This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json) Hash identifier: tnyjo/U2tsrLAdfxcqn4cabpk70D2FZN9RmcWmcO2hc= Subject key identifier: B6:AE:C6:CC:77:68:9E:FB:E8:F5:E2:EF:E8:7F:65:EE:1C:F4:F1:03 Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4 Certificate serial: 019AF01AB00A2CE9A99430FCCE70C0EB8B9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft Manifest number: 22 Signing time: Fri 05 Dec 2025 20:01:12 +0000 Manifest this update: Fri 05 Dec 2025 20:01:12 +0000 Manifest next update: Sat 06 Dec 2025 20:01:12 +0000 Files and hashes: 1: 1-p3QeTY1ZxhyRMnOfJn0ixWHq9s.asa (hash: pblQKRL+2L4/KfUMB5sc7FC0Ejb3N8yKez82SqNphag=) 2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: a+5ZExFUtWW5APTmeGL8cn9PKM/Sm6UJRbUFk/qFJ8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:b0:0a:2c:e9:a9:94:30:fc:ce:70:c0:eb:8b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4 Validity Not Before: Dec 5 20:01:12 2025 GMT Not After : Dec 6 20:01:12 2025 GMT Subject: CN=b6aec6cc77689efbe8f5e2efe87f65ee1cf4f103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:2d:e0:cc:39:b2:e0:75:66:04:3d:f8:65: e3:56:07:50:0a:e2:fb:a2:91:5f:f6:c5:e1:0b:0b: 53:be:d7:2c:1b:86:55:76:de:1a:04:fe:54:87:8e: 33:84:77:bf:5d:fd:de:87:7f:5e:e5:a1:55:b1:4c: 84:b2:e4:02:26:fc:c3:a1:99:24:be:5c:e7:1e:ee: 83:61:e3:3a:7b:23:18:e3:fe:56:1b:c1:37:3b:18: 3b:86:bf:ac:2f:f2:c5:38:51:f5:c5:f5:bb:fd:8c: 80:fb:9d:31:e9:2d:ee:d1:f8:6d:df:f8:72:76:bd: bf:43:cf:9f:92:44:66:cd:e7:17:88:6a:5f:fa:f0: a0:46:f4:77:f1:30:c4:0d:2e:b6:d4:07:61:78:12: b5:85:85:d2:51:c5:4c:d6:59:85:6d:a2:ec:a6:bd: a9:54:d5:58:c5:14:bd:54:d7:bd:3e:d0:7e:d0:e9: 2c:f4:13:0b:df:dd:8e:e9:aa:b1:a5:89:0e:8b:43: 42:5c:40:47:da:06:6a:64:37:b0:91:bc:10:ff:3c: 08:e5:a0:e8:dd:99:a1:c5:c0:a2:4d:ba:7a:95:7c: 1a:65:c1:b5:22:6f:1d:eb:39:e5:ae:95:18:7d:f7: 28:c9:13:09:be:9e:3b:fc:e5:4b:33:ab:78:59:92: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AE:C6:CC:77:68:9E:FB:E8:F5:E2:EF:E8:7F:65:EE:1C:F4:F1:03 X509v3 Authority Key Identifier: keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:19:92:80:57:80:22:4c:54:e1:9f:59:7d:1e:8e:03:d4:e9: 72:04:44:9a:aa:7e:36:64:39:22:44:c9:1d:25:2e:10:a0:c5: 61:58:1d:24:a2:4a:fd:9c:3d:1f:43:70:bc:36:3c:f7:17:6e: 94:a9:9a:6a:6a:1c:35:b1:6b:f6:77:e0:5f:da:6b:71:dd:3b: 1a:22:2d:14:95:b6:19:ed:d2:73:17:c7:65:69:b2:62:ad:4d: a4:ea:43:b0:1c:5b:61:50:63:a3:8d:13:b3:fa:99:87:70:5f: a8:16:f2:98:cc:bb:30:05:d3:b5:61:36:14:38:17:b2:76:9e: 8c:8c:90:25:f0:46:81:2e:98:d8:a2:5d:c1:a6:35:d6:59:8e: a2:d3:d2:b3:de:d5:45:63:5f:a1:d3:e0:41:81:e9:65:9c:bc: ef:0f:bf:f7:a9:9a:25:81:d7:47:ea:8a:b1:c6:35:8f:20:bf: e5:70:c9:3c:40:fd:77:d6:3f:f3:45:38:d4:93:77:e5:f1:ed: b3:cf:a4:16:48:1a:65:0e:19:75:e1:48:21:4b:f9:27:9d:7c: fb:af:50:15:a2:ab:3c:73:dc:4a:21:bb:0b:f7:d6:08:e0:26: 8b:c4:60:62:c0:94:73:61:64:33:6c:a5:98:15:d1:8b:f3:a6: 12:bc:83:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGrAKLOmplDD8znDA64ueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh NzVjZDQwHhcNMjUxMjA1MjAwMTEyWhcNMjUxMjA2MjAwMTEyWjAzMTEwLwYDVQQD EyhiNmFlYzZjYzc3Njg5ZWZiZThmNWUyZWZlODdmNjVlZTFjZjRmMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhst4Mw5suB1ZgQ9+GXjVgdQCuL7 opFf9sXhCwtTvtcsG4ZVdt4aBP5Uh44zhHe/Xf3eh39e5aFVsUyEsuQCJvzDoZkk vlznHu6DYeM6eyMY4/5WG8E3Oxg7hr+sL/LFOFH1xfW7/YyA+50x6S3u0fht3/hy dr2/Q8+fkkRmzecXiGpf+vCgRvR38TDEDS621AdheBK1hYXSUcVM1lmFbaLspr2p VNVYxRS9VNe9PtB+0Oks9BML392O6aqxpYkOi0NCXEBH2gZqZDewkbwQ/zwI5aDo 3ZmhxcCiTbp6lXwaZcG1Im8d6znlrpUYffcoyRMJvp47/OVLM6t4WZJ/GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLauxsx3aJ776PXi7+h/Ze4c9PEDMB8GA1UdIwQY MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt ZTI5MWE1MmE5ZDE1LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1 LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghmSgFeA IkxU4Z9ZfR6OA9TpcgREmqp+NmQ5IkTJHSUuEKDFYVgdJKJK/Zw9H0NwvDY89xdu lKmaamocNbFr9nfgX9prcd07GiItFJW2Ge3ScxfHZWmyYq1NpOpDsBxbYVBjo40T s/qZh3BfqBbymMy7MAXTtWE2FDgXsnaejIyQJfBGgS6Y2KJdwaY11lmOotPSs97V RWNfodPgQYHpZZy87w+/96maJYHXR+qKscY1jyC/5XDJPED9d9Y/80U41JN35fHt s8+kFkgaZQ4ZdeFIIUv5J518+69QFaKrPHPcSiG7C/fWCOAmi8RgYsCUc2FkM2yl mBXRi/OmEryDog== -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:56 2025 by rpki-client