This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json) Hash identifier: OE1Zt0jfesc83W58/fl9HyDFDup+hN40sJwlfz7NDgo= Subject key identifier: 3D:DD:69:A4:1E:A3:48:1D:59:8B:5C:55:46:10:59:E3:8B:12:B5:7B Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Certificate serial: 019AF3C0BC73FE9299ABED753758E3315D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft Manifest number: 02D9 Signing time: Sat 06 Dec 2025 13:01:25 +0000 Manifest this update: Sat 06 Dec 2025 13:01:25 +0000 Manifest next update: Sun 07 Dec 2025 13:01:25 +0000 Files and hashes: 1: 0CSlGIx0OwbwIhlMLuRynXyuKoY.roa (hash: lWoSiXzEyVBM+dBqTVH3J+MjpuIW59UUJj+VrqqRdHY=) 2: Yx4RTRwcv-iZJFBfOuNpOOiq488.roa (hash: XrtGjg6+9eicnDNwMrLxBtahJXbLSKOrC3yknbdUTt4=) 3: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: JKSMS7BjmIwIsuQ8iBztmOcPMMqpLvc0AUFKWITfHUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:bc:73:fe:92:99:ab:ed:75:37:58:e3:31:5d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Validity Not Before: Dec 6 13:01:25 2025 GMT Not After : Dec 7 13:01:25 2025 GMT Subject: CN=3ddd69a41ea3481d598b5c55461059e38b12b57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:09:bd:3e:e6:52:17:d0:39:21:d7:0a:88: f3:2f:bf:3e:62:8e:42:61:18:cf:a4:8d:ff:d0:c0: f7:1b:d7:37:bf:be:59:c2:f4:a8:32:19:88:17:bf: b6:dc:17:68:e8:8f:44:72:88:ee:35:e9:a5:9c:ab: 53:bf:63:01:2b:53:6a:a4:6c:32:dd:a1:0f:d8:af: fb:32:a2:c4:84:a5:cc:3e:c7:1f:30:c3:a0:86:1a: d0:51:d9:45:d1:39:49:39:31:ba:13:23:46:87:4c: 5e:66:10:dc:f7:31:52:fc:22:fa:7d:cf:b7:c3:1a: d1:0d:80:0d:55:21:2d:c2:ae:67:c3:eb:11:fd:55: e3:49:4f:e0:38:7d:2a:78:0e:66:57:5d:8a:b5:41: 3d:1f:64:fd:97:50:e1:4e:48:17:78:6b:6a:33:34: d4:9d:e5:27:ac:2b:73:25:8f:bb:20:82:32:e8:d4: 47:4c:a0:76:fd:38:c2:3e:9c:cb:5e:d9:d8:97:86: 0c:cf:19:0a:11:e1:73:43:b3:d1:2e:11:a5:ad:d2: be:e9:6a:1c:31:f0:03:d8:8a:ee:ab:b3:e3:08:eb: e4:6b:d3:14:62:2b:05:b0:18:09:6a:97:66:f0:18: c8:3a:99:6f:06:a8:d3:fe:36:02:92:d4:12:ff:13: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DD:69:A4:1E:A3:48:1D:59:8B:5C:55:46:10:59:E3:8B:12:B5:7B X509v3 Authority Key Identifier: keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ec:90:ce:80:52:ae:8e:5d:95:7a:94:88:d8:31:9a:de:46: 43:06:cc:21:9f:1c:80:e6:cf:24:22:47:85:ea:ab:4e:5e:bc: 2b:5c:cc:c4:a5:fb:51:82:7f:14:bb:fe:1d:ce:2b:ab:3d:48: ca:74:d4:19:5a:0a:5d:87:3f:a7:cc:08:00:f7:c2:85:09:29: e3:42:e6:38:cc:1e:9d:1e:8b:31:26:e6:10:63:d3:f6:14:72: 1d:c9:3c:4e:29:2f:cd:bf:49:dc:3a:4d:41:22:ab:f3:6a:24: 31:73:32:8d:27:e4:5c:d7:1f:b4:f6:99:8a:8c:82:1e:27:c5: 48:cd:fe:11:db:8b:7c:61:30:fd:13:59:c2:a7:e0:26:f2:98: dc:95:f0:f1:67:0e:60:0b:6a:0a:af:e6:75:8f:9d:aa:0e:c1: e4:14:46:2e:e9:b0:41:cb:d3:d0:95:ac:6f:e8:af:fb:d7:7b: 43:7a:14:bb:15:7f:b0:c4:04:b2:40:f7:d8:01:09:42:10:d2: c8:04:bc:f3:cc:32:b0:06:df:60:f8:8e:19:e7:2a:12:48:b5: 1b:97:9f:27:87:67:32:e6:83:fa:88:28:11:0f:a5:0f:fb:dc: 3c:d2:52:07:a4:b5:21:a1:b2:af:36:56:c2:77:c3:1b:ec:fe: 1d:8a:3d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLxz/pKZq+11N1jjMV0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTIyOGEzYTNkMDA2NTRkNGIxMTE3MzM4NzRlMzFkODBj MGEyMGMwHhcNMjUxMjA2MTMwMTI1WhcNMjUxMjA3MTMwMTI1WjAzMTEwLwYDVQQD EygzZGRkNjlhNDFlYTM0ODFkNTk4YjVjNTU0NjEwNTllMzhiMTJiNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe4JvT7mUhfQOSHXCojzL78+Yo5C YRjPpI3/0MD3G9c3v75ZwvSoMhmIF7+23Bdo6I9EcojuNemlnKtTv2MBK1NqpGwy 3aEP2K/7MqLEhKXMPscfMMOghhrQUdlF0TlJOTG6EyNGh0xeZhDc9zFS/CL6fc+3 wxrRDYANVSEtwq5nw+sR/VXjSU/gOH0qeA5mV12KtUE9H2T9l1DhTkgXeGtqMzTU neUnrCtzJY+7IIIy6NRHTKB2/TjCPpzLXtnYl4YMzxkKEeFzQ7PRLhGlrdK+6Woc MfAD2Iruq7PjCOvka9MUYisFsBgJapdm8BjIOplvBqjT/jYCktQS/xMPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3daaQeo0gdWYtcVUYQWeOLErV7MB8GA1UdIwQY MBaAFM4SKKOj0AZU1LERczh04x2AwKIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMt ZmQ3ZGJkZjhlMzAwLzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMtZmQ3ZGJkZjhlMzAw LzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+yQzoBS ro5dlXqUiNgxmt5GQwbMIZ8cgObPJCJHheqrTl68K1zMxKX7UYJ/FLv+Hc4rqz1I ynTUGVoKXYc/p8wIAPfChQkp40LmOMwenR6LMSbmEGPT9hRyHck8Tikvzb9J3DpN QSKr82okMXMyjSfkXNcftPaZioyCHifFSM3+EduLfGEw/RNZwqfgJvKY3JXw8WcO YAtqCq/mdY+dqg7B5BRGLumwQcvT0JWsb+iv+9d7Q3oUuxV/sMQEskD32AEJQhDS yAS888wysAbfYPiOGecqEki1G5efJ4dnMuaD+ogoEQ+lD/vcPNJSB6S1IaGyrzZW wnfDG+z+HYo9JA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:54:29 2025 by rpki-client