This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json) Hash identifier: GR2EIMtE8TjBTzqDF6PJvQPuS9cuZSoLDub7DiEHXws= Subject key identifier: 8B:5C:25:84:97:A9:EF:7A:33:7A:94:16:78:8E:DF:35:35:19:92:18 Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b Certificate serial: 019B68442471BA40537E1F50733C19CEBE2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft Manifest number: 0BEC Signing time: Mon 29 Dec 2025 04:00:54 +0000 Manifest this update: Mon 29 Dec 2025 04:00:54 +0000 Manifest next update: Tue 30 Dec 2025 04:00:54 +0000 Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: JSv6OhL1KgJQOJlQKd+lLigYafGGonWUwgO2e0Icpm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:24:71:ba:40:53:7e:1f:50:73:3c:19:ce:be:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b Validity Not Before: Dec 29 04:00:54 2025 GMT Not After : Dec 30 04:00:54 2025 GMT Subject: CN=8b5c258497a9ef7a337a9416788edf3535199218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:61:c5:d8:2b:4d:a9:37:fe:8d:89:0f:ed: 83:11:75:b3:6c:10:06:fe:da:ef:32:9d:63:15:f8: 4f:ca:5b:8b:89:5b:19:79:1e:da:16:af:f7:99:fb: d1:8d:45:de:11:df:0f:78:dd:a0:cb:39:7a:4b:ec: 00:d9:5f:40:c4:94:94:7e:0c:1b:b5:cb:05:b3:95: 4e:bd:c4:b7:e9:f3:db:e7:e9:bf:c5:2d:1a:71:26: bb:02:d7:e1:93:31:a5:42:f6:8d:18:66:ce:54:00: c6:51:eb:4f:70:b5:6d:2c:73:e9:c4:ae:ee:1f:37: b2:d3:1a:9c:ee:58:73:65:46:5e:39:76:41:77:8d: 8e:fe:79:dc:35:73:0a:91:6d:91:95:d5:a9:4c:02: b5:62:4f:c0:2a:7b:81:7c:f2:c2:65:fb:aa:b0:60: 25:4d:18:9d:9a:8a:8b:14:3a:eb:e0:e1:45:ed:b2: b1:ab:7e:c7:d9:64:85:f7:2d:b1:59:56:9f:3f:1a: e8:04:00:52:35:61:25:d3:e1:08:6a:2b:65:2b:8a: f4:b1:9b:eb:45:8f:cb:d8:d2:a2:d0:6a:89:1b:62: 57:bd:45:2d:f9:f9:16:77:44:f1:98:8e:f2:c1:25: 96:87:7b:c3:c4:09:6d:73:69:c2:50:68:85:22:91: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5C:25:84:97:A9:EF:7A:33:7A:94:16:78:8E:DF:35:35:19:92:18 X509v3 Authority Key Identifier: keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f4:8f:25:5e:99:87:0c:e4:b3:1e:58:f5:e9:ae:92:02:18: 75:75:7f:b6:ee:d3:54:fc:87:57:58:c6:13:56:52:44:74:1b: 6f:9f:ad:b1:7c:83:07:ed:d4:3a:ce:86:c3:8f:98:2e:8e:80: 24:aa:43:e4:31:e3:fd:17:6c:46:00:ef:05:4d:cb:e8:4b:54: 81:3b:a0:27:b4:bf:cc:dc:3e:0c:dc:5a:e7:83:61:67:4b:88: 15:af:8b:1f:8e:ae:b4:8f:0f:4e:fe:0e:3a:92:d9:2b:31:bc: 93:4f:33:d2:1e:f5:6a:92:2f:3e:69:01:fe:6b:6c:d6:82:27: 8c:c2:28:47:dd:f6:96:7e:19:b5:df:50:9c:31:b0:00:f2:0b: 97:d6:74:c7:82:15:0f:40:99:77:fd:ab:00:0f:07:8c:7d:cb: 2b:09:af:38:7b:99:0a:41:c8:8b:68:52:d1:0d:aa:01:7c:6a: c9:4e:fc:a2:41:e4:00:2b:2f:1f:1a:ac:31:c9:50:cf:ff:f3: 65:97:2e:a7:5f:9e:46:12:a4:47:5c:33:83:3b:af:09:86:17: 95:60:9a:67:ed:40:c5:e0:fe:5a:0c:11:45:2e:2e:31:1f:51: 48:7f:7b:24:5f:80:f4:dc:f5:e8:c9:7b:e6:df:aa:66:86:7d: a5:72:9e:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRCRxukBTfh9QczwZzr4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTIwOWEyMTY4YzQ4ZDM1MDkzYmI5YzA1MjBiMTlmYjBm ZTE0M2IwHhcNMjUxMjI5MDQwMDU0WhcNMjUxMjMwMDQwMDU0WjAzMTEwLwYDVQQD Eyg4YjVjMjU4NDk3YTllZjdhMzM3YTk0MTY3ODhlZGYzNTM1MTk5MjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZdhxdgrTak3/o2JD+2DEXWzbBAG /trvMp1jFfhPyluLiVsZeR7aFq/3mfvRjUXeEd8PeN2gyzl6S+wA2V9AxJSUfgwb tcsFs5VOvcS36fPb5+m/xS0acSa7AtfhkzGlQvaNGGbOVADGUetPcLVtLHPpxK7u Hzey0xqc7lhzZUZeOXZBd42O/nncNXMKkW2RldWpTAK1Yk/AKnuBfPLCZfuqsGAl TRidmoqLFDrr4OFF7bKxq37H2WSF9y2xWVafPxroBABSNWEl0+EIaitlK4r0sZvr RY/L2NKi0GqJG2JXvUUt+fkWd0TxmI7ywSWWh3vDxAltc2nCUGiFIpE1XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItcJYSXqe96M3qUFniO3zU1GZIYMB8GA1UdIwQY MBaAFM2SCaIWjEjTUJO7nAUgsZ+w/hQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNzhiODAtYjVlMS00YzY0LTllYzYt Y2Y0OGMwMzc0NGZhLzEvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNzhiODAtYjVlMS00YzY0LTllYzYtY2Y0OGMwMzc0NGZh LzEvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvSPJV6Z hwzksx5Y9emukgIYdXV/tu7TVPyHV1jGE1ZSRHQbb5+tsXyDB+3UOs6Gw4+YLo6A JKpD5DHj/RdsRgDvBU3L6EtUgTugJ7S/zNw+DNxa54NhZ0uIFa+LH46utI8PTv4O OpLZKzG8k08z0h71apIvPmkB/mts1oInjMIoR932ln4Ztd9QnDGwAPILl9Z0x4IV D0CZd/2rAA8HjH3LKwmvOHuZCkHIi2hS0Q2qAXxqyU78okHkACsvHxqsMclQz//z ZZcup1+eRhKkR1wzgzuvCYYXlWCaZ+1AxeD+WgwRRS4uMR9RSH97JF+A9Nz16Ml7 5t+qZoZ9pXKeNQ== -----END CERTIFICATE-----Generated at Mon Dec 29 05:25:45 2025 by rpki-client