This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft File: Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json) Hash identifier: bdVrNDSyefeIXkuPgzUxT4dG1lP29ETBBtdAAHR70aI= Subject key identifier: 6B:9B:47:C4:81:A8:66:D8:94:46:A9:9A:AC:7B:DD:11:AB:77:8B:E9 Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79 Certificate issuer: /CN=6616a8ebb011119b2f695327fb16e51f88704479 Certificate serial: 019B48B8F8E289D4D305D5BD11D7EAB8FFD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft Manifest number: 024A Signing time: Tue 23 Dec 2025 01:00:40 +0000 Manifest this update: Tue 23 Dec 2025 01:00:40 +0000 Manifest next update: Wed 24 Dec 2025 01:00:40 +0000 Files and hashes: 1: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: OpGZjl3RN8yFAl3A5YexbkqWAgQP6ObfSyXq/iJHjfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:f8:e2:89:d4:d3:05:d5:bd:11:d7:ea:b8:ff:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479 Validity Not Before: Dec 23 01:00:40 2025 GMT Not After : Dec 24 01:00:40 2025 GMT Subject: CN=6b9b47c481a866d89446a99aac7bdd11ab778be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:fa:7b:ba:4b:48:2b:8c:a8:aa:21:4d:4a: 60:09:a8:5d:be:92:b9:16:f0:5a:0f:46:c3:0b:49: 51:aa:90:20:3a:98:b3:2e:21:b8:c4:c9:a7:09:bb: d5:a9:dc:7b:c6:8d:e7:c8:e9:8f:e4:50:60:00:b4: fd:8c:36:f2:61:5f:08:46:d8:2d:0b:cf:9f:44:3f: 08:17:17:cd:ff:41:c9:dc:5b:d2:36:c3:ed:ef:48: 5f:9d:61:da:cb:d3:7c:e9:00:33:a9:58:e0:bd:d8: 6b:2d:1a:28:43:06:3b:34:bf:7b:1c:72:cf:55:4d: 0a:b9:48:60:2f:5c:3a:73:9e:66:0d:26:46:d3:11: ad:ae:30:e2:1a:d2:11:b5:d9:60:e3:3e:46:c3:0f: 11:97:82:f7:35:39:9f:76:8c:4a:a2:e9:05:97:5c: c5:a5:10:49:03:13:50:50:40:fe:f8:ad:9a:00:58: 46:13:5c:d9:7c:83:7c:2d:26:33:d0:07:18:92:ec: 59:c2:da:6a:1c:a3:d2:87:cf:77:85:57:d9:83:26: b2:97:7c:06:a9:37:92:6f:26:a5:8d:d9:a5:4c:1f: c4:c8:f0:59:d6:21:3e:66:06:59:9c:e5:6b:20:39: 04:b2:d8:7c:a2:ae:34:87:a8:22:2b:76:8d:51:b0: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9B:47:C4:81:A8:66:D8:94:46:A9:9A:AC:7B:DD:11:AB:77:8B:E9 X509v3 Authority Key Identifier: keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1d:ff:c1:12:84:bc:23:bf:c8:43:f1:e3:f8:1b:7c:62:8d: 97:a5:f1:f8:fc:25:d4:8f:95:66:b2:55:4b:ff:75:7b:21:c1: d3:fa:62:c5:2f:1e:44:30:61:35:ab:db:00:60:e4:80:ff:c4: f6:e6:4c:6d:58:7a:1b:36:f3:7c:13:f3:9d:b0:b3:6f:c9:9d: 13:83:62:04:9a:75:3a:ed:34:1f:e2:d8:80:5c:a5:a8:79:0d: 8c:14:97:a5:87:8e:9e:2c:8a:61:31:d0:29:de:72:0e:00:0b: 8f:8d:ef:30:5d:df:fd:00:d7:d0:79:6b:1d:7a:92:e6:a3:7f: 7f:d9:e4:57:8b:8d:df:7f:15:d1:f9:19:dc:d8:6b:fc:6d:b5: 97:23:88:3e:37:d1:78:6f:8c:82:99:f4:fe:33:ab:29:de:c9: 7c:74:35:70:cb:47:79:e2:96:ec:e0:00:45:44:78:4a:61:b4: d6:3c:b1:80:9c:c9:d6:d7:cd:1e:be:93:99:a5:03:13:17:f5: cc:dd:cd:49:63:74:37:a0:a0:f4:53:5c:53:34:92:eb:84:dc: 7e:c4:8f:9c:5c:64:6a:83:08:f2:da:f5:d3:e2:8c:97:65:a6: 24:36:d4:a0:84:e1:f0:cf:bf:4c:da:5e:54:78:a4:56:e8:57: 28:e3:c1:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuPjiidTTBdW9EdfquP/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTZhOGViYjAxMTExOWIyZjY5NTMyN2ZiMTZlNTFmODg3 MDQ0NzkwHhcNMjUxMjIzMDEwMDQwWhcNMjUxMjI0MDEwMDQwWjAzMTEwLwYDVQQD Eyg2YjliNDdjNDgxYTg2NmQ4OTQ0NmE5OWFhYzdiZGQxMWFiNzc4YmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxH6e7pLSCuMqKohTUpgCahdvpK5 FvBaD0bDC0lRqpAgOpizLiG4xMmnCbvVqdx7xo3nyOmP5FBgALT9jDbyYV8IRtgt C8+fRD8IFxfN/0HJ3FvSNsPt70hfnWHay9N86QAzqVjgvdhrLRooQwY7NL97HHLP VU0KuUhgL1w6c55mDSZG0xGtrjDiGtIRtdlg4z5Gww8Rl4L3NTmfdoxKoukFl1zF pRBJAxNQUED++K2aAFhGE1zZfIN8LSYz0AcYkuxZwtpqHKPSh893hVfZgyayl3wG qTeSbyaljdmlTB/EyPBZ1iE+ZgZZnOVrIDkEsth8oq40h6giK3aNUbDr4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGubR8SBqGbYlEapmqx73RGrd4vpMB8GA1UdIwQY MBaAFGYWqOuwERGbL2lTJ/sW5R+IcER5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEt ZWQzZDI3MDU1MDIwLzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEtZWQzZDI3MDU1MDIw LzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh3/wRKE vCO/yEPx4/gbfGKNl6Xx+Pwl1I+VZrJVS/91eyHB0/pixS8eRDBhNavbAGDkgP/E 9uZMbVh6GzbzfBPznbCzb8mdE4NiBJp1Ou00H+LYgFylqHkNjBSXpYeOniyKYTHQ Kd5yDgALj43vMF3f/QDX0HlrHXqS5qN/f9nkV4uN338V0fkZ3Nhr/G21lyOIPjfR eG+Mgpn0/jOrKd7JfHQ1cMtHeeKW7OAARUR4SmG01jyxgJzJ1tfNHr6TmaUDExf1 zN3NSWN0N6Cg9FNcUzSS64TcfsSPnFxkaoMI8tr10+KMl2WmJDbUoITh8M+/TNpe VHikVuhXKOPB8Q== -----END CERTIFICATE-----Generated at Tue Dec 23 09:20:06 2025 by rpki-client