This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json) Hash identifier: Xxwuz+pJBRHefGh5JUAkwR570gHcOmiBMLHrNFwc8nw= Subject key identifier: 41:8C:F2:16:C2:B0:7A:AD:10:7B:04:B0:F4:47:70:41:07:C8:FE:A0 Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97 Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97 Certificate serial: 019AF19B09177E72A2E18471A6C8768EA251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft Manifest number: 0711 Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=) 2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=) 3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: 3jLOZAgC3WY48KXrveGwt9/dhbf5+nk/MVMsL27oNFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:09:17:7e:72:a2:e1:84:71:a6:c8:76:8e:a2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=418cf216c2b07aad107b04b0f447704107c8fea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:c0:02:d2:db:76:e5:85:56:f5:02:bf:24: f6:c8:bb:d3:6f:f2:bc:57:95:43:53:8b:8e:a2:0e: 82:94:9e:8f:74:a8:83:d4:43:ee:39:91:48:33:f1: 91:b0:e6:14:78:a9:2d:de:d3:19:77:be:d8:31:bb: 6c:ce:d1:f9:41:34:4f:fa:16:3a:81:15:db:fc:3f: c6:bb:a6:cb:8f:dc:fe:f4:49:7d:fd:c1:77:29:49: 25:ea:c8:c7:8b:41:eb:75:fb:99:13:2e:e2:ee:ea: 20:cc:36:e5:94:bd:a0:ae:00:2f:73:5e:ba:d0:1b: 1d:3c:d5:67:d4:e0:ba:9e:04:0e:d0:dd:25:fc:a9: 2c:f6:99:d7:0d:83:54:0e:26:10:fb:ea:20:2a:61: 2f:01:9c:d4:a5:3d:e6:55:eb:db:8e:fc:0a:02:1b: a9:8d:d7:2e:3f:c9:8e:74:41:1f:e0:07:4d:ca:6d: 8e:c4:e8:d0:49:ab:ec:38:f4:f0:a5:02:95:ba:e1: 1f:64:8f:b1:5c:31:a3:a6:bd:eb:ed:f9:47:82:31: 9f:60:41:9e:2b:e3:c8:2e:9f:4f:b2:22:e0:0e:d9: 5e:45:d1:2b:fc:6f:0e:96:a4:82:a8:22:3b:59:7b: 31:77:91:66:64:78:53:ce:a0:a1:70:11:44:17:a0: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:F2:16:C2:B0:7A:AD:10:7B:04:B0:F4:47:70:41:07:C8:FE:A0 X509v3 Authority Key Identifier: keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:80:fc:e0:f7:4c:44:a8:f2:8f:77:4e:35:c5:13:5c:d7:ac: 67:a5:0f:18:1a:4a:88:94:60:ef:4c:54:81:28:a7:8c:9a:8a: a0:98:fe:8c:e1:92:3f:7b:28:16:72:a4:ed:50:59:29:09:8f: 5c:f9:7b:c6:f6:f4:38:c1:e8:f8:58:76:02:ef:e1:c7:66:57: 8c:7e:f4:c1:2d:40:90:8f:1f:bb:e0:8f:31:df:8c:8d:e3:69: b2:c2:c1:5a:95:f6:d8:59:0e:1a:78:6e:43:f9:5d:aa:2e:44: 51:d0:b0:bc:5e:93:7a:bd:f3:a7:ed:cc:6a:bd:94:7b:30:2e: f1:60:d3:b0:a0:85:c8:4d:62:4a:af:41:9c:87:29:80:b1:d1: 33:b7:3d:8e:bd:88:c0:8b:66:a9:19:5e:e5:37:42:58:7f:5f: bb:59:ab:ed:ea:5e:cb:3a:29:39:a9:e6:f6:de:38:85:a5:88: 93:a1:ad:8c:1d:93:b0:14:41:c5:32:bd:1b:7d:19:a1:eb:52: 9b:93:67:1a:94:48:dc:7e:3d:53:b8:ee:3a:a7:f0:02:e5:4c: 9a:d6:f1:39:62:13:e9:a1:c6:5e:29:43:24:be:36:06:9e:2c: 87:33:6c:ba:6a:b5:f0:27:c8:9a:b9:4a:25:96:77:09:5e:63: 39:64:5c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwkXfnKi4YRxpsh2jqJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk MGRjOTcwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD Eyg0MThjZjIxNmMyYjA3YWFkMTA3YjA0YjBmNDQ3NzA0MTA3YzhmZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/DAAtLbduWFVvUCvyT2yLvTb/K8 V5VDU4uOog6ClJ6PdKiD1EPuOZFIM/GRsOYUeKkt3tMZd77YMbtsztH5QTRP+hY6 gRXb/D/Gu6bLj9z+9El9/cF3KUkl6sjHi0HrdfuZEy7i7uogzDbllL2grgAvc166 0BsdPNVn1OC6ngQO0N0l/Kks9pnXDYNUDiYQ++ogKmEvAZzUpT3mVevbjvwKAhup jdcuP8mOdEEf4AdNym2OxOjQSavsOPTwpQKVuuEfZI+xXDGjpr3r7flHgjGfYEGe K+PILp9PsiLgDtleRdEr/G8OlqSCqCI7WXsxd5FmZHhTzqChcBFEF6DxsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGM8hbCsHqtEHsEsPRHcEEHyP6gMB8GA1UdIwQY MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2 LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4D84PdM RKjyj3dONcUTXNesZ6UPGBpKiJRg70xUgSinjJqKoJj+jOGSP3soFnKk7VBZKQmP XPl7xvb0OMHo+Fh2Au/hx2ZXjH70wS1AkI8fu+CPMd+MjeNpssLBWpX22FkOGnhu Q/ldqi5EUdCwvF6Ter3zp+3Mar2UezAu8WDTsKCFyE1iSq9BnIcpgLHRM7c9jr2I wItmqRle5TdCWH9fu1mr7epeyzopOanm9t44haWIk6GtjB2TsBRBxTK9G30ZoetS m5NnGpRI3H49U7juOqfwAuVMmtbxOWIT6aHGXilDJL42Bp4shzNsumq18CfImrlK JZZ3CV5jOWRc6g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:11 2025 by rpki-client