This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json) Hash identifier: w9pA04nJCc7A45HfTe3CWxaQ17b7WzHxqbB0NTcjOis= Subject key identifier: C8:7E:B6:D5:CF:87:CD:94:F9:43:76:02:64:93:F4:3A:AF:59:51:22 Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Certificate serial: 019B5975BD7416CA8B20C1C25E50D9B0199D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:00:46 +0000 Manifest this update: Fri 26 Dec 2025 07:00:46 +0000 Manifest next update: Sat 27 Dec 2025 07:00:46 +0000 Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=) 2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: 8n1v8dQftqztjOXoZ8a0kVWF2fRCXdIU/wENazeKuiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:bd:74:16:ca:8b:20:c1:c2:5e:50:d9:b0:19:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343 Validity Not Before: Dec 26 07:00:46 2025 GMT Not After : Dec 27 07:00:46 2025 GMT Subject: CN=c87eb6d5cf87cd94f94376026493f43aaf595122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:76:f5:80:66:25:c8:2a:4b:25:cf:12:70:6a: 61:e2:15:b0:d8:5a:f2:88:b7:67:4e:57:f0:a1:5d: 29:04:fa:18:95:c6:f2:73:c9:66:95:e5:af:10:80: 16:28:75:f7:d6:e6:9c:ca:e5:f2:07:d7:61:2b:24: 8e:c7:73:12:e7:ed:79:b3:d6:96:52:e7:61:27:9b: d0:34:23:c1:b2:ea:d1:92:44:8c:57:b9:91:74:f7: 9a:65:6f:b6:8d:52:82:dd:17:ab:c3:cb:3f:e7:5b: 4a:6f:c9:15:c3:36:db:d7:fa:34:47:bc:01:d7:66: 42:3f:61:be:c1:df:a0:f3:70:ee:4b:ae:a2:9b:44: fc:1c:4b:74:cd:ab:68:bc:4a:b5:28:59:10:ac:76: 65:d6:a3:ea:df:16:7b:c8:b2:b5:c9:e5:95:13:7c: 86:c3:b3:62:ae:66:55:e4:d8:fc:06:65:a1:1f:63: 45:7f:1f:73:60:27:c8:61:9a:58:9d:7d:20:50:20: d3:b8:b3:a7:44:3b:46:07:89:9a:4f:03:61:34:37: 21:ec:d8:3c:5e:85:64:da:8d:b9:96:b2:0a:60:44: 32:0a:6c:c4:a9:98:40:64:ef:3b:a8:7a:9f:39:d2: f7:2d:a3:91:89:d9:2c:cf:91:b9:d2:e7:aa:86:0c: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:B6:D5:CF:87:CD:94:F9:43:76:02:64:93:F4:3A:AF:59:51:22 X509v3 Authority Key Identifier: keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cf:c4:df:34:35:f5:57:4a:f5:10:00:d6:2a:bf:31:37:9d: b2:39:0b:04:07:2b:9f:db:cc:ec:40:7f:00:56:68:ae:8f:cb: 5a:a5:57:b7:a9:4c:ad:76:73:4e:e7:af:cc:92:51:fc:c4:06: f5:05:0a:d3:f4:35:02:be:0c:3c:d7:84:d4:7d:7b:5a:8a:2b: ce:8e:c2:08:ae:c3:f9:52:24:86:be:45:77:5b:3d:fa:d9:4a: 45:13:9d:dc:a8:dc:42:de:0e:4f:de:7f:d2:dc:b9:37:a0:a7: a0:58:da:55:e5:46:97:c4:9a:91:d5:7e:65:4f:6a:56:e2:ea: 26:38:d1:03:f8:a5:53:43:69:72:0d:21:d5:3a:5c:cd:c7:58: 88:ba:4b:27:7d:1c:3a:63:d7:4b:e1:c3:2b:8e:bf:f1:9b:34: f2:a5:47:fc:c4:fa:d7:0c:22:bd:ad:cc:d2:9c:41:82:76:df: 39:4b:82:ef:f4:8e:b7:f9:e7:c0:48:a2:53:d2:3c:0c:40:7a: 1c:8b:ef:72:93:28:5f:02:3f:d3:65:17:66:be:1c:ef:05:1b: b5:0b:26:95:6d:df:40:9d:1e:46:9b:f6:f0:63:05:ae:75:3a: 50:0a:dc:59:a6:6c:a2:47:76:d1:3e:bc:b4:f3:53:ac:53:00: 3f:98:e2:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdb10FsqLIMHCXlDZsBmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWM0MWExMjM3NjRjZjdkYzBmMmRiOTg0MWY3MzJhM2I5 NjEzNDMwHhcNMjUxMjI2MDcwMDQ2WhcNMjUxMjI3MDcwMDQ2WjAzMTEwLwYDVQQD EyhjODdlYjZkNWNmODdjZDk0Zjk0Mzc2MDI2NDkzZjQzYWFmNTk1MTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Xb1gGYlyCpLJc8ScGph4hWw2Fry iLdnTlfwoV0pBPoYlcbyc8lmleWvEIAWKHX31uacyuXyB9dhKySOx3MS5+15s9aW UudhJ5vQNCPBsurRkkSMV7mRdPeaZW+2jVKC3Rerw8s/51tKb8kVwzbb1/o0R7wB 12ZCP2G+wd+g83DuS66im0T8HEt0zatovEq1KFkQrHZl1qPq3xZ7yLK1yeWVE3yG w7NirmZV5Nj8BmWhH2NFfx9zYCfIYZpYnX0gUCDTuLOnRDtGB4maTwNhNDch7Ng8 XoVk2o25lrIKYEQyCmzEqZhAZO87qHqfOdL3LaORidksz5G50ueqhgyvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh+ttXPh82U+UN2AmST9DqvWVEiMB8GA1UdIwQY MBaAFMycQaEjdkz33A8tuYQfcyo7lhNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUt MDYyNDdhOTc4ZDY5LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUtMDYyNDdhOTc4ZDY5 LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATs/E3zQ1 9VdK9RAA1iq/MTedsjkLBAcrn9vM7EB/AFZoro/LWqVXt6lMrXZzTuevzJJR/MQG 9QUK0/Q1Ar4MPNeE1H17Woorzo7CCK7D+VIkhr5Fd1s9+tlKRROd3KjcQt4OT95/ 0ty5N6CnoFjaVeVGl8SakdV+ZU9qVuLqJjjRA/ilU0Npcg0h1TpczcdYiLpLJ30c OmPXS+HDK46/8Zs08qVH/MT61wwiva3M0pxBgnbfOUuC7/SOt/nnwEiiU9I8DEB6 HIvvcpMoXwI/02UXZr4c7wUbtQsmlW3fQJ0eRpv28GMFrnU6UArcWaZsokd20T68 tPNTrFMAP5jibA== -----END CERTIFICATE-----Generated at Fri Dec 26 09:36:33 2025 by rpki-client