This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json) Hash identifier: YddCQPMWhmUDuPw5KLtOCGwaMakwTRrdYbkcym3wfxU= Subject key identifier: 02:73:54:05:9D:28:A2:26:7E:A0:A7:D5:A6:23:0A:ED:30:6C:99:D9 Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Certificate serial: 019AF2E44F9C78E02FF62D45338DA342ACF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft Manifest number: 0147 Signing time: Sat 06 Dec 2025 09:00:40 +0000 Manifest this update: Sat 06 Dec 2025 09:00:40 +0000 Manifest next update: Sun 07 Dec 2025 09:00:40 +0000 Files and hashes: 1: oQ5fumIcVB85Uy2dYh229j_WaHg.roa (hash: vl4buX4gY0bD8VM1N3aDm+YQLtmBqcCMCCyk6V68GNc=) 2: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: V+A4o+ABhlRq30h0f8VC9sjrnaQLJhz8gPv9d0PYj2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4f:9c:78:e0:2f:f6:2d:45:33:8d:a3:42:ac:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Validity Not Before: Dec 6 09:00:40 2025 GMT Not After : Dec 7 09:00:40 2025 GMT Subject: CN=027354059d28a2267ea0a7d5a6230aed306c99d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:21:e0:19:ae:b1:8d:b1:a5:4e:a5:fe:ab: 0b:c0:47:91:bd:06:70:ea:ad:c4:bc:22:75:26:6b: b4:8b:8c:2a:a7:3d:88:ad:b0:99:48:ed:f5:c2:99: 7e:da:0d:e0:ac:20:fb:4f:b3:ec:91:68:ec:3a:84: db:f1:77:71:47:6f:c0:2e:8a:fa:dd:38:42:6d:a4: 64:0e:e3:5f:d6:b8:84:6e:8a:62:f2:19:83:9e:36: 55:51:98:d4:5f:bd:b9:f5:18:72:ca:87:e4:a5:8e: aa:e9:73:b6:c3:9e:59:07:fb:4d:f9:a0:6b:38:e2: a5:f9:1a:61:b0:02:28:b6:0d:a8:9b:b8:db:f5:05: b1:a5:46:25:c0:d6:95:e2:98:57:14:6c:38:30:ea: 03:b8:d6:c2:4b:89:28:32:29:09:7a:45:c7:5c:41: 0d:3f:60:8b:d8:f5:ea:06:aa:33:63:fa:5c:78:9c: f4:e2:7b:cb:09:e6:06:e9:3d:94:cb:43:50:f9:76: e9:c2:10:c8:e9:c5:64:f5:b7:5d:11:64:58:e8:98: 08:9e:e2:db:ae:1d:ed:94:56:4e:7e:fd:82:76:3e: 56:ba:08:1b:8f:cd:de:23:bc:6e:8c:68:3a:b2:34: 80:ac:4d:03:b4:cf:1f:dd:73:f2:7e:91:28:68:47: 7c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:73:54:05:9D:28:A2:26:7E:A0:A7:D5:A6:23:0A:ED:30:6C:99:D9 X509v3 Authority Key Identifier: keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ee:f2:09:92:82:7e:55:54:81:96:b4:f9:a8:e8:1a:4b:00: 42:c2:4d:2d:79:ea:c4:67:7d:ac:12:c5:14:78:35:cd:13:62: af:ac:4f:2c:07:55:67:3d:7c:b7:f6:40:fd:44:69:10:b4:db: f5:9c:81:43:f4:90:63:65:50:bb:a0:5f:0e:0b:33:6d:ab:0b: 98:1d:a9:48:51:bf:47:ff:33:d2:0e:fe:e4:8b:0a:b3:15:37: 75:cf:25:fd:2e:1e:c8:37:e9:a5:b8:28:3f:9b:d1:a6:f2:cd: a7:d9:36:01:eb:eb:50:0d:3b:db:c5:7b:e2:b8:10:31:f3:63: d8:2d:de:a6:e6:49:f5:84:51:5e:75:6c:1a:c6:7c:99:fc:84: d1:93:6a:11:41:2a:a4:27:84:09:16:17:9e:9f:45:83:fc:f2: 30:e6:a5:61:ad:bd:9f:af:26:59:a1:d7:b6:d2:f1:15:70:6a: 47:cf:45:40:7e:78:4d:aa:9f:58:7c:17:77:95:e7:22:f8:d4: 22:a8:8e:0e:af:7e:28:5b:0b:d3:f5:8c:1c:1f:ca:fd:ec:73: f4:94:a2:d6:4e:74:b3:25:48:9b:43:ad:17:33:ef:83:9c:3a: e9:78:eb:93:74:9f:a0:68:ee:68:fe:4b:0a:9f:3e:fa:28:05: b4:f4:05:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5E+ceOAv9i1FM42jQqz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTY2MmIyZTk3ZmQyYmRhOTFmMzJiMmNjZTllNzQ1Y2Jh NTg2MDIwHhcNMjUxMjA2MDkwMDQwWhcNMjUxMjA3MDkwMDQwWjAzMTEwLwYDVQQD EygwMjczNTQwNTlkMjhhMjI2N2VhMGE3ZDVhNjIzMGFlZDMwNmM5OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFEh4BmusY2xpU6l/qsLwEeRvQZw 6q3EvCJ1Jmu0i4wqpz2IrbCZSO31wpl+2g3grCD7T7PskWjsOoTb8XdxR2/ALor6 3ThCbaRkDuNf1riEbopi8hmDnjZVUZjUX7259RhyyofkpY6q6XO2w55ZB/tN+aBr OOKl+RphsAIotg2om7jb9QWxpUYlwNaV4phXFGw4MOoDuNbCS4koMikJekXHXEEN P2CL2PXqBqozY/pceJz04nvLCeYG6T2Uy0NQ+XbpwhDI6cVk9bddEWRY6JgInuLb rh3tlFZOfv2Cdj5Wuggbj83eI7xujGg6sjSArE0DtM8f3XPyfpEoaEd82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJzVAWdKKImfqCn1aYjCu0wbJnZMB8GA1UdIwQY MBaAFK/mYrLpf9K9qR8ysszp50XLpYYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjkt MzRkMGMwZTRjMTEzLzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjktMzRkMGMwZTRjMTEz LzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdO7yCZKC flVUgZa0+ajoGksAQsJNLXnqxGd9rBLFFHg1zRNir6xPLAdVZz18t/ZA/URpELTb 9ZyBQ/SQY2VQu6BfDgszbasLmB2pSFG/R/8z0g7+5IsKsxU3dc8l/S4eyDfppbgo P5vRpvLNp9k2AevrUA0728V74rgQMfNj2C3epuZJ9YRRXnVsGsZ8mfyE0ZNqEUEq pCeECRYXnp9Fg/zyMOalYa29n68mWaHXttLxFXBqR89FQH54TaqfWHwXd5XnIvjU IqiODq9+KFsL0/WMHB/K/exz9JSi1k50syVIm0OtFzPvg5w66Xjrk3SfoGjuaP5L Cp8++igFtPQF4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:24 2025 by rpki-client