This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json) Hash identifier: SgwxA7vIEP7V9wZoc+pRh8GnGN+gemxe3oIkp0C2QT0= Subject key identifier: 10:89:33:41:0C:10:54:D1:A4:F0:40:59:1E:81:4B:B7:51:D4:9C:37 Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b Certificate serial: 019AF23FB04B6C2CC66F045C2AA23CF328A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=) 2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=) 3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: PI1/U0ocbu0Rwnv6uENhEsAcfnuLOMAIml90d3OJDoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b0:4b:6c:2c:c6:6f:04:5c:2a:a2:3c:f3:28:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=108933410c1054d1a4f040591e814bb751d49c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:19:ec:39:21:ff:4d:07:99:4a:2a:20:c1:db: 0e:ce:48:0a:62:c7:ef:18:06:b7:ba:69:a2:28:98: 06:bc:d9:d8:c7:cd:f8:6f:19:36:a7:d1:47:2b:7c: da:f0:3d:2a:37:7c:22:18:d3:56:7a:d6:30:99:77: 45:77:7a:f6:52:30:4f:a3:90:e6:d6:5c:15:45:a5: 33:01:a1:a5:13:9f:91:b1:4d:02:eb:89:e2:90:69: 7d:30:c0:27:b4:b4:26:2f:63:ce:d3:9d:40:85:93: 9b:a1:fd:5f:9c:c4:c7:c2:86:1b:26:49:3d:e4:aa: da:fb:85:95:19:22:9a:16:a9:4c:77:41:fd:7a:2c: 3d:11:09:ea:6b:9d:ad:38:c8:e5:e8:63:25:76:19: 7a:27:41:15:52:4f:3c:68:c8:6a:8e:13:9b:9c:18: 86:e1:92:15:3d:a8:48:2f:d7:1b:1a:c8:8a:5b:d8: 3b:fc:22:65:bb:03:c8:c9:09:f5:95:5b:31:24:a7: f4:a6:ed:2d:72:27:87:64:4c:72:05:12:63:ae:46: 49:00:4f:33:c9:d6:13:8d:fa:5a:ed:00:b6:30:a4: 44:fb:93:43:d8:02:e4:4c:ba:ed:df:09:bd:91:a6: 82:79:3c:7a:48:3c:9a:c1:fc:83:6b:f0:ad:8a:9d: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:33:41:0C:10:54:D1:A4:F0:40:59:1E:81:4B:B7:51:D4:9C:37 X509v3 Authority Key Identifier: keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:17:42:3a:07:d3:47:df:95:7d:4d:a0:9c:59:58:7a:f7:00: ce:a0:66:ac:0d:d2:5d:c2:fd:ce:3d:1f:00:cb:d6:5d:8d:75: 2d:89:d8:9f:c4:58:01:e8:03:7f:e1:e1:0c:e2:64:c2:da:34: 9d:ac:b4:2f:8a:bc:7a:c6:0e:8e:c5:e2:b0:2c:51:30:d1:f7: 25:4b:6d:eb:db:28:45:d6:cf:7a:82:dc:0c:b6:63:44:ad:26: c7:bc:1b:75:f3:2e:81:c9:0d:b4:c7:5b:0c:57:c6:ca:ae:35: 4f:91:72:26:49:8f:23:f9:a0:20:54:81:22:92:a8:ce:9f:f4: a7:02:ac:52:16:4e:68:2a:d5:a9:cd:c1:d2:af:bf:43:b4:ea: b9:3e:0e:bf:ab:bc:14:4b:5b:3f:bb:d2:a5:b4:5b:fb:aa:d6: b6:3c:eb:3f:8e:b7:e7:dc:51:8c:fb:df:39:e6:84:93:50:d0: 59:13:47:a0:53:90:05:81:16:67:75:a1:00:52:92:45:9b:36: b4:fd:0e:cc:a3:89:93:af:eb:fd:e4:ad:86:89:4c:2d:10:c1: 43:00:0b:ed:3f:c4:bc:2d:5f:c1:c9:20:c5:b7:82:ff:2c:60: 3f:b5:9b:c6:14:c6:42:62:6d:ca:1c:d2:94:d2:28:a4:77:f2: 3e:57:c5:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7BLbCzGbwRcKqI88yioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTI0MmU2YzdlYmQ4MmEyM2ZhMWEwOGYzOTZlYmU1YWIz NGNmNmIwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD EygxMDg5MzM0MTBjMTA1NGQxYTRmMDQwNTkxZTgxNGJiNzUxZDQ5YzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRnsOSH/TQeZSiogwdsOzkgKYsfv GAa3ummiKJgGvNnYx834bxk2p9FHK3za8D0qN3wiGNNWetYwmXdFd3r2UjBPo5Dm 1lwVRaUzAaGlE5+RsU0C64nikGl9MMAntLQmL2PO051AhZObof1fnMTHwoYbJkk9 5Kra+4WVGSKaFqlMd0H9eiw9EQnqa52tOMjl6GMldhl6J0EVUk88aMhqjhObnBiG 4ZIVPahIL9cbGsiKW9g7/CJluwPIyQn1lVsxJKf0pu0tcieHZExyBRJjrkZJAE8z ydYTjfpa7QC2MKRE+5ND2ALkTLrt3wm9kaaCeTx6SDyawfyDa/Ctip0vDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCJM0EMEFTRpPBAWR6BS7dR1Jw3MB8GA1UdIwQY MBaAFM0SQubH69gqI/oaCPOW6+WrNM9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEt ZjYwMzUzODQxMmM4LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEtZjYwMzUzODQxMmM4 LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShdCOgfT R9+VfU2gnFlYevcAzqBmrA3SXcL9zj0fAMvWXY11LYnYn8RYAegDf+HhDOJkwto0 nay0L4q8esYOjsXisCxRMNH3JUtt69soRdbPeoLcDLZjRK0mx7wbdfMugckNtMdb DFfGyq41T5FyJkmPI/mgIFSBIpKozp/0pwKsUhZOaCrVqc3B0q+/Q7TquT4Ov6u8 FEtbP7vSpbRb+6rWtjzrP46359xRjPvfOeaEk1DQWRNHoFOQBYEWZ3WhAFKSRZs2 tP0OzKOJk6/r/eStholMLRDBQwAL7T/EvC1fwckgxbeC/yxgP7WbxhTGQmJtyhzS lNIopHfyPlfF7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:19 2025 by rpki-client