This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json) Hash identifier: GiKMV6m+5Ra6U8xa1SFXK/8xo34fHNw6N4R0jbIypDA= Subject key identifier: 04:73:1B:83:1E:AC:65:A3:19:8D:91:15:3B:C1:25:B4:52:4D:E4:F5 Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Certificate serial: 019B0E5BB2DD9D2D2252572B1A99A5FD169F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft Manifest number: 1704 Signing time: Thu 11 Dec 2025 17:00:49 +0000 Manifest this update: Thu 11 Dec 2025 17:00:49 +0000 Manifest next update: Fri 12 Dec 2025 17:00:49 +0000 Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: h3OiyYMnjXxd7bb0oqtIacnrhs0ZFUo73LGu3aFS938=) 2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:b2:dd:9d:2d:22:52:57:2b:1a:99:a5:fd:16:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Validity Not Before: Dec 11 17:00:49 2025 GMT Not After : Dec 12 17:00:49 2025 GMT Subject: CN=04731b831eac65a3198d91153bc125b4524de4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:ed:8d:f7:57:05:2e:9a:9a:58:0f:88:22: 32:5a:d6:e6:51:7e:28:ca:b5:37:4a:05:0b:41:14: 5b:5c:87:7e:b9:dc:12:92:88:80:84:64:c7:e1:95: 36:68:05:73:82:9b:65:44:a2:8b:a5:c1:89:67:06: 50:aa:37:9d:bf:9b:b2:7c:da:46:8d:ef:07:1e:66: ca:a5:21:a0:20:5e:52:f7:01:21:8c:d9:37:68:11: 8d:06:d9:55:e0:2c:99:3f:49:3e:bf:ed:40:2c:90: af:aa:7e:03:67:fa:96:74:8b:6d:92:6c:db:1a:4e: 8c:3e:93:b2:28:04:1c:88:17:aa:aa:2d:9a:20:14: 1e:25:5e:94:b6:2b:b6:8e:8f:c0:f8:88:1c:62:12: 36:2d:fd:c3:fc:0c:26:4a:d0:39:6c:49:a8:e5:12: 64:8a:4d:f2:8a:16:28:f0:60:03:c6:18:0e:fe:23: 33:91:84:70:47:b7:7f:ac:03:98:c6:ad:cb:80:83: d3:83:9a:9c:0e:06:37:9e:03:80:96:b9:13:e9:c6: da:4d:dc:8a:02:ed:8a:4d:d7:ce:55:46:67:48:5a: dd:51:0d:9f:dc:08:dc:a2:2e:21:09:9a:68:93:6d: fc:60:6d:9c:ed:f4:e1:72:be:43:cd:75:44:d6:f8: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:73:1B:83:1E:AC:65:A3:19:8D:91:15:3B:C1:25:B4:52:4D:E4:F5 X509v3 Authority Key Identifier: keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:dd:11:73:20:1b:f2:06:8b:2c:9a:3d:70:e9:22:92:e6:fc: 2d:f2:36:69:12:6c:fc:1f:41:41:87:63:d0:0b:a8:1a:37:59: dc:8c:d3:d0:54:0f:54:fb:fe:74:27:16:d3:9c:46:06:22:6e: ff:6e:fd:d9:a9:5a:b9:56:33:97:55:77:5d:4f:d5:d6:0e:01: 43:db:43:df:b8:ac:9c:96:4f:f9:93:a5:6d:ce:bc:80:fe:a4: b3:29:6d:ed:75:76:61:31:0f:85:59:2a:de:e2:a7:79:87:8a: 6d:5e:40:5f:0f:a1:a7:4b:b1:da:9c:4d:6a:d6:aa:76:2c:4d: c8:ed:98:97:b6:3e:73:f0:7e:15:30:12:06:9d:39:b7:10:6e: 8c:a3:6c:b7:45:80:2b:0d:15:18:b6:0f:01:9b:52:e3:97:31: 0a:b4:6f:b8:0f:1a:a1:23:16:6c:87:99:2b:cc:a3:4a:e9:a8: 4f:7d:44:18:d0:55:63:23:76:b2:d5:f8:9d:ba:45:ec:56:26: 48:87:af:fb:6f:39:50:82:af:7a:56:f1:34:ef:3a:76:91:f7: bc:d3:19:33:8d:80:83:39:dc:ab:2e:ce:63:85:7c:65:b7:84: 31:8e:e8:35:bb:4c:5b:e6:9c:5b:ad:04:34:e2:ed:4a:d0:a8: ef:f5:2e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW7LdnS0iUlcrGpml/RafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh MzkwZTkwHhcNMjUxMjExMTcwMDQ5WhcNMjUxMjEyMTcwMDQ5WjAzMTEwLwYDVQQD EygwNDczMWI4MzFlYWM2NWEzMTk4ZDkxMTUzYmMxMjViNDUyNGRlNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXtjfdXBS6amlgPiCIyWtbmUX4o yrU3SgULQRRbXId+udwSkoiAhGTH4ZU2aAVzgptlRKKLpcGJZwZQqjedv5uyfNpG je8HHmbKpSGgIF5S9wEhjNk3aBGNBtlV4CyZP0k+v+1ALJCvqn4DZ/qWdIttkmzb Gk6MPpOyKAQciBeqqi2aIBQeJV6Utiu2jo/A+IgcYhI2Lf3D/AwmStA5bEmo5RJk ik3yihYo8GADxhgO/iMzkYRwR7d/rAOYxq3LgIPTg5qcDgY3ngOAlrkT6cbaTdyK Au2KTdfOVUZnSFrdUQ2f3Ajcoi4hCZpok238YG2c7fThcr5DzXVE1vgEvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARzG4MerGWjGY2RFTvBJbRSTeT1MB8GA1UdIwQY MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1 LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAON0RcyAb 8gaLLJo9cOkikub8LfI2aRJs/B9BQYdj0AuoGjdZ3IzT0FQPVPv+dCcW05xGBiJu /2792alauVYzl1V3XU/V1g4BQ9tD37isnJZP+ZOlbc68gP6ksylt7XV2YTEPhVkq 3uKneYeKbV5AXw+hp0ux2pxNataqdixNyO2Yl7Y+c/B+FTASBp05txBujKNst0WA Kw0VGLYPAZtS45cxCrRvuA8aoSMWbIeZK8yjSumoT31EGNBVYyN2stX4nbpF7FYm SIev+285UIKvelbxNO86dpH3vNMZM42Agzncqy7OY4V8ZbeEMY7oNbtMW+acW60E NOLtStCo7/UuEw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:21 2025 by rpki-client