This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft File: ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json) Hash identifier: my6SfE2K3QUxfWbqqCwzWVVE2zp2WaTQbzeRVwsIdD4= Subject key identifier: 2E:C6:55:E4:D1:EF:74:75:C0:B4:E9:DE:79:8B:FE:6E:E8:67:1F:8D Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D Certificate issuer: /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d Certificate serial: 019AF12EB5911C278E0DDB8E89955F84E455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft Manifest number: 06FB Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: p0Ms65iS+QAXPjN/OXcUCnMaiB6iUTD0iL6MKdfXNSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b5:91:1c:27:8e:0d:db:8e:89:95:5f:84:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=2ec655e4d1ef7475c0b4e9de798bfe6ee8671f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:a5:ae:d1:f0:ef:17:44:a0:28:57:a9:bc: 88:7d:bd:eb:86:b0:a4:1e:e6:95:6a:c9:0e:ac:e1: 8c:43:3a:2e:a8:f5:a0:b4:33:99:7b:21:43:f1:1b: 6c:a3:cd:51:08:cd:5a:46:37:79:31:46:2f:79:16: fc:7e:4d:51:e6:56:25:b2:55:e5:91:f7:2f:ce:07: cf:50:ae:1b:9b:f9:f7:35:62:bb:67:51:d0:60:de: b9:7c:7d:fb:f6:18:0d:54:93:33:11:72:e6:21:66: 4d:3e:92:23:7c:98:35:e9:f8:76:de:ad:d9:8c:53: 24:52:52:ce:67:bc:32:49:0c:aa:67:c8:34:42:36: 97:e4:ef:a0:17:a1:8b:c5:09:a6:bb:dc:9d:fd:8e: 54:23:04:de:18:b0:1d:32:5b:72:9e:d6:31:ba:6f: 67:58:d5:eb:e0:2e:22:6c:2e:4a:ff:f6:78:60:c4: 70:46:0a:84:2b:41:18:1b:33:e4:64:ce:14:40:e1: 97:6f:bc:ee:71:5e:68:2a:cf:19:c8:0b:48:76:3d: aa:1d:69:06:1f:df:c4:29:a8:2b:76:88:2a:81:7f: f2:04:11:cf:1c:e6:b2:ab:52:83:40:0b:51:05:68: 62:bb:42:03:60:75:0d:b1:e8:28:22:cd:ff:a4:fa: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C6:55:E4:D1:EF:74:75:C0:B4:E9:DE:79:8B:FE:6E:E8:67:1F:8D X509v3 Authority Key Identifier: keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:58:f9:b9:48:2d:78:6f:13:72:5b:72:33:0d:17:18:01:fe: 45:9a:97:35:48:68:4c:78:6e:eb:af:5a:a5:f9:f8:a9:fc:de: cf:c3:3f:8c:47:95:19:20:ad:ed:b1:a6:22:fc:cc:cb:aa:14: 56:c1:b6:3d:e5:af:b3:6d:db:b0:e4:55:0d:8e:22:70:c0:3e: 9c:27:68:d6:8a:03:67:14:53:7a:1a:47:25:18:e4:21:8a:b3: 57:9d:04:f3:38:0c:3f:98:a6:93:22:41:a3:1b:d6:2d:e7:69: 6f:58:74:e2:f4:47:1a:ee:33:6c:ed:90:1c:46:7d:1b:8f:fa: c7:5b:56:99:31:4e:dc:24:46:c0:2c:53:23:c7:83:a2:1d:8f: 8b:7e:f6:45:fd:c5:3a:98:a4:11:b0:a6:6c:75:f5:f9:8a:d8: 04:15:8c:b2:f4:9d:94:31:be:ad:49:64:80:31:21:e6:63:3b: 65:05:2c:23:ca:c2:fc:23:3a:65:77:39:e8:24:2b:5b:2b:22: d3:19:29:3e:3a:49:4c:80:2a:e5:f2:92:02:da:be:97:52:71: 81:68:40:73:e1:e9:5a:01:98:76:6b:1b:71:f9:50:e4:95:81: dd:d0:8a:0b:35:58:47:b9:00:51:f7:5e:70:5d:23:27:70:fa: 33:aa:ea:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrWRHCeODduOiZVfhORVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzhiZGVjZmJkMzVkM2YxN2MzOTA2ZTYyZjkzZWIyYmIx MTNlNWQwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EygyZWM2NTVlNGQxZWY3NDc1YzBiNGU5ZGU3OThiZmU2ZWU4NjcxZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWmlrtHw7xdEoChXqbyIfb3rhrCk HuaVaskOrOGMQzouqPWgtDOZeyFD8Rtso81RCM1aRjd5MUYveRb8fk1R5lYlslXl kfcvzgfPUK4bm/n3NWK7Z1HQYN65fH379hgNVJMzEXLmIWZNPpIjfJg16fh23q3Z jFMkUlLOZ7wySQyqZ8g0QjaX5O+gF6GLxQmmu9yd/Y5UIwTeGLAdMltyntYxum9n WNXr4C4ibC5K//Z4YMRwRgqEK0EYGzPkZM4UQOGXb7zucV5oKs8ZyAtIdj2qHWkG H9/EKagrdogqgX/yBBHPHOayq1KDQAtRBWhiu0IDYHUNsegoIs3/pPoX1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7GVeTR73R1wLTp3nmL/m7oZx+NMB8GA1UdIwQY MBaAFGR4vez7010/F8OQbmL5PrK7ET5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgt NmZlNThjMzYzNjRkLzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgtNmZlNThjMzYzNjRk LzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVj5uUgt eG8TcltyMw0XGAH+RZqXNUhoTHhu669apfn4qfzez8M/jEeVGSCt7bGmIvzMy6oU VsG2PeWvs23bsORVDY4icMA+nCdo1ooDZxRTehpHJRjkIYqzV50E8zgMP5imkyJB oxvWLedpb1h04vRHGu4zbO2QHEZ9G4/6x1tWmTFO3CRGwCxTI8eDoh2Pi372Rf3F OpikEbCmbHX1+YrYBBWMsvSdlDG+rUlkgDEh5mM7ZQUsI8rC/CM6ZXc56CQrWysi 0xkpPjpJTIAq5fKSAtq+l1JxgWhAc+HpWgGYdmsbcflQ5JWB3dCKCzVYR7kAUfde cF0jJ3D6M6rqIw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:24 2025 by rpki-client