDoQrhxrhabA397BbfGwA32dE9XHcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:4e:eb:21:3b:cb:13:97:8b:88:33:f0:66:76:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b Validity Not Before: Dec 14 12:01:01 2025 GMT Not After : Dec 15 12:01:01 2025 GMT Subject: CN=66efc9d3e6df2914a120c8898cdd835e7d95ad32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:26:0b:5d:97:27:f3:81:b9:e3:42:78:d7: c3:94:94:3b:76:e1:ad:8e:cc:41:b4:16:7d:2f:5a: 2a:98:e7:08:04:dd:4a:4a:0d:b9:ca:34:3e:98:ce: 40:72:4f:ad:1b:80:6c:19:da:34:86:85:70:d5:51: 17:89:eb:16:be:91:be:fd:30:1b:b5:60:12:a9:91: 9a:6d:47:56:9a:9a:f1:af:99:7e:b6:44:05:5d:b8: 6e:eb:04:5f:94:0a:ac:4e:2e:d5:73:8e:50:61:83: 3c:ba:39:5c:ee:45:a0:71:91:e8:93:39:b3:69:1c: 3d:ad:db:88:0b:4f:ed:e2:81:70:1e:09:4f:5a:5f: 9d:91:cb:74:0d:4c:d1:3a:a1:48:17:7d:d9:11:d4: d1:39:18:11:61:eb:d9:f0:12:8a:1c:9d:f3:dd:53: aa:68:5f:66:45:a7:cf:c3:e7:56:de:49:f9:55:61: 6d:49:11:0c:59:a2:75:f3:a0:17:3b:7c:ea:41:4d: 78:55:5b:88:79:4c:d3:49:7a:1e:7a:7a:87:a7:b0: e0:38:d8:85:be:c4:34:59:58:e8:cd:97:0b:86:4f: f8:d1:df:2a:d2:fd:0e:77:90:a8:de:33:92:fd:2a: e3:68:9a:cb:74:99:59:6c:4b:dc:48:e2:35:ac:07: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EF:C9:D3:E6:DF:29:14:A1:20:C8:89:8C:DD:83:5E:7D:95:AD:32 X509v3 Authority Key Identifier: keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b3:24:fb:a0:01:37:52:cc:99:8c:93:9c:20:9d:12:30:96: ce:3f:44:f8:44:f1:6f:a2:40:35:f0:9f:d4:4b:2a:0a:d6:f5: 9c:f8:94:d3:a1:09:99:af:f6:79:f4:62:3c:43:11:73:2d:44: 01:27:ed:03:e2:75:38:fb:8b:23:48:04:ed:1e:6c:c6:da:8e: 6b:b3:21:12:6a:9a:5f:37:b4:ef:a7:88:91:d4:e4:2b:16:0c: d6:e0:72:30:22:af:77:3b:0f:07:90:6b:e1:87:b8:e9:08:38: de:38:a5:c5:97:f0:f1:26:68:68:f1:58:80:ee:88:c9:e4:b0: d5:45:b7:80:de:64:c8:4e:97:a6:06:fa:17:f1:9c:04:05:71: 16:f6:7b:ff:26:c3:ed:c6:b4:d1:4c:a1:36:a1:37:5c:2c:92: 1f:ec:c4:82:6b:62:b9:c8:9b:d6:1b:22:c7:c3:e5:ac:4e:91: b1:ad:df:b6:a1:25:4c:7f:1e:ad:9f:33:3f:19:c2:f2:6f:7b: 39:66:fd:32:be:d8:e7:d5:42:b7:bd:c1:d9:a1:64:94:2a:0f: 2e:d0:f5:f0:72:0f:8f:6f:17:7b:ee:2f:90:19:34:f3:55:cc: a5:fd:b8:f1:f4:65:2b:ad:d4:84:f8:da:a1:ec:3d:24:87:fe: 56:dd:62:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvE7rITvLE5eLiDPwZnbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTI0MmU2YzdlYmQ4MmEyM2ZhMWEwOGYzOTZlYmU1YWIz NGNmNmIwHhcNMjUxMjE0MTIwMTAxWhcNMjUxMjE1MTIwMTAxWjAzMTEwLwYDVQQD Eyg2NmVmYzlkM2U2ZGYyOTE0YTEyMGM4ODk4Y2RkODM1ZTdkOTVhZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOgmC12XJ/OBueNCeNfDlJQ7duGt jsxBtBZ9L1oqmOcIBN1KSg25yjQ+mM5Ack+tG4BsGdo0hoVw1VEXiesWvpG+/TAb tWASqZGabUdWmprxr5l+tkQFXbhu6wRflAqsTi7Vc45QYYM8ujlc7kWgcZHokzmz aRw9rduIC0/t4oFwHglPWl+dkct0DUzROqFIF33ZEdTRORgRYevZ8BKKHJ3z3VOq aF9mRafPw+dW3kn5VWFtSREMWaJ186AXO3zqQU14VVuIeUzTSXoeenqHp7DgONiF vsQ0WVjozZcLhk/40d8q0v0Od5Co3jOS/SrjaJrLdJlZbEvcSOI1rAcpiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbvydPm3ykUoSDIiYzdg159la0yMB8GA1UdIwQY MBaAFM0SQubH69gqI/oaCPOW6+WrNM9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEt ZjYwMzUzODQxMmM4LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEtZjYwMzUzODQxMmM4 LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbMk+6AB N1LMmYyTnCCdEjCWzj9E+ETxb6JANfCf1EsqCtb1nPiU06EJma/2efRiPEMRcy1E ASftA+J1OPuLI0gE7R5sxtqOa7MhEmqaXze076eIkdTkKxYM1uByMCKvdzsPB5Br 4Ye46Qg43jilxZfw8SZoaPFYgO6IyeSw1UW3gN5kyE6Xpgb6F/GcBAVxFvZ7/ybD 7ca00UyhNqE3XCySH+zEgmtiucib1hsix8PlrE6Rsa3ftqElTH8erZ8zPxnC8m97 OWb9Mr7Y59VCt73B2aFklCoPLtD18HIPj28Xe+4vkBk081XMpf248fRlK63UhPja oew9JIf+Vt1ibg== -----END CERTIFICATE-----Generated at Sun Dec 14 22:03:07 2025 by rpki-client