This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json) Hash identifier: gDJI+gEXQeHZRLtu63QtWQXbqmOmGHaXSfu7TYeVSRU= Subject key identifier: F8:0C:2C:70:34:EB:A7:7A:4E:35:C7:75:8A:48:77:23:CA:C5:B0:48 Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20 Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320 Certificate serial: 019B30E889D951AF25F43D9ABFCD7C38305E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft Manifest number: 1714 Signing time: Thu 18 Dec 2025 10:01:44 +0000 Manifest this update: Thu 18 Dec 2025 10:01:44 +0000 Manifest next update: Fri 19 Dec 2025 10:01:44 +0000 Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=) 2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=) 3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: FSyoSH6z6Knoh4x0/CIQ66jN5I/C3Okch6ZApEZsbqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:89:d9:51:af:25:f4:3d:9a:bf:cd:7c:38:30:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320 Validity Not Before: Dec 18 10:01:44 2025 GMT Not After : Dec 19 10:01:44 2025 GMT Subject: CN=f80c2c7034eba77a4e35c7758a487723cac5b048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:e5:3a:e1:d0:4c:87:46:96:e7:a4:d3:3b: 6a:47:e2:8b:06:e6:89:64:b3:71:15:0e:5c:96:d1: 71:fa:d1:75:1d:8f:d5:82:11:99:c3:f8:2e:8f:46: 0a:be:26:c5:53:96:a3:50:d2:0c:95:44:99:1b:73: 33:26:cf:68:a7:a6:f6:b5:49:86:7b:bd:21:ae:e0: 5f:43:b8:21:2e:3d:e4:77:91:3a:61:98:78:02:22: f0:44:71:56:dd:b1:7a:61:bb:e7:5d:c3:92:fc:6f: 99:40:45:98:0a:ff:af:10:ba:a6:65:85:da:35:76: 26:52:a4:2f:a9:2a:a6:7d:de:2f:5f:73:2f:a6:57: 01:9f:bd:3d:41:15:e0:c8:37:ad:76:f3:5e:99:81: f7:28:a0:1e:20:5d:6b:d3:da:d2:58:d0:60:67:25: a4:f7:c0:03:3e:74:71:10:1f:10:ad:87:4a:b7:6b: b3:99:36:dc:f0:30:2d:c0:33:7e:a5:63:12:50:72: e6:a8:8b:7e:3c:42:8b:62:60:68:de:2b:c0:1e:8a: d9:99:e0:34:84:ba:f3:a3:47:19:45:1a:0f:0e:81: 7b:d9:d3:bc:b9:41:1b:c0:17:00:3e:e5:f4:6a:23: c6:f4:1d:40:82:45:66:91:bf:c0:d6:e9:e4:c4:65: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0C:2C:70:34:EB:A7:7A:4E:35:C7:75:8A:48:77:23:CA:C5:B0:48 X509v3 Authority Key Identifier: keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:db:51:46:91:06:05:65:f8:78:26:79:be:4b:25:d5:91:f5: be:60:05:20:97:3c:2a:83:e6:55:22:32:c8:c0:68:2d:40:bf: 15:69:66:0e:b3:8e:a5:d9:44:4a:38:c1:c4:c3:04:98:a2:ef: 00:f2:8d:fa:33:8a:f0:50:fe:b1:b6:89:4c:0c:09:70:cf:e6: 2f:9f:87:3d:4a:8f:5f:79:7d:a0:dd:e1:00:4c:64:fa:43:e4: 43:e4:81:48:f1:88:2a:bc:25:96:ce:16:56:f4:57:39:29:2d: 18:d7:51:08:99:99:6a:4e:60:d3:63:40:1c:94:b4:af:3b:47: 6c:e2:ee:dd:d1:c0:c7:b4:b9:a9:16:15:84:f7:f6:33:88:9f: 80:35:40:e8:29:be:01:e9:ff:f3:32:6b:55:ee:25:1a:9c:8e: 86:b3:0d:ed:1c:2f:49:17:3c:c6:6f:ad:51:b8:a0:9c:0b:98: d9:4b:b1:d5:54:59:16:51:18:a6:4d:32:23:dd:1a:73:68:d2: f7:47:c4:cf:ea:be:4c:5c:2b:1b:ce:db:cb:87:a3:03:d0:05: 44:00:f7:d0:2b:df:a9:a7:db:fb:53:a4:20:9b:05:ae:bf:ec: 7b:3b:8d:d9:7c:86:24:6c:09:80:85:40:15:fb:ef:88:ea:af: 64:ab:05:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6InZUa8l9D2av818ODBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MmM2YzNkMjJjZjZiMTAxZDcxNDgwMDZkYTdhNzI4NGRj YmIzMjAwHhcNMjUxMjE4MTAwMTQ0WhcNMjUxMjE5MTAwMTQ0WjAzMTEwLwYDVQQD EyhmODBjMmM3MDM0ZWJhNzdhNGUzNWM3NzU4YTQ4NzcyM2NhYzViMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNLlOuHQTIdGluek0ztqR+KLBuaJ ZLNxFQ5cltFx+tF1HY/VghGZw/guj0YKvibFU5ajUNIMlUSZG3MzJs9op6b2tUmG e70hruBfQ7ghLj3kd5E6YZh4AiLwRHFW3bF6YbvnXcOS/G+ZQEWYCv+vELqmZYXa NXYmUqQvqSqmfd4vX3MvplcBn709QRXgyDetdvNemYH3KKAeIF1r09rSWNBgZyWk 98ADPnRxEB8QrYdKt2uzmTbc8DAtwDN+pWMSUHLmqIt+PEKLYmBo3ivAHorZmeA0 hLrzo0cZRRoPDoF72dO8uUEbwBcAPuX0aiPG9B1AgkVmkb/A1unkxGUsiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgMLHA066d6TjXHdYpIdyPKxbBIMB8GA1UdIwQY MBaAFGYsbD0iz2sQHXFIAG2npyhNy7MgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQt ZjIxYjZhZTNiZTZjLzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQtZjIxYjZhZTNiZTZj LzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAattRRpEG BWX4eCZ5vksl1ZH1vmAFIJc8KoPmVSIyyMBoLUC/FWlmDrOOpdlESjjBxMMEmKLv APKN+jOK8FD+sbaJTAwJcM/mL5+HPUqPX3l9oN3hAExk+kPkQ+SBSPGIKrwlls4W VvRXOSktGNdRCJmZak5g02NAHJS0rztHbOLu3dHAx7S5qRYVhPf2M4ifgDVA6Cm+ Aen/8zJrVe4lGpyOhrMN7RwvSRc8xm+tUbignAuY2Uux1VRZFlEYpk0yI90ac2jS 90fEz+q+TFwrG87by4ejA9AFRAD30Cvfqafb+1OkIJsFrr/sezuN2XyGJGwJgIVA FfvviOqvZKsFrQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:04:02 2025 by rpki-client