This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft File: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft (raw, json) Hash identifier: zbeFp7j3c276RXXGO8fPhxvzi1Z+wwFaSYhho0FyRtA= Subject key identifier: F3:5E:51:7A:53:63:F5:7D:0B:BB:58:4F:6A:9C:12:38:A2:C1:27:5C Authority key identifier: 66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91 Certificate issuer: /CN=66c3070a745b2c167e101a161d2648a1bc977991 Certificate serial: 019B5A884A264E82F3F7DCCD6180ED7B59D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft Manifest number: ED Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl (hash: pnEI9W059kLdZwkIzUMK3TKmqX7MyOrDVKXt8idLe3U=) 2: l9bBsFfC3zzSetiD5kEe28rBj1w.roa (hash: afp7psmljpdsoVJb9q1FK7ToTJSaIK0ZgxojY+T/ZMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:4a:26:4e:82:f3:f7:dc:cd:61:80:ed:7b:59:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66c3070a745b2c167e101a161d2648a1bc977991 Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=f35e517a5363f57d0bbb584f6a9c1238a2c1275c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:fa:0b:63:0d:61:e5:ab:bb:34:05:08:79: ae:4d:ff:48:ec:cd:cf:f9:f6:ca:ab:df:58:fe:3f: 74:1a:05:68:fb:56:cb:c4:09:e1:08:df:36:b7:f5: 29:6f:a6:2f:31:e3:69:68:33:17:72:a9:e2:33:98: 22:44:7d:9e:a9:06:fd:75:22:8f:a7:0d:28:29:84: b2:39:5d:49:c7:4d:d4:1c:be:75:36:89:0d:94:dc: 45:7d:22:eb:6d:dd:f9:c4:0c:1d:5c:d3:df:4c:4d: e2:3c:1f:7e:47:50:84:c8:5e:05:c8:fe:c2:50:b2: a5:28:25:be:8b:5b:6f:3e:a6:b4:a9:b9:03:bd:37: a2:cf:e1:82:9f:d8:0f:c1:00:e6:d0:32:ca:fb:73: fa:fa:3f:24:1b:9b:e5:fd:87:95:87:f4:f6:60:30: 1e:8a:88:38:32:ab:6d:f5:29:63:da:e9:ec:83:b8: c5:82:a2:cf:07:d6:c4:a0:82:cd:e4:52:da:fd:99: 33:38:b3:fc:56:6f:51:d7:1c:5a:e2:60:82:19:55: 30:db:13:fe:30:c0:22:d5:13:9a:48:3a:bf:5c:09: d2:b6:7f:39:48:57:d7:86:82:18:83:38:22:c6:c8: 22:c6:a9:aa:73:b9:05:5b:67:84:d4:a1:89:6d:4c: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:51:7A:53:63:F5:7D:0B:BB:58:4F:6A:9C:12:38:A2:C1:27:5C X509v3 Authority Key Identifier: keyid:66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:cf:c4:8e:60:d1:9e:d2:32:b0:25:b7:9e:77:2e:03:24:6b: c8:d4:ce:66:42:1e:0a:a2:eb:e0:34:39:fe:7e:ba:60:38:3e: b8:fb:a1:76:21:77:2d:a6:9d:8b:c0:67:19:bc:d6:be:dc:ea: b7:22:cd:65:10:4c:c5:aa:d8:0a:49:25:07:3b:90:f2:89:3c: 27:5b:0d:80:39:5f:56:e1:d2:32:4b:0b:0a:46:7a:5f:c9:d3: fb:b4:87:82:3f:64:b4:e7:a7:11:48:a6:3c:4c:e6:20:52:df: 54:b5:b7:e0:9c:eb:87:cf:dd:65:cb:fc:57:5d:ef:13:47:7b: a9:fb:0a:81:9f:c1:5a:10:87:00:44:3e:1b:a0:a5:46:5e:f9: 65:38:3c:15:2e:81:eb:52:77:c3:d8:2b:d1:0e:fe:9d:9d:2a: a7:ff:3a:df:d6:8f:30:4e:8c:f0:3a:d0:33:6c:1a:4b:f4:74: d5:a9:a8:a6:6e:48:a4:8f:b2:58:1a:8c:a7:ed:77:45:4d:17: 67:9e:d2:ac:90:63:24:31:05:7a:95:c7:d6:00:a3:6c:e9:cd: 75:41:89:f0:08:42:7b:8f:01:a4:b1:f2:45:54:eb:a8:ac:ea: f3:dd:b8:80:91:68:d6:62:31:53:d7:bb:7d:a7:e5:ec:a6:10: 4c:bc:d1:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEomToLz99zNYYDte1nTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YzMwNzBhNzQ1YjJjMTY3ZTEwMWExNjFkMjY0OGExYmM5 Nzc5OTEwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD EyhmMzVlNTE3YTUzNjNmNTdkMGJiYjU4NGY2YTljMTIzOGEyYzEyNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC36C2MNYeWruzQFCHmuTf9I7M3P +fbKq99Y/j90GgVo+1bLxAnhCN82t/Upb6YvMeNpaDMXcqniM5giRH2eqQb9dSKP pw0oKYSyOV1Jx03UHL51NokNlNxFfSLrbd35xAwdXNPfTE3iPB9+R1CEyF4FyP7C ULKlKCW+i1tvPqa0qbkDvTeiz+GCn9gPwQDm0DLK+3P6+j8kG5vl/YeVh/T2YDAe iog4Mqtt9Slj2unsg7jFgqLPB9bEoILN5FLa/ZkzOLP8Vm9R1xxa4mCCGVUw2xP+ MMAi1ROaSDq/XAnStn85SFfXhoIYgzgixsgixqmqc7kFW2eE1KGJbUxA+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNeUXpTY/V9C7tYT2qcEjiiwSdcMB8GA1UdIwQY MBaAFGbDBwp0WywWfhAaFh0mSKG8l3mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82NjMzMzEtMzFkYy00ZGRmLTg0ZTAt NWY5MGEyZjkwZDAzLzEvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82NjMzMzEtMzFkYy00ZGRmLTg0ZTAtNWY5MGEyZjkwZDAz LzEvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8/EjmDR ntIysCW3nncuAyRryNTOZkIeCqLr4DQ5/n66YDg+uPuhdiF3Laadi8BnGbzWvtzq tyLNZRBMxarYCkklBzuQ8ok8J1sNgDlfVuHSMksLCkZ6X8nT+7SHgj9ktOenEUim PEzmIFLfVLW34Jzrh8/dZcv8V13vE0d7qfsKgZ/BWhCHAEQ+G6ClRl75ZTg8FS6B 61J3w9gr0Q7+nZ0qp/8639aPME6M8DrQM2waS/R01amopm5IpI+yWBqMp+13RU0X Z57SrJBjJDEFepXH1gCjbOnNdUGJ8AhCe48BpLHyRVTrqKzq8924gJFo1mIxU9e7 fafl7KYQTLzR3A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:24 2025 by rpki-client