This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json) Hash identifier: K7s2hp9gmFiTwXGC4gQer4AB3vd+Ixj3g5xssdgmkQ8= Subject key identifier: B6:08:60:88:56:9A:A6:CC:66:B9:5C:E0:25:DE:2B:C8:29:CA:B6:3D Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5 Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5 Certificate serial: 019AF0BF77BAEFDEC58EC5342B0A88F53159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft Manifest number: 069C Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: HkrU6LTXZrJufdNVqIR17DA+wHn0Cs+qsnPAahSPEbo=) 2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:77:ba:ef:de:c5:8e:c5:34:2b:0a:88:f5:31:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66689087e787990916878db20d555684c22cd9d5 Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=b6086088569aa6cc66b95ce025de2bc829cab63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:5a:2e:45:de:12:30:6a:2f:aa:bd:f7:fc: 25:78:06:4a:fb:c1:f3:e2:7d:1e:e6:7f:b3:f9:f9: 2b:2d:6e:fd:63:62:cc:95:f0:63:cf:d0:e1:4e:ff: f6:57:68:74:b4:23:cc:83:29:db:48:dd:27:e9:28: ee:07:bc:57:f7:1d:e9:71:69:37:1a:1f:cb:fe:3e: 18:89:cc:6c:3b:ed:dc:53:c8:9b:7d:ec:26:23:67: 00:d6:a0:c4:42:04:ac:ee:10:df:25:86:0f:1f:7b: 15:34:c5:a5:9f:ee:e6:55:18:72:ba:f2:35:9c:f2: fd:6d:2a:c7:67:db:06:61:e8:6e:b7:c8:c8:cd:b8: e7:2b:86:b3:8d:3f:e8:51:d5:da:ba:d0:67:74:1a: c8:ef:21:38:55:f1:72:e6:e6:97:14:ff:14:c3:44: eb:88:84:a1:8f:7a:dc:b2:22:de:8b:09:6a:16:79: df:60:49:fc:17:c8:a6:dc:28:0b:40:c5:2d:17:cc: 23:4c:3a:86:38:f0:f3:1e:0f:5f:41:ec:24:54:14: f1:73:c7:e2:c4:28:cc:c7:cb:e4:ab:f6:21:04:e3: 79:46:ca:49:5d:cc:60:4b:6c:2b:5d:f4:96:ca:46: 0a:71:35:c0:2c:57:7a:6d:5e:18:37:7d:33:47:29: f4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:60:88:56:9A:A6:CC:66:B9:5C:E0:25:DE:2B:C8:29:CA:B6:3D X509v3 Authority Key Identifier: keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e2:a5:84:02:b1:2d:7e:0b:d7:29:02:b9:4e:8c:f2:ca:f1: 48:f7:fa:16:90:21:40:11:3d:93:40:2a:38:19:16:4b:37:1d: bd:ff:29:9b:f0:4e:79:90:3d:63:1d:04:71:bf:e3:7e:03:aa: 30:ea:5a:9a:42:b4:e5:68:6c:d2:b5:d2:a6:f9:58:2c:16:cf: 2c:1d:4d:20:c5:db:2f:6a:fd:bb:84:d6:b3:5f:d3:c4:ca:c6: 08:0b:bd:98:a8:d6:a0:26:df:8f:24:bb:7f:36:5f:de:ab:76: a5:55:56:c0:b1:dc:e8:ba:32:d0:3d:f3:03:da:6a:a8:b0:e3: 3b:97:b0:5c:a9:2f:1e:51:ef:dd:86:f7:6a:66:17:b1:c5:2f: 44:aa:ef:c8:76:9d:1b:90:9c:2e:00:8d:c5:bb:49:4e:4a:41: 5f:68:23:bb:e3:8b:7f:f1:c6:b9:66:ef:26:6e:8e:96:27:41: 5a:9d:64:d4:3f:ea:40:8f:ec:c0:c8:95:b2:87:ed:36:9d:98: 61:29:57:de:8e:e2:c0:91:d5:92:71:b2:6b:1b:32:0b:1b:11: 0f:d5:f2:c1:0e:cc:06:3f:d9:88:09:8f:08:45:94:25:6f:cb: e1:c7:b1:c2:26:04:63:14:f1:b1:c2:a6:5c:66:14:ca:73:05: dd:ee:80:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3e6797FjsU0KwqI9TFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Njg5MDg3ZTc4Nzk5MDkxNjg3OGRiMjBkNTU1Njg0YzIy Y2Q5ZDUwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD EyhiNjA4NjA4ODU2OWFhNmNjNjZiOTVjZTAyNWRlMmJjODI5Y2FiNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PxaLkXeEjBqL6q99/wleAZK+8Hz 4n0e5n+z+fkrLW79Y2LMlfBjz9DhTv/2V2h0tCPMgynbSN0n6SjuB7xX9x3pcWk3 Gh/L/j4YicxsO+3cU8ibfewmI2cA1qDEQgSs7hDfJYYPH3sVNMWln+7mVRhyuvI1 nPL9bSrHZ9sGYehut8jIzbjnK4azjT/oUdXautBndBrI7yE4VfFy5uaXFP8Uw0Tr iIShj3rcsiLeiwlqFnnfYEn8F8im3CgLQMUtF8wjTDqGOPDzHg9fQewkVBTxc8fi xCjMx8vkq/YhBON5RspJXcxgS2wrXfSWykYKcTXALFd6bV4YN30zRyn06wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYIYIhWmqbMZrlc4CXeK8gpyrY9MB8GA1UdIwQY MBaAFGZokIfnh5kJFoeNsg1VVoTCLNnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMt MWU3YzE3NzI4YjUwLzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMtMWU3YzE3NzI4YjUw LzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruKlhAKx LX4L1ykCuU6M8srxSPf6FpAhQBE9k0AqOBkWSzcdvf8pm/BOeZA9Yx0Ecb/jfgOq MOpamkK05Whs0rXSpvlYLBbPLB1NIMXbL2r9u4TWs1/TxMrGCAu9mKjWoCbfjyS7 fzZf3qt2pVVWwLHc6Loy0D3zA9pqqLDjO5ewXKkvHlHv3Yb3amYXscUvRKrvyHad G5CcLgCNxbtJTkpBX2gju+OLf/HGuWbvJm6OlidBWp1k1D/qQI/swMiVsoftNp2Y YSlX3o7iwJHVknGyaxsyCxsRD9XywQ7MBj/ZiAmPCEWUJW/L4cexwiYEYxTxscKm XGYUynMF3e6AAg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:55 2025 by rpki-client