This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json) Hash identifier: /hb6JFSUYSxwvtWKoSQ9sgejyLypupNO/tKp2tCsmZ0= Subject key identifier: AA:B7:FF:3C:38:0D:18:15:E4:25:95:D2:33:58:4E:B1:F2:C9:48:91 Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19 Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19 Certificate serial: 019B3C7FBBC35BF00908BFE355C0601E4016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:42 +0000 Manifest this update: Sat 20 Dec 2025 16:02:42 +0000 Manifest next update: Sun 21 Dec 2025 16:02:42 +0000 Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=) 2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: LDAVquQHgVENp9JKhGOQXzMPvZ1FJ3/LAsmjx9tY7yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:bb:c3:5b:f0:09:08:bf:e3:55:c0:60:1e:40:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19 Validity Not Before: Dec 20 16:02:42 2025 GMT Not After : Dec 21 16:02:42 2025 GMT Subject: CN=aab7ff3c380d1815e42595d233584eb1f2c94891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:22:d4:48:5c:e4:aa:ca:86:ea:e6:35:63: ad:16:4b:f3:50:bb:14:7c:70:1a:28:8f:19:33:da: a6:0b:ba:ae:36:00:b8:d3:b7:4c:8a:00:4e:bd:b3: 93:ee:cd:f1:56:91:1a:03:73:6f:db:a5:37:ae:b7: 1e:ce:e7:40:3f:c4:e5:6e:14:15:1d:db:92:d2:03: d7:d8:e9:f8:0a:28:70:7d:07:18:d6:54:f9:3f:04: 50:36:fd:f3:6a:28:29:4d:b4:56:c0:3b:08:05:d0: b3:f1:96:43:ca:26:35:83:6f:3e:1c:28:14:40:a8: 86:7b:44:ce:30:e7:48:ee:d0:0d:e5:fc:03:e0:0a: 4f:6e:74:d1:b0:c3:61:92:4c:0e:6f:11:b4:03:c4: 58:7c:d3:2a:64:2f:57:76:7a:c2:6f:32:1e:6c:ba: 4f:23:ee:e0:a2:d1:ff:a7:87:1d:7d:3d:3b:f5:da: 08:b0:0e:30:92:3a:f3:73:e0:0a:16:82:71:02:f3: f7:57:0a:2a:92:1a:3b:8c:15:8a:5a:90:c4:62:a6: 0e:cb:1b:ab:74:fa:3e:0f:1a:2d:3f:5f:a7:b3:d4: 3d:07:2e:15:57:6a:64:3b:09:29:42:06:03:26:d7: b3:f4:c1:4b:5e:46:e7:8b:fe:fb:76:ee:59:81:78: 4f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B7:FF:3C:38:0D:18:15:E4:25:95:D2:33:58:4E:B1:F2:C9:48:91 X509v3 Authority Key Identifier: keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:46:45:8d:99:fb:77:8b:98:29:5c:72:58:49:c7:9d:5b:70: 03:e8:f3:15:14:fd:49:d6:fa:9d:e4:d9:e6:ce:fe:29:9a:b6: bc:63:6c:de:eb:3f:ee:8a:b5:0c:90:67:9e:1d:b5:ee:cb:c5: 67:17:c7:0f:e8:49:f7:32:91:ae:d8:43:78:cb:52:8d:4e:85: 36:8f:31:dc:b9:d3:d9:d9:2a:3c:9a:c2:cf:98:cf:71:22:39: 0c:dd:03:6f:2c:5d:a1:be:1e:53:7e:d1:84:26:e1:d7:49:98: af:30:c5:22:7c:64:d2:3a:90:2d:26:b2:65:62:e6:f4:c7:ef: 8e:4c:2f:24:d6:02:8e:16:83:d5:a2:35:0c:79:b5:a3:48:b3: 34:84:5c:40:9a:1b:3b:32:7a:0d:75:b2:bb:2a:f2:b5:03:5b: e3:80:5c:ff:1e:c1:d7:ba:dd:ab:a2:b8:ac:dd:dc:83:63:ba: b1:d0:bd:0a:f0:b3:79:19:92:21:d3:fc:18:d8:07:89:9f:4b: bb:e3:95:25:c6:db:0c:59:a1:fb:9d:55:4e:c9:4a:09:ef:81: eb:ca:99:c9:7d:82:ee:3c:6e:c7:7b:bc:cf:dd:63:2d:f5:0c: da:80:e9:d5:31:a2:26:1c:03:34:ea:f0:a2:4c:7c:73:2b:9a: 04:0a:e0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7vDW/AJCL/jVcBgHkAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3 MzZiMTkwHhcNMjUxMjIwMTYwMjQyWhcNMjUxMjIxMTYwMjQyWjAzMTEwLwYDVQQD EyhhYWI3ZmYzYzM4MGQxODE1ZTQyNTk1ZDIzMzU4NGViMWYyYzk0ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AAi1Ehc5KrKhurmNWOtFkvzULsU fHAaKI8ZM9qmC7quNgC407dMigBOvbOT7s3xVpEaA3Nv26U3rrcezudAP8TlbhQV HduS0gPX2On4CihwfQcY1lT5PwRQNv3zaigpTbRWwDsIBdCz8ZZDyiY1g28+HCgU QKiGe0TOMOdI7tAN5fwD4ApPbnTRsMNhkkwObxG0A8RYfNMqZC9XdnrCbzIebLpP I+7gotH/p4cdfT079doIsA4wkjrzc+AKFoJxAvP3Vwoqkho7jBWKWpDEYqYOyxur dPo+DxotP1+ns9Q9By4VV2pkOwkpQgYDJtez9MFLXkbni/77du5ZgXhPpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq3/zw4DRgV5CWV0jNYTrHyyUiRMB8GA1UdIwQY MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et MzNlMjcwNWI0YzNlLzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0ZFjZn7 d4uYKVxyWEnHnVtwA+jzFRT9Sdb6neTZ5s7+KZq2vGNs3us/7oq1DJBnnh217svF ZxfHD+hJ9zKRrthDeMtSjU6FNo8x3LnT2dkqPJrCz5jPcSI5DN0Dbyxdob4eU37R hCbh10mYrzDFInxk0jqQLSayZWLm9MfvjkwvJNYCjhaD1aI1DHm1o0izNIRcQJob OzJ6DXWyuyrytQNb44Bc/x7B17rdq6K4rN3cg2O6sdC9CvCzeRmSIdP8GNgHiZ9L u+OVJcbbDFmh+51VTslKCe+B68qZyX2C7jxux3u8z91jLfUM2oDp1TGiJhwDNOrw okx8cyuaBArgzg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:31:24 2025 by rpki-client