This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json) Hash identifier: OuY5HH3zzvZuZ9Z+L2C9aBahjNZfMFxODo5YXoAfgk4= Subject key identifier: 13:36:21:BE:6F:DD:89:8B:87:F8:C3:6A:B2:B1:44:EC:14:69:CC:B3 Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b Certificate serial: 019B52CF552434B8299626961E66B6A985BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 00:01:17 +0000 Manifest this update: Thu 25 Dec 2025 00:01:17 +0000 Manifest next update: Fri 26 Dec 2025 00:01:17 +0000 Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=) 2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=) 3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: hCtSdcSD8dTxbUQtVRz2Ygx99SXAw2Vqrh/1cVIxSag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:55:24:34:b8:29:96:26:96:1e:66:b6:a9:85:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b Validity Not Before: Dec 25 00:01:17 2025 GMT Not After : Dec 26 00:01:17 2025 GMT Subject: CN=133621be6fdd898b87f8c36ab2b144ec1469ccb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:a6:d1:63:d6:08:0e:f9:10:3c:93:b7:33: 16:2a:4d:3c:c8:45:4b:62:64:3c:50:e5:ec:52:38: a5:31:81:dc:ee:da:c2:a9:3c:21:a1:06:b3:63:e4: b1:e9:45:50:1c:a3:62:6e:ce:85:55:67:3e:a5:13: 88:d0:3b:bd:b7:d8:f0:3b:78:ed:7b:82:d4:6e:dc: 69:42:49:fd:bb:5d:4c:82:0a:d6:67:82:d0:c2:22: ca:c9:8c:01:7c:a8:5b:49:cc:c8:13:67:89:e5:30: d2:0c:21:96:a6:30:42:3c:01:bd:47:ea:e4:e4:9d: fe:22:20:7c:14:f9:96:23:38:20:5b:eb:43:37:db: 7a:55:24:13:53:8b:b9:6d:64:a0:89:df:d3:47:65: 6a:32:89:11:6b:e2:b0:77:9a:57:15:11:cd:34:24: fc:ad:f3:86:96:55:3d:c1:21:a9:e5:95:22:c4:8f: 0e:5a:8b:21:5c:76:67:5b:d8:da:b5:a4:df:f2:ba: 06:05:5c:37:8d:00:56:25:fe:b0:e4:ac:02:84:57: 0b:44:2f:33:09:30:5d:18:63:27:8c:b0:de:3e:df: 46:9a:42:a7:b0:75:0c:1a:f9:bf:97:4a:80:4f:0b: c7:ad:cc:d9:5e:a8:25:cc:3a:b0:2d:40:19:31:36: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:36:21:BE:6F:DD:89:8B:87:F8:C3:6A:B2:B1:44:EC:14:69:CC:B3 X509v3 Authority Key Identifier: keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:97:94:30:53:76:91:fa:34:16:f4:9b:c2:ec:1d:69:bf:bc: b3:06:12:27:f1:41:a7:bf:89:74:db:c4:35:19:ec:33:08:b1: 54:e0:1d:2a:45:11:73:a7:82:39:e4:11:cc:a6:d3:19:71:3b: b7:6d:42:e1:65:62:eb:e3:00:9d:c8:32:49:88:3c:cd:bd:d0: ea:82:87:c6:b3:3c:1a:af:73:85:c0:d9:f0:08:43:af:2e:2f: a0:c3:96:59:15:0a:e4:69:05:29:c5:90:3a:7a:20:2b:23:7d: 81:5f:1e:e8:d0:09:d4:49:9f:17:1f:86:98:46:48:3b:d4:e2: 9d:9d:70:a5:b7:e5:f8:f7:a2:d7:e8:5e:53:a7:5f:68:9f:38: f2:6f:83:43:b3:4f:f0:b5:ab:e2:f2:89:dc:d2:a4:9f:5f:0f: 12:64:41:ed:d6:2c:a5:ae:f6:e5:b7:c9:2c:cd:1b:7e:75:cf: 34:61:33:5f:a4:c5:19:15:9e:d3:cc:2b:c0:9c:99:51:16:2a: 67:b8:0e:68:76:a2:5d:42:32:bc:81:c9:e4:e5:e2:dc:fb:a8: 4f:8c:a5:38:eb:4d:0b:82:06:6c:73:92:59:ba:73:1e:b7:a5: 8b:f4:2b:b5:72:93:7d:ff:47:96:c2:30:57:bd:3e:99:be:c6: 30:06:1f:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSz1UkNLgpliaWHma2qYW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTI0MmU2YzdlYmQ4MmEyM2ZhMWEwOGYzOTZlYmU1YWIz NGNmNmIwHhcNMjUxMjI1MDAwMTE3WhcNMjUxMjI2MDAwMTE3WjAzMTEwLwYDVQQD EygxMzM2MjFiZTZmZGQ4OThiODdmOGMzNmFiMmIxNDRlYzE0NjljY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIKm0WPWCA75EDyTtzMWKk08yEVL YmQ8UOXsUjilMYHc7trCqTwhoQazY+Sx6UVQHKNibs6FVWc+pROI0Du9t9jwO3jt e4LUbtxpQkn9u11MggrWZ4LQwiLKyYwBfKhbSczIE2eJ5TDSDCGWpjBCPAG9R+rk 5J3+IiB8FPmWIzggW+tDN9t6VSQTU4u5bWSgid/TR2VqMokRa+Kwd5pXFRHNNCT8 rfOGllU9wSGp5ZUixI8OWoshXHZnW9jataTf8roGBVw3jQBWJf6w5KwChFcLRC8z CTBdGGMnjLDePt9GmkKnsHUMGvm/l0qATwvHrczZXqglzDqwLUAZMTY3uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBM2Ib5v3YmLh/jDarKxROwUacyzMB8GA1UdIwQY MBaAFM0SQubH69gqI/oaCPOW6+WrNM9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEt ZjYwMzUzODQxMmM4LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEtZjYwMzUzODQxMmM4 LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpeUMFN2 kfo0FvSbwuwdab+8swYSJ/FBp7+JdNvENRnsMwixVOAdKkURc6eCOeQRzKbTGXE7 t21C4WVi6+MAncgySYg8zb3Q6oKHxrM8Gq9zhcDZ8AhDry4voMOWWRUK5GkFKcWQ OnogKyN9gV8e6NAJ1EmfFx+GmEZIO9TinZ1wpbfl+Pei1+heU6dfaJ848m+DQ7NP 8LWr4vKJ3NKkn18PEmRB7dYspa725bfJLM0bfnXPNGEzX6TFGRWe08wrwJyZURYq Z7gOaHaiXUIyvIHJ5OXi3PuoT4ylOOtNC4IGbHOSWbpzHreli/QrtXKTff9HlsIw V70+mb7GMAYf9w== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:06 2025 by rpki-client