This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json) Hash identifier: MzbXopTznDfxgY+pLg2YWkUMtsvAPQjU3ExlRG1xRvI= Subject key identifier: 06:4E:AF:A2:48:C6:CF:5F:70:1F:F0:CE:23:88:F8:55:FD:A3:43:BD Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8 Certificate serial: 019B1C85A09B14BF3911E55ECE59D25983E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft Manifest number: 1051 Signing time: Sun 14 Dec 2025 11:01:17 +0000 Manifest this update: Sun 14 Dec 2025 11:01:17 +0000 Manifest next update: Mon 15 Dec 2025 11:01:17 +0000 Files and hashes: 1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=) 2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=) 3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: P76WFrhpLqNyAWSfc4Ii7oUG+ZqD0SA0adowvGq9z1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:a0:9b:14:bf:39:11:e5:5e:ce:59:d2:59:83:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8 Validity Not Before: Dec 14 11:01:17 2025 GMT Not After : Dec 15 11:01:17 2025 GMT Subject: CN=064eafa248c6cf5f701ff0ce2388f855fda343bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:79:1f:29:8a:30:47:ae:8b:35:8d:e5:cc: 30:42:49:dd:19:f5:c0:38:05:c0:52:e3:87:0f:0b: a2:be:a4:23:15:fa:e5:ed:43:3b:a1:a6:e0:46:f1: 97:99:3b:f5:6e:fa:a9:2e:87:74:0c:c5:bb:42:30: 65:cf:3b:41:05:ef:58:89:c1:a8:80:5e:fb:81:54: fd:8c:6b:6e:83:76:45:b6:ba:e8:18:10:2c:9c:3f: 59:cb:6c:10:f8:11:cd:49:6f:c0:5a:2e:78:2f:a9: 4d:94:91:26:00:d6:3b:66:af:87:29:cc:5f:56:7a: 75:7d:b2:5b:ce:b0:2f:85:b6:d0:10:eb:e2:c5:79: 8b:1d:16:a8:56:d4:93:2e:f9:59:08:a8:6d:7e:c8: 90:0d:b1:2a:76:72:51:60:9d:f5:88:73:bf:9e:e2: 5e:47:6c:59:e6:a6:75:b6:2b:9b:f6:f4:ba:e2:eb: f2:c3:35:33:bb:91:27:e4:7d:4e:f9:53:01:f8:66: ac:f7:1d:9f:be:51:da:ab:de:8e:c8:fa:71:09:a8: 08:8d:06:d0:c5:2b:77:06:df:f3:5f:7e:37:54:84: e0:5b:e2:6b:c3:08:de:bb:91:0f:ed:b4:94:e4:85: f3:0f:53:4d:89:d6:90:a1:23:5d:31:4e:3d:54:a8: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4E:AF:A2:48:C6:CF:5F:70:1F:F0:CE:23:88:F8:55:FD:A3:43:BD X509v3 Authority Key Identifier: keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9a:1c:80:52:5c:3a:9c:32:66:8e:6a:7a:c9:83:7c:ea:04: 15:93:9e:f0:f5:f5:69:52:39:0c:94:41:73:8c:49:e7:d7:bb: a9:af:de:cc:b7:d8:20:92:ba:3d:10:d1:e5:7f:55:55:6d:1d: 48:2e:56:64:96:bb:c2:36:74:4c:03:81:b1:8f:d9:87:bd:54: 30:37:3e:a2:79:5d:19:5a:e6:e8:a7:61:0c:0a:8b:14:92:1f: 65:dc:c2:70:b1:fa:ff:14:8a:51:ed:c2:66:86:42:a7:9c:ef: 71:e1:b0:ed:00:92:06:5b:d8:2d:79:81:75:44:b3:88:38:79: e0:ce:7a:fc:70:82:57:1d:a6:69:f6:c1:6c:92:09:0b:cd:8f: cb:70:49:b3:42:4b:26:ce:98:e1:1a:17:32:fd:32:4e:dc:ba: 77:38:29:25:e1:43:b9:d1:20:5f:ac:53:e1:e6:29:f0:3a:c9: ba:0e:b1:4b:8f:2d:ae:db:41:c7:13:c0:2c:54:1b:fb:55:41: 0d:43:ce:f5:25:95:44:88:08:97:10:a1:fa:69:e2:5b:d8:62: f5:7c:24:50:f9:1e:8b:90:f8:a4:21:80:75:cd:f0:97:ab:b9: 25:08:06:5b:47:1f:ce:32:19:16:21:08:77:59:58:b9:0f:75: e5:98:08:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschaCbFL85EeVezlnSWYPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzU3MTg1NDcyZjE2ZDUzZWViNjhhMTQwZTM1MTNmYTMx YzMxZDgwHhcNMjUxMjE0MTEwMTE3WhcNMjUxMjE1MTEwMTE3WjAzMTEwLwYDVQQD EygwNjRlYWZhMjQ4YzZjZjVmNzAxZmYwY2UyMzg4Zjg1NWZkYTM0M2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7x5HymKMEeuizWN5cwwQkndGfXA OAXAUuOHDwuivqQjFfrl7UM7oabgRvGXmTv1bvqpLod0DMW7QjBlzztBBe9YicGo gF77gVT9jGtug3ZFtrroGBAsnD9Zy2wQ+BHNSW/AWi54L6lNlJEmANY7Zq+HKcxf Vnp1fbJbzrAvhbbQEOvixXmLHRaoVtSTLvlZCKhtfsiQDbEqdnJRYJ31iHO/nuJe R2xZ5qZ1tiub9vS64uvywzUzu5En5H1O+VMB+Gas9x2fvlHaq96OyPpxCagIjQbQ xSt3Bt/zX343VITgW+Jrwwjeu5EP7bSU5IXzD1NNidaQoSNdMU49VKhppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZOr6JIxs9fcB/wziOI+FX9o0O9MB8GA1UdIwQY MBaAFGR1cYVHLxbVPutooUDjUT+jHDHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2Yzct ODFkMTAwNzNkZWU0LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2YzctODFkMTAwNzNkZWU0 LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5ocgFJc OpwyZo5qesmDfOoEFZOe8PX1aVI5DJRBc4xJ59e7qa/ezLfYIJK6PRDR5X9VVW0d SC5WZJa7wjZ0TAOBsY/Zh71UMDc+onldGVrm6KdhDAqLFJIfZdzCcLH6/xSKUe3C ZoZCp5zvceGw7QCSBlvYLXmBdUSziDh54M56/HCCVx2mafbBbJIJC82Py3BJs0JL Js6Y4RoXMv0yTty6dzgpJeFDudEgX6xT4eYp8DrJug6xS48trttBxxPALFQb+1VB DUPO9SWVRIgIlxCh+mniW9hi9XwkUPkei5D4pCGAdc3wl6u5JQgGW0cfzjIZFiEI d1lYuQ915ZgITA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:36:52 2025 by rpki-client