This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft File: ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json) Hash identifier: 3M87fgXhu/hjEV0P0TSJBlLmuHrs5wOjTTQky7E85qs= Subject key identifier: 59:89:85:1E:9C:00:95:3C:59:A6:E6:F3:51:71:CD:05:8A:C9:C1:45 Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47 Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47 Certificate serial: 019B3CB4D763E6978D45A74E25392FDDF8E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 17:00:43 +0000 Manifest this update: Sat 20 Dec 2025 17:00:43 +0000 Manifest next update: Sun 21 Dec 2025 17:00:43 +0000 Files and hashes: 1: CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa (hash: 1bONPKFzyDS/3APoxZR25vqyDAsgCQifSMXpTfL4F0s=) 2: WxxzockSF-0jbEBubYwjKIfgtaw.roa (hash: uNom3cZ42KKzlsjBXTYNfCi+Ksse/PrjCfplRbo7jWE=) 3: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: ob8U9s31sDjjapoyzAMyKL/XlcbN6ut9wT8C83+/9FI=) 4: hAuohYiSHygUFUxTjuX1SWN5QDE.roa (hash: MotGMSUysnMBdzXEwoyDH1EBq/l4jrQRez7lyisrMeA=) 5: n6ANVJpjfADW-mInHpVlhLdkL5w.roa (hash: E28ZlsfhOnBkyIyOKkYfx6xyMrKE5R52d/SAANOKtIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d7:63:e6:97:8d:45:a7:4e:25:39:2f:dd:f8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47 Validity Not Before: Dec 20 17:00:43 2025 GMT Not After : Dec 21 17:00:43 2025 GMT Subject: CN=5989851e9c00953c59a6e6f35171cd058ac9c145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:f1:39:23:00:63:cd:23:09:d9:20:ea:c4: 68:14:1b:53:cb:10:e2:01:6b:26:63:66:55:02:1f: 76:da:05:bd:16:6f:7d:28:68:6e:8f:6c:bb:c7:42: ca:cd:3c:87:e0:aa:d4:f9:e1:39:c9:28:e8:5d:96: 5a:9e:60:d6:69:94:f0:a6:de:cb:f0:c7:1b:fd:e7: 52:83:88:de:ee:96:af:97:6b:1b:6c:05:9c:0b:ae: 23:7a:b7:b3:64:f3:b3:39:1d:7f:50:0e:78:18:75: ed:01:9e:37:f0:89:18:47:71:c2:2f:94:fd:aa:08: e3:5f:f6:ab:85:4b:89:06:20:10:7c:00:d2:68:70: 82:b6:6a:8e:88:16:7b:54:5e:4d:ec:61:60:d2:72: 63:07:66:11:f3:96:ba:96:32:b1:e5:98:52:0d:5f: ec:33:90:9a:b7:b2:61:42:da:06:b4:e2:a2:48:11: 63:e2:fb:21:b5:d3:e2:92:bf:49:a5:29:92:21:79: 52:9c:55:d4:c8:45:23:4d:9d:92:93:f4:50:3f:72: 87:e0:4b:e5:52:2d:73:55:cd:f7:ac:a3:f7:b6:d7: 2b:d5:17:6a:bc:6f:87:0b:33:56:46:df:e4:be:97: 34:d2:cb:7a:a5:af:f6:14:c4:c6:85:7c:a6:8e:73: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:85:1E:9C:00:95:3C:59:A6:E6:F3:51:71:CD:05:8A:C9:C1:45 X509v3 Authority Key Identifier: keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:09:4c:18:ba:0f:c1:9b:be:ac:aa:1b:53:8a:ba:19:ea:16: 9f:95:37:62:82:e2:19:97:11:b0:53:d2:01:62:f9:18:0a:4f: ab:f6:21:3d:59:88:0f:93:b8:16:cd:0b:2c:52:42:d5:f6:e0: 6f:26:a5:49:1d:00:3f:06:cf:97:31:04:c5:49:d6:a1:d3:a9: 21:c6:ba:7d:d0:a7:8f:47:f4:12:8a:a0:b1:e3:57:a6:6b:b1: 87:a9:93:c0:bf:c5:fe:26:4c:e6:0c:30:51:ec:fd:69:8e:71: c6:9c:71:03:20:f0:f9:ae:8c:2e:da:80:ae:64:ad:c0:79:31: 8b:b6:6c:02:86:fc:8b:2c:79:ab:0f:22:6c:18:70:43:10:d5: d0:54:28:2d:23:61:e6:0c:cf:98:b1:b1:e9:bc:98:5a:af:e5: 2a:b3:aa:04:9f:fc:b8:b5:f5:77:db:c5:4f:1c:7e:cf:37:6b: 33:8b:ec:dd:9c:b4:18:00:d8:68:27:49:28:34:61:db:2e:4e: 96:66:d7:d4:49:9e:19:24:af:c6:29:42:df:6a:e4:ed:48:29: e8:e4:96:0c:9d:9d:b8:60:fa:c7:cd:32:bc:9b:2a:f9:fe:d5: f7:60:43:49:24:80:e2:1a:3f:ae:65:f0:9b:26:36:4a:06:71: 97:8f:e0:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNdj5peNRadOJTkv3fjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw YzFhNDcwHhcNMjUxMjIwMTcwMDQzWhcNMjUxMjIxMTcwMDQzWjAzMTEwLwYDVQQD Eyg1OTg5ODUxZTljMDA5NTNjNTlhNmU2ZjM1MTcxY2QwNThhYzljMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif3xOSMAY80jCdkg6sRoFBtTyxDi AWsmY2ZVAh922gW9Fm99KGhuj2y7x0LKzTyH4KrU+eE5ySjoXZZanmDWaZTwpt7L 8Mcb/edSg4je7pavl2sbbAWcC64jerezZPOzOR1/UA54GHXtAZ438IkYR3HCL5T9 qgjjX/arhUuJBiAQfADSaHCCtmqOiBZ7VF5N7GFg0nJjB2YR85a6ljKx5ZhSDV/s M5Cat7JhQtoGtOKiSBFj4vshtdPikr9JpSmSIXlSnFXUyEUjTZ2Sk/RQP3KH4Evl Ui1zVc33rKP3ttcr1RdqvG+HCzNWRt/kvpc00st6pa/2FMTGhXymjnMd4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmJhR6cAJU8Wabm81FxzQWKycFFMB8GA1UdIwQY MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt NDc0NzJlZDNiZWNiLzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcglMGLoP wZu+rKobU4q6GeoWn5U3YoLiGZcRsFPSAWL5GApPq/YhPVmID5O4Fs0LLFJC1fbg byalSR0APwbPlzEExUnWodOpIca6fdCnj0f0EoqgseNXpmuxh6mTwL/F/iZM5gww Uez9aY5xxpxxAyDw+a6MLtqArmStwHkxi7ZsAob8iyx5qw8ibBhwQxDV0FQoLSNh 5gzPmLGx6byYWq/lKrOqBJ/8uLX1d9vFTxx+zzdrM4vs3Zy0GADYaCdJKDRh2y5O lmbX1EmeGSSvxilC32rk7Ugp6OSWDJ2duGD6x80yvJsq+f7V92BDSSSA4ho/rmXw myY2SgZxl4/gbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:32 2025 by rpki-client