This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json) Hash identifier: 3D2XKIy24rteV3YswdnaJSAZEOlNfm9bf0lORyuc0So= Subject key identifier: A0:05:B1:25:5F:85:4E:19:B2:0B:A2:28:8F:EA:C2:DE:96:D0:06:B6 Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Certificate serial: 019B3D911343B726CC3BC206D148272352EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft Manifest number: 02E8 Signing time: Sat 20 Dec 2025 21:01:16 +0000 Manifest this update: Sat 20 Dec 2025 21:01:16 +0000 Manifest next update: Sun 21 Dec 2025 21:01:16 +0000 Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=) 2: 9s50Q9-1ULqilThpHU79jiFEiIA.roa (hash: 5aJJUqP+R3fj8M4AoRNns1YealoNvLa9oSKi6PcBG8E=) 3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: kyxZmhSX3KhRNgOBQrBw5ArrAm392zUHUbLs1rOpFuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:13:43:b7:26:cc:3b:c2:06:d1:48:27:23:52:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Validity Not Before: Dec 20 21:01:16 2025 GMT Not After : Dec 21 21:01:16 2025 GMT Subject: CN=a005b1255f854e19b20ba2288feac2de96d006b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:da:cf:eb:e8:b7:01:ed:a8:12:44:d0:b0: 50:90:0a:45:8f:48:a5:55:cb:af:ca:c1:30:da:50: 67:ab:3c:65:41:d4:2a:cb:30:cd:08:1d:9e:80:00: c5:2e:af:b8:a5:91:fa:d2:e2:df:7b:d9:67:68:57: 8c:4e:83:98:14:96:80:12:db:43:ad:71:28:f0:c7: e3:6e:16:b8:12:3a:93:66:47:cd:44:04:93:f6:ec: 81:b3:09:c5:60:eb:30:56:6f:d2:fb:1e:28:b0:ce: 55:57:0d:57:62:f5:f1:b1:fb:bd:ed:c0:5b:83:47: bf:86:46:30:ad:fc:8a:78:ed:dc:2c:d7:82:52:c5: 18:98:f7:91:0a:71:2a:a9:95:86:f1:dd:15:55:9f: 4e:39:c0:26:de:f7:d4:c7:f4:ae:71:99:d2:95:8c: b4:86:e2:32:cb:12:8b:5b:b4:aa:47:94:4b:02:cd: 94:90:ae:1b:94:a3:87:30:d3:32:0c:48:12:4e:b4: c8:bf:9e:d5:bf:ca:a1:49:2d:b9:7f:be:85:06:cc: 30:11:c4:95:d6:84:0a:43:bd:85:6b:65:eb:bf:15: eb:8e:e0:5e:5f:7c:58:d6:3d:ef:f7:f4:d0:69:cb: 14:09:3a:65:6c:f9:5a:b8:c7:32:57:0a:12:74:82: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:05:B1:25:5F:85:4E:19:B2:0B:A2:28:8F:EA:C2:DE:96:D0:06:B6 X509v3 Authority Key Identifier: keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:be:21:26:f0:3c:94:31:a5:9d:ad:95:a8:76:75:c2:07:07: 09:53:a9:0f:14:ec:4b:b0:13:9d:57:21:3b:72:94:d7:3a:da: 0b:8b:0f:17:5e:49:61:2f:c7:94:6e:f2:68:c4:9a:d1:0e:cc: c3:40:e4:fa:6d:6c:93:ab:42:8d:41:7f:ef:1d:11:fc:93:20: 6e:54:d3:90:ac:33:83:8b:a8:86:08:37:55:a1:7b:12:c6:e6: f9:c7:a0:dd:86:f0:8f:8e:83:55:43:f0:8e:a8:37:73:7c:bc: 14:c4:58:d2:72:b4:e1:c5:fc:58:49:fb:a4:d2:30:1f:78:c2: 01:e7:10:67:07:a5:b1:11:d2:22:d1:5c:c4:8a:75:46:65:b9: bc:16:45:9a:bb:84:ad:08:61:fd:37:72:ef:ec:4c:6f:18:52: b8:4f:97:8a:f7:4e:62:c6:1f:bf:ca:32:44:37:ac:3e:16:cd: 52:78:eb:f5:a4:45:3a:47:04:ec:64:46:3d:aa:88:02:9f:a6: 62:40:bc:77:bc:98:c8:c3:12:82:0a:07:fd:01:1b:2d:66:61: bc:38:bc:a4:f9:89:13:6e:74:e2:5f:9e:ae:c2:1a:92:3c:69: 7b:bf:b6:5d:33:09:d4:ba:7b:fc:f4:7c:ef:59:44:16:b4:df: 1b:33:14:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRNDtybMO8IG0UgnI1LuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw ZDJiOTgwHhcNMjUxMjIwMjEwMTE2WhcNMjUxMjIxMjEwMTE2WjAzMTEwLwYDVQQD EyhhMDA1YjEyNTVmODU0ZTE5YjIwYmEyMjg4ZmVhYzJkZTk2ZDAwNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HLaz+votwHtqBJE0LBQkApFj0il VcuvysEw2lBnqzxlQdQqyzDNCB2egADFLq+4pZH60uLfe9lnaFeMToOYFJaAEttD rXEo8Mfjbha4EjqTZkfNRAST9uyBswnFYOswVm/S+x4osM5VVw1XYvXxsfu97cBb g0e/hkYwrfyKeO3cLNeCUsUYmPeRCnEqqZWG8d0VVZ9OOcAm3vfUx/SucZnSlYy0 huIyyxKLW7SqR5RLAs2UkK4blKOHMNMyDEgSTrTIv57Vv8qhSS25f76FBswwEcSV 1oQKQ72Fa2XrvxXrjuBeX3xY1j3v9/TQacsUCTplbPlauMcyVwoSdILsuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAFsSVfhU4ZsguiKI/qwt6W0Aa2MB8GA1UdIwQY MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct Yzk5NGZkMTc0ZTZlLzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0L4hJvA8 lDGlna2VqHZ1wgcHCVOpDxTsS7ATnVchO3KU1zraC4sPF15JYS/HlG7yaMSa0Q7M w0Dk+m1sk6tCjUF/7x0R/JMgblTTkKwzg4uohgg3VaF7Esbm+ceg3Ybwj46DVUPw jqg3c3y8FMRY0nK04cX8WEn7pNIwH3jCAecQZwelsRHSItFcxIp1RmW5vBZFmruE rQhh/Tdy7+xMbxhSuE+XivdOYsYfv8oyRDesPhbNUnjr9aRFOkcE7GRGPaqIAp+m YkC8d7yYyMMSggoH/QEbLWZhvDi8pPmJE2504l+ersIakjxpe7+2XTMJ1Lp7/PR8 71lEFrTfGzMUgA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:41 2025 by rpki-client