This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json) Hash identifier: efMWwIAWMR1uJDDiyj8lwQ4B8APYp6V11GLlLaG1hSo= Subject key identifier: 95:64:A7:F6:FC:99:F3:3E:A5:69:AA:E0:C6:39:95:EC:2C:2B:A8:75 Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2 Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2 Certificate serial: 019AF12E6E01C7BF069444C099402C93DAF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft Manifest number: 128F Signing time: Sat 06 Dec 2025 01:02:22 +0000 Manifest this update: Sat 06 Dec 2025 01:02:22 +0000 Manifest next update: Sun 07 Dec 2025 01:02:22 +0000 Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: jPmyz3BG0ZGHSIT+faer1316bWmA+dnc6kIA559rzyM=) 2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6e:01:c7:bf:06:94:44:c0:99:40:2c:93:da:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2 Validity Not Before: Dec 6 01:02:22 2025 GMT Not After : Dec 7 01:02:22 2025 GMT Subject: CN=9564a7f6fc99f33ea569aae0c63995ec2c2ba875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:d5:fc:08:f3:ca:67:40:56:f2:97:31:e9: d7:ba:bc:24:68:7a:28:15:b4:9f:e7:1b:7c:16:93: e2:3b:52:10:e2:fd:21:f1:0e:a7:7b:cf:e6:0b:c7: 85:db:0e:d5:a6:2b:fd:b1:b4:61:91:a5:db:79:55: be:10:12:39:a5:e7:c8:f1:ff:1f:6b:1f:e6:a7:27: 09:3d:d4:ac:4c:43:07:90:c2:50:10:1a:8f:9e:21: 0b:80:05:9a:38:b6:d9:4b:5e:c0:8c:bd:6c:44:18: c0:eb:e3:3c:06:65:be:de:1f:c8:c2:22:9a:18:65: 95:b4:e9:a4:e1:94:42:59:a2:1e:ed:6a:2d:5c:39: 63:6f:84:4b:1f:8a:2a:70:d4:3f:50:97:20:c2:f6: 2f:ac:3d:04:f6:80:70:18:40:6b:37:b6:83:8c:38: c9:80:b0:68:fb:72:ce:9f:7d:80:b1:db:b2:a6:53: 5d:cd:08:e8:8c:bf:69:2d:44:c3:24:00:44:2c:8b: f2:4b:18:af:5b:9a:0a:03:25:74:fe:7b:82:9a:d7: fd:d9:a2:b5:4e:7b:67:2a:70:32:e8:fe:1e:b5:06: 34:2b:bd:a9:62:6f:dc:73:28:a7:e7:0c:7a:a5:43: c6:0b:1b:83:74:58:25:0a:62:a0:c5:e9:07:5d:d2: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:64:A7:F6:FC:99:F3:3E:A5:69:AA:E0:C6:39:95:EC:2C:2B:A8:75 X509v3 Authority Key Identifier: keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7f:67:ba:ff:65:18:d1:d6:2f:f1:05:3e:b3:07:47:ee:a5: c4:9a:a2:9c:be:71:d4:e6:bf:45:f5:18:d6:5b:32:01:84:19: 97:c3:4d:a2:42:b3:43:75:f6:39:f9:75:d6:36:78:3a:5c:ae: d3:09:cd:58:ac:fa:d7:65:cc:a2:4f:0d:4d:fb:84:24:6a:5e: 10:67:43:7f:98:cb:12:63:33:6e:9e:da:22:2b:14:9e:bb:b4: 14:61:4e:85:67:be:04:d7:0a:92:ff:68:fb:14:fe:6a:cd:90: ff:d9:bc:3f:29:29:bc:08:2d:75:bf:24:a3:85:c0:0f:3f:35: 64:21:d4:80:ac:c6:e2:fb:c4:93:07:e4:c5:11:93:86:7a:2c: fc:b1:40:63:69:bd:ed:e9:bb:73:0c:00:dd:a7:5b:68:d6:d9: aa:3d:08:e6:df:1e:0b:43:02:30:0a:aa:95:7f:df:94:29:df: 78:c9:37:c9:d1:cd:7f:07:ed:91:ee:a3:8a:1c:6e:9b:ef:4f: f9:c7:7a:b1:f5:5c:44:71:cf:dc:ea:e2:20:4e:d3:b2:ae:79: a0:c8:90:c2:6c:36:b8:ee:75:6e:d1:ba:54:35:84:7c:ab:f6: d6:cc:a6:c2:36:6a:2c:bf:61:c2:a3:77:c0:4d:4a:93:82:51: 42:3a:cb:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm4Bx78GlETAmUAsk9r0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTE4YjRlMWM5ZTU1NDNkMWVhNzBjM2I3M2Y4ZTNmZWUw MmRlYTIwHhcNMjUxMjA2MDEwMjIyWhcNMjUxMjA3MDEwMjIyWjAzMTEwLwYDVQQD Eyg5NTY0YTdmNmZjOTlmMzNlYTU2OWFhZTBjNjM5OTVlYzJjMmJhODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVnV/AjzymdAVvKXMenXurwkaHoo FbSf5xt8FpPiO1IQ4v0h8Q6ne8/mC8eF2w7Vpiv9sbRhkaXbeVW+EBI5pefI8f8f ax/mpycJPdSsTEMHkMJQEBqPniELgAWaOLbZS17AjL1sRBjA6+M8BmW+3h/IwiKa GGWVtOmk4ZRCWaIe7WotXDljb4RLH4oqcNQ/UJcgwvYvrD0E9oBwGEBrN7aDjDjJ gLBo+3LOn32AsduyplNdzQjojL9pLUTDJABELIvySxivW5oKAyV0/nuCmtf92aK1 TntnKnAy6P4etQY0K72pYm/ccyin5wx6pUPGCxuDdFglCmKgxekHXdJiHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVkp/b8mfM+pWmq4MY5lewsK6h1MB8GA1UdIwQY MBaAFGYRi04cnlVD0epww7c/jj/uAt6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhHTFRoeWVWVVBSNm5ERHR6LU9QLTRDM3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83ZDQzZWEtMWVmNy00YmRkLThkNGQt ZjI3Nzc0NWNmNWEzLzEvWmhHTFRoeWVWVVBSNm5ERHR6LU9QLTRDM3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83ZDQzZWEtMWVmNy00YmRkLThkNGQtZjI3Nzc0NWNmNWEz LzEvWmhHTFRoeWVWVVBSNm5ERHR6LU9QLTRDM3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ39nuv9l GNHWL/EFPrMHR+6lxJqinL5x1Oa/RfUY1lsyAYQZl8NNokKzQ3X2Ofl11jZ4Olyu 0wnNWKz612XMok8NTfuEJGpeEGdDf5jLEmMzbp7aIisUnru0FGFOhWe+BNcKkv9o +xT+as2Q/9m8PykpvAgtdb8ko4XADz81ZCHUgKzG4vvEkwfkxRGThnos/LFAY2m9 7em7cwwA3adbaNbZqj0I5t8eC0MCMAqqlX/flCnfeMk3ydHNfwftke6jihxum+9P +cd6sfVcRHHP3OriIE7Tsq55oMiQwmw2uO51btG6VDWEfKv21symwjZqLL9hwqN3 wE1Kk4JRQjrLwg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:22 2025 by rpki-client