This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft File: ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json) Hash identifier: oQs96oTidZd1ZSE90Q4uOnKgPZpavjn0LFO320qU3ZM= Subject key identifier: 8D:76:29:07:6B:80:A6:11:DC:C3:97:0A:77:6B:3D:D8:A5:58:41:F9 Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B Certificate issuer: /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b Certificate serial: 019AF2765E12011D524671C769449757A430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft Manifest number: 0E18 Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: 2mHJDsPoEQjqU3c26vJoHNgXGRb4HSKjfD0QGILIOpA=) 2: luEbamkkQ3JNKI_McJaQ-rwJjV0.roa (hash: ErxV+CJ+EDpVd4vCMZWyy26jRiSWzXrUb4kdxbwG3ZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5e:12:01:1d:52:46:71:c7:69:44:97:57:a4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=8d7629076b80a611dcc3970a776b3dd8a55841f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:f1:ba:8d:f2:9d:6b:e6:94:4e:6a:96:68: 1f:84:20:dc:a7:11:f5:86:d1:93:89:3f:bf:82:30: c5:3f:d3:8e:49:86:67:ff:54:7a:4b:9c:0c:c0:01: 25:c2:0d:8d:7f:ae:e4:db:4b:c3:b9:ed:da:99:ae: b2:fc:16:72:5d:e2:76:37:fe:f5:69:89:41:e5:b6: 07:3a:2b:5d:42:64:ab:05:f0:a6:0d:61:d1:7a:1b: 14:7b:b5:c0:43:e3:b1:36:b4:ac:cf:db:55:75:08: c7:8c:b3:50:59:6d:bd:6e:a2:09:66:d0:2e:9e:b6: 59:b1:19:91:c4:49:27:80:fc:d3:2d:af:ff:0e:26: 67:c5:48:9b:6e:c6:d9:54:50:fe:7b:4d:5f:88:1e: ff:c8:30:9c:2d:e2:54:36:1a:95:24:52:58:3a:b4: 1f:38:62:3e:ed:be:e9:e7:10:be:97:84:0f:e7:ab: 70:8e:86:2f:08:4b:2b:a3:f5:fb:41:24:80:31:af: 29:21:99:e4:2e:e6:51:7d:8b:e6:da:63:22:e1:83: 09:d6:16:99:23:b2:ff:17:b5:14:45:ff:0e:53:42: d6:a9:eb:91:08:a4:81:69:44:29:32:2d:e6:53:9a: e1:98:23:88:6d:f1:34:50:f2:de:81:bd:94:37:9f: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:76:29:07:6B:80:A6:11:DC:C3:97:0A:77:6B:3D:D8:A5:58:41:F9 X509v3 Authority Key Identifier: keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:43:7a:d8:0c:8b:5b:4a:9c:4d:23:c3:da:87:90:62:e5:45: 97:29:32:4e:92:7d:85:2b:c4:d8:90:7b:a5:28:6d:e6:2d:00: de:93:0d:d7:48:20:9b:df:c2:82:f4:88:06:56:db:c0:70:11: 2f:a9:ab:d8:ad:ba:47:54:98:65:51:14:7d:95:bd:76:19:f0: 22:28:2b:69:32:ef:ca:d5:f6:a8:83:96:0c:3a:d8:c2:5d:fc: 80:94:0c:25:2d:49:d1:8f:3f:4e:50:25:df:50:cc:d7:0d:f2: 33:fc:51:02:d1:f7:ee:ff:45:6c:20:df:d1:b6:99:6d:b9:e3: 33:3c:2c:b6:d8:41:72:4e:7e:87:c8:c7:4c:54:36:3a:6e:c2: 3f:41:e1:5d:ca:75:e3:88:07:a4:8a:91:49:2f:6a:75:11:9e: 6e:4b:67:52:a2:c0:a8:8b:b4:51:1a:c2:fc:eb:3f:ce:78:49: 63:b8:fc:35:b3:c5:3a:a4:36:f2:a5:84:02:1a:6c:ee:af:17: 6b:2f:54:32:e9:aa:e1:05:98:61:ca:7c:75:80:f9:7f:02:59: 18:7c:74:ee:8f:53:1e:e3:3a:af:06:66:c1:1b:92:04:9c:be: e5:12:4b:4f:bf:0f:3d:90:c7:1b:ec:3d:54:f3:e1:04:a0:9b: 1b:2d:ff:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl4SAR1SRnHHaUSXV6QwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Njg1YTZkNzNmZjVhMjdlMWJjMWY5NjE3ZGZiNTUwOGJh ZDI5M2IwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD Eyg4ZDc2MjkwNzZiODBhNjExZGNjMzk3MGE3NzZiM2RkOGE1NTg0MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd7xuo3ynWvmlE5qlmgfhCDcpxH1 htGTiT+/gjDFP9OOSYZn/1R6S5wMwAElwg2Nf67k20vDue3ama6y/BZyXeJ2N/71 aYlB5bYHOitdQmSrBfCmDWHRehsUe7XAQ+OxNrSsz9tVdQjHjLNQWW29bqIJZtAu nrZZsRmRxEkngPzTLa//DiZnxUibbsbZVFD+e01fiB7/yDCcLeJUNhqVJFJYOrQf OGI+7b7p5xC+l4QP56twjoYvCEsro/X7QSSAMa8pIZnkLuZRfYvm2mMi4YMJ1haZ I7L/F7UURf8OU0LWqeuRCKSBaUQpMi3mU5rhmCOIbfE0UPLegb2UN5/t8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI12KQdrgKYR3MOXCndrPdilWEH5MB8GA1UdIwQY MBaAFGRoWm1z/1on4bwflhfftVCLrSk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdoYWJYUF9XaWZodkItV0Y5LTFVSXV0S1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYjNmMWMtYmJlZi00ZDM1LTgxNDYt YzQ4YjI1Zjc4NDZmLzEvWkdoYWJYUF9XaWZodkItV0Y5LTFVSXV0S1RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYjNmMWMtYmJlZi00ZDM1LTgxNDYtYzQ4YjI1Zjc4NDZm LzEvWkdoYWJYUF9XaWZodkItV0Y5LTFVSXV0S1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkN62AyL W0qcTSPD2oeQYuVFlykyTpJ9hSvE2JB7pSht5i0A3pMN10ggm9/CgvSIBlbbwHAR L6mr2K26R1SYZVEUfZW9dhnwIigraTLvytX2qIOWDDrYwl38gJQMJS1J0Y8/TlAl 31DM1w3yM/xRAtH37v9FbCDf0baZbbnjMzwstthBck5+h8jHTFQ2Om7CP0HhXcp1 44gHpIqRSS9qdRGebktnUqLAqIu0URrC/Os/znhJY7j8NbPFOqQ28qWEAhps7q8X ay9UMumq4QWYYcp8dYD5fwJZGHx07o9THuM6rwZmwRuSBJy+5RJLT78PPZDHG+w9 VPPhBKCbGy3/QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:10 2025 by rpki-client