This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json) Hash identifier: xC6oZqEgNKh+jZW8CT8h+HXo7jLSV2VJ1qhju7bi9+I= Subject key identifier: 76:FF:AD:10:CC:15:9B:7B:E6:29:35:45:B9:8A:66:6A:42:36:CF:97 Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb Certificate serial: 019B424A3416060852B633055EA6E9830A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft Manifest number: 16CB Signing time: Sun 21 Dec 2025 19:01:57 +0000 Manifest this update: Sun 21 Dec 2025 19:01:57 +0000 Manifest next update: Mon 22 Dec 2025 19:01:57 +0000 Files and hashes: 1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: xo+hDSbGP8ItTj5J1axMtS1s0iXFQXPpLMii186imQ0=) 2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:34:16:06:08:52:b6:33:05:5e:a6:e9:83:0a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb Validity Not Before: Dec 21 19:01:57 2025 GMT Not After : Dec 22 19:01:57 2025 GMT Subject: CN=76ffad10cc159b7be6293545b98a666a4236cf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:82:dc:6a:b6:6d:a6:fc:d6:21:31:51:9b: 18:7c:c8:b0:0f:ea:11:ce:c2:92:9a:31:d4:31:32: 40:a8:8e:35:e1:a2:eb:3a:3a:cd:0c:65:cd:23:05: 86:e3:f9:69:08:3f:13:33:f7:52:da:24:2b:3a:0c: a0:f8:f4:16:97:ab:4f:45:c4:3a:33:ab:75:18:0c: 00:fc:4e:2b:88:6c:51:e6:a0:0a:f1:1b:09:63:aa: a0:73:c6:34:8f:de:55:dc:eb:4a:0c:7a:b0:35:dc: 9f:09:28:50:2c:33:e6:30:63:d0:eb:b6:f7:b4:46: de:f4:25:7e:97:75:59:3f:6b:5b:c7:65:98:62:59: 29:de:54:0e:38:ee:4d:77:f0:9c:0e:68:a8:f8:e1: 8e:dc:5a:a8:95:44:d6:5b:16:b7:c9:d2:97:b1:f1: 1c:25:eb:5c:4c:a2:02:04:51:35:ff:20:1a:db:21: 27:1a:12:ef:10:b6:9e:bf:be:f0:a9:a8:5e:4b:0e: 76:bb:31:72:e2:9a:3b:24:38:42:13:1a:9f:eb:8a: 0e:61:c6:f5:47:78:7f:fa:be:c8:e0:70:ed:70:9e: 9e:91:96:82:8d:bc:cf:c7:7c:86:91:9d:1b:6e:db: f1:41:cc:83:8a:4f:f6:05:8b:69:bd:9f:f0:20:7f: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FF:AD:10:CC:15:9B:7B:E6:29:35:45:B9:8A:66:6A:42:36:CF:97 X509v3 Authority Key Identifier: keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:db:98:bb:29:59:28:ec:1b:95:3d:bd:e1:0d:6e:f2:7a:e8: 18:76:8d:9d:24:f2:0a:7e:c5:9e:6c:de:8e:33:aa:76:58:ca: cc:71:e6:73:5e:22:89:97:fe:14:bc:47:ed:f7:26:2b:5c:d4: 72:99:fd:92:fe:b7:a5:79:5b:b3:3a:f3:35:3e:c9:34:ef:13: de:3d:61:28:11:67:b2:e1:0f:7d:da:7c:1b:9d:82:b4:21:c3: e9:1b:cb:9a:da:ca:68:6e:a9:ba:4f:70:aa:34:14:93:27:97: b6:4b:bd:82:bf:d5:07:8f:4e:1d:50:fd:6e:dd:44:8c:d5:3d: fc:93:2a:5b:76:19:bf:28:0e:70:ea:2a:b4:7b:45:7f:79:f1: d8:0a:98:5d:26:29:ce:3c:93:b7:eb:9f:58:98:81:89:54:33: 2f:a1:c5:89:73:75:70:36:6f:8e:39:a6:61:2f:d6:ed:44:12: 0f:df:0f:c6:e4:28:e8:06:f4:76:60:bf:c1:6f:54:43:0f:71: 31:0b:d7:87:c3:9b:77:22:d9:48:f1:9a:e2:0a:3e:96:c6:b1: c4:14:c0:2a:37:45:77:96:46:8b:e0:0b:85:c4:b5:f5:a2:f8: 5e:5c:f8:af:54:38:64:2f:2d:47:19:f3:b2:37:e3:b0:59:d6: d7:46:f5:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSjQWBghStjMFXqbpgwpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MjI2ZWU1ZWEwNDA2NTkyZGY5NzVjNmY0Yzg0ZjEwZjE0 ZDE1Y2IwHhcNMjUxMjIxMTkwMTU3WhcNMjUxMjIyMTkwMTU3WjAzMTEwLwYDVQQD Eyg3NmZmYWQxMGNjMTU5YjdiZTYyOTM1NDViOThhNjY2YTQyMzZjZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NOC3Gq2bab81iExUZsYfMiwD+oR zsKSmjHUMTJAqI414aLrOjrNDGXNIwWG4/lpCD8TM/dS2iQrOgyg+PQWl6tPRcQ6 M6t1GAwA/E4riGxR5qAK8RsJY6qgc8Y0j95V3OtKDHqwNdyfCShQLDPmMGPQ67b3 tEbe9CV+l3VZP2tbx2WYYlkp3lQOOO5Nd/CcDmio+OGO3FqolUTWWxa3ydKXsfEc JetcTKICBFE1/yAa2yEnGhLvELaev77wqaheSw52uzFy4po7JDhCExqf64oOYcb1 R3h/+r7I4HDtcJ6ekZaCjbzPx3yGkZ0bbtvxQcyDik/2BYtpvZ/wIH95WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb/rRDMFZt75ik1RbmKZmpCNs+XMB8GA1UdIwQY MBaAFGUibuXqBAZZLfl1xvTITxDxTRXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEt ZGVjMDI0ODhjMzdjLzEvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEtZGVjMDI0ODhjMzdj LzEvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjduYuylZ KOwblT294Q1u8nroGHaNnSTyCn7FnmzejjOqdljKzHHmc14iiZf+FLxH7fcmK1zU cpn9kv63pXlbszrzNT7JNO8T3j1hKBFnsuEPfdp8G52CtCHD6RvLmtrKaG6puk9w qjQUkyeXtku9gr/VB49OHVD9bt1EjNU9/JMqW3YZvygOcOoqtHtFf3nx2AqYXSYp zjyTt+ufWJiBiVQzL6HFiXN1cDZvjjmmYS/W7UQSD98PxuQo6Ab0dmC/wW9UQw9x MQvXh8ObdyLZSPGa4go+lsaxxBTAKjdFd5ZGi+ALhcS19aL4Xlz4r1Q4ZC8tRxnz sjfjsFnW10b1IQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:40:58 2025 by rpki-client