This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json) Hash identifier: ywKd87Mo/remk9GC/XQE65qtnYIV0QX5GP2UDLvUnyU= Subject key identifier: E2:39:90:7C:38:59:59:12:B8:99:82:56:E6:83:DB:A5:D0:A7:2D:6B Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Certificate serial: 019B3A911B4614BF569202DE9FB278B803DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft Manifest number: 039A Signing time: Sat 20 Dec 2025 07:02:26 +0000 Manifest this update: Sat 20 Dec 2025 07:02:26 +0000 Manifest next update: Sun 21 Dec 2025 07:02:26 +0000 Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=) 2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: a/PL3r+qvlLEJ9wJgzAZMBBUcHS3C0/u7K/k8uGRu3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:1b:46:14:bf:56:92:02:de:9f:b2:78:b8:03:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Validity Not Before: Dec 20 07:02:26 2025 GMT Not After : Dec 21 07:02:26 2025 GMT Subject: CN=e239907c38595912b8998256e683dba5d0a72d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:0d:0d:14:ab:33:a0:fc:c1:94:15:94:96: 2f:6a:fa:d8:76:e6:f1:8f:dd:f3:70:69:32:d4:94: 2c:0f:d9:2e:57:7a:86:47:e9:b0:13:63:a2:e5:f2: 91:3a:aa:46:47:d8:b0:3b:8b:6a:25:84:76:23:65: 6d:0b:68:23:04:3c:73:bb:f1:cb:39:fa:3a:45:45: 74:83:ca:50:f3:c9:7e:76:b3:e8:cf:d2:f7:f2:3a: dd:26:30:36:84:f9:16:17:0e:9f:cc:43:99:55:05: ab:49:c2:e0:b4:1a:43:1a:8d:cf:6b:f4:f9:5f:35: 48:19:ec:69:ad:bd:6c:66:83:5a:c5:0e:32:4f:3f: f6:61:90:b8:bf:8b:32:d1:1f:1c:da:77:04:f3:db: 43:44:d4:d4:ca:c0:8c:ce:00:1d:03:1c:09:ec:84: c3:99:d3:67:c9:52:62:94:a9:22:e4:14:16:0c:66: e8:ed:35:95:6f:3d:1c:2f:1d:c4:34:a1:6c:9d:ac: 53:81:55:54:2d:52:9e:45:bd:98:73:c1:19:51:b8: 81:12:94:8b:01:63:cf:0e:b8:9e:7f:0b:74:fe:8f: c4:da:ab:7c:a8:54:a5:54:0f:a1:10:e4:07:ad:e1: e8:b7:37:9b:6d:9c:2e:8d:61:9b:79:e3:1b:c9:86: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:39:90:7C:38:59:59:12:B8:99:82:56:E6:83:DB:A5:D0:A7:2D:6B X509v3 Authority Key Identifier: keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:ab:00:37:44:24:3a:08:4e:45:43:f0:42:10:a9:38:15: 00:d3:76:da:ed:6e:57:4a:f5:e7:03:d1:78:57:3a:90:8f:49: 84:3e:cb:3d:d4:47:1b:63:8c:f3:54:6b:9c:df:50:12:88:fd: 4f:3d:4a:ba:ba:70:d3:15:d6:e4:45:de:01:e4:61:20:2e:41: c5:69:dd:17:5e:e8:ee:15:bf:6e:ab:a8:d7:28:b5:21:3d:b6: e8:d8:57:1b:0e:fe:b8:3f:7d:ca:7a:3e:01:bf:5b:0f:2a:99: ca:63:e4:2c:ea:9b:4e:f8:9e:e0:61:b6:ab:5b:df:24:37:68: 01:1b:ae:f9:bd:93:94:b3:10:e8:d5:81:32:c0:eb:25:c1:59: 79:47:ca:68:b7:89:ba:f9:97:dd:46:c7:d4:32:41:ec:b9:96: a7:79:1b:5b:9b:d1:7e:3b:0a:17:62:7c:c5:b3:2c:60:95:34: eb:78:4f:7b:31:32:cf:45:88:02:fa:3c:0d:8f:5e:69:3a:b6: 61:be:df:a8:7b:a5:e9:8b:2c:00:e7:43:db:c5:92:f1:24:a5: da:2d:93:e6:08:93:59:ce:97:8e:36:be:0d:da:07:ab:80:3f: 33:db:d2:e8:7d:9c:eb:57:67:1c:7f:25:1b:13:91:bb:1a:c3: d0:5b:b2:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kRtGFL9WkgLen7J4uAPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm OTM4MjcwHhcNMjUxMjIwMDcwMjI2WhcNMjUxMjIxMDcwMjI2WjAzMTEwLwYDVQQD EyhlMjM5OTA3YzM4NTk1OTEyYjg5OTgyNTZlNjgzZGJhNWQwYTcyZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp0NDRSrM6D8wZQVlJYvavrYdubx j93zcGky1JQsD9kuV3qGR+mwE2Oi5fKROqpGR9iwO4tqJYR2I2VtC2gjBDxzu/HL Ofo6RUV0g8pQ88l+drPoz9L38jrdJjA2hPkWFw6fzEOZVQWrScLgtBpDGo3Pa/T5 XzVIGexprb1sZoNaxQ4yTz/2YZC4v4sy0R8c2ncE89tDRNTUysCMzgAdAxwJ7ITD mdNnyVJilKki5BQWDGbo7TWVbz0cLx3ENKFsnaxTgVVULVKeRb2Yc8EZUbiBEpSL AWPPDriefwt0/o/E2qt8qFSlVA+hEOQHreHotzebbZwujWGbeeMbyYZvGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI5kHw4WVkSuJmCVuaD26XQpy1rMB8GA1UdIwQY MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchurADdE JDoITkVD8EIQqTgVANN22u1uV0r15wPReFc6kI9JhD7LPdRHG2OM81RrnN9QEoj9 Tz1Kurpw0xXW5EXeAeRhIC5BxWndF17o7hW/bquo1yi1IT226NhXGw7+uD99yno+ Ab9bDyqZymPkLOqbTvie4GG2q1vfJDdoARuu+b2TlLMQ6NWBMsDrJcFZeUfKaLeJ uvmX3UbH1DJB7LmWp3kbW5vRfjsKF2J8xbMsYJU063hPezEyz0WIAvo8DY9eaTq2 Yb7fqHul6YssAOdD28WS8SSl2i2T5giTWc6Xjja+DdoHq4A/M9vS6H2c61dnHH8l GxORuxrD0FuyjA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:28:22 2025 by rpki-client