This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json) Hash identifier: 1h+88LC9Q2shXqkDmqi/7+Eg61RgvnoTRNBlWjEBVo0= Subject key identifier: AD:32:F9:D0:86:23:7C:B2:9C:48:87:86:2E:DF:71:5D:70:C1:D7:B3 Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4 Certificate serial: 019B2EF9122CB55B81823544CF5AA791CE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 01:00:33 +0000 Manifest this update: Thu 18 Dec 2025 01:00:33 +0000 Manifest next update: Fri 19 Dec 2025 01:00:33 +0000 Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=) 2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: 60dQkH5VL08moLtFhcl0AQy5L3wQOhFD6rFLAERXVt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:12:2c:b5:5b:81:82:35:44:cf:5a:a7:91:ce:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4 Validity Not Before: Dec 18 01:00:33 2025 GMT Not After : Dec 19 01:00:33 2025 GMT Subject: CN=ad32f9d086237cb29c4887862edf715d70c1d7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:05:a6:3b:44:a0:bd:d9:e4:4f:d3:36:ef: 24:81:9a:09:ba:37:93:7a:bb:54:bb:a9:86:16:42: f1:ba:db:5d:a0:7d:08:93:ea:0a:af:cd:0d:db:58: e3:ea:51:4d:bc:fc:32:8c:5c:df:f9:3b:d4:ad:0f: e5:e5:9d:45:50:7a:92:5e:24:ad:75:3f:dd:80:e2: 84:86:2c:f6:2c:8b:f6:fc:97:5c:78:1b:2a:e8:1b: 78:7a:dd:ae:91:f5:85:5e:71:8b:b6:90:b1:dc:d1: 8f:86:3d:2b:8f:28:1d:ac:33:a8:be:c7:9a:6b:6b: 75:5f:f1:44:c1:8c:54:26:c9:c4:25:1d:9e:ca:06: 5d:98:fa:e9:ed:0b:85:06:15:4c:a3:9f:70:3f:f4: 32:e5:12:6e:2f:54:ab:8a:cb:b8:92:ea:0f:33:40: df:d1:d5:4b:b1:7c:c3:54:44:01:86:21:90:66:4a: 2c:b3:e6:2d:df:f0:ef:78:5d:9b:64:61:e8:fd:01: 8f:8d:8e:d8:32:8a:44:14:55:9c:e8:c7:22:d2:06: 25:ac:9d:0a:6a:3a:2b:19:9e:d9:e1:b3:57:7e:97: de:9b:c7:94:90:54:4d:30:fc:8e:17:1d:7a:24:50: 3b:d4:1e:8e:33:eb:a8:a3:d1:6f:f1:c0:ce:28:f9: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:32:F9:D0:86:23:7C:B2:9C:48:87:86:2E:DF:71:5D:70:C1:D7:B3 X509v3 Authority Key Identifier: keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:5a:7a:26:38:d2:ca:6c:38:6e:30:da:69:12:5f:3b:92:f9: 94:32:9c:46:b9:75:93:7d:6b:16:0a:53:12:a0:c9:84:41:82: 13:8e:bd:fc:c6:2f:71:b5:b9:7f:5e:6a:9a:f8:da:f2:04:b3: af:8e:36:bc:84:73:4e:f2:3d:44:95:c8:5a:7e:ba:47:44:a2: c1:2b:33:e8:f2:e7:b4:79:52:24:f8:82:12:24:32:4a:3a:eb: 9d:13:a3:84:09:d0:e4:6e:98:63:45:fc:d0:e3:5a:d1:9b:8a: 89:a1:c3:12:24:7d:84:63:73:fc:49:3f:14:d6:86:d2:1f:62: 52:fe:7e:40:56:53:31:79:d4:7c:cf:5f:86:13:73:e2:ac:ff: 2d:a8:44:2c:35:44:d8:71:01:88:ea:a3:b0:bd:ae:68:9a:01: 62:df:68:35:3c:c0:30:3d:cb:2a:e9:4f:bf:25:fa:79:a2:a9: c9:f3:bf:78:56:be:3b:2d:f2:c4:2a:ee:3b:6d:0e:bd:8d:40: 35:a7:c3:eb:90:25:16:81:86:4b:33:75:56:17:39:6a:f1:c5: 7c:ac:1f:40:1e:19:45:a7:a7:0c:5f:ca:45:6e:24:4a:d9:a4: 89:9b:ec:3e:ee:2c:e9:7f:11:df:bf:8a:9a:9c:7e:2b:4d:f8: 29:64:1c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+RIstVuBgjVEz1qnkc6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTNkOWM4NTY0NDRhNzA5NmUzYTg1MDhjYWUzMDdmZGVi YzBjZDQwHhcNMjUxMjE4MDEwMDMzWhcNMjUxMjE5MDEwMDMzWjAzMTEwLwYDVQQD EyhhZDMyZjlkMDg2MjM3Y2IyOWM0ODg3ODYyZWRmNzE1ZDcwYzFkN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv24FpjtEoL3Z5E/TNu8kgZoJujeT ertUu6mGFkLxuttdoH0Ik+oKr80N21jj6lFNvPwyjFzf+TvUrQ/l5Z1FUHqSXiSt dT/dgOKEhiz2LIv2/JdceBsq6Bt4et2ukfWFXnGLtpCx3NGPhj0rjygdrDOovsea a2t1X/FEwYxUJsnEJR2eygZdmPrp7QuFBhVMo59wP/Qy5RJuL1Srisu4kuoPM0Df 0dVLsXzDVEQBhiGQZkoss+Yt3/DveF2bZGHo/QGPjY7YMopEFFWc6Mci0gYlrJ0K ajorGZ7Z4bNXfpfem8eUkFRNMPyOFx16JFA71B6OM+uoo9Fv8cDOKPkj5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0y+dCGI3yynEiHhi7fcV1wwdezMB8GA1UdIwQY MBaAFGYT2chWREpwluOoUIyuMH/evAzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUt N2QwNWY5ODg4ZTk4LzEvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUtN2QwNWY5ODg4ZTk4 LzEvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2lp6JjjS ymw4bjDaaRJfO5L5lDKcRrl1k31rFgpTEqDJhEGCE469/MYvcbW5f15qmvja8gSz r442vIRzTvI9RJXIWn66R0SiwSsz6PLntHlSJPiCEiQySjrrnROjhAnQ5G6YY0X8 0ONa0ZuKiaHDEiR9hGNz/Ek/FNaG0h9iUv5+QFZTMXnUfM9fhhNz4qz/LahELDVE 2HEBiOqjsL2uaJoBYt9oNTzAMD3LKulPvyX6eaKpyfO/eFa+Oy3yxCruO20OvY1A NafD65AlFoGGSzN1Vhc5avHFfKwfQB4ZRaenDF/KRW4kStmkiZvsPu4s6X8R37+K mpx+K034KWQcHA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:58:42 2025 by rpki-client