This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json) Hash identifier: nWbZTdSkGa274Xjt4v4bOmWsAvuS9hYqdA06dU9ZYp4= Subject key identifier: A2:D2:E9:0C:3B:5D:43:1C:36:DD:14:5B:0C:4F:A8:96:BF:D7:93:64 Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Certificate serial: 019B4E16D1F9FBF12CAD7A2F93468582C0CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft Manifest number: 110E Signing time: Wed 24 Dec 2025 02:01:16 +0000 Manifest this update: Wed 24 Dec 2025 02:01:16 +0000 Manifest next update: Thu 25 Dec 2025 02:01:16 +0000 Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=) 2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: /6SM83X6XjYfSQ7sYa1WiXUMtzhb7ICXtXu2Wkmhb4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:d1:f9:fb:f1:2c:ad:7a:2f:93:46:85:82:c0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Validity Not Before: Dec 24 02:01:16 2025 GMT Not After : Dec 25 02:01:16 2025 GMT Subject: CN=a2d2e90c3b5d431c36dd145b0c4fa896bfd79364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:76:6e:74:12:9b:e4:42:d1:11:e2:27:79: f4:43:b7:89:a7:a8:0d:97:17:c5:42:d1:b8:8f:d1: b4:3b:5a:4f:6c:16:6d:03:43:23:05:7b:a7:70:2b: 44:b4:db:d2:61:0f:e3:28:a4:03:3f:54:5d:bf:6e: 9b:12:10:1c:82:66:4b:3f:15:4a:a5:b0:2f:50:87: 90:0a:a8:9a:a5:5d:40:7c:cc:b4:b9:2d:2d:5b:f7: 1e:2a:36:85:b9:e8:50:e1:95:10:72:a8:ed:13:00: 68:66:13:75:b2:0f:33:e3:97:47:43:a1:db:e7:7e: 8b:36:c0:14:7a:ba:a9:69:65:33:8b:6a:46:1c:20: 8b:f4:cf:1a:f1:41:3b:6e:0b:64:ac:f2:48:04:c5: 14:4f:76:41:0e:30:31:45:b1:cb:b5:f3:96:96:d7: d6:b7:87:33:dd:a7:76:65:39:e9:86:a7:5b:4e:60: f8:c8:2d:34:c2:68:9a:46:1c:fb:2a:f3:8b:ed:02: b2:c5:64:dd:6f:a7:59:7c:d9:fd:66:db:fc:99:43: ce:11:49:1e:43:4c:02:aa:80:56:71:bc:85:84:2e: ce:b6:b1:58:f9:d6:b5:52:a3:86:04:58:8c:e9:f4: e0:91:7a:63:90:b7:70:ac:c1:fb:50:5f:f0:3a:9a: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D2:E9:0C:3B:5D:43:1C:36:DD:14:5B:0C:4F:A8:96:BF:D7:93:64 X509v3 Authority Key Identifier: keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2a:29:e4:56:f5:b6:37:fc:0d:ce:1b:d9:ae:41:08:23:b9: e0:c8:5e:5c:e1:ff:ec:9b:bd:78:18:da:56:91:a3:86:60:db: f1:ff:28:f4:f2:5e:cc:fa:bc:ff:7c:60:64:3c:a8:1a:28:61: a9:c0:70:42:73:77:77:6f:9f:92:81:c2:5d:a2:c7:29:59:d6: 15:2f:98:1b:58:f8:41:00:c9:fc:1c:88:78:9c:26:e7:fd:09: 5d:bc:dd:34:b3:28:d9:2f:ae:cc:9c:9d:fe:4b:58:65:1e:65: 2e:75:af:5d:01:ff:3b:ee:17:7d:75:b3:55:dd:f9:31:5a:73: 33:81:f5:04:a5:86:77:6b:5f:72:94:94:c6:bd:ec:95:b1:70: d5:f7:c5:61:de:1f:6d:ad:15:2b:e0:14:e9:4a:8f:b5:a7:af: 29:9c:e4:1a:80:c0:c1:7d:c3:ba:a1:6d:ea:7b:7a:3e:c7:e2: 76:ae:a0:15:48:67:a7:29:48:89:ef:c6:50:f4:5f:84:7b:34: c8:2c:10:ef:b7:9f:a6:3d:90:79:fe:25:3f:1a:63:14:b3:08: 0c:0b:f1:5e:04:bf:90:69:02:5f:67:43:ea:fd:32:ab:53:14: 49:e0:c8:44:a7:4b:9b:d2:c9:ea:e1:59:61:09:7d:28:e8:48: 76:ce:b5:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFtH5+/EsrXovk0aFgsDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWZhMGIzMGQ1NDU1YWQ2N2ZiMDdlMDk5ZjBmYTk1Zjhi NmMxOWUwHhcNMjUxMjI0MDIwMTE2WhcNMjUxMjI1MDIwMTE2WjAzMTEwLwYDVQQD EyhhMmQyZTkwYzNiNWQ0MzFjMzZkZDE0NWIwYzRmYTg5NmJmZDc5MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBl2bnQSm+RC0RHiJ3n0Q7eJp6gN lxfFQtG4j9G0O1pPbBZtA0MjBXuncCtEtNvSYQ/jKKQDP1Rdv26bEhAcgmZLPxVK pbAvUIeQCqiapV1AfMy0uS0tW/ceKjaFuehQ4ZUQcqjtEwBoZhN1sg8z45dHQ6Hb 536LNsAUerqpaWUzi2pGHCCL9M8a8UE7bgtkrPJIBMUUT3ZBDjAxRbHLtfOWltfW t4cz3ad2ZTnphqdbTmD4yC00wmiaRhz7KvOL7QKyxWTdb6dZfNn9Ztv8mUPOEUke Q0wCqoBWcbyFhC7OtrFY+da1UqOGBFiM6fTgkXpjkLdwrMH7UF/wOpq+XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLS6Qw7XUMcNt0UWwxPqJa/15NkMB8GA1UdIwQY MBaAFMyfoLMNVFWtZ/sH4Jnw+pX4tsGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjct MWU2Y2EyZjBkMTU1LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjctMWU2Y2EyZjBkMTU1 LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyop5Fb1 tjf8Dc4b2a5BCCO54MheXOH/7Ju9eBjaVpGjhmDb8f8o9PJezPq8/3xgZDyoGihh qcBwQnN3d2+fkoHCXaLHKVnWFS+YG1j4QQDJ/ByIeJwm5/0JXbzdNLMo2S+uzJyd /ktYZR5lLnWvXQH/O+4XfXWzVd35MVpzM4H1BKWGd2tfcpSUxr3slbFw1ffFYd4f ba0VK+AU6UqPtaevKZzkGoDAwX3DuqFt6nt6Psfidq6gFUhnpylIie/GUPRfhHs0 yCwQ77efpj2Qef4lPxpjFLMIDAvxXgS/kGkCX2dD6v0yq1MUSeDIRKdLm9LJ6uFZ YQl9KOhIds616A== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:35 2025 by rpki-client