This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft File: ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json) Hash identifier: BL80Vguz8zv2uWGXqCU3hLG6inN8DNhBKnEX0DeiJDw= Subject key identifier: 79:9E:17:7E:71:92:D1:6E:37:A5:59:31:C1:80:A9:7B:85:4C:B6:45 Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D Certificate issuer: /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d Certificate serial: 019AF31C59D24F13AEF3BC6830E2E492F23F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft Manifest number: 166A Signing time: Sat 06 Dec 2025 10:01:52 +0000 Manifest this update: Sat 06 Dec 2025 10:01:52 +0000 Manifest next update: Sun 07 Dec 2025 10:01:52 +0000 Files and hashes: 1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=) 2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: uMiJX8LMnkxhyYFSeSSgH/YrDCIKc7+Q5Vaf2zPaKPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:59:d2:4f:13:ae:f3:bc:68:30:e2:e4:92:f2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d Validity Not Before: Dec 6 10:01:52 2025 GMT Not After : Dec 7 10:01:52 2025 GMT Subject: CN=799e177e7192d16e37a55931c180a97b854cb645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:01:7b:ce:36:95:1c:da:4e:82:16:6b:45: a3:76:4d:6b:14:6c:a5:47:ba:89:6d:61:7d:eb:25: 4c:55:45:6b:f1:33:58:52:37:57:15:54:de:23:4d: 00:b5:a4:81:48:6b:2d:b2:82:55:b9:32:1e:39:05: f6:10:3d:3f:67:03:36:b3:c9:78:3c:d1:1e:92:ca: 41:35:f9:c9:0c:e8:af:64:d4:eb:dc:40:fe:22:b0: 32:75:8c:cb:c8:fe:96:a5:ed:b8:50:c7:0f:f7:12: 75:c7:3c:b9:06:d4:01:8d:b2:1b:e6:32:d0:29:dd: bc:a3:64:1f:e0:fa:cd:1e:dd:be:00:6d:01:4f:0a: 90:88:c4:be:c4:bc:58:77:6f:f5:2b:75:b6:6f:44: 92:2e:bb:d6:09:59:ad:f0:5a:12:58:c8:f8:50:ed: de:66:0c:f1:eb:84:f3:ea:7e:8a:ab:cc:71:94:18: 8f:a8:f6:8a:88:99:57:63:6e:df:b9:00:f4:9b:fd: b4:0b:98:a5:aa:71:8b:97:e2:36:92:83:77:a1:18: 88:4c:db:ed:eb:fb:c4:52:bb:54:29:2f:18:d4:0e: e4:e0:8c:a5:16:28:83:9a:d6:0b:64:a1:f4:fd:56: 4d:69:c6:7d:8c:50:25:a1:52:57:88:ee:83:bf:c0: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9E:17:7E:71:92:D1:6E:37:A5:59:31:C1:80:A9:7B:85:4C:B6:45 X509v3 Authority Key Identifier: keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1c:11:51:86:c5:c4:71:f2:67:50:b8:2c:cd:4a:71:19:0d: 32:a3:e7:27:98:69:39:5b:25:13:54:a2:b0:7a:1d:be:b4:ce: c3:21:00:27:16:59:9d:bf:2f:7e:15:d2:dc:12:6e:b8:25:6a: 79:71:ae:1c:1d:51:e9:93:88:54:07:e3:bd:83:20:b0:20:43: b8:15:0f:fc:68:26:cf:f7:ca:fb:a8:c9:77:f1:9b:28:d2:36: e2:0b:bd:38:b0:80:9c:98:5e:b7:57:2f:07:20:b3:09:fe:48: ea:74:92:f0:0f:3f:37:30:99:12:6c:3b:2d:d7:82:4b:9d:05: 00:c6:c5:c1:47:b3:c1:a1:c7:40:f9:10:7d:52:c0:c4:92:e2: d0:75:83:9d:7d:10:5e:b0:14:62:98:3e:23:6d:a5:78:f2:e3: 2d:5e:ae:73:b2:72:78:d6:b7:da:38:55:c2:d3:f7:14:3e:7e: 38:7e:d1:e9:f5:60:e7:49:96:bd:45:f9:a3:bd:00:3d:1a:c0: 1d:80:d8:a5:3e:73:59:4e:0d:16:75:78:84:50:12:58:ef:4f: 67:1e:55:ee:8a:f5:8e:89:fe:e9:77:50:1c:47:d4:0d:af:c8: 63:d4:41:a0:f9:08:d8:a9:e8:1f:57:4a:17:01:1e:1a:06:1c: 95:8c:f5:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFnSTxOu87xoMOLkkvI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzUzMGI0ZmE4ODk5YTMwYmIyZTY1YjkzZjAxMTlmZGE5 YmMwNWQwHhcNMjUxMjA2MTAwMTUyWhcNMjUxMjA3MTAwMTUyWjAzMTEwLwYDVQQD Eyg3OTllMTc3ZTcxOTJkMTZlMzdhNTU5MzFjMTgwYTk3Yjg1NGNiNjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZwBe842lRzaToIWa0Wjdk1rFGyl R7qJbWF96yVMVUVr8TNYUjdXFVTeI00AtaSBSGstsoJVuTIeOQX2ED0/ZwM2s8l4 PNEekspBNfnJDOivZNTr3ED+IrAydYzLyP6Wpe24UMcP9xJ1xzy5BtQBjbIb5jLQ Kd28o2Qf4PrNHt2+AG0BTwqQiMS+xLxYd2/1K3W2b0SSLrvWCVmt8FoSWMj4UO3e Zgzx64Tz6n6Kq8xxlBiPqPaKiJlXY27fuQD0m/20C5ilqnGLl+I2koN3oRiITNvt 6/vEUrtUKS8Y1A7k4IylFiiDmtYLZKH0/VZNacZ9jFAloVJXiO6Dv8DC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmeF35xktFuN6VZMcGAqXuFTLZFMB8GA1UdIwQY MBaAFGR1MLT6iJmjC7LmW5PwEZ/am8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEt MGU3Y2JiY2M2MmQwLzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEtMGU3Y2JiY2M2MmQw LzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRwRUYbF xHHyZ1C4LM1KcRkNMqPnJ5hpOVslE1SisHodvrTOwyEAJxZZnb8vfhXS3BJuuCVq eXGuHB1R6ZOIVAfjvYMgsCBDuBUP/Ggmz/fK+6jJd/GbKNI24gu9OLCAnJhet1cv ByCzCf5I6nSS8A8/NzCZEmw7LdeCS50FAMbFwUezwaHHQPkQfVLAxJLi0HWDnX0Q XrAUYpg+I22lePLjLV6uc7JyeNa32jhVwtP3FD5+OH7R6fVg50mWvUX5o70APRrA HYDYpT5zWU4NFnV4hFASWO9PZx5V7or1jon+6XdQHEfUDa/IY9RBoPkI2KnoH1dK FwEeGgYclYz10A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:40 2025 by rpki-client