This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json) Hash identifier: 4iM28jTvGySkQwTEKLhG+Geq/GdPvKbhDbl9AEyUZM8= Subject key identifier: 9A:B6:FE:2E:A8:3A:6D:23:54:C8:AD:B5:FA:01:8D:6C:6E:5A:B6:2F Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4 Certificate serial: 019AF7D4DE40819657E9ED342E9DC85590C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft Manifest number: 26 Signing time: Sun 07 Dec 2025 08:01:54 +0000 Manifest this update: Sun 07 Dec 2025 08:01:54 +0000 Manifest next update: Mon 08 Dec 2025 08:01:54 +0000 Files and hashes: 1: 1-p3QeTY1ZxhyRMnOfJn0ixWHq9s.asa (hash: pblQKRL+2L4/KfUMB5sc7FC0Ejb3N8yKez82SqNphag=) 2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: aKF+LXfd+/pZxas+mEmYIs8U2o1CF6gnTThnVOXo1Kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:de:40:81:96:57:e9:ed:34:2e:9d:c8:55:90:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4 Validity Not Before: Dec 7 08:01:54 2025 GMT Not After : Dec 8 08:01:54 2025 GMT Subject: CN=9ab6fe2ea83a6d2354c8adb5fa018d6c6e5ab62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:20:6a:a7:f3:43:5d:cb:cd:6b:db:fb:6e: 0e:3e:ea:7b:cf:5a:c1:17:49:3d:ee:b8:43:aa:b2: f0:a5:34:2b:14:00:fd:3c:40:4a:39:8f:fa:a8:c4: a1:95:42:a9:f8:f5:07:f6:b9:80:63:94:c7:3b:fc: ca:63:cb:08:54:77:1c:ff:85:31:c4:8d:3d:f1:44: 84:33:52:88:e2:34:a1:3c:6c:08:33:9f:cc:7b:19: 24:96:8d:cd:13:99:e5:8a:c2:54:78:82:b7:5f:12: 9e:33:52:d7:55:c2:f5:a7:24:6e:02:3b:b5:0c:4a: e8:5d:1b:de:22:99:d7:b4:a3:ca:58:2c:fa:c9:c5: f0:c0:7e:d5:48:f8:a6:d7:d7:9f:c4:a8:ff:6a:84: df:3b:a4:d6:d0:6d:c1:bc:33:1d:f7:a7:c8:21:a6: d2:d5:d1:db:ba:a0:27:10:92:18:98:7a:13:5f:78: 64:b0:ca:d5:04:91:c3:ff:21:d3:a7:e2:17:c7:f2: 4f:ad:b2:03:4e:78:67:16:68:c0:7b:9d:7f:9a:ea: 25:56:76:a4:81:35:58:33:2c:25:2d:4e:fc:fe:7e: 73:51:80:f1:8b:81:bd:73:76:5f:cf:29:02:ff:4e: 83:db:86:43:84:5b:b6:76:b9:9d:52:1e:55:81:d1: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B6:FE:2E:A8:3A:6D:23:54:C8:AD:B5:FA:01:8D:6C:6E:5A:B6:2F X509v3 Authority Key Identifier: keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4c:98:ce:2e:1e:b6:4f:5a:56:4f:64:dc:dd:3a:63:9f:50: 4c:ac:ff:1d:f8:90:53:69:7f:50:c6:d6:0b:78:88:79:91:39: 96:02:61:c5:05:ed:2a:47:cf:fb:84:50:79:00:92:c2:94:c3: 04:71:05:d6:f5:d4:c3:41:e6:2e:d2:3a:88:83:34:f9:d0:31: 02:f6:5b:96:50:06:25:c7:f8:70:20:94:8d:df:7c:37:31:73: 3f:92:ab:3e:27:b7:10:54:7a:7d:bd:b8:28:9c:37:b8:1c:f5: 90:64:08:f5:96:f3:aa:f3:cd:5d:9e:c5:59:e6:a9:b3:1b:77: cc:56:40:95:7f:5d:4a:dd:7c:0f:3d:ae:38:9b:6d:8c:5a:8c: 58:9b:8d:d5:5d:1c:3f:3e:a0:3a:c3:44:bd:d0:7e:95:a4:c1: 02:be:0e:8e:98:c0:c0:9d:cb:06:cb:b2:3b:c1:cf:8d:ff:fc: 37:14:64:09:c1:97:ce:06:2d:0d:15:89:28:3b:37:69:ec:75: 70:a8:c9:94:84:5f:ab:d0:04:cd:7d:b9:6d:c8:88:15:86:e8: 32:17:e4:5a:f3:d7:ca:c2:7e:e1:f8:84:6f:86:36:0b:da:17: fc:3b:49:03:7f:cd:40:05:3f:eb:26:9b:3d:4a:bf:a7:ce:da: ea:e5:98:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31N5AgZZX6e00Lp3IVZDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh NzVjZDQwHhcNMjUxMjA3MDgwMTU0WhcNMjUxMjA4MDgwMTU0WjAzMTEwLwYDVQQD Eyg5YWI2ZmUyZWE4M2E2ZDIzNTRjOGFkYjVmYTAxOGQ2YzZlNWFiNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXwgaqfzQ13LzWvb+24OPup7z1rB F0k97rhDqrLwpTQrFAD9PEBKOY/6qMShlUKp+PUH9rmAY5THO/zKY8sIVHcc/4Ux xI098USEM1KI4jShPGwIM5/Mexkklo3NE5nlisJUeIK3XxKeM1LXVcL1pyRuAju1 DEroXRveIpnXtKPKWCz6ycXwwH7VSPim19efxKj/aoTfO6TW0G3BvDMd96fIIabS 1dHbuqAnEJIYmHoTX3hksMrVBJHD/yHTp+IXx/JPrbIDTnhnFmjAe51/muolVnak gTVYMywlLU78/n5zUYDxi4G9c3ZfzykC/06D24ZDhFu2drmdUh5VgdFiEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq2/i6oOm0jVMittfoBjWxuWrYvMB8GA1UdIwQY MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt ZTI5MWE1MmE5ZDE1LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1 LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEyYzi4e tk9aVk9k3N06Y59QTKz/HfiQU2l/UMbWC3iIeZE5lgJhxQXtKkfP+4RQeQCSwpTD BHEF1vXUw0HmLtI6iIM0+dAxAvZbllAGJcf4cCCUjd98NzFzP5KrPie3EFR6fb24 KJw3uBz1kGQI9ZbzqvPNXZ7FWeapsxt3zFZAlX9dSt18Dz2uOJttjFqMWJuN1V0c Pz6gOsNEvdB+laTBAr4OjpjAwJ3LBsuyO8HPjf/8NxRkCcGXzgYtDRWJKDs3aex1 cKjJlIRfq9AEzX25bciIFYboMhfkWvPXysJ+4fiEb4Y2C9oX/DtJA3/NQAU/6yab PUq/p87a6uWY1A== -----END CERTIFICATE-----Generated at Sun Dec 7 17:13:42 2025 by rpki-client