This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json) Hash identifier: 7sS3O64/VJ7RLM6FNW6EMbUhfeG92Fqd6mL7XU6cTJ8= Subject key identifier: C1:D4:D4:51:FC:1D:9B:B5:E2:20:01:74:11:A3:74:7C:5A:5A:77:2A Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d Certificate serial: 019B315614837C2984B53589918C6D3E00D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft Manifest number: 15C4 Signing time: Thu 18 Dec 2025 12:01:23 +0000 Manifest this update: Thu 18 Dec 2025 12:01:23 +0000 Manifest next update: Fri 19 Dec 2025 12:01:23 +0000 Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=) 2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: anV09fY9tNbyFmrh9+n7ZqT3ET6EOX7eN7knt0GicUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:14:83:7c:29:84:b5:35:89:91:8c:6d:3e:00:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d Validity Not Before: Dec 18 12:01:23 2025 GMT Not After : Dec 19 12:01:23 2025 GMT Subject: CN=c1d4d451fc1d9bb5e220017411a3747c5a5a772a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:7a:2d:d1:f8:41:13:bd:99:ee:de:e0:bd: d1:37:47:a8:54:6a:6e:bd:3b:cf:11:73:df:ed:5a: a8:66:7d:30:60:bb:47:d6:3b:47:30:49:f4:18:95: d0:c5:da:2b:ac:04:8d:96:17:bb:7b:84:6d:04:23: 20:55:4c:0b:1c:7a:0b:4f:96:85:05:49:4d:b9:79: c8:08:dc:80:a1:7d:db:f3:84:39:c1:db:24:56:7f: b7:27:1a:24:4a:44:39:5b:59:b7:a5:89:05:95:06: e4:91:e2:eb:e1:16:87:5e:2a:66:7b:84:b1:da:a6: 88:59:60:58:f3:eb:bf:2f:52:c8:2e:d7:70:4c:0a: e7:0e:53:f3:45:bf:f4:54:1f:83:ee:a7:6a:98:6e: aa:45:44:d7:f5:1b:5e:c8:9f:38:1f:84:5e:e1:96: 2f:b1:46:eb:3f:de:47:da:ca:af:b2:f6:4d:a9:0c: eb:46:a7:37:0c:f3:23:35:48:a6:82:76:8b:c6:d0: 88:0b:d1:1f:64:2a:c1:1e:dd:b9:3a:08:f7:53:c4: 29:2b:2e:96:7c:cb:22:05:84:38:8b:c7:c6:64:cc: 5f:5e:0b:4c:c9:38:8b:dd:f6:14:ab:34:45:55:5f: bb:c7:41:22:2f:54:44:ee:f3:8b:0d:49:11:42:ce: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D4:D4:51:FC:1D:9B:B5:E2:20:01:74:11:A3:74:7C:5A:5A:77:2A X509v3 Authority Key Identifier: keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:79:4d:0a:60:2c:70:e9:e5:b5:87:24:76:6d:1a:19:c3:cc: d0:4e:e9:b8:3b:d3:d3:3b:0c:c8:c7:73:c1:82:bc:e8:ca:bd: 69:73:b8:f0:8b:17:f4:cd:a1:c5:c2:f3:b4:ad:55:58:f8:99: 80:b8:fc:40:72:76:f2:f7:bb:da:44:cf:ed:0d:04:d9:20:87: 23:6f:4f:74:6d:12:8b:81:04:f8:d1:0a:cb:3b:47:df:86:dd: cd:9b:17:12:2d:1c:1e:db:8f:94:05:09:0f:7d:23:ae:aa:64: 01:5d:22:a6:de:01:2d:c0:5b:15:f8:08:de:6f:6e:47:b1:88: 26:7f:79:34:e1:d2:b0:fa:af:0b:70:e7:e6:fe:39:c5:40:d6: dd:f3:d0:19:d6:14:bc:4a:91:b9:45:08:9b:ff:f3:75:11:91: cc:24:82:77:52:12:66:6e:5e:3b:6c:04:98:ed:f5:0f:be:92: 2c:44:23:e4:c8:1f:1a:70:6a:3b:75:37:b1:e8:84:09:85:7d: db:85:05:ed:8c:44:21:ed:e1:d5:79:78:fb:cd:9c:3a:2b:ca: 47:c1:7e:5a:40:33:f3:32:89:37:fd:6c:09:ab:1f:a3:8f:e3: 05:80:62:27:6f:76:dd:85:4a:ac:39:eb:eb:05:dc:35:74:d5: a9:4b:e8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhSDfCmEtTWJkYxtPgDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTZhZTM4YWVkYWNiYmVlZWUxZTA5Mzk1NmRiMzI4N2Fl N2I1M2QwHhcNMjUxMjE4MTIwMTIzWhcNMjUxMjE5MTIwMTIzWjAzMTEwLwYDVQQD EyhjMWQ0ZDQ1MWZjMWQ5YmI1ZTIyMDAxNzQxMWEzNzQ3YzVhNWE3NzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd96LdH4QRO9me7e4L3RN0eoVGpu vTvPEXPf7VqoZn0wYLtH1jtHMEn0GJXQxdorrASNlhe7e4RtBCMgVUwLHHoLT5aF BUlNuXnICNyAoX3b84Q5wdskVn+3JxokSkQ5W1m3pYkFlQbkkeLr4RaHXipme4Sx 2qaIWWBY8+u/L1LILtdwTArnDlPzRb/0VB+D7qdqmG6qRUTX9RteyJ84H4Re4ZYv sUbrP95H2sqvsvZNqQzrRqc3DPMjNUimgnaLxtCIC9EfZCrBHt25Ogj3U8QpKy6W fMsiBYQ4i8fGZMxfXgtMyTiL3fYUqzRFVV+7x0EiL1RE7vOLDUkRQs6CTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHU1FH8HZu14iABdBGjdHxaWncqMB8GA1UdIwQY MBaAFGSWrjiu2su+7uHgk5Vtsyh657U9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzIt NzY2NGU4YTIxZmM3LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzItNzY2NGU4YTIxZmM3 LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHlNCmAs cOnltYckdm0aGcPM0E7puDvT0zsMyMdzwYK86Mq9aXO48IsX9M2hxcLztK1VWPiZ gLj8QHJ28ve72kTP7Q0E2SCHI29PdG0Si4EE+NEKyztH34bdzZsXEi0cHtuPlAUJ D30jrqpkAV0ipt4BLcBbFfgI3m9uR7GIJn95NOHSsPqvC3Dn5v45xUDW3fPQGdYU vEqRuUUIm//zdRGRzCSCd1ISZm5eO2wEmO31D76SLEQj5MgfGnBqO3U3seiECYV9 24UF7YxEIe3h1Xl4+82cOivKR8F+WkAz8zKJN/1sCasfo4/jBYBiJ2923YVKrDnr 6wXcNXTVqUvoxw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:52 2025 by rpki-client