This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json) Hash identifier: WpdNlOa0Y4tWUhhdXVxvVhHNxQXC0caNQmYBxe2Pzsc= Subject key identifier: 78:EF:32:0E:B5:42:C3:4C:6A:65:67:90:8B:72:E8:F9:25:DF:D2:AF Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Certificate serial: 019AF31B53CB1F066CEE3DBB24355F6C809F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft Manifest number: 0375 Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=) 2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: G1rT2qguZ+ULBctvfwOsq00bG40umx87w/Af5iyqmvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:53:cb:1f:06:6c:ee:3d:bb:24:35:5f:6c:80:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=78ef320eb542c34c6a6567908b72e8f925dfd2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:ed:21:b5:d1:6f:05:28:41:96:eb:4d:bf: 6f:9e:dd:8d:53:47:83:c0:50:57:f6:65:fd:8b:89: ee:2b:85:c2:bf:4f:65:f7:84:67:ea:8f:c5:db:e3: 10:24:3f:52:ee:6a:af:ef:40:ae:90:72:12:7f:85: 6b:e0:a0:a5:f9:a6:59:34:b2:d7:86:9a:54:53:fd: 57:1a:b3:23:7a:95:cb:72:74:aa:83:62:60:45:fa: 70:c2:85:19:36:49:c7:dd:81:62:94:e0:f1:1f:a8: 9a:87:18:c3:cf:04:e4:70:d6:a8:3c:8c:42:43:d5: 5a:96:b7:f8:94:ce:bf:9c:15:e1:68:85:60:43:90: 6f:6d:a1:91:be:42:34:5a:64:60:cf:b7:e2:22:76: fc:90:75:49:36:75:9b:cd:85:99:5a:b0:3d:d3:8d: e9:36:82:ba:f0:69:f3:76:d9:02:75:82:64:f3:81: 60:28:94:c1:fe:c2:f3:1e:8b:3a:d3:63:2a:8e:8e: 5a:1b:60:1c:36:a2:a5:e4:41:4a:21:44:9b:f4:16: c4:32:d7:eb:9e:cf:4b:7b:68:a4:77:8e:e4:29:77: ce:43:71:41:a8:e0:68:bc:ee:2e:7e:5f:48:72:32: f2:fb:7d:f0:83:90:29:0d:f8:c6:2d:cb:17:79:70: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:32:0E:B5:42:C3:4C:6A:65:67:90:8B:72:E8:F9:25:DF:D2:AF X509v3 Authority Key Identifier: keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:77:a1:b3:24:ed:e5:31:a8:14:38:8e:5b:4f:94:82:e1:6a: 18:18:a8:de:bc:ae:80:a6:58:5b:f8:96:a1:1d:5a:47:21:9d: 6b:ce:2d:eb:5b:84:27:65:fb:07:16:fe:09:15:35:ed:c1:31: 7e:09:5b:6d:2c:80:fe:47:52:15:df:31:66:c6:1a:74:8c:47: ac:f9:1a:0a:94:32:2f:f2:70:4e:ac:97:ac:b2:1b:16:54:b2: 2f:ec:31:4c:ce:a0:34:33:ae:36:36:1b:62:a4:ea:ed:50:53: 44:e0:f7:b6:91:01:00:01:f7:8b:cc:7d:a1:8a:c7:25:3b:6d: ad:46:55:ec:c8:a6:ef:fa:cc:49:b0:57:9f:55:c9:9a:a1:90: 5a:c6:86:9b:dc:8f:07:27:91:25:a7:fc:b6:91:80:e4:f7:7d: 65:ec:a7:a8:61:fb:36:59:e5:a5:0f:bb:d0:1f:d1:02:3c:ae: e5:f4:98:cf:8b:c9:08:2f:71:3c:ca:f6:08:30:42:d6:39:30: d3:a9:e5:fd:bd:d3:ed:72:b1:a2:cb:b3:f4:90:5e:ab:43:2d: 17:c2:bd:02:81:a0:b0:8e:63:dd:fc:85:18:74:e7:7b:f6:b3: 3d:58:67:74:0d:33:7b:16:44:43:44:20:38:30:80:e3:ed:26: d0:a5:a3:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1PLHwZs7j27JDVfbICfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm OTM4MjcwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD Eyg3OGVmMzIwZWI1NDJjMzRjNmE2NTY3OTA4YjcyZThmOTI1ZGZkMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqHtIbXRbwUoQZbrTb9vnt2NU0eD wFBX9mX9i4nuK4XCv09l94Rn6o/F2+MQJD9S7mqv70CukHISf4Vr4KCl+aZZNLLX hppUU/1XGrMjepXLcnSqg2JgRfpwwoUZNknH3YFilODxH6iahxjDzwTkcNaoPIxC Q9Valrf4lM6/nBXhaIVgQ5BvbaGRvkI0WmRgz7fiInb8kHVJNnWbzYWZWrA9043p NoK68GnzdtkCdYJk84FgKJTB/sLzHos602Mqjo5aG2AcNqKl5EFKIUSb9BbEMtfr ns9Le2ikd47kKXfOQ3FBqOBovO4ufl9IcjLy+33wg5ApDfjGLcsXeXC3KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjvMg61QsNMamVnkIty6Pkl39KvMB8GA1UdIwQY MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXehsyTt 5TGoFDiOW0+UguFqGBio3ryugKZYW/iWoR1aRyGda84t61uEJ2X7Bxb+CRU17cEx fglbbSyA/kdSFd8xZsYadIxHrPkaCpQyL/JwTqyXrLIbFlSyL+wxTM6gNDOuNjYb YqTq7VBTROD3tpEBAAH3i8x9oYrHJTttrUZV7Mim7/rMSbBXn1XJmqGQWsaGm9yP ByeRJaf8tpGA5Pd9ZeynqGH7NlnlpQ+70B/RAjyu5fSYz4vJCC9xPMr2CDBC1jkw 06nl/b3T7XKxosuz9JBeq0MtF8K9AoGgsI5j3fyFGHTne/azPVhndA0zexZEQ0Qg ODCA4+0m0KWjvw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:19 2025 by rpki-client