This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json) Hash identifier: ndEFHWZpZAQPku0D0ql7/dkfAFB3gv6/Hu14kIOtKU4= Subject key identifier: 61:13:D9:68:5A:82:53:02:71:D6:AC:B9:7E:27:13:1A:8C:3C:68:03 Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Certificate serial: 019B32D68B79B2E7B3F349FB442B44871621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft Manifest number: 0872 Signing time: Thu 18 Dec 2025 19:01:19 +0000 Manifest this update: Thu 18 Dec 2025 19:01:19 +0000 Manifest next update: Fri 19 Dec 2025 19:01:19 +0000 Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: lkcpMLk3Ip8QmpUnLuTv020A2NDfjYIJtVJ3OisivUE=) 2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:8b:79:b2:e7:b3:f3:49:fb:44:2b:44:87:16:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Validity Not Before: Dec 18 19:01:19 2025 GMT Not After : Dec 19 19:01:19 2025 GMT Subject: CN=6113d9685a82530271d6acb97e27131a8c3c6803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:39:eb:70:a9:c5:56:00:19:87:4f:b8:ae: 0e:3d:d7:ae:ff:a0:bf:41:e1:5c:6a:b7:9e:bb:e6: dd:48:55:84:52:d8:38:20:99:fd:84:43:62:17:06: 56:1b:56:04:2b:c1:7d:3d:0d:34:f0:21:65:96:3d: 77:48:50:b0:c2:b4:09:c6:80:fb:2c:0a:50:f0:15: 39:b9:31:e7:1f:80:8d:72:96:a0:5e:e9:fa:cc:bb: dc:56:17:78:a9:b8:55:16:68:15:84:e3:6c:dd:5c: 94:5d:0d:4a:ac:03:27:c9:df:d1:2e:b5:4e:92:7d: 44:21:e2:f7:65:fa:b4:a8:40:4d:14:2f:bc:95:aa: af:53:ab:a1:14:72:50:fe:c6:33:d0:3c:7c:de:aa: 18:60:ff:81:82:34:9e:0b:9b:2f:9e:da:0d:22:f7: 4f:e2:fe:af:40:93:d1:12:2c:c1:32:a5:b7:ac:0e: 0d:84:b2:1e:38:cb:7d:0d:57:35:de:14:95:a6:92: 98:6c:57:a6:1b:48:ae:d0:6f:ca:ea:f1:32:c7:2d: 5f:d2:92:da:16:ae:a9:8d:e2:3d:de:cc:9b:d9:d1: 7d:d2:be:81:42:a6:64:55:fa:29:9d:dc:c1:df:a6: b4:d3:45:b1:08:ac:5e:9c:bd:2d:55:27:e6:55:22: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:13:D9:68:5A:82:53:02:71:D6:AC:B9:7E:27:13:1A:8C:3C:68:03 X509v3 Authority Key Identifier: keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6b:c1:d2:7d:f4:33:83:57:8b:34:85:47:00:30:13:6e:1e: a0:99:56:21:62:39:5a:db:89:a5:c0:24:8b:a6:22:55:ed:ac: cd:85:30:b2:1b:99:44:3d:9b:0a:d3:84:d0:b0:e0:e4:8e:ce: 18:2d:33:9b:24:0b:04:b3:00:80:1e:6a:f3:3d:c9:06:8f:42: dc:09:15:25:a7:de:ae:d2:6b:d9:3f:b1:be:0b:bf:aa:bd:94: 89:c0:c5:ee:90:4c:25:d4:1e:27:78:ba:67:34:76:26:26:c4: 17:0d:37:f3:6c:a4:1a:84:20:94:5c:00:4f:a7:fb:2c:62:79: 6c:7f:36:20:b6:38:bc:56:b0:e5:37:aa:99:ad:ae:61:f3:d8: a6:34:2f:80:dc:3c:d9:28:63:b2:c5:a7:a6:42:0f:ff:4c:a7: 53:5d:af:4f:4c:25:7b:ef:e5:61:4e:f0:3c:24:de:34:b7:4d: d2:81:ce:04:8c:69:a6:29:61:3e:d6:ce:58:01:cf:1e:38:d1: f9:6c:14:d8:35:37:db:49:f2:6f:fd:c4:dd:75:04:17:fe:b1: 37:29:54:6d:85:90:f7:94:26:b7:a8:40:d5:47:87:8f:5f:48: 28:72:97:46:20:d5:ac:3a:62:3b:8a:fe:88:f1:9f:44:8f:6d: 1e:6e:df:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ot5suez80n7RCtEhxYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz Yzc1NTYwHhcNMjUxMjE4MTkwMTE5WhcNMjUxMjE5MTkwMTE5WjAzMTEwLwYDVQQD Eyg2MTEzZDk2ODVhODI1MzAyNzFkNmFjYjk3ZTI3MTMxYThjM2M2ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor4563CpxVYAGYdPuK4OPdeu/6C/ QeFcareeu+bdSFWEUtg4IJn9hENiFwZWG1YEK8F9PQ008CFllj13SFCwwrQJxoD7 LApQ8BU5uTHnH4CNcpagXun6zLvcVhd4qbhVFmgVhONs3VyUXQ1KrAMnyd/RLrVO kn1EIeL3Zfq0qEBNFC+8laqvU6uhFHJQ/sYz0Dx83qoYYP+BgjSeC5svntoNIvdP 4v6vQJPREizBMqW3rA4NhLIeOMt9DVc13hSVppKYbFemG0iu0G/K6vEyxy1f0pLa Fq6pjeI93syb2dF90r6BQqZkVfopndzB36a000WxCKxenL0tVSfmVSIwcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGET2WhaglMCcdasuX4nExqMPGgDMB8GA1UdIwQY MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWvB0n30 M4NXizSFRwAwE24eoJlWIWI5WtuJpcAki6YiVe2szYUwshuZRD2bCtOE0LDg5I7O GC0zmyQLBLMAgB5q8z3JBo9C3AkVJafertJr2T+xvgu/qr2UicDF7pBMJdQeJ3i6 ZzR2JibEFw0382ykGoQglFwAT6f7LGJ5bH82ILY4vFaw5Teqma2uYfPYpjQvgNw8 2ShjssWnpkIP/0ynU12vT0wle+/lYU7wPCTeNLdN0oHOBIxppilhPtbOWAHPHjjR +WwU2DU320nyb/3E3XUEF/6xNylUbYWQ95Qmt6hA1UeHj19IKHKXRiDVrDpiO4r+ iPGfRI9tHm7fWA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:01 2025 by rpki-client