This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json) Hash identifier: UcncPD/qiPQuxFfwN6rtFf2nlCMth/yBVK8BF/VSvgE= Subject key identifier: 02:9A:D8:96:A6:7B:96:41:6B:95:92:3C:4E:70:B3:8B:54:91:E9:46 Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Certificate serial: 019B236492EFB49F24247750E39E2073F030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft Manifest number: 086A Signing time: Mon 15 Dec 2025 19:02:32 +0000 Manifest this update: Mon 15 Dec 2025 19:02:32 +0000 Manifest next update: Tue 16 Dec 2025 19:02:32 +0000 Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: nonRtK5l3hIaodGcOq8fq7E7V9enGpuY6Z+L9DIGn5o=) 2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:92:ef:b4:9f:24:24:77:50:e3:9e:20:73:f0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Validity Not Before: Dec 15 19:02:32 2025 GMT Not After : Dec 16 19:02:32 2025 GMT Subject: CN=029ad896a67b96416b95923c4e70b38b5491e946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:72:21:06:09:3e:ec:f5:7d:80:5c:42:de: 62:3a:1d:ee:43:fa:0f:b5:fa:66:9f:49:d4:29:13: 9b:ce:94:32:b6:ed:a4:7d:71:0e:8a:69:76:76:bb: 30:b9:be:8f:05:64:6f:d9:0b:2f:60:a9:63:f4:79: 45:54:01:8b:a3:c6:53:30:de:6b:d4:69:d5:a5:32: 2b:c0:24:62:d8:5e:3f:d7:73:f3:9f:60:99:ed:f3: d0:db:c1:85:d6:d1:79:48:56:fe:87:1d:a9:ee:e1: 51:c0:9b:a2:43:36:b8:26:10:96:7f:ba:6d:29:1d: b8:82:08:b0:c7:82:ba:56:f4:48:e4:ed:49:ef:87: c9:65:5b:eb:06:df:db:ca:5b:f6:f0:ab:1a:0b:d4: ff:da:a6:7c:e2:d7:4b:9e:00:f7:f3:29:5d:25:9e: c1:6c:68:cd:b6:53:11:4a:b2:6a:cd:fd:c7:e2:4e: c4:79:8d:c7:9a:81:77:be:86:d8:e7:7c:34:50:c2: 14:13:44:89:1d:f2:a9:89:79:d4:60:82:a4:78:20: b9:6d:ab:73:58:4b:85:e8:78:cb:49:b1:61:87:83: e5:fa:ec:39:09:1e:6e:87:19:44:e2:26:0e:31:23: 09:09:29:b6:0c:d8:4d:19:3e:8a:dc:f8:77:35:8e: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9A:D8:96:A6:7B:96:41:6B:95:92:3C:4E:70:B3:8B:54:91:E9:46 X509v3 Authority Key Identifier: keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:af:1c:ad:59:6b:58:da:3a:82:b1:e0:2e:b5:f6:35:64:be: 0c:17:61:21:bf:65:15:0b:27:c7:68:d1:18:8c:e8:9c:db:3c: c7:96:a6:60:e0:20:66:83:d8:10:d2:5e:4f:6b:38:7d:79:03: fd:2b:75:08:60:4f:e6:66:4f:da:75:88:11:90:d0:4f:b1:ef: 06:18:0b:7a:2f:5f:bd:24:30:d3:92:7b:90:7a:66:30:b8:82: e8:e6:4b:54:7a:fe:40:b2:e9:cc:68:54:30:7e:f9:90:3d:d5: c5:64:38:f5:2b:81:b4:77:4f:d3:5e:ba:59:c1:f7:62:e6:ad: a3:ad:72:c0:d5:d7:4f:4d:28:e4:1d:b6:da:76:7f:25:14:48: 1d:02:d7:28:fc:cd:19:34:ef:45:61:35:56:07:9f:83:5a:6a: 7a:7a:eb:3c:6c:1b:76:0f:b6:72:1a:1b:c9:53:10:8c:39:10: 6e:2b:6b:db:98:52:ce:f6:78:1e:9d:18:ff:19:8a:6e:e9:b4: 05:d4:f4:9d:66:09:fa:9d:ba:db:cf:24:8d:57:10:1c:4b:b3: 90:d1:00:98:b3:69:2e:64:b1:1d:6e:0c:65:d2:71:ad:ae:66: 6e:ad:67:2e:58:21:bc:f0:8b:b8:bc:00:9d:eb:15:c6:f7:4e: 29:87:e7:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZJLvtJ8kJHdQ454gc/AwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz Yzc1NTYwHhcNMjUxMjE1MTkwMjMyWhcNMjUxMjE2MTkwMjMyWjAzMTEwLwYDVQQD EygwMjlhZDg5NmE2N2I5NjQxNmI5NTkyM2M0ZTcwYjM4YjU0OTFlOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8xyIQYJPuz1fYBcQt5iOh3uQ/oP tfpmn0nUKRObzpQytu2kfXEOiml2drswub6PBWRv2QsvYKlj9HlFVAGLo8ZTMN5r 1GnVpTIrwCRi2F4/13Pzn2CZ7fPQ28GF1tF5SFb+hx2p7uFRwJuiQza4JhCWf7pt KR24ggiwx4K6VvRI5O1J74fJZVvrBt/bylv28KsaC9T/2qZ84tdLngD38yldJZ7B bGjNtlMRSrJqzf3H4k7EeY3HmoF3vobY53w0UMIUE0SJHfKpiXnUYIKkeCC5batz WEuF6HjLSbFhh4Pl+uw5CR5uhxlE4iYOMSMJCSm2DNhNGT6K3Ph3NY5egwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKa2Jame5ZBa5WSPE5ws4tUkelGMB8GA1UdIwQY MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa8crVlr WNo6grHgLrX2NWS+DBdhIb9lFQsnx2jRGIzonNs8x5amYOAgZoPYENJeT2s4fXkD /St1CGBP5mZP2nWIEZDQT7HvBhgLei9fvSQw05J7kHpmMLiC6OZLVHr+QLLpzGhU MH75kD3VxWQ49SuBtHdP0166WcH3Yuato61ywNXXT00o5B222nZ/JRRIHQLXKPzN GTTvRWE1Vgefg1pqenrrPGwbdg+2chobyVMQjDkQbitr25hSzvZ4Hp0Y/xmKbum0 BdT0nWYJ+p26288kjVcQHEuzkNEAmLNpLmSxHW4MZdJxra5mbq1nLlghvPCLuLwA nesVxvdOKYfnPw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:19:00 2025 by rpki-client