This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json) Hash identifier: oqE53XyMpFsAuPGzoTsY7BWiSmNjuxU0h5dwGE3ojDI= Subject key identifier: 0D:D2:81:B9:CE:CA:A4:DA:41:5F:5A:F9:7F:1B:68:2F:AE:52:4A:0B Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb Certificate serial: 019AF19B420AFBE195C1175FA61ED00BD5A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=) 2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: UMESz9U9rhp9/bnMKwCZZu4AFCAMGjeGpAThtpbsu4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:42:0a:fb:e1:95:c1:17:5f:a6:1e:d0:0b:d5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=0dd281b9cecaa4da415f5af97f1b682fae524a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:8e:74:82:2f:a7:7d:0b:23:1e:3c:3d:45: 00:51:f5:11:dd:0d:cc:aa:b7:82:46:ff:35:35:3c: 43:a9:78:52:05:a1:ec:02:cf:b4:77:96:d7:7f:da: b0:ea:35:90:db:f4:a1:e6:d6:19:09:84:a6:d4:5d: dc:28:45:c0:62:f1:65:9a:8d:f0:34:9a:a0:13:e2: 72:3d:40:ac:b7:8a:74:36:84:56:5c:5d:16:27:5b: 57:fe:2b:a4:2d:6f:ea:b2:46:7e:cf:7e:54:0e:5c: eb:ef:bd:65:b7:4b:63:fe:7e:dd:4b:c4:25:98:09: 78:49:c0:8a:16:80:f4:80:5c:92:36:f9:23:d3:6a: aa:d9:84:99:e4:05:29:8d:2d:16:b5:b2:4b:86:c4: cf:51:f1:4e:ae:db:94:6b:9d:05:8a:0f:82:a9:78: 22:40:08:07:85:3b:07:9d:25:97:3f:a2:4b:96:69: 64:29:cb:16:16:86:e9:e1:ae:c5:3d:bf:a9:7d:4c: a1:d4:4c:75:ea:a0:a4:56:e5:02:cc:41:e2:05:8a: 86:73:dc:64:0c:00:e7:04:21:99:28:d2:a2:3b:47: 29:dd:75:8b:a4:4e:a5:d9:c8:01:93:e5:9e:ee:c7: 62:48:5e:2b:4f:1f:18:3c:49:4f:b6:24:a3:41:9a: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D2:81:B9:CE:CA:A4:DA:41:5F:5A:F9:7F:1B:68:2F:AE:52:4A:0B X509v3 Authority Key Identifier: keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dd:28:3e:24:42:bc:d7:4f:57:61:c8:b8:a9:e0:3f:e5:55: 0a:4f:ac:8e:95:33:61:c1:de:ae:0b:f8:c9:54:be:65:b3:dd: af:b6:61:c2:f1:75:ee:b3:98:09:80:27:b8:51:58:c8:94:60: 7d:5e:b8:4b:df:9e:e9:6d:f8:03:95:1e:47:a4:db:6a:80:ae: 2e:51:09:a5:80:bd:9c:c7:88:9b:c7:97:54:60:46:c3:c3:e4: b0:b5:b2:57:1e:2f:51:b0:3a:c1:50:8b:e2:3b:8d:1f:a1:f5: 90:f7:a9:29:09:f5:68:c1:c2:85:cb:b8:09:7a:60:c3:2f:dc: 52:97:48:2d:ec:53:76:25:14:08:b9:1b:a3:be:db:1f:6d:1d: 48:71:c8:15:be:3c:b6:c6:b6:04:25:72:bf:aa:4d:1f:fd:c4: 4b:d4:a8:4f:d1:59:30:31:66:f5:42:cc:49:1f:43:7b:ef:8e: a1:d3:33:cd:2a:c5:00:e9:73:72:74:b9:b1:b1:26:11:72:78: fa:a2:c3:1d:fa:1b:49:e2:0f:4e:60:6c:3e:14:42:4b:18:c2: 4f:d7:9e:44:b0:00:22:b8:6a:27:2a:2f:b2:1e:5b:43:56:4e: 3b:fd:5d:a1:9e:22:8b:9a:7c:8d:ad:90:3f:83:fd:07:ac:ba: fd:58:01:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0IK++GVwRdfph7QC9WpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNThjYmM0YWFlM2Y4MGM0OWIzNzI5MTFhOGQ0NDg2MWNk ZmVlY2IwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EygwZGQyODFiOWNlY2FhNGRhNDE1ZjVhZjk3ZjFiNjgyZmFlNTI0YTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA+OdIIvp30LIx48PUUAUfUR3Q3M qreCRv81NTxDqXhSBaHsAs+0d5bXf9qw6jWQ2/Sh5tYZCYSm1F3cKEXAYvFlmo3w NJqgE+JyPUCst4p0NoRWXF0WJ1tX/iukLW/qskZ+z35UDlzr771lt0tj/n7dS8Ql mAl4ScCKFoD0gFySNvkj02qq2YSZ5AUpjS0WtbJLhsTPUfFOrtuUa50Fig+CqXgi QAgHhTsHnSWXP6JLlmlkKcsWFobp4a7FPb+pfUyh1Ex16qCkVuUCzEHiBYqGc9xk DADnBCGZKNKiO0cp3XWLpE6l2cgBk+We7sdiSF4rTx8YPElPtiSjQZoE/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3SgbnOyqTaQV9a+X8baC+uUkoLMB8GA1UdIwQY MBaAFM9Yy8Sq4/gMSbNykRqNRIYc3+7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEt NTBkN2Q5NGUyYjlmLzEvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEtNTBkN2Q5NGUyYjlm LzEvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbN0oPiRC vNdPV2HIuKngP+VVCk+sjpUzYcHergv4yVS+ZbPdr7ZhwvF17rOYCYAnuFFYyJRg fV64S9+e6W34A5UeR6TbaoCuLlEJpYC9nMeIm8eXVGBGw8PksLWyVx4vUbA6wVCL 4juNH6H1kPepKQn1aMHChcu4CXpgwy/cUpdILexTdiUUCLkbo77bH20dSHHIFb48 tsa2BCVyv6pNH/3ES9SoT9FZMDFm9ULMSR9De++OodMzzSrFAOlzcnS5sbEmEXJ4 +qLDHfobSeIPTmBsPhRCSxjCT9eeRLAAIrhqJyovsh5bQ1ZOO/1doZ4ii5p8ja2Q P4P9B6y6/VgBpg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:43 2025 by rpki-client