This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json) Hash identifier: pwzcNg84mZ/C/6SluEztR473WAZ0z+CQ7LUpCp9fq0A= Subject key identifier: C3:12:83:AA:E0:F0:5D:16:10:9D:E5:46:8D:37:55:2D:1B:9C:D3:03 Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Certificate serial: 019B3343A80C24BB033E77F381A3919A276B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft Manifest number: 1656 Signing time: Thu 18 Dec 2025 21:00:30 +0000 Manifest this update: Thu 18 Dec 2025 21:00:30 +0000 Manifest next update: Fri 19 Dec 2025 21:00:30 +0000 Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=) 2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=) 3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: Vz279TFPkvMaDUXg/fksFBCZD9/acZLhuNLk8dJPPww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:a8:0c:24:bb:03:3e:77:f3:81:a3:91:9a:27:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Validity Not Before: Dec 18 21:00:30 2025 GMT Not After : Dec 19 21:00:30 2025 GMT Subject: CN=c31283aae0f05d16109de5468d37552d1b9cd303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:26:d9:0a:15:ab:3f:89:8f:d5:a9:4b:a8:84: d2:50:56:08:49:a7:23:8d:d8:b3:14:6c:4d:a1:64: d9:99:e1:fa:45:7e:0e:6c:19:7b:4c:46:01:07:30: ee:9c:1f:c8:58:d6:34:31:a6:ea:8d:32:e1:12:99: 60:46:55:7a:70:22:6d:29:46:e3:e0:15:4c:ac:1a: f5:f5:47:51:53:ed:a3:60:fc:bd:36:2d:3f:7f:13: 9c:89:d2:3d:f0:87:55:6d:98:ba:5a:ea:c0:07:b6: 32:db:96:df:9d:7f:84:92:60:fd:09:42:9c:4a:8d: f8:48:70:30:52:2d:d5:99:e4:f6:5e:a0:de:be:dd: 44:17:ea:78:06:d6:32:3d:84:6c:98:3e:98:eb:78: 71:6e:1a:7e:4a:48:7a:1e:f4:67:6d:c6:bf:8c:11: e6:14:de:e6:30:05:b6:91:9b:db:90:9e:34:96:ac: 22:d2:43:74:af:e0:c6:a4:4a:e3:07:00:00:0e:b6: 0a:16:d8:fb:92:6c:76:5a:79:ff:26:cd:c1:cc:e0: e9:47:79:97:16:12:81:aa:0a:b4:83:74:28:08:d7: f5:4f:a9:71:c2:4f:6d:91:37:72:43:59:15:cc:39: e2:f1:ff:c7:9a:05:8c:b7:cb:03:fb:cb:eb:8d:ad: d4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:12:83:AA:E0:F0:5D:16:10:9D:E5:46:8D:37:55:2D:1B:9C:D3:03 X509v3 Authority Key Identifier: keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f0:f1:ee:dd:a3:a7:32:63:d4:b5:73:28:06:56:71:48:ba: 1d:9f:1b:b0:84:f4:9b:e6:04:78:c3:c7:05:c4:47:2d:ad:ee: 89:d3:7b:b5:8b:92:a4:25:aa:2c:01:b6:ca:e3:cc:33:d6:7e: ef:c0:34:00:bf:36:b0:5d:8c:d8:cb:4f:20:e3:09:1c:b9:1e: 22:8e:c8:39:76:00:b9:15:a7:99:4a:42:90:74:c2:43:c8:50: 9d:8e:8e:84:ac:1b:ea:f1:1a:1a:4e:7b:d1:75:84:85:6f:53: df:b7:19:43:23:df:39:74:ec:00:20:a1:3d:17:7e:70:09:05: 74:04:dc:a2:bf:e7:5d:e7:00:cd:d3:62:73:62:7c:ea:22:d1: c5:28:ce:d3:f9:50:87:d6:e1:46:17:cb:69:98:67:5d:c4:11: 0c:90:0b:cb:c7:03:c8:1b:da:a5:83:35:64:f1:77:e5:88:70: 79:62:c4:0c:3d:f6:d3:5f:cf:34:f7:63:3e:a0:9b:b7:0a:e9: 9b:cf:e1:fa:03:1a:e8:39:11:e0:61:69:16:cf:d7:3c:7a:2b: d2:96:dd:6a:99:09:2d:29:f5:37:01:08:bf:44:a2:15:11:47: fc:80:76:08:ce:28:20:89:c5:7f:7c:8d:d5:9f:6d:46:26:61: bf:cf:7a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ6gMJLsDPnfzgaORmidrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh MGNmNmEwHhcNMjUxMjE4MjEwMDMwWhcNMjUxMjE5MjEwMDMwWjAzMTEwLwYDVQQD EyhjMzEyODNhYWUwZjA1ZDE2MTA5ZGU1NDY4ZDM3NTUyZDFiOWNkMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ibZChWrP4mP1alLqITSUFYISacj jdizFGxNoWTZmeH6RX4ObBl7TEYBBzDunB/IWNY0MabqjTLhEplgRlV6cCJtKUbj 4BVMrBr19UdRU+2jYPy9Ni0/fxOcidI98IdVbZi6WurAB7Yy25bfnX+EkmD9CUKc So34SHAwUi3VmeT2XqDevt1EF+p4BtYyPYRsmD6Y63hxbhp+Skh6HvRnbca/jBHm FN7mMAW2kZvbkJ40lqwi0kN0r+DGpErjBwAADrYKFtj7kmx2Wnn/Js3BzODpR3mX FhKBqgq0g3QoCNf1T6lxwk9tkTdyQ1kVzDni8f/HmgWMt8sD+8vrja3UxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMSg6rg8F0WEJ3lRo03VS0bnNMDMB8GA1UdIwQY MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt ZTIzMDQ2MmZjNTdiLzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPDx7t2j pzJj1LVzKAZWcUi6HZ8bsIT0m+YEeMPHBcRHLa3uidN7tYuSpCWqLAG2yuPMM9Z+ 78A0AL82sF2M2MtPIOMJHLkeIo7IOXYAuRWnmUpCkHTCQ8hQnY6OhKwb6vEaGk57 0XWEhW9T37cZQyPfOXTsACChPRd+cAkFdATcor/nXecAzdNic2J86iLRxSjO0/lQ h9bhRhfLaZhnXcQRDJALy8cDyBvapYM1ZPF35YhweWLEDD3201/PNPdjPqCbtwrp m8/h+gMa6DkR4GFpFs/XPHor0pbdapkJLSn1NwEIv0SiFRFH/IB2CM4oIInFf3yN 1Z9tRiZhv896Hw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:44:19 2025 by rpki-client