This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json) Hash identifier: QMHcbUMRnoceNtnMuQ0zj3nwn7QRn6ozQva7c/s64SQ= Subject key identifier: 4F:92:28:33:51:92:A5:A8:B0:07:A7:C9:16:E9:A1:98:0B:D7:EC:85 Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb Certificate serial: 019B390EEE7410A7AE100AD21FB64ADBE2E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 00:00:38 +0000 Manifest this update: Sat 20 Dec 2025 00:00:38 +0000 Manifest next update: Sun 21 Dec 2025 00:00:38 +0000 Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=) 2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: bWHTEZXGCUtTseTm4YiucUon1mwHK6PqdLCEWYGrj4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:ee:74:10:a7:ae:10:0a:d2:1f:b6:4a:db:e2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb Validity Not Before: Dec 20 00:00:38 2025 GMT Not After : Dec 21 00:00:38 2025 GMT Subject: CN=4f9228335192a5a8b007a7c916e9a1980bd7ec85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:7b:5e:ea:6a:2c:58:5d:2f:01:e1:9b:b5: 46:07:1c:11:95:b1:c9:d8:9b:de:cf:90:0c:7c:03: 5b:6d:9d:0c:99:6e:04:36:25:b1:d5:a5:78:83:c9: f3:8e:19:79:7d:b5:62:f8:a6:7c:ed:38:8e:8d:46: 39:f1:8a:86:1c:ab:11:d0:ca:dd:42:11:ce:1a:1b: 71:57:78:47:34:45:f6:e3:58:2e:aa:85:ca:6b:99: 89:36:e1:fc:22:51:d5:ac:a3:f2:e9:e1:d0:49:e1: f0:82:e7:e5:2d:44:84:eb:f1:bf:e2:ad:f2:f5:0e: 68:ad:03:0b:87:51:e2:06:d3:37:9a:0e:a7:94:d7: 30:d4:9d:67:2f:99:87:7d:f0:60:c0:94:86:06:2b: 7b:a4:45:92:a7:a3:8f:98:04:79:c1:13:0a:2d:f9: 29:0c:45:2e:17:a6:00:98:88:f9:1a:9d:ab:2e:28: b8:20:55:b6:2b:9f:2a:ff:bd:7f:65:6f:64:34:85: f5:41:92:77:db:e4:8a:b0:c4:41:d3:ba:f8:25:21: d0:cb:02:47:6b:04:a5:20:8f:77:63:d3:50:c7:73: 2e:28:b9:20:78:73:14:76:f7:64:7a:d5:01:a5:fb: 12:46:cb:a1:f3:96:0d:1b:e8:29:fe:6d:08:80:a8: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:92:28:33:51:92:A5:A8:B0:07:A7:C9:16:E9:A1:98:0B:D7:EC:85 X509v3 Authority Key Identifier: keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d0:db:0e:1d:e4:7a:75:33:df:32:cc:36:7b:86:59:b0:98: 44:a7:f9:99:dd:cf:93:92:1b:93:f6:af:b5:97:7b:b1:ba:6b: 97:8c:1c:4f:8b:eb:b1:2e:22:e2:35:ae:6e:68:1c:e4:6a:19: 91:db:40:00:80:10:fb:79:71:60:52:9c:a8:a4:a4:81:07:cd: c1:48:d6:44:e3:cf:6b:5f:46:07:4a:81:17:97:57:d4:23:0b: d4:eb:a1:71:41:4c:b4:5f:ac:e7:27:75:be:63:b2:26:91:f8: 97:13:0f:0c:9d:57:30:c8:f4:fd:97:2b:42:a3:7e:52:55:6a: 78:68:69:83:59:c5:b2:c8:d2:c0:62:11:77:e3:4b:e3:3f:4f: bb:00:7e:d9:7c:84:3e:d8:8e:01:23:16:7f:44:77:99:9e:a6: f6:c1:82:59:98:5d:af:7c:0f:4f:4c:ae:06:f9:14:44:47:35: b9:00:3a:33:4e:03:a1:c9:73:66:f9:53:8e:a8:c6:4f:d8:5f: 7e:ad:7d:d5:42:77:59:a9:fd:b5:cf:2b:64:0b:74:d9:3f:d9: 8c:e1:09:b3:80:cf:91:8a:fd:1d:c0:18:b4:d8:e6:d1:bc:95: d1:ec:f5:39:e4:83:84:34:13:b0:0f:b2:6f:fe:47:42:44:cc: 60:96:b9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Du50EKeuEArSH7ZK2+LpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNThjYmM0YWFlM2Y4MGM0OWIzNzI5MTFhOGQ0NDg2MWNk ZmVlY2IwHhcNMjUxMjIwMDAwMDM4WhcNMjUxMjIxMDAwMDM4WjAzMTEwLwYDVQQD Eyg0ZjkyMjgzMzUxOTJhNWE4YjAwN2E3YzkxNmU5YTE5ODBiZDdlYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWx7XupqLFhdLwHhm7VGBxwRlbHJ 2Jvez5AMfANbbZ0MmW4ENiWx1aV4g8nzjhl5fbVi+KZ87TiOjUY58YqGHKsR0Mrd QhHOGhtxV3hHNEX241guqoXKa5mJNuH8IlHVrKPy6eHQSeHwguflLUSE6/G/4q3y 9Q5orQMLh1HiBtM3mg6nlNcw1J1nL5mHffBgwJSGBit7pEWSp6OPmAR5wRMKLfkp DEUuF6YAmIj5Gp2rLii4IFW2K58q/71/ZW9kNIX1QZJ32+SKsMRB07r4JSHQywJH awSlII93Y9NQx3MuKLkgeHMUdvdketUBpfsSRsuh85YNG+gp/m0IgKiA8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+SKDNRkqWosAenyRbpoZgL1+yFMB8GA1UdIwQY MBaAFM9Yy8Sq4/gMSbNykRqNRIYc3+7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEt NTBkN2Q5NGUyYjlmLzEvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEtNTBkN2Q5NGUyYjlm LzEvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdDbDh3k enUz3zLMNnuGWbCYRKf5md3Pk5Ibk/avtZd7sbprl4wcT4vrsS4i4jWubmgc5GoZ kdtAAIAQ+3lxYFKcqKSkgQfNwUjWROPPa19GB0qBF5dX1CML1OuhcUFMtF+s5yd1 vmOyJpH4lxMPDJ1XMMj0/ZcrQqN+UlVqeGhpg1nFssjSwGIRd+NL4z9PuwB+2XyE PtiOASMWf0R3mZ6m9sGCWZhdr3wPT0yuBvkUREc1uQA6M04DoclzZvlTjqjGT9hf fq191UJ3Wan9tc8rZAt02T/ZjOEJs4DPkYr9HcAYtNjm0byV0ez1OeSDhDQTsA+y b/5HQkTMYJa5eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:10 2025 by rpki-client