This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json) Hash identifier: cjvcInmwVGgvyd4oltZzRUJJlZ18kV3WmjtCTJoQGUs= Subject key identifier: 49:0B:CA:10:0B:FC:B8:78:2B:DC:E8:E4:C8:23:3A:AF:B3:7D:C5:8B Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c Certificate serial: 019AF12DC877AE9F33C9AC35E8A85C25F928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=) 2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: XDSvqEvc7oLzK8eRjiFPTHt+nfhwT05oUjAxetc5wCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c8:77:ae:9f:33:c9:ac:35:e8:a8:5c:25:f9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=490bca100bfcb8782bdce8e4c8233aafb37dc58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:16:8a:ca:86:4b:67:ba:0b:72:b9:96:d9: 11:2b:92:4c:f7:9a:60:a3:ec:af:94:d4:97:1a:de: ed:8e:e0:53:e2:03:d7:a4:e1:6b:db:86:30:4a:72: d8:25:ff:fa:01:d5:df:d3:9f:42:aa:56:59:b2:87: b9:c1:ed:1e:3d:8f:a3:d0:0e:62:35:bc:9a:4d:5d: 87:c6:7d:8c:1c:db:0b:bd:57:2b:fd:5d:17:55:3a: f7:33:e3:3a:1f:b6:b8:b9:05:11:58:18:92:5e:8a: df:49:2b:b5:08:f9:d1:c2:63:a4:4f:4c:45:b6:bd: 72:a8:e4:f0:15:63:c2:64:91:71:e3:64:e5:ae:c2: c1:31:9f:12:3a:d7:3d:91:cb:86:63:b4:1d:58:4d: 22:49:a0:4b:b1:2a:2d:4f:c2:fd:b6:b5:4a:cc:03: f8:38:63:29:99:17:85:56:71:65:86:02:da:ad:75: 9f:b1:17:24:9a:ef:da:c8:2c:d7:57:ee:11:19:8d: fe:0f:78:c9:47:0a:00:19:ea:56:7d:96:1b:17:a8: d2:5f:4d:32:08:30:c4:3e:bb:c2:a2:b4:0e:2a:40: 6a:00:83:3f:48:e0:72:f0:b7:e1:74:4c:27:74:dd: ef:56:4c:af:92:da:69:34:e6:3d:e2:82:f5:13:e8: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0B:CA:10:0B:FC:B8:78:2B:DC:E8:E4:C8:23:3A:AF:B3:7D:C5:8B X509v3 Authority Key Identifier: keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9b:ee:3a:f3:a8:3e:1b:a2:21:66:73:3d:e8:94:e7:9f:59: 65:42:c0:41:ec:e0:43:af:c6:9f:f8:da:e3:b2:b7:2b:34:39: 4e:41:08:47:a0:ad:cf:b3:9c:76:11:62:79:bb:01:83:6e:49: 49:34:ae:9d:3e:10:57:32:9e:ca:d4:75:0a:da:f3:a7:93:5b: 6c:8b:3f:71:46:1e:20:ae:19:36:50:26:47:7d:1e:6c:64:bb: ab:33:6c:93:a5:61:d0:57:78:27:e0:0a:13:84:be:4f:80:ca: a6:d6:77:6a:b6:cf:51:25:34:0e:c9:3a:ff:f6:34:c6:41:0c: 84:c5:f6:38:fb:03:20:05:11:08:82:a7:58:6a:25:a1:06:1e: b8:3f:0c:79:e0:b5:27:47:6e:95:72:1e:c3:1c:1a:69:8c:d4: 43:43:0f:20:df:e5:bf:92:ac:a9:dd:b3:37:f4:78:79:9d:0e: 43:da:32:23:b2:15:9c:36:89:94:66:cc:71:50:c3:f4:0b:fa: 61:ae:82:3f:fd:88:65:c2:7e:98:c6:c2:d7:55:bd:49:ce:b7: 88:3a:1e:7c:26:9e:61:6e:a0:67:9f:d5:0d:37:da:6a:81:2b: 26:c5:46:8e:bd:73:b8:57:b4:04:31:1f:c4:9e:a4:81:c3:c8: e7:34:55:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLch3rp8zyaw16KhcJfkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk YzA4OWMwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD Eyg0OTBiY2ExMDBiZmNiODc4MmJkY2U4ZTRjODIzM2FhZmIzN2RjNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMYWisqGS2e6C3K5ltkRK5JM95pg o+yvlNSXGt7tjuBT4gPXpOFr24YwSnLYJf/6AdXf059CqlZZsoe5we0ePY+j0A5i NbyaTV2Hxn2MHNsLvVcr/V0XVTr3M+M6H7a4uQURWBiSXorfSSu1CPnRwmOkT0xF tr1yqOTwFWPCZJFx42TlrsLBMZ8SOtc9kcuGY7QdWE0iSaBLsSotT8L9trVKzAP4 OGMpmReFVnFlhgLarXWfsRckmu/ayCzXV+4RGY3+D3jJRwoAGepWfZYbF6jSX00y CDDEPrvCorQOKkBqAIM/SOBy8LfhdEwndN3vVkyvktppNOY94oL1E+gi5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkLyhAL/Lh4K9zo5MgjOq+zfcWLMB8GA1UdIwQY MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZvuOvOo PhuiIWZzPeiU559ZZULAQezgQ6/Gn/ja47K3KzQ5TkEIR6Ctz7OcdhFiebsBg25J STSunT4QVzKeytR1Ctrzp5NbbIs/cUYeIK4ZNlAmR30ebGS7qzNsk6Vh0Fd4J+AK E4S+T4DKptZ3arbPUSU0Dsk6//Y0xkEMhMX2OPsDIAURCIKnWGoloQYeuD8MeeC1 J0dulXIewxwaaYzUQ0MPIN/lv5Ksqd2zN/R4eZ0OQ9oyI7IVnDaJlGbMcVDD9Av6 Ya6CP/2IZcJ+mMbC11W9Sc63iDoefCaeYW6gZ5/VDTfaaoErJsVGjr1zuFe0BDEf xJ6kgcPI5zRVFg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:02 2025 by rpki-client