This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json) Hash identifier: QvQZ17LhT/UmEKsfF6QYd83KsrJLyuTnTmZB3/TUt2Q= Subject key identifier: 5C:4F:94:40:D3:82:02:E6:FF:2E:70:6E:0D:DF:3C:35:89:2B:BB:ED Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c Certificate serial: 019B2EFA37ACABEF00E4070A5254A00071A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:01:48 +0000 Manifest this update: Thu 18 Dec 2025 01:01:48 +0000 Manifest next update: Fri 19 Dec 2025 01:01:48 +0000 Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=) 2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: Sxj+Y5MKy5YoQXFb9BP/5GOzHkbS/scIocjJJ0Jd6Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:37:ac:ab:ef:00:e4:07:0a:52:54:a0:00:71:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c Validity Not Before: Dec 18 01:01:48 2025 GMT Not After : Dec 19 01:01:48 2025 GMT Subject: CN=5c4f9440d38202e6ff2e706e0ddf3c35892bbbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:43:12:23:3c:11:6b:d3:6c:69:00:dc:4d: d3:73:b6:b0:5c:c5:18:bc:ba:b6:f3:82:6e:08:98: b3:ea:3c:a9:ee:e4:05:4d:d1:38:64:a7:f2:c8:b0: 78:2d:4a:e1:76:0e:35:92:75:0d:82:a6:50:64:58: c2:6d:79:d7:f6:eb:4c:de:5c:34:f0:65:d5:64:e3: 4c:b2:ca:87:ce:ac:d8:5c:f4:b6:1a:77:52:16:de: a1:ab:4d:d9:5d:c3:55:d3:99:dd:c2:52:9d:66:47: e9:b4:7b:07:f6:61:63:21:ba:0e:b2:d6:03:8a:71: 23:ef:78:6c:4f:e7:63:07:13:bc:fe:54:dc:f6:37: 0e:ca:77:60:32:65:b5:ff:a3:a5:99:7f:ac:9b:cb: 27:fe:18:95:1e:1a:7b:21:fa:c0:c7:96:dc:ae:1a: 6f:ce:9d:2d:d0:23:c6:74:b7:c2:ad:d6:33:c8:f3: e9:1c:ad:63:df:49:41:32:75:5e:5c:01:e8:ec:38: b5:6b:d3:be:a8:c4:8f:3b:1d:03:fe:89:d3:7e:d1: a7:80:6e:63:4d:cf:82:f2:d8:43:03:14:3c:14:f8: 67:c3:b3:04:c9:5c:3f:b0:dc:bd:52:60:0a:50:ea: 1e:5e:07:16:ee:5a:75:33:04:68:f1:64:80:0f:ca: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4F:94:40:D3:82:02:E6:FF:2E:70:6E:0D:DF:3C:35:89:2B:BB:ED X509v3 Authority Key Identifier: keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6e:7c:85:4c:da:d3:ab:cc:43:70:50:19:39:5b:71:28:46: 1b:e0:ff:6b:00:7d:a1:bf:0b:3c:41:5a:f7:f1:25:f3:3e:b0: 9c:b0:e2:22:be:ab:6c:38:e8:3c:57:a1:09:98:63:44:7e:96: d3:4a:01:13:15:be:64:26:c1:d7:15:48:9e:4c:8b:4b:26:15: 72:c3:60:7a:9e:93:c0:76:de:d2:9c:e2:2f:5b:7c:a3:ba:b8: 7c:f9:52:81:5c:0b:6c:b2:d6:ca:49:fa:5c:b0:61:7a:3e:0e: 59:b8:42:58:c9:ad:6b:22:f1:02:61:83:3c:f5:01:13:92:e2: cd:57:46:ed:52:74:ca:2b:1a:f7:f4:91:a9:b3:9a:35:91:af: 5f:46:fa:97:63:21:9b:42:40:be:ad:58:f2:55:49:cb:80:ca: 1e:f7:31:01:cd:44:5f:85:5e:d5:b4:6c:2c:84:d0:c6:e1:39: bf:4c:4e:fd:1e:dc:a0:76:85:93:cb:0e:2c:77:f9:02:9b:62: e5:98:f3:61:a4:46:07:ba:0e:f9:67:5b:a9:38:0e:d6:75:36: 07:2e:e5:8b:15:33:34:e6:fc:98:08:54:12:e3:88:86:a2:e9: 8b:2e:85:32:14:7b:ff:2a:b6:5c:1c:1a:2d:5c:fc:62:fc:f8: 64:28:83:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+jesq+8A5AcKUlSgAHGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk YzA4OWMwHhcNMjUxMjE4MDEwMTQ4WhcNMjUxMjE5MDEwMTQ4WjAzMTEwLwYDVQQD Eyg1YzRmOTQ0MGQzODIwMmU2ZmYyZTcwNmUwZGRmM2MzNTg5MmJiYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2itDEiM8EWvTbGkA3E3Tc7awXMUY vLq284JuCJiz6jyp7uQFTdE4ZKfyyLB4LUrhdg41knUNgqZQZFjCbXnX9utM3lw0 8GXVZONMssqHzqzYXPS2GndSFt6hq03ZXcNV05ndwlKdZkfptHsH9mFjIboOstYD inEj73hsT+djBxO8/lTc9jcOyndgMmW1/6OlmX+sm8sn/hiVHhp7IfrAx5bcrhpv zp0t0CPGdLfCrdYzyPPpHK1j30lBMnVeXAHo7Di1a9O+qMSPOx0D/onTftGngG5j Tc+C8thDAxQ8FPhnw7MEyVw/sNy9UmAKUOoeXgcW7lp1MwRo8WSAD8rJhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxPlEDTggLm/y5wbg3fPDWJK7vtMB8GA1UdIwQY MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZm58hUza 06vMQ3BQGTlbcShGG+D/awB9ob8LPEFa9/El8z6wnLDiIr6rbDjoPFehCZhjRH6W 00oBExW+ZCbB1xVInkyLSyYVcsNgep6TwHbe0pziL1t8o7q4fPlSgVwLbLLWykn6 XLBhej4OWbhCWMmtayLxAmGDPPUBE5LizVdG7VJ0yisa9/SRqbOaNZGvX0b6l2Mh m0JAvq1Y8lVJy4DKHvcxAc1EX4Ve1bRsLITQxuE5v0xO/R7coHaFk8sOLHf5Apti 5ZjzYaRGB7oO+WdbqTgO1nU2By7lixUzNOb8mAhUEuOIhqLpiy6FMhR7/yq2XBwa LVz8Yvz4ZCiDYw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:19 2025 by rpki-client