This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json) Hash identifier: Vk64f/4VUb0N0//X3S9i51V+pl/DFLMKkNgS+FejQi0= Subject key identifier: 42:94:D9:B0:20:6A:C0:3E:0E:BE:83:D1:F2:56:B7:DA:6F:49:A5:B6 Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88 Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888 Certificate serial: 019B5E2E9BCC32BCCDAB6D1718865FCD3A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 05:01:11 +0000 Manifest this update: Sat 27 Dec 2025 05:01:11 +0000 Manifest next update: Sun 28 Dec 2025 05:01:11 +0000 Files and hashes: 1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=) 2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: z4PCjxHwHwn1BDNWsef9C+Bvi+tpqFxftlFCSZOOA+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:9b:cc:32:bc:cd:ab:6d:17:18:86:5f:cd:3a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888 Validity Not Before: Dec 27 05:01:11 2025 GMT Not After : Dec 28 05:01:11 2025 GMT Subject: CN=4294d9b0206ac03e0ebe83d1f256b7da6f49a5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:99:c5:15:b7:1d:2d:3f:9e:1c:97:17:52: e9:e2:57:ac:03:ed:6f:9c:ce:f3:6f:b3:2d:a8:af: 47:f2:af:b6:fe:f2:38:3d:93:e5:70:bf:b7:26:ee: 1a:0a:8e:f0:01:7c:09:3f:0f:4d:7b:79:bf:69:e1: 36:c7:6f:f1:07:8f:77:2d:12:34:cd:c0:26:cc:23: d5:f9:10:fb:69:85:97:c7:9e:a0:3c:77:77:5b:92: 29:01:6f:72:75:cb:0a:a9:ba:87:23:6c:29:dc:cf: 7d:c8:5c:58:f7:d5:73:60:03:ec:e0:62:e2:ff:f2: 0c:fe:01:fd:65:98:99:37:51:4b:b0:bd:54:81:43: 79:a1:48:ae:a2:ec:c3:75:7b:b9:9a:ca:0d:1f:6d: 1a:59:ed:b4:8f:69:2d:c8:8d:b2:62:81:64:e3:3a: 6d:08:1c:25:26:9d:64:92:83:3d:8b:46:35:5b:c3: 8e:a7:3c:4a:56:55:f5:2c:f1:1b:45:65:0c:35:c6: 56:58:e6:ed:4f:3f:81:d6:09:1b:07:7e:06:81:24: 7e:b3:26:a0:ba:af:33:39:c9:87:11:af:d7:e8:34: 80:ec:29:55:a3:4e:64:1d:40:c4:64:1a:4c:e5:6e: 7f:7f:ec:85:46:6f:f0:4b:70:bf:cb:2c:52:fa:fa: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:94:D9:B0:20:6A:C0:3E:0E:BE:83:D1:F2:56:B7:DA:6F:49:A5:B6 X509v3 Authority Key Identifier: keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:25:9e:14:93:03:ea:97:97:19:e1:bc:a3:a3:3f:d3:59:d0: 7a:df:8c:fb:c3:9b:55:8e:53:f0:e9:f6:fe:19:4d:80:20:19: 45:27:6c:34:59:fe:43:95:b8:8d:c0:3c:66:55:f4:5d:b1:f1: 0c:d0:0f:88:19:a2:31:cf:fb:a7:fc:0f:62:7f:0a:74:53:1a: 93:fc:00:22:53:e8:00:33:21:71:c4:16:85:14:f9:03:10:57: c3:99:43:f8:8b:15:38:90:a5:f2:18:29:17:ce:1e:5d:a4:9b: d8:df:a0:43:cb:92:34:e2:10:34:d8:e3:72:a0:22:ca:68:b2: 1b:89:a4:52:a8:a7:e3:50:cd:a4:fc:e5:3c:0a:e8:ee:40:22: 8b:b5:01:00:33:c9:76:8c:e7:59:60:e0:a7:6a:9e:cb:91:78: a9:8a:16:e1:7f:14:0f:c4:a4:fb:df:82:b5:2a:91:af:7a:51: db:85:68:73:e8:0a:c0:8d:cf:ac:54:94:13:96:68:60:c8:68: 58:7a:21:28:08:5d:e3:8c:89:f4:43:27:33:39:a2:84:1d:13: b8:af:22:55:eb:ec:7c:e7:04:3f:74:ba:3e:79:70:e3:1f:d2: 99:2f:a0:4a:60:07:ac:3a:5e:98:ab:f9:0f:7e:36:0e:ab:b9: c4:7f:6b:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLpvMMrzNq20XGIZfzTpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjI1OTlkOTVlYzkxOTMyN2ZmNjg3NDJkNmM0OWMyYTZh NTQ4ODgwHhcNMjUxMjI3MDUwMTExWhcNMjUxMjI4MDUwMTExWjAzMTEwLwYDVQQD Eyg0Mjk0ZDliMDIwNmFjMDNlMGViZTgzZDFmMjU2YjdkYTZmNDlhNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvSZxRW3HS0/nhyXF1Lp4lesA+1v nM7zb7MtqK9H8q+2/vI4PZPlcL+3Ju4aCo7wAXwJPw9Ne3m/aeE2x2/xB493LRI0 zcAmzCPV+RD7aYWXx56gPHd3W5IpAW9ydcsKqbqHI2wp3M99yFxY99VzYAPs4GLi //IM/gH9ZZiZN1FLsL1UgUN5oUiuouzDdXu5msoNH20aWe20j2ktyI2yYoFk4zpt CBwlJp1kkoM9i0Y1W8OOpzxKVlX1LPEbRWUMNcZWWObtTz+B1gkbB34GgSR+syag uq8zOcmHEa/X6DSA7ClVo05kHUDEZBpM5W5/f+yFRm/wS3C/yyxS+vpXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKU2bAgasA+Dr6D0fJWt9pvSaW2MB8GA1UdIwQY MBaAFHPyWZ2V7JGTJ/9odC1sScKmpUiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTct MTgzMDlkOGE0YzYzLzEvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81MTA3NjUtZTIyYS00YTVjLWJlMTctMTgzMDlkOGE0YzYz LzEvY19KWm5aWHNrWk1uXzJoMExXeEp3cWFsU0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyWeFJMD 6peXGeG8o6M/01nQet+M+8ObVY5T8On2/hlNgCAZRSdsNFn+Q5W4jcA8ZlX0XbHx DNAPiBmiMc/7p/wPYn8KdFMak/wAIlPoADMhccQWhRT5AxBXw5lD+IsVOJCl8hgp F84eXaSb2N+gQ8uSNOIQNNjjcqAiymiyG4mkUqin41DNpPzlPAro7kAii7UBADPJ doznWWDgp2qey5F4qYoW4X8UD8Sk+9+CtSqRr3pR24Voc+gKwI3PrFSUE5ZoYMho WHohKAhd44yJ9EMnMzmihB0TuK8iVevsfOcEP3S6Pnlw4x/SmS+gSmAHrDpemKv5 D342Dqu5xH9rJg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:16:11 2025 by rpki-client