This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json) Hash identifier: 0EsF2NWoeW+yKRhfmwIVM+OOubTHhEbdbltE7pZsd2A= Subject key identifier: 0F:72:7C:5B:BB:AE:DD:CD:82:E1:F1:8F:F8:EF:DC:DD:2F:1C:F3:BD Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7 Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7 Certificate serial: 019B32D6F47018B45C75A533A8B44B0FFCA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft Manifest number: 03F1 Signing time: Thu 18 Dec 2025 19:01:46 +0000 Manifest this update: Thu 18 Dec 2025 19:01:46 +0000 Manifest next update: Fri 19 Dec 2025 19:01:46 +0000 Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=) 2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: Nz9Ncy3AklurgjLK+dNdxC3vrkInPiTTe7AextXKocM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:f4:70:18:b4:5c:75:a5:33:a8:b4:4b:0f:fc:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7 Validity Not Before: Dec 18 19:01:46 2025 GMT Not After : Dec 19 19:01:46 2025 GMT Subject: CN=0f727c5bbbaeddcd82e1f18ff8efdcdd2f1cf3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:db:fa:37:18:b4:7b:0b:6e:b4:5c:60:6e: 33:78:c1:2d:35:e0:59:03:75:1a:d1:e1:e7:48:d6: d1:01:61:c8:e0:74:a0:49:e0:91:87:5e:e9:15:5e: 55:76:b5:6b:e9:44:49:1f:d2:27:93:15:3a:02:d9: cb:e8:2e:06:26:d4:19:92:c2:2a:31:92:81:57:fe: 3c:8f:43:b7:d3:0d:fe:41:2d:fd:11:02:08:e4:f2: e5:e1:95:35:eb:62:32:01:1b:de:4c:96:af:bf:ce: 7b:77:cf:6b:c0:90:16:9d:cf:36:cf:17:97:17:02: 02:6c:79:a9:d7:a6:3e:2b:9d:f6:e4:95:4b:60:74: ed:bc:d8:52:27:b6:09:52:89:f6:1b:ae:5a:1d:30: 87:69:9c:75:ce:9c:f2:ea:b9:ae:f5:ff:b5:6c:b6: 1c:dd:1a:8e:fe:d8:a2:fb:b7:11:36:69:3c:3c:a3: 42:aa:29:72:69:36:2e:c9:2e:ab:75:05:14:a7:57: bf:6e:2b:4a:c6:b2:03:34:98:0e:a0:b7:8c:67:b3: 5e:aa:ae:5b:02:17:71:fb:e7:40:c7:fb:3f:24:13: 2b:55:09:17:bf:f2:b8:db:b1:42:b6:eb:47:79:0d: 0a:3d:1f:09:47:29:f3:3e:f1:9a:77:fd:ae:5e:f2: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:72:7C:5B:BB:AE:DD:CD:82:E1:F1:8F:F8:EF:DC:DD:2F:1C:F3:BD X509v3 Authority Key Identifier: keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:2e:20:69:83:9c:e7:23:f0:87:53:42:53:08:54:56:e4: 68:15:3c:1e:da:38:0a:15:7d:a7:46:c8:19:5a:46:a3:c0:59: 80:64:2f:cf:e8:06:9e:cb:7a:8c:06:d3:17:61:b2:31:66:40: b2:43:da:14:e0:33:e8:24:0b:d9:46:bc:1e:d9:78:c6:0f:31: 99:e8:ac:be:07:6e:c5:4c:92:5a:63:86:6d:3e:fa:e6:15:cc: 04:74:6d:e8:de:0e:03:73:c7:54:09:ca:db:be:8a:28:41:00: a8:00:9a:bd:b4:a8:71:b4:90:10:64:e1:bc:6f:fd:9b:56:ef: dc:54:01:11:1d:4d:9e:34:6a:5b:ff:ef:d8:e3:ed:c3:a0:af: 40:bb:47:78:06:e0:7c:fe:3f:5c:f2:2a:72:95:ff:46:e5:72: 87:26:39:5d:10:49:35:58:50:12:84:9e:12:a2:a1:ff:fe:40: d4:0a:49:b2:02:d9:ae:71:ed:cc:0a:f9:eb:82:bc:b2:d2:6c: 96:71:60:8a:94:47:37:b8:91:f3:97:d0:21:5a:69:e7:9e:ad: a9:bb:ae:e5:63:e2:8d:ba:f2:ea:d7:13:bf:b8:90:78:e7:56: 2f:8b:a5:17:13:5c:19:44:28:11:7c:58:4f:4e:c7:7e:fe:bf: d5:64:a5:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1vRwGLRcdaUzqLRLD/ypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOWFlMzc2MTdmM2ZiZTQ4ODgwYjIzMGZlN2M3Y2UwZjBk YzQxYzcwHhcNMjUxMjE4MTkwMTQ2WhcNMjUxMjE5MTkwMTQ2WjAzMTEwLwYDVQQD EygwZjcyN2M1YmJiYWVkZGNkODJlMWYxOGZmOGVmZGNkZDJmMWNmM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozTb+jcYtHsLbrRcYG4zeMEtNeBZ A3Ua0eHnSNbRAWHI4HSgSeCRh17pFV5VdrVr6URJH9InkxU6AtnL6C4GJtQZksIq MZKBV/48j0O30w3+QS39EQII5PLl4ZU162IyARveTJavv857d89rwJAWnc82zxeX FwICbHmp16Y+K5325JVLYHTtvNhSJ7YJUon2G65aHTCHaZx1zpzy6rmu9f+1bLYc 3RqO/tii+7cRNmk8PKNCqilyaTYuyS6rdQUUp1e/bitKxrIDNJgOoLeMZ7Neqq5b Ahdx++dAx/s/JBMrVQkXv/K427FCtutHeQ0KPR8JRynzPvGad/2uXvImGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9yfFu7rt3NguHxj/jv3N0vHPO9MB8GA1UdIwQY MBaAFP2a43YX8/vkiICyMP58fODw3EHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jOGY0MWQtZWE3My00YTAzLWJhNzIt MGY1MDc3M2IwZWRlLzEvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jOGY0MWQtZWE3My00YTAzLWJhNzItMGY1MDc3M2IwZWRl LzEvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmQuIGmD nOcj8IdTQlMIVFbkaBU8Hto4ChV9p0bIGVpGo8BZgGQvz+gGnst6jAbTF2GyMWZA skPaFOAz6CQL2Ua8Htl4xg8xmeisvgduxUySWmOGbT765hXMBHRt6N4OA3PHVAnK 276KKEEAqACavbSocbSQEGThvG/9m1bv3FQBER1NnjRqW//v2OPtw6CvQLtHeAbg fP4/XPIqcpX/RuVyhyY5XRBJNVhQEoSeEqKh//5A1ApJsgLZrnHtzAr564K8stJs lnFgipRHN7iR85fQIVpp556tqbuu5WPijbry6tcTv7iQeOdWL4ulFxNcGUQoEXxY T07Hfv6/1WSl8g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:32 2025 by rpki-client