This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json) Hash identifier: m89oSQjDEDvgptVuugmeisHnxb0vM/yrwGJMPrRdItM= Subject key identifier: 38:94:D4:DF:24:2A:DA:20:8D:70:AC:F2:9C:C4:35:87:5C:F6:19:FB Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Certificate serial: 019AF16477744AB5D8B899CAF4835EE0B145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: ZPa5mgS34CuE98uAm7+0OpMBh7QD48gLkDCB47Cbljo=) 2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:77:74:4a:b5:d8:b8:99:ca:f4:83:5e:e0:b1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=3894d4df242ada208d70acf29cc435875cf619fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:89:a0:16:6b:f6:61:3c:50:69:c4:65:32: 19:76:15:2b:64:9e:99:c5:17:ec:ec:85:d1:76:7e: 34:98:bf:6d:e3:2f:47:04:b0:e4:e9:6a:d2:b8:d4: 01:cc:98:dd:7b:e0:7a:ca:7b:4b:2e:00:4e:ae:77: ba:52:b4:23:c3:be:70:03:4d:72:4a:79:e4:7a:ca: 86:d8:a8:ab:c1:a3:2c:fe:b2:2b:77:e4:4a:63:44: 08:53:f9:52:62:a6:a3:f5:9c:8b:fd:9d:b2:06:e4: c5:6e:82:39:54:b5:56:8d:28:30:52:25:88:6b:3d: 69:0d:a6:13:f9:3a:dd:69:ed:cf:ce:39:48:e9:e6: eb:a5:7b:c6:8a:6c:98:66:d9:2f:62:a4:cb:ff:e5: a1:68:9f:33:38:4a:1b:5a:23:64:ff:28:f5:49:52: 24:05:58:c4:be:18:0f:f2:44:a4:39:51:16:e2:f7: 81:33:59:6b:b7:b3:8e:d0:a4:de:8b:54:26:b5:40: 04:f8:10:d7:20:7c:5a:26:87:fd:93:d2:3d:82:5f: c9:69:a1:4b:c4:92:55:93:d0:6f:0b:a9:9a:33:5f: 2b:2f:76:23:53:5e:11:4b:b7:88:e9:82:43:13:eb: 5f:4b:29:12:0c:93:5b:74:77:9c:85:f3:60:24:f0: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:94:D4:DF:24:2A:DA:20:8D:70:AC:F2:9C:C4:35:87:5C:F6:19:FB X509v3 Authority Key Identifier: keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:99:af:09:d3:c0:03:1f:48:c5:ec:e4:08:5b:4b:a3:19:84: a3:89:0d:45:80:ea:17:13:62:68:f1:62:b9:3e:db:8b:d3:b7: a4:4f:74:5b:b9:6e:4a:e0:d0:48:35:a6:47:15:1b:5d:b4:d3: b1:54:19:b8:5d:9f:65:62:2e:3b:20:e6:7d:7a:51:e3:26:9f: ec:8c:67:3c:88:b0:5d:25:66:07:8d:e9:1d:43:43:31:bf:78: fa:88:96:e6:ab:40:27:aa:b6:0f:29:f3:29:49:6b:74:7a:7a: 8c:1e:3b:68:98:fa:1c:a0:25:49:9c:48:52:42:30:a4:87:1f: 9f:6c:b6:7c:d2:14:2f:da:44:7c:09:78:fe:d1:34:2b:9e:0b: 5d:30:80:07:99:6e:39:0c:cc:3a:96:1b:2a:66:95:1d:f6:4a: ac:31:26:39:bd:59:7e:9c:71:18:57:62:68:19:13:a0:12:32: 6e:df:14:8e:f7:d6:5d:16:95:07:5e:ef:c8:43:e8:49:f4:ec: 98:5d:23:62:a2:6e:37:89:05:ce:e9:7e:ec:94:c1:dd:b1:9a: ba:bf:8b:bb:bd:2c:bb:b5:b9:08:09:34:0c:c2:35:3d:85:23: 48:a5:c8:b2:1b:64:aa:d3:d3:08:91:42:ee:3d:8f:9c:6f:05: 7c:2e:90:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHd0SrXYuJnK9INe4LFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh MzkwZTkwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EygzODk0ZDRkZjI0MmFkYTIwOGQ3MGFjZjI5Y2M0MzU4NzVjZjYxOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9iJoBZr9mE8UGnEZTIZdhUrZJ6Z xRfs7IXRdn40mL9t4y9HBLDk6WrSuNQBzJjde+B6yntLLgBOrne6UrQjw75wA01y SnnkesqG2KirwaMs/rIrd+RKY0QIU/lSYqaj9ZyL/Z2yBuTFboI5VLVWjSgwUiWI az1pDaYT+Trdae3PzjlI6ebrpXvGimyYZtkvYqTL/+WhaJ8zOEobWiNk/yj1SVIk BVjEvhgP8kSkOVEW4veBM1lrt7OO0KTei1QmtUAE+BDXIHxaJof9k9I9gl/JaaFL xJJVk9BvC6maM18rL3YjU14RS7eI6YJDE+tfSykSDJNbdHechfNgJPBYTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiU1N8kKtogjXCs8pzENYdc9hn7MB8GA1UdIwQY MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1 LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJmvCdPA Ax9IxezkCFtLoxmEo4kNRYDqFxNiaPFiuT7bi9O3pE90W7luSuDQSDWmRxUbXbTT sVQZuF2fZWIuOyDmfXpR4yaf7IxnPIiwXSVmB43pHUNDMb94+oiW5qtAJ6q2Dynz KUlrdHp6jB47aJj6HKAlSZxIUkIwpIcfn2y2fNIUL9pEfAl4/tE0K54LXTCAB5lu OQzMOpYbKmaVHfZKrDEmOb1ZfpxxGFdiaBkToBIybt8UjvfWXRaVB17vyEPoSfTs mF0jYqJuN4kFzul+7JTB3bGaur+Lu70su7W5CAk0DMI1PYUjSKXIshtkqtPTCJFC 7j2PnG8FfC6Qkw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:48 2025 by rpki-client