This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json) Hash identifier: MrkJS9ZxMuvv38WOxtygH0FUUIcziQvvALGkdynQZ/U= Subject key identifier: 7C:33:92:F7:00:B4:85:20:C8:9B:3B:77:FA:2C:6B:BA:6F:41:4C:3B Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec Certificate serial: 019B48F0B60A957BCE0C4B0649F3172FC844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft Manifest number: 0B0D Signing time: Tue 23 Dec 2025 02:01:33 +0000 Manifest this update: Tue 23 Dec 2025 02:01:33 +0000 Manifest next update: Wed 24 Dec 2025 02:01:33 +0000 Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: vU870uQ+X8vzUmluFGnbzLk4IluhvCpFhM5Pux51Ps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:b6:0a:95:7b:ce:0c:4b:06:49:f3:17:2f:c8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec Validity Not Before: Dec 23 02:01:33 2025 GMT Not After : Dec 24 02:01:33 2025 GMT Subject: CN=7c3392f700b48520c89b3b77fa2c6bba6f414c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:be:e9:8c:97:92:61:7e:55:d2:4f:ef:20: 86:b1:4e:bc:af:8e:f4:ce:17:f3:44:0b:9c:29:87: a5:eb:67:0b:72:9b:ab:c4:fe:e2:7c:f1:d1:65:04: dd:52:84:ae:39:f3:54:ef:6f:3c:ea:36:f1:81:dd: a7:3f:65:a6:81:74:4d:cc:ef:ad:19:32:20:10:1c: 24:f9:6b:09:80:15:ef:00:47:2b:6a:f1:c5:2d:76: b7:cd:58:00:78:73:e3:f8:b4:ba:c3:b0:11:0e:01: 63:05:ce:8c:94:9e:1a:80:d5:e5:0c:6a:cb:b6:c3: db:27:84:4b:ae:e1:78:8e:ed:ee:82:6e:3a:33:db: e1:b7:c1:e5:ef:9b:37:dc:85:df:9c:43:56:f8:a8: 04:72:c6:5a:e4:e4:0c:09:f8:03:c5:82:f1:d2:76: 5c:eb:66:30:e4:3e:12:7f:48:cd:18:b5:2d:26:f0: a8:13:b5:33:83:db:5f:d2:ee:51:6e:e2:a2:f9:62: ff:08:d5:78:b0:96:03:12:3d:dc:28:a8:72:6c:31: cf:a3:cd:6e:81:2a:b4:15:52:c6:29:94:99:a7:d5: ca:a7:f3:ba:e6:35:f5:5b:b6:3d:06:97:87:47:c9: 95:bc:71:aa:d5:83:24:8c:f7:83:a7:38:a1:b8:11: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:33:92:F7:00:B4:85:20:C8:9B:3B:77:FA:2C:6B:BA:6F:41:4C:3B X509v3 Authority Key Identifier: keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:69:1f:65:cb:31:1d:4c:de:9a:bc:d8:7f:e3:71:a5:39:b7: 4f:8e:81:ab:31:6e:ef:94:10:b1:e4:32:a9:bd:7d:ca:0e:9e: 13:90:73:29:07:1b:e7:7e:b9:5c:0c:4a:05:3b:ca:1b:8d:cc: 89:42:42:dd:fd:17:af:66:3a:dc:33:cc:9b:47:a0:db:a4:09: 4f:9f:b6:b7:29:04:13:ec:c4:c2:2d:e2:5c:48:3e:5d:67:5e: 83:70:70:b2:88:11:ad:ab:6d:f6:7f:eb:38:48:f2:b5:a1:0a: 42:c8:46:da:2b:2c:78:11:c5:c6:5d:8d:41:78:db:61:e4:20: 0d:28:a3:78:89:4a:2c:6f:c5:0c:63:aa:08:aa:9c:4b:f8:e1: 92:d5:08:73:c0:8c:55:42:cf:e0:37:09:39:f6:45:af:ff:07: 55:a2:a1:84:53:16:04:2d:39:3f:6c:ef:ee:89:a8:34:44:e2: f1:5e:81:7c:60:14:c0:b5:46:4b:5f:e0:ad:92:fc:c2:4d:8f: b4:d8:29:1e:2e:32:1e:e4:47:cb:1b:ea:52:95:b9:f7:6e:74: 4e:72:02:f2:a0:a5:0b:6b:da:f8:99:ba:b9:0d:cd:35:09:da: b0:38:b9:26:50:c5:d0:0f:15:07:7a:7f:e0:5c:42:f1:24:e4: 52:e8:7a:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8LYKlXvODEsGSfMXL8hEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTA0MTFlMzljYzllNTg0MzRjMGJiOTc1NTRkNjA2M2U3 NzAyZWMwHhcNMjUxMjIzMDIwMTMzWhcNMjUxMjI0MDIwMTMzWjAzMTEwLwYDVQQD Eyg3YzMzOTJmNzAwYjQ4NTIwYzg5YjNiNzdmYTJjNmJiYTZmNDE0YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFm+6YyXkmF+VdJP7yCGsU68r470 zhfzRAucKYel62cLcpurxP7ifPHRZQTdUoSuOfNU72886jbxgd2nP2WmgXRNzO+t GTIgEBwk+WsJgBXvAEcravHFLXa3zVgAeHPj+LS6w7ARDgFjBc6MlJ4agNXlDGrL tsPbJ4RLruF4ju3ugm46M9vht8Hl75s33IXfnENW+KgEcsZa5OQMCfgDxYLx0nZc 62Yw5D4Sf0jNGLUtJvCoE7Uzg9tf0u5RbuKi+WL/CNV4sJYDEj3cKKhybDHPo81u gSq0FVLGKZSZp9XKp/O65jX1W7Y9BpeHR8mVvHGq1YMkjPeDpzihuBFRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwzkvcAtIUgyJs7d/osa7pvQUw7MB8GA1UdIwQY MBaAFM4QQR45zJ5YQ0wLuXVU1gY+dwLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMt ZDkwOGIwMDk4NjE0LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMtZDkwOGIwMDk4NjE0 LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWkfZcsx HUzemrzYf+NxpTm3T46BqzFu75QQseQyqb19yg6eE5BzKQcb5365XAxKBTvKG43M iUJC3f0Xr2Y63DPMm0eg26QJT5+2tykEE+zEwi3iXEg+XWdeg3BwsogRratt9n/r OEjytaEKQshG2isseBHFxl2NQXjbYeQgDSijeIlKLG/FDGOqCKqcS/jhktUIc8CM VULP4DcJOfZFr/8HVaKhhFMWBC05P2zv7omoNETi8V6BfGAUwLVGS1/grZL8wk2P tNgpHi4yHuRHyxvqUpW59250TnIC8qClC2va+Jm6uQ3NNQnasDi5JlDF0A8VB3p/ 4FxC8STkUuh6pQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:02:58 2025 by rpki-client