This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json) Hash identifier: /CttWl7qOcli9J/fZTXGJCn92F0Qxvc/gqBntak01Wg= Subject key identifier: 6C:C2:F6:8D:3D:17:E6:82:6C:BD:AC:F2:31:D6:4A:5C:A8:27:CC:9A Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5 Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5 Certificate serial: 019B0FA5969E53AD6BAE50DBF37985FE6B74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft Manifest number: 06AC Signing time: Thu 11 Dec 2025 23:01:08 +0000 Manifest this update: Thu 11 Dec 2025 23:01:08 +0000 Manifest next update: Fri 12 Dec 2025 23:01:08 +0000 Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: EMV86xPMfKDFvbjrwLb8HDaQoRsyTsryPze8SgDijDo=) 2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:96:9e:53:ad:6b:ae:50:db:f3:79:85:fe:6b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66689087e787990916878db20d555684c22cd9d5 Validity Not Before: Dec 11 23:01:08 2025 GMT Not After : Dec 12 23:01:08 2025 GMT Subject: CN=6cc2f68d3d17e6826cbdacf231d64a5ca827cc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:2a:9d:87:6c:10:f7:d5:a9:6e:99:4c:ab: f0:5c:77:42:65:9c:ab:3d:8b:f9:da:07:a2:37:71: fe:5d:29:ed:4c:ca:83:46:b0:90:84:7e:cc:95:61: 49:1b:e8:f8:aa:43:10:f9:40:9c:98:2a:98:ae:62: 42:23:a2:e5:68:5b:9e:c8:c8:e1:3b:61:ff:95:55: 22:41:66:1d:80:60:4b:8f:3a:15:b8:a8:22:19:2d: 8d:04:72:f3:52:66:bf:07:53:bb:d3:ad:f3:81:9e: 7d:99:8e:bb:56:80:3f:2e:c7:f7:45:de:37:1e:21: 91:da:92:4a:ca:35:4b:a1:ce:e3:a8:69:fe:f0:2c: c1:04:ca:02:27:b8:08:0b:10:ba:3b:32:78:51:f4: cf:7c:db:e3:cf:fd:63:a1:82:d8:a1:c6:49:38:d1: 78:0b:60:5d:e6:78:fa:e2:8d:62:38:2a:b2:21:8c: 4d:a0:f7:81:af:9c:f7:b7:b1:ac:b5:18:00:80:35: 4e:33:f8:ff:00:7a:4f:e0:94:27:95:de:f5:fb:97: 7f:98:5a:57:ff:19:90:c4:04:92:15:f5:90:7a:fc: 42:9d:d8:8b:1a:f4:a6:0e:37:8f:ac:05:5b:17:a9: 19:40:b5:bd:19:a5:fc:74:7e:00:10:f3:1b:6b:bd: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:F6:8D:3D:17:E6:82:6C:BD:AC:F2:31:D6:4A:5C:A8:27:CC:9A X509v3 Authority Key Identifier: keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b0:22:44:75:28:5d:bf:c0:ba:e5:0d:b5:3c:0e:a3:b3:a0: b6:8d:27:d7:29:1d:54:0d:a6:74:4a:8f:ad:5c:1e:f9:23:b1: 42:8b:ee:5d:cf:75:3d:ca:40:d3:54:59:27:22:08:66:d8:8b: fd:1a:6c:4e:dd:54:5c:2d:d7:cd:6c:a9:93:fb:be:45:4a:d0: 95:b4:2b:a2:96:ca:4e:d2:c7:c6:e9:01:71:74:1e:23:f9:56: e3:1d:e5:7d:5f:e7:42:c7:ef:67:8e:00:b8:30:79:79:aa:5e: 74:70:16:ea:46:85:e5:d2:bf:78:3f:86:1b:8c:83:09:d1:da: ce:6e:e4:c8:88:47:49:be:f5:e0:80:49:1a:9c:06:8b:ed:5d: 64:4d:c3:b5:f3:a4:d2:2e:82:e7:fc:fe:3f:31:90:ea:7d:2a: a9:4d:56:d4:53:3b:69:0b:1f:e5:35:bd:cf:54:46:a2:63:53: 57:ef:5d:47:7a:d5:32:4d:1f:0b:de:4f:f9:03:bf:31:ae:a9: 31:8a:3f:fe:96:96:30:c0:cf:c5:9d:e5:65:15:42:82:11:13: 71:87:2e:5b:95:5b:79:7f:32:f7:2b:a8:ed:71:9c:df:da:db: a5:05:d1:87:eb:0d:17:22:08:38:38:6e:60:25:73:1f:25:32: be:fe:cc:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpZaeU61rrlDb83mF/mt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Njg5MDg3ZTc4Nzk5MDkxNjg3OGRiMjBkNTU1Njg0YzIy Y2Q5ZDUwHhcNMjUxMjExMjMwMTA4WhcNMjUxMjEyMjMwMTA4WjAzMTEwLwYDVQQD Eyg2Y2MyZjY4ZDNkMTdlNjgyNmNiZGFjZjIzMWQ2NGE1Y2E4MjdjYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUsqnYdsEPfVqW6ZTKvwXHdCZZyr PYv52geiN3H+XSntTMqDRrCQhH7MlWFJG+j4qkMQ+UCcmCqYrmJCI6LlaFueyMjh O2H/lVUiQWYdgGBLjzoVuKgiGS2NBHLzUma/B1O7063zgZ59mY67VoA/Lsf3Rd43 HiGR2pJKyjVLoc7jqGn+8CzBBMoCJ7gICxC6OzJ4UfTPfNvjz/1joYLYocZJONF4 C2Bd5nj64o1iOCqyIYxNoPeBr5z3t7GstRgAgDVOM/j/AHpP4JQnld71+5d/mFpX /xmQxASSFfWQevxCndiLGvSmDjePrAVbF6kZQLW9GaX8dH4AEPMba71YSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzC9o09F+aCbL2s8jHWSlyoJ8yaMB8GA1UdIwQY MBaAFGZokIfnh5kJFoeNsg1VVoTCLNnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMt MWU3YzE3NzI4YjUwLzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMtMWU3YzE3NzI4YjUw LzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7AiRHUo Xb/AuuUNtTwOo7Ogto0n1ykdVA2mdEqPrVwe+SOxQovuXc91PcpA01RZJyIIZtiL /RpsTt1UXC3XzWypk/u+RUrQlbQropbKTtLHxukBcXQeI/lW4x3lfV/nQsfvZ44A uDB5eapedHAW6kaF5dK/eD+GG4yDCdHazm7kyIhHSb714IBJGpwGi+1dZE3DtfOk 0i6C5/z+PzGQ6n0qqU1W1FM7aQsf5TW9z1RGomNTV+9dR3rVMk0fC95P+QO/Ma6p MYo//paWMMDPxZ3lZRVCghETcYcuW5VbeX8y9yuo7XGc39rbpQXRh+sNFyIIODhu YCVzHyUyvv7MMA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:03 2025 by rpki-client