This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft File: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft (raw, json) Hash identifier: Pn7P1yRVKBCfWRO/uRK3TMRsSbnCcybldaM7mGi8fLU= Subject key identifier: 44:24:54:0D:AF:E6:85:91:61:73:35:44:69:75:1A:D9:40:6C:28:C4 Authority key identifier: 66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91 Certificate issuer: /CN=66c3070a745b2c167e101a161d2648a1bc977991 Certificate serial: 019AF23FE829C5F6B7B7C8DCDA7137C5B8F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft Manifest number: B7 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl (hash: RkCiMSkAg/FjJgC1P0Z2SEqSAwTWzlrzKl6tew5h7mU=) 2: l9bBsFfC3zzSetiD5kEe28rBj1w.roa (hash: afp7psmljpdsoVJb9q1FK7ToTJSaIK0ZgxojY+T/ZMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e8:29:c5:f6:b7:b7:c8:dc:da:71:37:c5:b8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66c3070a745b2c167e101a161d2648a1bc977991 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=4424540dafe685916173354469751ad9406c28c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:f8:c7:80:ed:ef:6e:90:33:89:0c:03:de: f6:4e:98:99:46:af:36:f4:75:98:8d:17:88:e4:f6: 2f:c1:d6:41:3d:f3:2b:40:59:66:f3:3f:42:00:5a: 16:e9:13:8d:22:60:19:ad:d9:bf:33:55:d0:3e:29: cb:6a:bf:2d:fe:2b:b6:3a:88:ca:29:0e:f5:67:50: ff:f3:b8:27:60:bf:31:16:c8:54:4c:86:f2:69:9f: 1e:ec:cf:a1:a1:e9:bc:ac:cd:59:0b:b4:82:d9:03: 0d:46:14:ad:98:20:ed:95:14:2c:a6:63:e0:14:07: 4c:9c:f5:72:34:d3:00:17:b4:d1:7d:05:b4:53:f6: ac:59:19:66:ba:80:d8:fe:29:fb:0b:b2:54:98:e6: 30:96:88:07:1f:95:b4:5e:64:04:e9:97:7d:f7:e1: d7:53:7e:46:91:92:56:31:45:75:52:85:99:f8:7c: 48:63:9a:42:f6:b7:1e:79:be:bf:92:e0:20:cc:d5: ef:a8:fd:72:03:62:1f:da:73:07:95:4c:50:88:64: 4a:48:b0:1c:14:73:80:d4:4f:d7:25:0c:23:64:43: 5a:94:64:b5:a4:9a:c4:36:3a:e5:3b:3f:c7:0f:d4: f2:9e:fe:cf:69:69:6d:5f:84:7c:6f:36:0e:56:43: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:24:54:0D:AF:E6:85:91:61:73:35:44:69:75:1A:D9:40:6C:28:C4 X509v3 Authority Key Identifier: keyid:66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f0:48:0c:b3:8b:f1:c7:31:62:79:b9:8e:19:f5:70:90:ad: cb:47:b8:c2:bb:97:d1:c1:d5:a7:cf:50:df:f5:1d:c7:ca:d2: c9:60:40:08:3a:b4:15:35:8f:09:50:7a:9e:b3:32:89:64:f7: fd:10:c0:02:b2:04:97:a8:3b:fe:af:c4:09:c6:a7:c3:ab:af: 1d:60:81:9f:bc:c1:c1:2e:80:34:40:c6:0e:a1:fa:12:a1:76: 8f:2b:2b:88:8a:cf:96:55:fb:b7:d1:8a:fd:30:4c:32:f9:2b: 20:b0:7d:46:4e:fb:63:fc:47:31:f3:35:74:d8:bd:9a:18:9b: 11:87:89:8a:29:a5:10:88:4a:58:75:7c:71:1d:af:1a:ab:d0: 53:74:c8:4b:90:2a:8e:3a:ca:ea:d0:4e:1d:5b:8b:72:9b:48: 61:07:0a:8c:68:e5:4e:cb:55:5f:9e:82:61:5c:5e:6a:f0:2a: b2:ab:fe:7e:f0:4a:62:ba:89:9d:2d:ce:7b:2f:ea:99:dc:71: d4:39:4b:3a:5b:8f:23:42:23:f1:82:63:ca:7e:23:ed:8e:97: 3b:ae:6a:ac:e4:46:41:af:3d:cf:6c:e3:9f:57:67:14:14:e7: 5a:37:fe:8d:5f:ed:a0:aa:d3:bb:33:fd:0a:fe:17:99:06:65: 73:99:08:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+gpxfa3t8jc2nE3xbj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YzMwNzBhNzQ1YjJjMTY3ZTEwMWExNjFkMjY0OGExYmM5 Nzc5OTEwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD Eyg0NDI0NTQwZGFmZTY4NTkxNjE3MzM1NDQ2OTc1MWFkOTQwNmMyOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6L4x4Dt726QM4kMA972TpiZRq82 9HWYjReI5PYvwdZBPfMrQFlm8z9CAFoW6RONImAZrdm/M1XQPinLar8t/iu2OojK KQ71Z1D/87gnYL8xFshUTIbyaZ8e7M+hoem8rM1ZC7SC2QMNRhStmCDtlRQspmPg FAdMnPVyNNMAF7TRfQW0U/asWRlmuoDY/in7C7JUmOYwlogHH5W0XmQE6Zd99+HX U35GkZJWMUV1UoWZ+HxIY5pC9rceeb6/kuAgzNXvqP1yA2If2nMHlUxQiGRKSLAc FHOA1E/XJQwjZENalGS1pJrENjrlOz/HD9Tynv7PaWltX4R8bzYOVkOq4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQkVA2v5oWRYXM1RGl1GtlAbCjEMB8GA1UdIwQY MBaAFGbDBwp0WywWfhAaFh0mSKG8l3mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82NjMzMzEtMzFkYy00ZGRmLTg0ZTAt NWY5MGEyZjkwZDAzLzEvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82NjMzMzEtMzFkYy00ZGRmLTg0ZTAtNWY5MGEyZjkwZDAz LzEvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPBIDLOL 8ccxYnm5jhn1cJCty0e4wruX0cHVp89Q3/Udx8rSyWBACDq0FTWPCVB6nrMyiWT3 /RDAArIEl6g7/q/ECcanw6uvHWCBn7zBwS6ANEDGDqH6EqF2jysriIrPllX7t9GK /TBMMvkrILB9Rk77Y/xHMfM1dNi9mhibEYeJiimlEIhKWHV8cR2vGqvQU3TIS5Aq jjrK6tBOHVuLcptIYQcKjGjlTstVX56CYVxeavAqsqv+fvBKYrqJnS3Oey/qmdxx 1DlLOluPI0Ij8YJjyn4j7Y6XO65qrORGQa89z2zjn1dnFBTnWjf+jV/toKrTuzP9 Cv4XmQZlc5kIGg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:29 2025 by rpki-client