This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json) Hash identifier: AD7WkFYu/AziiWbbcRRaS8qFvKPjuJ8+C8lyIjwUQXU= Subject key identifier: 1E:7D:76:94:C0:6A:59:BE:26:30:F2:0D:2C:39:50:DB:14:96:25:83 Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Certificate serial: 019AF12E2DC37738B2499B50E6A0EE052EE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=) 2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: 0h4yeUnm6LJHTNgcDl6vSgI71kTO/x41VugGO6DFnkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2d:c3:77:38:b2:49:9b:50:e6:a0:ee:05:2e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=1e7d7694c06a59be2630f20d2c3950db14962583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:dd:32:9d:ad:1d:d4:ea:2b:5d:b4:80:fa: 93:96:80:27:de:cf:e4:84:73:21:cf:84:fa:bb:9f: 9f:18:5f:76:cb:5f:0a:bc:ac:6d:8f:43:24:3b:78: 7d:77:b8:69:5d:74:7e:06:c8:78:98:4f:a9:4f:c4: 6a:1d:66:e3:ff:79:74:36:f3:77:ee:42:57:59:c3: 11:69:78:fd:67:6e:19:6b:b7:aa:a2:08:5b:61:d6: 9d:51:67:80:b4:28:41:2b:7a:93:8f:38:7b:1e:00: db:82:ad:da:9b:c0:66:6e:a5:71:df:a5:1b:55:78: 1b:d0:d5:f8:83:13:9c:35:77:32:33:da:18:5e:77: 4b:db:2d:fc:04:73:30:04:78:c7:c4:5b:5c:97:4a: f3:d9:71:36:53:d6:e4:5f:34:e8:30:a6:5d:d2:79: f4:d2:4e:cc:9d:4d:59:f4:44:88:c8:7d:16:2b:f3: 4f:b4:ad:5b:38:36:39:11:7e:05:75:b2:d7:27:11: 84:30:32:19:cb:ad:46:4b:70:b7:cf:2f:59:e0:6e: 85:f9:3a:26:d4:ad:a8:23:37:dc:0c:d8:ef:f4:09: 91:41:4b:15:ff:43:4a:0e:a7:bd:6a:a6:8a:01:ee: 76:cc:e3:56:37:f7:e0:27:5c:0f:5d:fb:62:6e:da: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:76:94:C0:6A:59:BE:26:30:F2:0D:2C:39:50:DB:14:96:25:83 X509v3 Authority Key Identifier: keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:e3:c2:e0:98:09:56:ab:41:12:9c:0b:b6:d4:b3:ac:3e: 0b:15:9a:36:15:9b:60:64:7b:eb:87:cf:25:91:cd:93:f3:00: c4:7e:ac:11:3c:2a:57:ec:c5:e9:fd:5e:5f:0c:9a:97:4e:35: 6b:fb:83:cf:ae:3f:c0:81:8d:01:00:9f:be:7b:8f:41:40:53: 1c:81:38:56:47:83:39:a7:f4:e5:2d:42:96:f4:8e:1c:e9:a4: 61:9e:ed:3a:13:4c:87:e1:f6:c4:60:b0:48:f2:8b:f5:7a:a8: c8:f9:a9:09:42:cc:f9:77:81:b2:be:e5:26:8c:04:3d:33:07: 70:80:49:59:29:d0:5a:64:22:2b:2a:de:37:63:58:c9:04:ca: 60:e2:be:5a:9a:74:29:31:67:19:df:68:95:ca:72:76:2f:e4: 36:e5:54:0d:5b:1d:af:9d:58:12:f6:52:95:75:5f:05:3a:a3: 91:de:bb:c2:fb:46:7e:15:39:79:4a:cf:19:72:69:10:89:03: 27:4c:f7:fc:48:49:45:06:6a:68:d3:c0:15:45:f0:03:fb:c7: cf:6c:d9:eb:db:b0:e3:62:58:bd:ce:40:d9:bf:54:0d:0d:e8: 46:53:bf:ab:be:ad:dc:b9:84:3f:0b:3a:32:af:d9:45:83:07: 7c:cf:d7:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi3DdziySZtQ5qDuBS7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWM0MWExMjM3NjRjZjdkYzBmMmRiOTg0MWY3MzJhM2I5 NjEzNDMwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EygxZTdkNzY5NGMwNmE1OWJlMjYzMGYyMGQyYzM5NTBkYjE0OTYyNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt77dMp2tHdTqK120gPqTloAn3s/k hHMhz4T6u5+fGF92y18KvKxtj0MkO3h9d7hpXXR+Bsh4mE+pT8RqHWbj/3l0NvN3 7kJXWcMRaXj9Z24Za7eqoghbYdadUWeAtChBK3qTjzh7HgDbgq3am8BmbqVx36Ub VXgb0NX4gxOcNXcyM9oYXndL2y38BHMwBHjHxFtcl0rz2XE2U9bkXzToMKZd0nn0 0k7MnU1Z9ESIyH0WK/NPtK1bODY5EX4FdbLXJxGEMDIZy61GS3C3zy9Z4G6F+Tom 1K2oIzfcDNjv9AmRQUsV/0NKDqe9aqaKAe52zONWN/fgJ1wPXftibtpkxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB59dpTAalm+JjDyDSw5UNsUliWDMB8GA1UdIwQY MBaAFMycQaEjdkz33A8tuYQfcyo7lhNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUt MDYyNDdhOTc4ZDY5LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUtMDYyNDdhOTc4ZDY5 LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJP7jwuCY CVarQRKcC7bUs6w+CxWaNhWbYGR764fPJZHNk/MAxH6sETwqV+zF6f1eXwyal041 a/uDz64/wIGNAQCfvnuPQUBTHIE4VkeDOaf05S1ClvSOHOmkYZ7tOhNMh+H2xGCw SPKL9XqoyPmpCULM+XeBsr7lJowEPTMHcIBJWSnQWmQiKyreN2NYyQTKYOK+Wpp0 KTFnGd9olcpydi/kNuVUDVsdr51YEvZSlXVfBTqjkd67wvtGfhU5eUrPGXJpEIkD J0z3/EhJRQZqaNPAFUXwA/vHz2zZ69uw42JYvc5A2b9UDQ3oRlO/q76t3LmEPws6 Mq/ZRYMHfM/X7g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:07 2025 by rpki-client