This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json) Hash identifier: czs5gE/Rj3nTS2kd2atWjGil6Qyo/wyxR6R2UCi2YMo= Subject key identifier: DE:1D:8F:5D:DC:6F:B2:21:F7:3C:56:73:41:ED:27:B0:48:83:1B:AC Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Certificate serial: 019B232BE81CA741C095490D1957BB46B7D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft Manifest number: 0160 Signing time: Mon 15 Dec 2025 18:00:38 +0000 Manifest this update: Mon 15 Dec 2025 18:00:38 +0000 Manifest next update: Tue 16 Dec 2025 18:00:38 +0000 Files and hashes: 1: oQ5fumIcVB85Uy2dYh229j_WaHg.roa (hash: vl4buX4gY0bD8VM1N3aDm+YQLtmBqcCMCCyk6V68GNc=) 2: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: 8OPpRUTeVf8Kb2W/Gt7yQ+JxfF6xl36J6u8Holn00GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:2b:e8:1c:a7:41:c0:95:49:0d:19:57:bb:46:b7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Validity Not Before: Dec 15 18:00:38 2025 GMT Not After : Dec 16 18:00:38 2025 GMT Subject: CN=de1d8f5ddc6fb221f73c567341ed27b048831bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:9d:cc:6a:d5:c4:1c:39:20:d5:67:e2:be: 95:ae:96:c7:b8:44:97:a9:a0:af:aa:03:8a:5d:dc: 9a:74:b8:0b:ad:ca:87:de:22:f0:51:bb:17:8f:7a: bb:1c:97:ce:f8:47:00:bd:61:51:81:55:11:13:4a: 1d:ab:62:13:66:39:f2:2b:c7:7b:cb:01:88:eb:2d: 2b:df:d0:4a:c0:fb:f9:68:13:4b:3a:a0:1f:2e:5d: 0d:cf:39:8e:37:49:db:59:ee:40:8f:38:e0:44:d0: a6:7b:e6:ae:ca:e3:ad:af:2a:2f:c7:b1:50:f7:b3: 2d:99:77:0a:13:e2:6a:ba:4a:c4:41:94:55:55:d7: 9e:ec:c3:4d:33:e6:a8:40:55:cd:a8:43:95:e8:6f: 3d:16:59:ca:bb:97:76:1e:ee:b9:5e:52:25:63:d6: bb:b1:aa:57:2d:f4:c3:c4:e0:fb:9d:b5:63:6e:e7: e0:ba:c5:43:54:ed:07:e7:e3:ee:f1:82:3c:76:a6: 20:e7:ee:55:76:97:47:19:4e:f0:bf:4d:ef:d1:92: fa:b8:bc:e8:9a:62:89:84:94:54:77:69:3b:c4:5f: 8f:c1:8c:33:49:96:21:8b:23:c1:75:f0:ac:f2:1b: 73:a8:a5:c6:be:83:ed:e3:2e:43:8d:f8:84:5e:cb: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:8F:5D:DC:6F:B2:21:F7:3C:56:73:41:ED:27:B0:48:83:1B:AC X509v3 Authority Key Identifier: keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:78:68:67:62:72:fa:3c:f9:76:9b:96:81:92:76:22:31:65: b1:75:55:59:bc:5a:85:e6:01:af:b2:b1:8c:51:58:78:8d:0a: 67:e7:b1:a4:d1:25:ef:11:54:28:34:d6:a7:33:95:c4:1b:5f: 64:ea:ed:f9:20:89:26:75:2e:cd:d2:e6:aa:c5:87:79:48:67: eb:5d:ec:69:f2:8e:f4:b5:82:9e:f0:0d:e5:02:0f:e6:76:b1: d2:37:83:5a:46:c4:b6:fa:15:74:79:9d:ad:4d:a8:0c:99:4a: d8:4b:18:d9:c5:d8:cb:78:2e:61:a9:cb:bd:0c:f2:fa:37:83: 85:aa:2f:2d:65:c6:e9:1a:0c:3d:75:9c:20:01:b7:25:99:d6: 92:73:c9:ed:fc:9e:97:45:38:0a:97:eb:b5:45:3b:3b:d0:ca: b6:b6:e4:e3:49:8f:1b:89:3a:ff:7d:5d:a5:9c:1b:f7:da:14: 79:35:15:46:9a:91:40:4f:4c:ea:ff:45:d5:9d:22:e1:d1:b0: 9e:4d:2e:6b:81:e5:21:4b:e1:4e:a5:d9:b0:b4:20:94:a7:fe: 81:e2:5f:cf:d6:f4:af:16:8e:65:be:e5:75:61:58:90:94:93: 43:95:b1:91:c8:e9:47:7f:c6:2d:8e:95:dd:31:99:09:b8:ed: 63:84:a5:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjK+gcp0HAlUkNGVe7RrfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTY2MmIyZTk3ZmQyYmRhOTFmMzJiMmNjZTllNzQ1Y2Jh NTg2MDIwHhcNMjUxMjE1MTgwMDM4WhcNMjUxMjE2MTgwMDM4WjAzMTEwLwYDVQQD EyhkZTFkOGY1ZGRjNmZiMjIxZjczYzU2NzM0MWVkMjdiMDQ4ODMxYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMSdzGrVxBw5INVn4r6VrpbHuESX qaCvqgOKXdyadLgLrcqH3iLwUbsXj3q7HJfO+EcAvWFRgVURE0odq2ITZjnyK8d7 ywGI6y0r39BKwPv5aBNLOqAfLl0NzzmON0nbWe5AjzjgRNCme+auyuOtryovx7FQ 97MtmXcKE+JqukrEQZRVVdee7MNNM+aoQFXNqEOV6G89FlnKu5d2Hu65XlIlY9a7 sapXLfTDxOD7nbVjbufgusVDVO0H5+Pu8YI8dqYg5+5VdpdHGU7wv03v0ZL6uLzo mmKJhJRUd2k7xF+PwYwzSZYhiyPBdfCs8htzqKXGvoPt4y5DjfiEXsukewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4dj13cb7Ih9zxWc0HtJ7BIgxusMB8GA1UdIwQY MBaAFK/mYrLpf9K9qR8ysszp50XLpYYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjkt MzRkMGMwZTRjMTEzLzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjktMzRkMGMwZTRjMTEz LzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXhoZ2Jy +jz5dpuWgZJ2IjFlsXVVWbxaheYBr7KxjFFYeI0KZ+expNEl7xFUKDTWpzOVxBtf ZOrt+SCJJnUuzdLmqsWHeUhn613safKO9LWCnvAN5QIP5nax0jeDWkbEtvoVdHmd rU2oDJlK2EsY2cXYy3guYanLvQzy+jeDhaovLWXG6RoMPXWcIAG3JZnWknPJ7fye l0U4CpfrtUU7O9DKtrbk40mPG4k6/31dpZwb99oUeTUVRpqRQE9M6v9F1Z0i4dGw nk0ua4HlIUvhTqXZsLQglKf+geJfz9b0rxaOZb7ldWFYkJSTQ5WxkcjpR3/GLY6V 3TGZCbjtY4SlrA== -----END CERTIFICATE-----Generated at Tue Dec 16 01:10:19 2025 by rpki-client