This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json) Hash identifier: 19WBwEbI2M5mPrQq8tIgdDh6mncvWVJzBm6cqpRKe4g= Subject key identifier: 40:28:F7:E4:6F:85:9D:D7:C3:B8:CB:90:B7:15:38:5F:5F:FE:49:08 Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22 Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22 Certificate serial: 019AF19B40F0E8F078B58B3F2742CA03FFF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft Manifest number: 16A1 Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=) 2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=) 3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: csZbPV8kZlcogVPRhqLuewZyk5rOZnRRN3rINodd6Gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:40:f0:e8:f0:78:b5:8b:3f:27:42:ca:03:ff:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22 Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=4028f7e46f859dd7c3b8cb90b715385f5ffe4908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:15:54:eb:bf:87:ab:78:41:34:c2:82:b1: 9f:dc:6c:f6:ec:03:4b:fa:45:5a:9f:c7:99:65:41: 1e:86:93:68:bb:09:12:57:bf:e4:0d:d0:28:83:c3: b7:cb:43:6c:80:cd:81:ce:94:9e:79:5e:8d:a0:8f: d5:75:f6:73:fb:a2:3b:0e:6c:77:66:18:d9:82:4b: 16:1f:ee:2a:f2:88:83:37:56:54:63:36:55:01:b7: a3:a0:1a:da:64:cf:ac:7b:00:88:d6:b6:cf:44:f3: 40:9f:0c:6c:68:de:85:5b:34:f8:b1:24:c5:ea:56: fa:3c:3b:f9:13:3a:d7:b7:49:ba:a1:29:f8:80:ee: 9a:79:0c:06:c5:1d:ac:83:90:b0:9e:b5:31:71:3b: 46:9a:76:1b:98:9f:51:c0:70:e1:8d:8c:cd:b2:ad: 9a:7a:8f:ce:49:8d:cc:c4:10:69:01:9e:17:39:88: bb:7e:0b:25:6a:1f:ca:c0:af:96:df:a7:80:29:9c: 5a:79:34:0b:8f:77:95:1b:03:c3:86:2e:ac:b5:81: 8d:b4:6b:4d:c6:47:64:fb:07:7d:ff:dd:71:e8:70: d6:9b:94:54:e6:73:71:ea:ed:d0:6f:9e:42:86:a2: 77:7c:66:72:c6:15:e4:5d:53:86:3e:90:cc:b3:0a: 98:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:28:F7:E4:6F:85:9D:D7:C3:B8:CB:90:B7:15:38:5F:5F:FE:49:08 X509v3 Authority Key Identifier: keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cb:5f:c3:d6:b5:27:a0:0a:ec:32:aa:10:d8:5c:63:c7:31: 54:5a:e2:c6:45:50:42:49:78:b6:9c:52:fb:7d:6f:42:64:58: 5e:ca:da:0a:38:ff:e1:56:4d:2c:4f:63:89:ed:5e:60:ce:39: 27:03:78:c7:2f:e2:b7:6d:1a:28:9e:00:38:aa:91:56:3e:77: ac:44:b1:58:48:71:ab:ee:8e:52:e7:3f:75:87:10:95:5a:f8: 74:dd:c8:49:89:33:c2:7b:2f:2b:d8:e9:e7:4b:93:83:b5:2e: 78:68:be:82:c6:36:e6:38:05:fa:96:89:b1:50:cc:cc:40:ce: e9:33:74:01:bc:8b:99:7e:8b:8a:02:93:0a:37:3a:0c:e9:02: f2:ff:0e:66:48:84:ed:11:db:11:68:8b:29:3e:1a:15:5c:1f: 70:67:3d:3c:da:05:d0:49:ba:29:2a:08:ef:48:1a:e3:3b:ca: d8:13:61:a4:fb:a3:f8:08:d6:24:a5:b1:b6:6c:70:f0:c4:cb: 16:26:ea:af:a5:38:c7:11:fb:ef:ee:24:ba:d9:46:ca:b5:d5: 7f:e7:fb:4f:6d:f4:b7:36:6b:59:f5:21:4d:5c:c5:15:10:f2: 10:13:bc:47:f8:3e:34:1a:77:66:e2:f2:be:82:e2:84:03:0e: ce:2e:c3:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0Dw6PB4tYs/J0LKA//0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMzdjYTNhYmNhNWUxNGFjMTFiYzdmM2MxNTYyYTY0ZDYz OTFkMjIwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD Eyg0MDI4ZjdlNDZmODU5ZGQ3YzNiOGNiOTBiNzE1Mzg1ZjVmZmU0OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIEVVOu/h6t4QTTCgrGf3Gz27ANL +kVan8eZZUEehpNouwkSV7/kDdAog8O3y0NsgM2BzpSeeV6NoI/VdfZz+6I7Dmx3 ZhjZgksWH+4q8oiDN1ZUYzZVAbejoBraZM+sewCI1rbPRPNAnwxsaN6FWzT4sSTF 6lb6PDv5EzrXt0m6oSn4gO6aeQwGxR2sg5CwnrUxcTtGmnYbmJ9RwHDhjYzNsq2a eo/OSY3MxBBpAZ4XOYi7fgslah/KwK+W36eAKZxaeTQLj3eVGwPDhi6stYGNtGtN xkdk+wd9/91x6HDWm5RU5nNx6u3Qb55ChqJ3fGZyxhXkXVOGPpDMswqYmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAo9+RvhZ3Xw7jLkLcVOF9f/kkIMB8GA1UdIwQY MBaAFM43yjq8peFKwRvH88FWKmTWOR0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQt MDM4MDM1ZDgwYzBiLzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQtMDM4MDM1ZDgwYzBi LzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPctfw9a1 J6AK7DKqENhcY8cxVFrixkVQQkl4tpxS+31vQmRYXsraCjj/4VZNLE9jie1eYM45 JwN4xy/it20aKJ4AOKqRVj53rESxWEhxq+6OUuc/dYcQlVr4dN3ISYkzwnsvK9jp 50uTg7UueGi+gsY25jgF+paJsVDMzEDO6TN0AbyLmX6LigKTCjc6DOkC8v8OZkiE 7RHbEWiLKT4aFVwfcGc9PNoF0Em6KSoI70ga4zvK2BNhpPuj+AjWJKWxtmxw8MTL Fibqr6U4xxH77+4kutlGyrXVf+f7T230tzZrWfUhTVzFFRDyEBO8R/g+NBp3ZuLy voLihAMOzi7DZg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:21 2025 by rpki-client