This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json) Hash identifier: MBAdFKBw7rkqQDrt5SLJrXc85Xu0EJuD4E07hTeZV6w= Subject key identifier: 0C:B4:EA:59:87:DF:5D:60:43:E1:87:77:36:68:DF:2D:DF:46:0A:0C Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8 Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8 Certificate serial: 019B2EF9B4E99CB2267896AD462900EEC7BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft Manifest number: 143B Signing time: Thu 18 Dec 2025 01:01:15 +0000 Manifest this update: Thu 18 Dec 2025 01:01:15 +0000 Manifest next update: Fri 19 Dec 2025 01:01:15 +0000 Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=) 2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: MEQYGIzmU94PFlChQX8ofCViY/Yazn20LVpQrssc2EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:b4:e9:9c:b2:26:78:96:ad:46:29:00:ee:c7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8 Validity Not Before: Dec 18 01:01:15 2025 GMT Not After : Dec 19 01:01:15 2025 GMT Subject: CN=0cb4ea5987df5d6043e187773668df2ddf460a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:af:23:fc:78:47:2c:95:0f:99:fb:e3:bd: 93:f0:36:33:3e:e7:ff:f6:ef:e2:31:eb:61:20:55: dc:48:5a:a3:37:44:2b:d3:e2:41:37:a4:19:b1:c3: 81:48:10:bb:d2:90:37:6a:38:99:eb:0d:db:9b:92: 8c:bb:b3:60:e2:d1:cf:86:4f:c1:59:93:7e:d4:fd: a3:fb:48:72:3b:3b:44:8e:5b:22:b3:1f:f5:20:87: 16:e6:0e:e2:98:32:9f:21:2f:0c:db:81:b1:a3:87: e8:1c:ee:17:95:8e:2a:83:32:63:cd:f5:e6:8e:4c: 69:0a:50:b1:46:5a:1b:e0:b0:d0:15:c0:e0:af:e5: 90:0e:42:89:b7:0f:e5:b7:01:6a:52:6d:93:6b:07: 76:d0:23:cb:56:a2:8f:57:f8:1a:18:74:ea:50:fc: 59:ee:22:f7:7e:e1:a6:61:aa:65:9d:bf:a0:b5:85: c9:36:e0:fa:4b:f0:1a:d6:72:63:ba:c6:8c:8e:61: 2a:be:55:ac:32:f9:27:7a:3c:7b:b8:e2:29:e7:29: a8:54:0b:e5:0a:df:9b:d3:c4:e3:d8:b2:ec:11:cb: cd:db:44:1a:91:cb:a7:5e:00:28:e8:64:84:5a:7e: 6f:a8:0e:eb:49:30:38:21:da:e8:1d:b2:18:86:62: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B4:EA:59:87:DF:5D:60:43:E1:87:77:36:68:DF:2D:DF:46:0A:0C X509v3 Authority Key Identifier: keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:46:70:33:3f:cd:54:40:8f:85:f8:af:7e:cb:c9:bc:db:2a: 02:0a:51:37:a6:22:0b:82:5e:62:e8:8c:7e:90:56:4f:ef:ae: 3f:f9:d1:88:90:c3:e3:42:e9:5c:73:5e:be:b1:d4:ff:ab:21: 13:07:1f:9a:ae:4b:9e:ba:13:4d:3d:3b:eb:60:5e:69:62:7b: 20:d9:c4:f9:cd:09:4c:77:a9:61:36:9d:f4:d5:ac:75:0d:92: 7d:7c:54:8f:49:e3:05:31:19:a8:2b:d2:1e:48:5b:58:f9:20: 10:d6:de:23:f7:1d:87:95:2a:3f:45:eb:fd:51:7f:e4:a6:4e: 93:b8:1b:2d:5b:60:d3:bf:ea:db:90:fa:bd:92:4e:38:67:4a: ba:17:b6:6b:22:18:77:3a:80:38:9f:4d:a4:64:33:de:95:50: 1c:32:dd:00:28:0a:b4:8f:81:c3:87:25:41:6c:b0:e2:54:ed: eb:93:72:71:0d:5a:ea:0a:38:ac:ff:5c:a0:29:63:c9:df:ec: e5:2b:a3:5a:a6:c7:33:b5:0f:20:3e:72:5c:2c:62:7b:b2:b6: 74:27:41:e1:2e:29:4b:73:ce:d2:e4:77:af:02:78:4e:2d:af: 12:94:cd:ee:d2:63:5a:b1:ac:90:16:83:47:35:28:d7:2a:9f: 0b:da:f8:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+bTpnLImeJatRikA7se9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjVlY2Q2MTVmM2E2YzU2MzljNTFlOWUzMTk3NjczMTUy MDc4YjgwHhcNMjUxMjE4MDEwMTE1WhcNMjUxMjE5MDEwMTE1WjAzMTEwLwYDVQQD EygwY2I0ZWE1OTg3ZGY1ZDYwNDNlMTg3NzczNjY4ZGYyZGRmNDYwYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/evI/x4RyyVD5n7472T8DYzPuf/ 9u/iMethIFXcSFqjN0Qr0+JBN6QZscOBSBC70pA3ajiZ6w3bm5KMu7Ng4tHPhk/B WZN+1P2j+0hyOztEjlsisx/1IIcW5g7imDKfIS8M24Gxo4foHO4XlY4qgzJjzfXm jkxpClCxRlob4LDQFcDgr+WQDkKJtw/ltwFqUm2Tawd20CPLVqKPV/gaGHTqUPxZ 7iL3fuGmYaplnb+gtYXJNuD6S/Aa1nJjusaMjmEqvlWsMvknejx7uOIp5ymoVAvl Ct+b08Tj2LLsEcvN20QakcunXgAo6GSEWn5vqA7rSTA4IdroHbIYhmLykwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy06lmH311gQ+GHdzZo3y3fRgoMMB8GA1UdIwQY MBaAFGRl7NYV86bFY5xR6eMZdnMVIHi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMt NTRjN2M0ZWU1YmI1LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMtNTRjN2M0ZWU1YmI1 LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEZwMz/N VECPhfivfsvJvNsqAgpRN6YiC4JeYuiMfpBWT++uP/nRiJDD40LpXHNevrHU/6sh Ewcfmq5LnroTTT0762BeaWJ7INnE+c0JTHepYTad9NWsdQ2SfXxUj0njBTEZqCvS HkhbWPkgENbeI/cdh5UqP0Xr/VF/5KZOk7gbLVtg07/q25D6vZJOOGdKuhe2ayIY dzqAOJ9NpGQz3pVQHDLdACgKtI+Bw4clQWyw4lTt65NycQ1a6go4rP9coCljyd/s 5SujWqbHM7UPID5yXCxie7K2dCdB4S4pS3PO0uR3rwJ4Ti2vEpTN7tJjWrGskBaD RzUo1yqfC9r4PQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:22 2025 by rpki-client