This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json) Hash identifier: Lxxnul4WfB60AdI34a3p2KdVLA95eTpmP9HJon4rV0g= Subject key identifier: EC:F2:78:98:C1:0A:37:75:99:AD:9D:9A:20:FF:16:D3:8D:5C:E8:69 Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Certificate serial: 019AF240190B4D5327C9F8B4D3FBEA5776A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft Manifest number: 02C1 Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=) 2: 9s50Q9-1ULqilThpHU79jiFEiIA.roa (hash: 5aJJUqP+R3fj8M4AoRNns1YealoNvLa9oSKi6PcBG8E=) 3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: JZX0Z0lfi8KWGb1M0u0X+szz+YZ9dA1vxdBVER5eKMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:19:0b:4d:53:27:c9:f8:b4:d3:fb:ea:57:76:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=ecf27898c10a377599ad9d9a20ff16d38d5ce869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:b8:b1:89:e8:87:93:11:77:ea:e2:df:d1: 10:11:ec:bb:75:85:cd:dd:4d:9b:d6:5c:f8:7a:8a: a7:5d:69:20:5c:e7:78:f8:78:93:30:b3:92:fd:de: f5:d7:c7:17:60:09:7a:53:9b:1f:17:ac:5b:c8:6c: 46:8d:5e:de:56:8b:cd:49:e5:ac:e8:e9:5a:b5:d4: e7:53:8d:ac:b9:c6:4b:23:1b:b2:7e:23:77:8f:53: 46:f3:ee:43:ea:16:4c:6e:36:4b:1e:55:89:a0:6c: d0:e1:08:ea:fb:10:05:1c:bb:5e:ad:c9:f9:74:4c: 5d:6a:2e:19:7a:b8:8c:a8:1f:07:0b:e6:46:ef:a6: 17:10:ad:de:a8:6c:82:c7:96:af:f3:8e:da:31:b6: d9:fb:0d:b2:a5:c6:66:27:ce:e1:7b:ac:58:c5:d8: ee:67:66:f0:4b:5e:24:93:c5:81:7e:cb:5a:88:f5: 4d:3c:0a:49:63:e6:48:95:37:94:dd:35:b1:b8:d7: d5:23:0b:7b:60:e2:15:c4:51:5f:56:7d:3a:12:15: 36:db:3b:53:b3:72:2d:93:cb:0b:3f:39:4e:22:ca: 8a:2a:0e:d5:b6:6e:5b:8b:27:22:7d:04:86:62:f3: 1c:18:bb:fe:ff:d9:72:35:7b:50:0e:19:50:fc:85: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F2:78:98:C1:0A:37:75:99:AD:9D:9A:20:FF:16:D3:8D:5C:E8:69 X509v3 Authority Key Identifier: keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bd:2a:02:6d:2b:f9:52:cd:ea:a3:96:e0:47:60:00:29:9a: 2f:71:cf:7c:f6:99:f6:fa:1f:18:c2:ad:63:33:60:55:62:a6: 07:a6:48:db:46:bd:4c:d5:0e:75:4d:78:1f:b2:a7:f7:5c:75: 85:87:31:6e:a6:73:1f:ed:b1:55:43:a8:93:6c:a2:ff:54:22: 36:ce:62:2b:35:dc:63:23:74:9d:b6:7d:ab:75:f8:14:b6:90: e6:d3:aa:b6:59:55:de:09:7a:f4:6c:52:8f:2b:39:13:a9:2e: ad:1a:ef:77:75:8f:3d:4b:d5:14:b9:e7:96:83:91:fd:e7:b9: 39:75:d6:93:cd:25:64:47:1d:06:25:50:cc:1a:d1:37:29:8f: 51:ba:dd:9f:1d:4d:a7:1d:67:08:cf:a6:2a:8c:e6:86:9d:e7: 00:8c:b9:4a:18:aa:6a:5e:2f:84:66:4f:fe:a0:12:fe:03:68: ee:ef:c1:7a:ca:5f:c2:2c:c5:9b:98:de:e7:18:68:8d:ec:27: 10:b2:1e:32:4c:74:e5:d2:4e:3e:32:6c:88:a8:23:8f:3a:d2: f8:09:d2:89:fa:27:a0:d3:3c:c8:8a:d2:d0:bd:8c:5f:3f:5f: a8:01:00:af:93:7f:99:4e:a3:9d:f8:5a:ba:3a:fc:7d:7e:02: 7d:33:e1:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBkLTVMnyfi00/vqV3ahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw ZDJiOTgwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EyhlY2YyNzg5OGMxMGEzNzc1OTlhZDlkOWEyMGZmMTZkMzhkNWNlODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtG4sYnoh5MRd+ri39EQEey7dYXN 3U2b1lz4eoqnXWkgXOd4+HiTMLOS/d7118cXYAl6U5sfF6xbyGxGjV7eVovNSeWs 6OlatdTnU42sucZLIxuyfiN3j1NG8+5D6hZMbjZLHlWJoGzQ4Qjq+xAFHLtercn5 dExdai4ZeriMqB8HC+ZG76YXEK3eqGyCx5av847aMbbZ+w2ypcZmJ87he6xYxdju Z2bwS14kk8WBfstaiPVNPApJY+ZIlTeU3TWxuNfVIwt7YOIVxFFfVn06EhU22ztT s3Itk8sLPzlOIsqKKg7Vtm5biycifQSGYvMcGLv+/9lyNXtQDhlQ/IW24QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzyeJjBCjd1ma2dmiD/FtONXOhpMB8GA1UdIwQY MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct Yzk5NGZkMTc0ZTZlLzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmr0qAm0r +VLN6qOW4EdgACmaL3HPfPaZ9vofGMKtYzNgVWKmB6ZI20a9TNUOdU14H7Kn91x1 hYcxbqZzH+2xVUOok2yi/1QiNs5iKzXcYyN0nbZ9q3X4FLaQ5tOqtllV3gl69GxS jys5E6kurRrvd3WPPUvVFLnnloOR/ee5OXXWk80lZEcdBiVQzBrRNymPUbrdnx1N px1nCM+mKozmhp3nAIy5Shiqal4vhGZP/qAS/gNo7u/BespfwizFm5je5xhojewn ELIeMkx05dJOPjJsiKgjjzrS+AnSifonoNM8yIrS0L2MXz9fqAEAr5N/mU6jnfha ujr8fX4CfTPhkg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:43 2025 by rpki-client