This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json) Hash identifier: JJcz3mbUMRmiZLBZe0fGFI4Ks/voO4hqEAd0h10Kow0= Subject key identifier: B6:2F:D0:7B:F4:EA:E9:73:FF:98:17:4F:59:D6:4A:B4:6B:27:CC:93 Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57 Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57 Certificate serial: 019AF50AC20424095AFAF6BEEC80C860A3C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft Manifest number: 08A2 Signing time: Sat 06 Dec 2025 19:01:54 +0000 Manifest this update: Sat 06 Dec 2025 19:01:54 +0000 Manifest next update: Sun 07 Dec 2025 19:01:54 +0000 Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: G/vX6KWQfwPiTK/ZIrXSWi1Ltd8Dkxt/WNC+s2HleeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c2:04:24:09:5a:fa:f6:be:ec:80:c8:60:a3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57 Validity Not Before: Dec 6 19:01:54 2025 GMT Not After : Dec 7 19:01:54 2025 GMT Subject: CN=b62fd07bf4eae973ff98174f59d64ab46b27cc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e6:17:38:2f:5b:e9:f5:60:39:06:de:2c:39: 17:9c:dc:8b:d3:bd:4c:a9:83:1d:b0:6d:be:bb:d9: be:2e:3a:ff:77:99:bc:d0:fe:1b:1b:f8:80:56:e5: 81:23:00:38:1a:52:17:ce:59:47:ff:66:65:05:bd: 75:8f:38:6e:8c:e7:63:95:25:96:26:f2:e5:a6:55: 31:76:7f:56:93:0b:a9:3c:31:fc:30:60:ab:cc:3b: ad:09:a2:2f:02:7d:5b:ea:60:73:94:7b:14:b4:a0: 0e:a1:9e:dd:29:5f:ff:e6:18:b5:e4:48:9b:d6:72: 14:fd:0e:b8:85:8a:0c:16:eb:73:de:13:c9:11:d8: 36:ac:2e:92:06:e7:ca:59:ae:a6:70:93:9f:9c:8b: 5c:e5:88:4b:dd:51:e5:54:00:43:bd:bb:1d:e3:4a: 58:e2:c6:50:be:c9:58:95:d6:2d:67:9f:cd:a3:a4: 84:b1:99:a3:fe:ed:0a:cb:81:5c:41:89:80:97:31: 97:1c:be:8e:63:4e:e8:8c:3c:8b:b0:72:3a:08:94: 5f:02:e0:5a:ff:e2:23:16:ce:c5:93:9e:71:fc:88: a4:6d:11:7c:0a:ff:fc:f2:76:ce:43:19:a2:22:60: 71:19:cf:3e:67:66:a9:e2:30:cf:ee:45:20:b6:c1: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2F:D0:7B:F4:EA:E9:73:FF:98:17:4F:59:D6:4A:B4:6B:27:CC:93 X509v3 Authority Key Identifier: keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2a:20:79:97:bd:c2:aa:c5:a9:c9:9c:e2:ca:aa:72:89:61: cb:79:60:09:9f:66:ad:0f:b4:70:44:61:cd:1a:a1:ee:84:22: e1:10:e4:69:e0:d0:7e:34:1f:1b:29:2a:42:7a:83:e2:5a:1e: 65:93:9b:3d:c5:64:56:53:3b:d8:0a:8f:ad:e8:5f:d0:ac:09: 8f:51:be:6a:57:03:e9:82:73:16:53:7d:32:b9:66:d1:27:ab: 8b:e9:1c:9d:19:7e:a1:c4:ee:e0:31:a2:6d:3f:7e:f2:56:8c: ff:d7:be:52:56:1b:de:68:1b:19:76:76:4d:8a:02:e0:24:ab: 44:89:cf:a9:69:69:57:9d:b2:6a:ee:93:4f:da:ed:d9:df:56: dd:8f:7f:de:98:82:ee:73:f9:69:81:19:1f:f3:5a:09:d2:2c: 69:5f:62:54:82:af:8a:a5:d6:70:e0:48:03:e7:56:f7:e5:80: 2b:b5:0a:3d:a5:b9:e9:85:89:3d:b0:fb:57:ec:02:55:10:50: 48:ce:3f:00:76:ee:4e:30:7b:74:bf:e8:35:53:ca:ca:73:05: 82:59:35:07:92:8c:d8:46:32:f4:e3:a7:45:e8:d2:a3:0c:55: d4:66:26:48:2a:3f:60:c3:9b:e2:cf:fe:c9:84:c2:17:59:11: ba:49:12:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CsIEJAla+va+7IDIYKPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjFlMjE4ODM4NDBiMTM2NWMzMzg1NzEzMTNiN2QzMmFh ZDljNTcwHhcNMjUxMjA2MTkwMTU0WhcNMjUxMjA3MTkwMTU0WjAzMTEwLwYDVQQD EyhiNjJmZDA3YmY0ZWFlOTczZmY5ODE3NGY1OWQ2NGFiNDZiMjdjYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OYXOC9b6fVgOQbeLDkXnNyL071M qYMdsG2+u9m+Ljr/d5m80P4bG/iAVuWBIwA4GlIXzllH/2ZlBb11jzhujOdjlSWW JvLlplUxdn9WkwupPDH8MGCrzDutCaIvAn1b6mBzlHsUtKAOoZ7dKV//5hi15Eib 1nIU/Q64hYoMFutz3hPJEdg2rC6SBufKWa6mcJOfnItc5YhL3VHlVABDvbsd40pY 4sZQvslYldYtZ5/No6SEsZmj/u0Ky4FcQYmAlzGXHL6OY07ojDyLsHI6CJRfAuBa /+IjFs7Fk55x/IikbRF8Cv/88nbOQxmiImBxGc8+Z2ap4jDP7kUgtsEgiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYv0Hv06ulz/5gXT1nWSrRrJ8yTMB8GA1UdIwQY MBaAFGRh4hiDhAsTZcM4VxMTt9MqrZxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMjAxZGQtNDdkZC00YzRlLWE0MmMt MWMxYjk3NGZmYWZjLzEvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kMjAxZGQtNDdkZC00YzRlLWE0MmMtMWMxYjk3NGZmYWZj LzEvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyogeZe9 wqrFqcmc4sqqcolhy3lgCZ9mrQ+0cERhzRqh7oQi4RDkaeDQfjQfGykqQnqD4loe ZZObPcVkVlM72AqPrehf0KwJj1G+alcD6YJzFlN9Mrlm0Seri+kcnRl+ocTu4DGi bT9+8laM/9e+UlYb3mgbGXZ2TYoC4CSrRInPqWlpV52yau6TT9rt2d9W3Y9/3piC 7nP5aYEZH/NaCdIsaV9iVIKviqXWcOBIA+dW9+WAK7UKPaW56YWJPbD7V+wCVRBQ SM4/AHbuTjB7dL/oNVPKynMFglk1B5KM2EYy9OOnRejSowxV1GYmSCo/YMOb4s/+ yYTCF1kRukkSFg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:58 2025 by rpki-client