This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json) Hash identifier: Bnkr6hpHfznE2fgcQR9FkDNRcJPgzpnuUsOLHotljLM= Subject key identifier: 96:D2:3B:96:9A:3A:1F:B5:4E:E0:74:F8:07:F6:83:07:93:59:E9:F4 Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Certificate serial: 019AF164787A57404BDE57D61DB0406B562A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft Manifest number: 10DE Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=) 2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: APXDDAWgHxLxJMI6nYRj0MKEa94sUsdLBPeIF0cR44Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:78:7a:57:40:4b:de:57:d6:1d:b0:40:6b:56:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=96d23b969a3a1fb54ee074f807f683079359e9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:ef:bd:38:be:14:14:5b:f0:4c:62:0e:cf: 34:4f:a7:e0:9c:64:f0:05:34:45:d9:f3:1c:49:86: 38:2a:fc:3d:19:b9:f3:e6:35:c7:fb:c7:db:38:e7: 59:e8:d3:97:18:34:f6:9b:a5:b6:9f:9f:7c:39:ec: c4:36:c2:77:9a:a6:a8:cc:a0:7a:3c:41:ed:8f:87: 1d:67:07:14:32:a6:e8:2a:e0:dd:b2:14:5d:e9:b1: 86:38:0c:f5:5e:e6:cc:19:3a:cd:67:b9:b6:dd:58: 60:52:e2:ab:06:1f:e4:17:d7:2e:bc:72:ba:94:3a: 0b:b9:7d:46:63:04:db:7d:e1:23:c4:99:af:f4:64: e5:c4:c5:21:78:82:e3:83:99:d9:76:ea:43:cb:a6: 1c:a9:01:e6:0c:6b:94:43:6b:b3:c6:1e:ac:eb:15: 7a:62:c2:85:54:f4:8e:8e:c9:98:7b:ba:ce:2e:95: a9:d8:a9:26:36:d5:c3:71:18:d6:13:2d:e3:d7:ac: dd:3a:c9:99:c5:cf:b1:95:94:b2:87:25:47:f9:9f: 31:ae:cb:74:7e:12:23:66:bc:4a:60:80:6e:2a:ee: 7e:5d:3f:47:d9:4b:e3:54:ae:9e:4f:de:b2:0d:8e: 85:5b:80:ed:93:13:bc:ac:99:9f:cf:4d:f8:76:9e: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D2:3B:96:9A:3A:1F:B5:4E:E0:74:F8:07:F6:83:07:93:59:E9:F4 X509v3 Authority Key Identifier: keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0e:1f:1d:41:72:49:88:a7:85:c6:db:d5:37:30:0b:f3:34: 89:21:97:89:8e:b5:af:14:26:85:44:aa:d4:d6:a0:52:ea:4c: 92:89:7b:88:29:cc:e9:7c:57:aa:61:8d:1d:bb:dd:00:56:31: fb:3d:c4:aa:fc:c3:a5:e5:d3:4b:84:c3:dc:ff:01:99:dc:46: 50:04:27:bc:1e:c4:c5:fc:76:83:90:09:7d:be:26:91:e3:e9: 01:03:7b:c6:50:2d:e2:e6:bc:aa:dc:ee:e0:22:cb:67:51:00: 5c:98:2e:7e:b8:a0:20:63:6c:d4:b4:7a:37:c9:16:81:32:3a: ac:89:66:bd:ee:80:d1:51:6c:6d:5e:24:36:49:a3:5b:34:b2: f6:28:4c:f6:4f:5c:6d:a2:68:e7:e5:fb:52:e9:42:10:f5:64: c1:e1:db:ed:5a:f8:4f:22:2c:a1:c4:1a:4b:f0:57:c3:46:a8: 80:c8:ea:22:ba:69:90:9f:5d:3a:b1:e3:c7:55:ea:38:96:75: ce:9b:57:3c:37:0b:31:b3:98:10:66:d3:07:80:4c:2b:a0:22: cb:db:0d:bb:15:e7:b1:71:55:38:2f:df:cb:be:f9:6e:5a:1b: 7c:c5:0c:20:e7:c7:eb:43:89:e8:3c:e6:77:e9:65:42:74:93: e1:d5:a0:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHh6V0BL3lfWHbBAa1YqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWZhMGIzMGQ1NDU1YWQ2N2ZiMDdlMDk5ZjBmYTk1Zjhi NmMxOWUwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD Eyg5NmQyM2I5NjlhM2ExZmI1NGVlMDc0ZjgwN2Y2ODMwNzkzNTllOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/PvvTi+FBRb8ExiDs80T6fgnGTw BTRF2fMcSYY4Kvw9Gbnz5jXH+8fbOOdZ6NOXGDT2m6W2n598OezENsJ3mqaozKB6 PEHtj4cdZwcUMqboKuDdshRd6bGGOAz1XubMGTrNZ7m23VhgUuKrBh/kF9cuvHK6 lDoLuX1GYwTbfeEjxJmv9GTlxMUheILjg5nZdupDy6YcqQHmDGuUQ2uzxh6s6xV6 YsKFVPSOjsmYe7rOLpWp2KkmNtXDcRjWEy3j16zdOsmZxc+xlZSyhyVH+Z8xrst0 fhIjZrxKYIBuKu5+XT9H2UvjVK6eT96yDY6FW4DtkxO8rJmfz034dp7r6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbSO5aaOh+1TuB0+Af2gweTWen0MB8GA1UdIwQY MBaAFMyfoLMNVFWtZ/sH4Jnw+pX4tsGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjct MWU2Y2EyZjBkMTU1LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjctMWU2Y2EyZjBkMTU1 LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA4fHUFy SYinhcbb1TcwC/M0iSGXiY61rxQmhUSq1NagUupMkol7iCnM6XxXqmGNHbvdAFYx +z3EqvzDpeXTS4TD3P8BmdxGUAQnvB7Exfx2g5AJfb4mkePpAQN7xlAt4ua8qtzu 4CLLZ1EAXJgufrigIGNs1LR6N8kWgTI6rIlmve6A0VFsbV4kNkmjWzSy9ihM9k9c baJo5+X7UulCEPVkweHb7Vr4TyIsocQaS/BXw0aogMjqIrppkJ9dOrHjx1XqOJZ1 zptXPDcLMbOYEGbTB4BMK6Aiy9sNuxXnsXFVOC/fy775blobfMUMIOfH60OJ6Dzm d+llQnST4dWgUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:47 2025 by rpki-client