This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json) Hash identifier: hpOyVsQFC5Ay739Oyljrq727qzVtuPZniRKrBPGL5h0= Subject key identifier: F4:A7:36:3B:31:35:2A:E1:7B:B0:23:54:F3:D3:62:39:63:43:37:19 Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Certificate serial: 019AF208D32D68CD2788B83FE73738B88BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=) 2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: YrBb4i1iz8EC032zd80TUFRUz7PeQhDIoL+IAb7or8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:2d:68:cd:27:88:b8:3f:e7:37:38:b8:8b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=f4a7363b31352ae17bb02354f3d3623963433719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:61:01:1a:f7:72:f8:70:5f:24:48:78:3a: e2:b8:b6:3d:7b:1b:01:90:82:cb:cb:a8:cd:c7:c8: fd:40:83:6d:2e:c5:bf:7f:3e:28:59:34:75:b3:85: 71:40:92:31:21:1f:c2:fe:be:fc:be:50:00:d3:55: a1:2d:8d:f1:dc:81:00:b4:78:09:9a:b3:84:49:7c: ef:60:ff:cf:e1:2f:81:40:f5:f6:a7:db:c2:94:e6: 2d:cc:db:8a:19:a1:18:cb:00:d9:e5:74:a0:58:87: 9d:cf:d0:39:3c:4e:24:3c:98:cb:ff:1b:31:07:8d: 0c:08:a5:63:2f:00:37:6f:7d:e9:d7:52:1e:e6:56: 81:47:dd:31:7a:83:38:a6:64:ce:59:40:13:03:12: 23:7c:c3:cd:b2:ab:ed:e1:1a:68:8f:ad:09:b5:e0: 90:b1:33:fb:9b:b6:79:93:1f:59:23:f2:67:10:be: 58:63:85:b0:01:6b:46:43:2b:7d:2d:0a:f2:28:c0: 56:93:fc:d6:d4:83:b3:d3:8a:57:95:81:56:d1:93: 0a:bb:53:8b:2a:06:1d:b7:4b:23:b4:a4:57:24:09: bc:93:ee:74:2b:ae:82:9e:e1:66:9c:9a:b4:13:92: 43:13:67:d7:a3:3a:70:56:80:1c:94:ad:84:2b:07: e6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:36:3B:31:35:2A:E1:7B:B0:23:54:F3:D3:62:39:63:43:37:19 X509v3 Authority Key Identifier: keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1e:45:3f:b1:0b:d7:4a:78:0f:6a:c4:16:0b:c9:6f:17:88: e2:38:8a:21:78:79:80:db:f4:9f:8a:5d:3f:03:94:1d:15:11: 07:46:a8:c6:a0:fd:8e:0e:f4:d9:78:c1:71:f2:5a:b0:5f:7d: a1:a0:50:4a:4c:d7:f7:46:b0:25:11:6f:e9:b6:05:56:e9:0d: a1:bc:50:e4:de:fe:71:41:13:0d:da:5c:7f:41:db:2f:15:d9: b2:f2:9c:99:26:f4:1a:f6:1c:10:90:a4:bd:72:65:e9:1a:d0: a3:ea:d1:b6:0d:ef:4b:0b:e5:3c:a5:26:21:27:67:8f:40:0d: 7c:78:c9:fe:57:03:31:4f:74:77:f8:1f:75:f7:96:e5:9a:d6: 66:2f:2e:85:6a:60:b1:4d:56:39:53:65:4f:76:e5:c6:56:18: 72:07:74:a2:88:29:eb:05:fa:8b:85:89:34:4f:ae:14:f7:47: 67:0d:af:23:e9:92:35:7c:38:96:1a:63:01:18:5a:ab:4a:31: d3:60:07:57:a0:b1:86:d3:23:43:5a:0c:62:86:4a:4e:58:6a: b0:e9:65:59:dd:2a:72:17:8a:0e:16:f4:e9:67:0a:47:0f:5e: 7d:cb:a6:b2:12:3e:c6:15:45:09:5d:e7:36:ee:52:fe:c0:c4: 2d:dd:a8:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNMtaM0niLg/5zc4uIviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzhiZmNlYjQxYmFmZWZjMDJmNzk1MmUxYWEyNDgwZTk4 NmYwMzcwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD EyhmNGE3MzYzYjMxMzUyYWUxN2JiMDIzNTRmM2QzNjIzOTYzNDMzNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2lhARr3cvhwXyRIeDriuLY9exsB kILLy6jNx8j9QINtLsW/fz4oWTR1s4VxQJIxIR/C/r78vlAA01WhLY3x3IEAtHgJ mrOESXzvYP/P4S+BQPX2p9vClOYtzNuKGaEYywDZ5XSgWIedz9A5PE4kPJjL/xsx B40MCKVjLwA3b33p11Ie5laBR90xeoM4pmTOWUATAxIjfMPNsqvt4Rpoj60JteCQ sTP7m7Z5kx9ZI/JnEL5YY4WwAWtGQyt9LQryKMBWk/zW1IOz04pXlYFW0ZMKu1OL KgYdt0sjtKRXJAm8k+50K66CnuFmnJq0E5JDE2fXozpwVoAclK2EKwfmPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSnNjsxNSrhe7AjVPPTYjljQzcZMB8GA1UdIwQY MBaAFMx4v860G6/vwC95UuGqJIDphvA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEt MTI3MmQyYWI0M2Q4LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEtMTI3MmQyYWI0M2Q4 LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPx5FP7EL 10p4D2rEFgvJbxeI4jiKIXh5gNv0n4pdPwOUHRURB0aoxqD9jg702XjBcfJasF99 oaBQSkzX90awJRFv6bYFVukNobxQ5N7+cUETDdpcf0HbLxXZsvKcmSb0GvYcEJCk vXJl6RrQo+rRtg3vSwvlPKUmISdnj0ANfHjJ/lcDMU90d/gfdfeW5ZrWZi8uhWpg sU1WOVNlT3blxlYYcgd0oogp6wX6i4WJNE+uFPdHZw2vI+mSNXw4lhpjARhaq0ox 02AHV6CxhtMjQ1oMYoZKTlhqsOllWd0qcheKDhb06WcKRw9efcumshI+xhVFCV3n Nu5S/sDELd2oCg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:06 2025 by rpki-client