This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json) Hash identifier: a5kbO71NY++uzTvZnLgRr3y0NVUrC94B6SIvzp8o/Zc= Subject key identifier: D8:C1:88:DC:DE:9E:5E:8C:16:EE:5E:A0:6A:AD:C4:77:BF:03:62:AC Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4 Certificate serial: 019B1012EE6546840A2B8C49F76BC9B13F75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 01:00:34 +0000 Manifest this update: Fri 12 Dec 2025 01:00:34 +0000 Manifest next update: Sat 13 Dec 2025 01:00:34 +0000 Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=) 2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: CD89fIhRZwG98XTRBpsiR1Qdwg3bCLfgAwB5XV9M/2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:ee:65:46:84:0a:2b:8c:49:f7:6b:c9:b1:3f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4 Validity Not Before: Dec 12 01:00:34 2025 GMT Not After : Dec 13 01:00:34 2025 GMT Subject: CN=d8c188dcde9e5e8c16ee5ea06aadc477bf0362ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:10:93:80:63:25:36:ed:63:36:15:b6:86: 40:6b:ab:e5:4a:51:09:aa:44:0f:26:21:45:f6:ab: 27:03:77:e8:ad:22:3c:f3:10:1c:53:f8:fc:6a:1c: 00:91:5e:b0:57:56:53:8c:3e:40:45:dc:2d:23:fd: 5a:07:80:27:95:4b:81:a6:ff:c3:01:5b:b7:cd:0f: 5a:73:1e:9e:85:ed:85:69:c6:b5:e4:29:71:8d:66: 68:27:ba:20:b3:73:36:03:f7:ec:a3:7f:53:47:aa: 77:3c:ad:8f:df:76:72:ac:f5:1e:77:99:07:06:5b: 48:ce:e1:86:6a:88:a9:10:94:34:1d:b2:0f:1a:84: 68:02:3f:0e:d9:73:76:22:f4:a7:fc:76:52:9e:55: 6f:62:08:e8:93:0c:75:88:90:9b:3a:55:bc:0a:d5: 57:97:e3:1c:68:8d:8f:63:3a:5c:06:15:f5:6d:9e: be:12:3f:bc:fb:53:f2:f1:00:08:06:7d:a9:4e:d2: a0:b6:48:12:0f:09:98:64:d8:c1:b0:fe:b8:3c:31: 9b:6d:32:73:2f:3b:71:3a:dc:8e:1e:45:1d:e3:95: a5:fa:1d:39:e9:25:7f:88:8f:11:f6:7d:02:19:05: 72:d4:f3:9d:1b:b6:d3:52:a9:3a:8c:2e:e6:f7:54: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:88:DC:DE:9E:5E:8C:16:EE:5E:A0:6A:AD:C4:77:BF:03:62:AC X509v3 Authority Key Identifier: keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ed:84:21:ef:35:9c:c3:1d:2b:92:ac:d3:2a:43:43:f6:3b: d4:fb:1b:59:08:e2:97:e4:69:56:55:08:b3:6d:57:54:01:97: fc:bf:48:c0:b9:62:6c:09:f8:a7:2f:79:55:aa:e2:f2:c2:8b: a1:38:5a:d3:65:ec:28:79:8e:ae:d3:86:b4:9c:e3:75:5f:eb: 40:e3:d0:41:de:d9:17:72:d4:6e:d7:f1:c6:ed:ab:45:41:f1: 99:fd:22:57:81:e1:04:49:bc:7f:06:75:eb:a7:1a:21:ef:e0: b4:d5:88:24:d5:82:b4:c2:a8:64:bf:f7:b7:0a:03:e5:ea:7d: f2:a7:50:35:3c:07:69:21:c1:5d:b7:26:73:69:61:9d:80:0f: 33:a4:20:75:ee:19:ec:3e:b5:52:fc:3e:e9:ed:5f:ce:1a:71: ff:ab:d0:7c:3f:c4:f8:d6:38:50:f3:a4:ab:21:cb:82:24:55: f9:aa:6f:e8:f9:81:fc:b4:e3:fa:f1:3c:a8:53:b6:e1:a8:77: 53:0c:f1:94:e9:a9:09:5f:c4:63:b0:6c:89:8e:1d:c6:56:6e: 56:69:de:08:0f:44:8b:98:8b:c5:48:16:d6:7d:5e:60:2f:64: 3d:a7:70:8c:c4:45:e6:99:69:34:bc:ae:f7:63:61:35:9a:a2: 25:02:e3:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEu5lRoQKK4xJ92vJsT91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTNkOWM4NTY0NDRhNzA5NmUzYTg1MDhjYWUzMDdmZGVi YzBjZDQwHhcNMjUxMjEyMDEwMDM0WhcNMjUxMjEzMDEwMDM0WjAzMTEwLwYDVQQD EyhkOGMxODhkY2RlOWU1ZThjMTZlZTVlYTA2YWFkYzQ3N2JmMDM2MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYQk4BjJTbtYzYVtoZAa6vlSlEJ qkQPJiFF9qsnA3forSI88xAcU/j8ahwAkV6wV1ZTjD5ARdwtI/1aB4AnlUuBpv/D AVu3zQ9acx6ehe2Faca15ClxjWZoJ7ogs3M2A/fso39TR6p3PK2P33ZyrPUed5kH BltIzuGGaoipEJQ0HbIPGoRoAj8O2XN2IvSn/HZSnlVvYgjokwx1iJCbOlW8CtVX l+McaI2PYzpcBhX1bZ6+Ej+8+1Py8QAIBn2pTtKgtkgSDwmYZNjBsP64PDGbbTJz LztxOtyOHkUd45Wl+h056SV/iI8R9n0CGQVy1POdG7bTUqk6jC7m91QtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjBiNzenl6MFu5eoGqtxHe/A2KsMB8GA1UdIwQY MBaAFGYT2chWREpwluOoUIyuMH/evAzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUt N2QwNWY5ODg4ZTk4LzEvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUtN2QwNWY5ODg4ZTk4 LzEvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAue2EIe81 nMMdK5Ks0ypDQ/Y71PsbWQjil+RpVlUIs21XVAGX/L9IwLlibAn4py95Vari8sKL oTha02XsKHmOrtOGtJzjdV/rQOPQQd7ZF3LUbtfxxu2rRUHxmf0iV4HhBEm8fwZ1 66caIe/gtNWIJNWCtMKoZL/3twoD5ep98qdQNTwHaSHBXbcmc2lhnYAPM6Qgde4Z 7D61Uvw+6e1fzhpx/6vQfD/E+NY4UPOkqyHLgiRV+apv6PmB/LTj+vE8qFO24ah3 UwzxlOmpCV/EY7BsiY4dxlZuVmneCA9Ei5iLxUgW1n1eYC9kPadwjMRF5plpNLyu 92NhNZqiJQLjzQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:51:51 2025 by rpki-client