This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json) Hash identifier: 9oPH6n9hrnX3l43EDJCCSqXpGGry7Vin93MzLquDP9g= Subject key identifier: FF:B0:DE:20:56:90:17:A4:4D:21:1A:3F:13:C2:5B:62:33:93:E2:42 Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec Certificate serial: 019AF5E65A17F1CAAF760AFDE68CC8F5AFFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft Manifest number: 0AE2 Signing time: Sat 06 Dec 2025 23:01:45 +0000 Manifest this update: Sat 06 Dec 2025 23:01:45 +0000 Manifest next update: Sun 07 Dec 2025 23:01:45 +0000 Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: LMAswMT9+f3wxxItRFmpu2lzFOwO0zX38hynuvvUrpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:5a:17:f1:ca:af:76:0a:fd:e6:8c:c8:f5:af:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec Validity Not Before: Dec 6 23:01:45 2025 GMT Not After : Dec 7 23:01:45 2025 GMT Subject: CN=ffb0de20569017a44d211a3f13c25b623393e242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:cc:c0:45:81:38:c7:d9:f4:b9:80:24:3e: 5f:4f:d5:b9:07:6a:a7:a0:3c:5f:c1:c8:22:d4:52: 30:dc:1e:16:ad:a0:88:94:ff:0d:2b:2b:8d:c0:98: 1d:17:88:54:54:ff:bb:6a:2b:69:2e:f2:bf:74:00: c1:9b:90:b0:9a:3f:ac:b6:ee:52:dc:0f:66:6d:3e: b4:40:00:c7:d0:06:20:f2:de:64:4d:64:64:b7:3b: 52:66:b5:c9:c8:4c:6e:a1:22:dd:3e:f8:e5:ef:bc: 44:91:94:94:42:8b:c3:ce:bf:6a:4a:1b:97:15:fe: f5:c5:92:da:da:06:82:43:99:a7:e3:ed:e4:25:77: a2:e6:57:f8:fd:1e:ff:6d:1b:71:92:9e:1b:a7:a4: 6d:d7:5b:ac:88:25:d3:51:f4:5a:f4:ff:6f:a3:e0: c4:1d:59:37:f5:fc:69:f9:0b:27:b2:63:62:d7:b7: 31:18:d5:f7:db:69:ef:bd:b0:80:5a:16:6f:20:4e: f4:15:f6:71:85:d4:7a:9f:e9:bb:c6:76:f6:53:fe: 13:fa:10:3c:29:c2:bc:5f:39:2d:5f:63:3f:a2:cc: 6d:42:74:b4:53:4d:04:36:25:fe:fe:38:56:fc:03: 9a:f0:12:f3:3e:f4:2f:41:b9:62:7e:6a:af:e7:a7: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B0:DE:20:56:90:17:A4:4D:21:1A:3F:13:C2:5B:62:33:93:E2:42 X509v3 Authority Key Identifier: keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bb:a3:5b:5f:76:63:03:c8:d8:90:52:71:aa:a7:24:ad:7e: 79:ed:25:b8:bf:d2:7e:f3:60:d1:81:53:59:c0:0f:b5:c4:c7: 7b:90:50:88:96:25:1d:ea:08:29:2a:de:ff:a4:51:09:6a:bc: 93:e2:8f:b6:57:42:95:09:89:de:f3:a6:c8:04:9b:16:9e:dc: 7b:32:99:82:9e:0e:f4:2d:80:0a:11:f3:a3:96:d8:2e:a7:78: a2:5b:62:90:af:15:8b:4f:37:ba:39:90:a0:25:f1:b9:48:29: 15:5d:c9:98:e7:2a:ef:e7:0b:f2:ae:ea:c9:06:ac:11:57:fd: 2d:e8:80:9a:c3:fc:6d:d2:d5:c8:9f:2e:06:a8:e2:a7:84:7c: 4f:16:71:d9:b8:ed:09:f3:64:d7:dd:f0:f8:4d:c2:f8:7f:2b: c7:4d:26:96:28:04:d1:ea:3e:e1:6d:0e:71:0f:9b:85:c5:84: c7:62:7b:d1:3a:e1:42:67:5d:97:60:c4:76:9d:b8:30:66:a6: 46:52:df:6f:2f:bb:a8:2f:cb:10:99:d2:25:74:23:8f:38:2d: d1:80:63:47:d8:ba:7e:3e:5d:de:4b:5f:8d:a1:22:fd:42:83: 7f:b6:c3:09:54:ea:2b:c6:e7:7c:1a:4a:ca:d0:d4:76:47:c8: e8:87:83:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15loX8cqvdgr95ozI9a/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTA0MTFlMzljYzllNTg0MzRjMGJiOTc1NTRkNjA2M2U3 NzAyZWMwHhcNMjUxMjA2MjMwMTQ1WhcNMjUxMjA3MjMwMTQ1WjAzMTEwLwYDVQQD EyhmZmIwZGUyMDU2OTAxN2E0NGQyMTFhM2YxM2MyNWI2MjMzOTNlMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhnMwEWBOMfZ9LmAJD5fT9W5B2qn oDxfwcgi1FIw3B4WraCIlP8NKyuNwJgdF4hUVP+7aitpLvK/dADBm5Cwmj+stu5S 3A9mbT60QADH0AYg8t5kTWRktztSZrXJyExuoSLdPvjl77xEkZSUQovDzr9qShuX Ff71xZLa2gaCQ5mn4+3kJXei5lf4/R7/bRtxkp4bp6Rt11usiCXTUfRa9P9vo+DE HVk39fxp+QsnsmNi17cxGNX322nvvbCAWhZvIE70FfZxhdR6n+m7xnb2U/4T+hA8 KcK8XzktX2M/osxtQnS0U00ENiX+/jhW/AOa8BLzPvQvQblifmqv56dkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+w3iBWkBekTSEaPxPCW2Izk+JCMB8GA1UdIwQY MBaAFM4QQR45zJ5YQ0wLuXVU1gY+dwLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMt ZDkwOGIwMDk4NjE0LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMtZDkwOGIwMDk4NjE0 LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrujW192 YwPI2JBScaqnJK1+ee0luL/SfvNg0YFTWcAPtcTHe5BQiJYlHeoIKSre/6RRCWq8 k+KPtldClQmJ3vOmyASbFp7cezKZgp4O9C2AChHzo5bYLqd4oltikK8Vi083ujmQ oCXxuUgpFV3JmOcq7+cL8q7qyQasEVf9LeiAmsP8bdLVyJ8uBqjip4R8TxZx2bjt CfNk193w+E3C+H8rx00mligE0eo+4W0OcQ+bhcWEx2J70TrhQmddl2DEdp24MGam RlLfby+7qC/LEJnSJXQjjzgt0YBjR9i6fj5d3ktfjaEi/UKDf7bDCVTqK8bnfBpK ytDUdkfI6IeDiQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:31 2025 by rpki-client