This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json) Hash identifier: 1Bnpx9FzYAIAfqONBl13+QVOMGF63fyfgPk01G5KNT4= Subject key identifier: 01:5C:F3:6E:1E:FE:4A:E1:E5:AB:E2:50:64:08:E0:07:7F:1E:95:CD Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50 Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50 Certificate serial: 019AF276FF4D056F2CD9D8BE65AE23AB852A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=) 2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: Rpz8M0URPpQ2SnvCX9ifzE5PW0GgC0gb5KDgp30NVac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ff:4d:05:6f:2c:d9:d8:be:65:ae:23:ab:85:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=015cf36e1efe4ae1e5abe2506408e0077f1e95cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:f1:c7:48:df:6b:28:d5:6e:bd:25:cd:39: 16:a2:e6:91:14:f9:f4:de:8d:6e:ed:44:08:e4:9e: 06:56:ef:70:dd:93:0b:5a:64:89:54:01:a0:fe:d4: c7:23:46:73:7c:b4:30:26:4f:c7:f9:91:27:f3:b6: 3a:b4:0d:fd:ce:f0:bc:fd:49:1a:30:d7:a3:fe:1c: d2:4b:85:83:4f:ae:14:9d:0f:de:76:ac:9a:8b:b7: 13:ec:d1:c6:7c:29:31:ad:ba:91:c3:65:81:aa:f1: e2:eb:74:9f:57:62:2d:80:d8:e8:74:d5:52:48:48: 42:56:15:68:9b:88:9b:78:f1:be:66:7c:69:b6:33: c4:98:28:72:7b:23:fb:ea:13:f3:3c:6e:39:5b:10: 78:9d:b9:52:3a:4c:e2:08:dd:f7:f8:ac:f4:49:cf: 74:ee:0d:bd:25:82:66:87:04:50:df:b3:e0:07:63: f5:bc:7d:73:5c:3e:32:f7:21:ef:45:55:4a:d3:81: c8:3c:99:87:d8:47:37:b2:e6:ec:53:cc:2c:b1:dd: 18:e3:0d:35:b5:ef:93:8c:94:23:46:27:16:ea:53: e2:83:35:26:b7:c4:66:a1:28:b7:cd:31:9e:28:1a: d5:41:a2:21:fc:3a:6f:87:93:ae:29:45:75:8d:91: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:F3:6E:1E:FE:4A:E1:E5:AB:E2:50:64:08:E0:07:7F:1E:95:CD X509v3 Authority Key Identifier: keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8d:b9:a0:4e:aa:0f:3f:6a:89:03:ba:bb:0d:3e:23:b0:90: 3c:b6:07:0f:cb:f6:7e:5e:30:13:8c:b7:58:49:f2:01:f5:cd: 8a:de:b2:57:18:98:e8:e5:7f:96:1c:83:57:97:72:c0:a3:b5: cd:1c:de:39:fd:0a:83:f2:9a:5f:8c:72:af:34:68:cc:7f:e6: 53:9b:72:2f:22:9e:af:ef:6b:e9:aa:e9:3f:7c:df:8e:7b:5c: 2b:e8:ac:4d:9e:37:3a:a1:13:e2:f6:c6:1a:b9:29:96:06:d4: f2:12:87:1d:c2:56:e2:db:05:61:b0:a0:63:c9:2d:65:49:f9: 84:6b:ef:95:e3:97:28:e5:81:c4:4d:48:75:85:7b:ee:26:72: 6b:43:88:50:e0:61:fe:e7:bc:9a:c1:0b:c9:4e:96:ee:31:a4: 64:87:c0:53:b9:cb:63:04:04:3b:f9:92:90:a0:51:a0:e3:34: 99:77:5b:85:05:c3:8e:85:a8:4b:41:8b:8a:8b:dd:39:9b:2b: e8:d8:be:35:05:5e:d7:9b:e1:cf:a1:4d:30:8b:0d:c5:21:be: d8:6f:dd:2b:6b:fc:a9:83:09:50:bc:54:30:b8:68:41:99:aa: 3c:23:5f:83:0c:8e:5a:d0:df:f3:31:c1:44:5c:6b:3d:77:bf: df:4b:72:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv9NBW8s2di+Za4jq4UqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTlmNzFlMTVjMGYzOGNlYmEyNTdkMzAzMDRlZDQ0YmVh ODdjNTAwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD EygwMTVjZjM2ZTFlZmU0YWUxZTVhYmUyNTA2NDA4ZTAwNzdmMWU5NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydnxx0jfayjVbr0lzTkWouaRFPn0 3o1u7UQI5J4GVu9w3ZMLWmSJVAGg/tTHI0ZzfLQwJk/H+ZEn87Y6tA39zvC8/Uka MNej/hzSS4WDT64UnQ/edqyai7cT7NHGfCkxrbqRw2WBqvHi63SfV2ItgNjodNVS SEhCVhVom4ibePG+ZnxptjPEmChyeyP76hPzPG45WxB4nblSOkziCN33+Kz0Sc90 7g29JYJmhwRQ37PgB2P1vH1zXD4y9yHvRVVK04HIPJmH2Ec3subsU8wssd0Y4w01 te+TjJQjRicW6lPigzUmt8RmoSi3zTGeKBrVQaIh/Dpvh5OuKUV1jZFd7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFc824e/krh5aviUGQI4Ad/HpXNMB8GA1UdIwQY MBaAFGSZ9x4VwPOM66JX0wME7US+qHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDct NTc4NWIxNTczYTY5LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDctNTc4NWIxNTczYTY5 LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlY25oE6q Dz9qiQO6uw0+I7CQPLYHD8v2fl4wE4y3WEnyAfXNit6yVxiY6OV/lhyDV5dywKO1 zRzeOf0Kg/KaX4xyrzRozH/mU5tyLyKer+9r6arpP3zfjntcK+isTZ43OqET4vbG GrkplgbU8hKHHcJW4tsFYbCgY8ktZUn5hGvvleOXKOWBxE1IdYV77iZya0OIUOBh /ue8msELyU6W7jGkZIfAU7nLYwQEO/mSkKBRoOM0mXdbhQXDjoWoS0GLiovdOZsr 6Ni+NQVe15vhz6FNMIsNxSG+2G/dK2v8qYMJULxUMLhoQZmqPCNfgwyOWtDf8zHB RFxrPXe/30typw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:26 2025 by rpki-client