This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json) Hash identifier: xwQMQ1y7Q9flUMV6XfTQvfr8usJ4hInmoclPqcpdfxw= Subject key identifier: EC:5A:AD:73:70:F8:62:AF:7F:76:0F:62:54:26:CA:94:18:0A:AC:97 Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd Certificate serial: 019B34C4FA2B4C85189D7514A25A3A3E2718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:01:22 +0000 Manifest this update: Fri 19 Dec 2025 04:01:22 +0000 Manifest next update: Sat 20 Dec 2025 04:01:22 +0000 Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: +pm8c9gNfGaFvROVpfdJ9COGgLjo5580MJizklKQvqA=) 2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:fa:2b:4c:85:18:9d:75:14:a2:5a:3a:3e:27:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd Validity Not Before: Dec 19 04:01:22 2025 GMT Not After : Dec 20 04:01:22 2025 GMT Subject: CN=ec5aad7370f862af7f760f625426ca94180aac97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8d:90:ac:d5:75:34:5e:6d:d5:f1:12:e6:96: fd:fe:10:23:0b:e6:9b:b8:6e:1e:f7:c8:e7:bb:e3: 83:44:44:de:0c:2f:78:cf:bb:8c:3b:5c:32:82:00: ad:8a:52:4f:9b:59:5f:e2:d6:0a:df:38:6c:dd:1e: 8b:7f:20:56:e7:61:7a:ac:e4:f3:91:d9:99:98:1c: 6b:48:27:d3:ef:ca:fb:e9:9d:7f:1e:f6:ff:14:2e: e2:fb:4b:41:90:51:fd:31:44:d0:f0:9b:c0:54:7f: a6:46:cc:d4:8c:7b:82:0b:53:bb:2e:12:5b:f5:32: e2:13:7c:dc:ff:cc:b2:b1:53:9a:13:b6:a0:c2:d3: 6c:59:ab:23:4b:4e:de:45:5d:71:3b:a8:b3:00:8b: b3:dd:53:fb:9b:a4:44:ac:13:e3:32:d8:de:d8:90: 3d:31:28:e8:73:8b:88:22:a8:b4:4e:c2:93:ef:98: b5:50:95:4e:f2:43:08:4e:67:f4:27:3b:3b:0b:48: 7e:06:71:a8:79:47:c6:be:70:9a:dc:8c:33:61:6c: d7:c5:13:a2:45:b3:e1:e4:e8:4c:0b:dc:26:59:50: d2:f0:62:dc:31:9d:23:8a:2a:da:32:4b:95:d5:13: 30:ad:9b:33:ac:67:ca:a0:16:75:c9:a2:bf:19:91: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5A:AD:73:70:F8:62:AF:7F:76:0F:62:54:26:CA:94:18:0A:AC:97 X509v3 Authority Key Identifier: keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:26:70:44:02:0a:3a:2f:79:97:54:05:9c:1d:36:5b:a6:7d: 5e:0d:41:3c:68:17:ee:47:6b:c5:f9:9b:46:56:1c:8f:15:2b: e2:ed:7f:53:0c:03:f1:6f:ef:60:42:79:69:86:f3:73:0e:e4: d0:ea:08:aa:86:e2:30:a0:77:ce:d6:05:db:7b:8a:69:19:4d: f8:ca:59:83:3b:c3:a4:ab:7f:bb:51:5c:9f:76:3f:8b:a9:50: 09:e4:fb:b1:57:fc:b1:16:78:9e:e2:f4:d0:f3:af:77:67:4a: 8b:f6:ba:ac:b4:3e:87:fe:e8:0b:28:d7:65:02:6d:f5:fb:bd: da:2e:38:94:1f:76:1d:32:5f:38:f3:8b:42:65:4f:68:ce:08: 8e:c8:9e:80:22:eb:1b:28:e9:ab:ac:a5:6c:0f:cf:84:1a:b6: 4b:66:a1:74:20:5e:b2:1b:97:04:e8:3e:2c:5f:08:c5:4a:3d: 6b:ae:fd:5b:a8:c4:e8:0a:f3:71:61:f7:d7:ff:4c:d7:94:52: 99:8d:39:5f:12:9f:9c:ba:19:d4:8b:21:6d:db:ce:49:07:96: bd:f6:16:7a:e8:a8:d2:e5:c2:e0:05:95:4b:c9:91:e3:3e:b4: d8:74:db:1b:db:01:70:f6:99:b1:ef:84:53:84:ea:07:6e:0f: 01:ce:a1:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xPorTIUYnXUUolo6PicYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzUzZDIwYjk4YTBlZTc3MGMzYjUxNjZhM2Y0YTA3ZjA1 MTViZGQwHhcNMjUxMjE5MDQwMTIyWhcNMjUxMjIwMDQwMTIyWjAzMTEwLwYDVQQD EyhlYzVhYWQ3MzcwZjg2MmFmN2Y3NjBmNjI1NDI2Y2E5NDE4MGFhYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I2QrNV1NF5t1fES5pb9/hAjC+ab uG4e98jnu+ODRETeDC94z7uMO1wyggCtilJPm1lf4tYK3zhs3R6LfyBW52F6rOTz kdmZmBxrSCfT78r76Z1/Hvb/FC7i+0tBkFH9MUTQ8JvAVH+mRszUjHuCC1O7LhJb 9TLiE3zc/8yysVOaE7agwtNsWasjS07eRV1xO6izAIuz3VP7m6RErBPjMtje2JA9 MSjoc4uIIqi0TsKT75i1UJVO8kMITmf0Jzs7C0h+BnGoeUfGvnCa3IwzYWzXxROi RbPh5OhMC9wmWVDS8GLcMZ0jiiraMkuV1RMwrZszrGfKoBZ1yaK/GZERsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxarXNw+GKvf3YPYlQmypQYCqyXMB8GA1UdIwQY MBaAFGR1PSC5ig7ncMO1Fmo/SgfwUVvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1Yjgt YWE5OTU5MDJiODRiLzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1YjgtYWE5OTU5MDJiODRi LzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyZwRAIK Oi95l1QFnB02W6Z9Xg1BPGgX7kdrxfmbRlYcjxUr4u1/UwwD8W/vYEJ5aYbzcw7k 0OoIqobiMKB3ztYF23uKaRlN+MpZgzvDpKt/u1Fcn3Y/i6lQCeT7sVf8sRZ4nuL0 0POvd2dKi/a6rLQ+h/7oCyjXZQJt9fu92i44lB92HTJfOPOLQmVPaM4IjsiegCLr Gyjpq6ylbA/PhBq2S2ahdCBeshuXBOg+LF8IxUo9a679W6jE6ArzcWH31/9M15RS mY05XxKfnLoZ1IshbdvOSQeWvfYWeuio0uXC4AWVS8mR4z602HTbG9sBcPaZse+E U4TqB24PAc6h2w== -----END CERTIFICATE-----Generated at Fri Dec 19 08:14:09 2025 by rpki-client