This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json) Hash identifier: VPJHHs6wOgAwPNgTazrqNu6lvrvfqlav3r2mzuI5AwY= Subject key identifier: DB:02:60:B2:0A:56:13:91:5B:98:BE:97:2A:53:B3:C3:1C:BE:05:D3 Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8 Certificate serial: 019B3B6BBAC763F089DB3AB97C13C9910E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft Manifest number: 1061 Signing time: Sat 20 Dec 2025 11:01:14 +0000 Manifest this update: Sat 20 Dec 2025 11:01:14 +0000 Manifest next update: Sun 21 Dec 2025 11:01:14 +0000 Files and hashes: 1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=) 2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=) 3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: fOWK9iO4TQev0gPl8Qyxrj0bkYnR2outrGIXLSckSB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ba:c7:63:f0:89:db:3a:b9:7c:13:c9:91:0e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8 Validity Not Before: Dec 20 11:01:14 2025 GMT Not After : Dec 21 11:01:14 2025 GMT Subject: CN=db0260b20a5613915b98be972a53b3c31cbe05d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:1b:79:6f:6b:43:9b:10:28:ce:69:bc:7a: c6:2c:9f:da:47:ce:28:61:d5:08:c9:f8:ba:92:77: 32:01:86:49:71:a4:93:27:d5:a7:ce:8a:1f:5e:e3: cc:bf:51:ce:0c:a9:69:b0:b6:11:52:26:b0:0e:28: a6:cc:7e:6a:f6:80:8d:cc:2f:94:2d:49:6e:f0:7f: c5:b3:0f:bc:c5:eb:4e:52:bc:07:5a:77:98:66:0a: ce:a4:3c:e4:b9:5a:29:9f:81:2e:45:33:ae:21:f1: 12:ac:ce:19:3a:04:6e:bc:62:5b:c3:d7:9f:dc:55: 76:70:7e:9f:ad:e3:96:c3:60:80:10:72:cc:e0:ff: eb:47:96:49:38:17:4c:8d:5e:0e:56:1d:4b:8f:5f: 41:ea:79:a2:d4:61:ac:9a:e7:5e:f1:cf:42:97:93: 10:8b:d0:41:10:4f:1b:21:a0:cc:da:5e:d6:45:06: e5:ab:41:f0:4b:66:36:35:42:d2:d4:70:02:a7:1b: 38:f7:2d:3e:2a:a5:a8:3e:35:11:16:98:49:0b:3d: fd:08:cd:18:5f:cc:ad:a2:af:c3:30:cc:6a:f5:3d: d7:8b:8e:71:6d:18:bc:c3:c4:69:e7:a2:ca:30:0b: 91:a6:b6:91:b6:ab:35:9c:ae:8e:b3:c3:71:c4:71: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:02:60:B2:0A:56:13:91:5B:98:BE:97:2A:53:B3:C3:1C:BE:05:D3 X509v3 Authority Key Identifier: keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:38:40:3c:d9:99:ea:8b:40:db:30:8a:09:5d:24:6a:73:75: 54:35:36:ef:77:40:ad:f3:24:a4:f2:34:67:2a:ee:4c:70:9a: 14:a8:2f:7d:26:22:9b:01:6c:f4:fe:7d:63:66:33:2b:8a:c6: ff:07:09:95:54:9e:12:ac:4b:b1:70:c4:d6:1d:79:8c:a4:84: 04:ba:66:39:43:dd:2a:9f:37:0a:82:b6:ca:ae:b8:d8:0d:58: a9:38:29:f0:75:3f:37:9b:b1:20:28:ee:4e:57:31:66:d1:7f: cf:e5:7a:36:83:f1:03:b0:3c:d7:fb:a0:c0:b6:84:c2:3a:49: dc:d1:32:77:06:4c:61:5f:a0:3e:a3:34:8d:c4:54:3b:b4:8d: f8:6d:ea:7f:cf:ea:96:1f:79:0f:ef:5b:9f:82:4e:60:2e:e9: b5:74:e7:3c:e7:c1:97:02:11:62:0e:b1:c5:39:62:f4:81:d4: a2:c5:14:48:2d:65:32:c5:7c:fa:53:aa:3d:1c:b0:07:79:3e: 5d:16:12:0e:7a:c0:ed:81:ec:5b:86:bb:20:50:e0:9b:a8:45: 71:af:2f:dc:67:19:de:77:d9:42:0a:4f:b5:d8:de:aa:ef:fe: 73:22:1f:2e:1b:f0:a4:80:5c:18:39:56:e6:84:43:6e:f0:fd: d7:1f:50:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a7rHY/CJ2zq5fBPJkQ4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzU3MTg1NDcyZjE2ZDUzZWViNjhhMTQwZTM1MTNmYTMx YzMxZDgwHhcNMjUxMjIwMTEwMTE0WhcNMjUxMjIxMTEwMTE0WjAzMTEwLwYDVQQD EyhkYjAyNjBiMjBhNTYxMzkxNWI5OGJlOTcyYTUzYjNjMzFjYmUwNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq4beW9rQ5sQKM5pvHrGLJ/aR84o YdUIyfi6kncyAYZJcaSTJ9WnzoofXuPMv1HODKlpsLYRUiawDiimzH5q9oCNzC+U LUlu8H/Fsw+8xetOUrwHWneYZgrOpDzkuVopn4EuRTOuIfESrM4ZOgRuvGJbw9ef 3FV2cH6freOWw2CAEHLM4P/rR5ZJOBdMjV4OVh1Lj19B6nmi1GGsmude8c9Cl5MQ i9BBEE8bIaDM2l7WRQblq0HwS2Y2NULS1HACpxs49y0+KqWoPjURFphJCz39CM0Y X8ytoq/DMMxq9T3Xi45xbRi8w8Rp56LKMAuRpraRtqs1nK6Os8NxxHEoAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsCYLIKVhORW5i+lypTs8McvgXTMB8GA1UdIwQY MBaAFGR1cYVHLxbVPutooUDjUT+jHDHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2Yzct ODFkMTAwNzNkZWU0LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2YzctODFkMTAwNzNkZWU0 LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADThAPNmZ 6otA2zCKCV0kanN1VDU273dArfMkpPI0ZyruTHCaFKgvfSYimwFs9P59Y2YzK4rG /wcJlVSeEqxLsXDE1h15jKSEBLpmOUPdKp83CoK2yq642A1YqTgp8HU/N5uxICju TlcxZtF/z+V6NoPxA7A81/ugwLaEwjpJ3NEydwZMYV+gPqM0jcRUO7SN+G3qf8/q lh95D+9bn4JOYC7ptXTnPOfBlwIRYg6xxTli9IHUosUUSC1lMsV8+lOqPRywB3k+ XRYSDnrA7YHsW4a7IFDgm6hFca8v3GcZ3nfZQgpPtdjequ/+cyIfLhvwpIBcGDlW 5oRDbvD91x9QGw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:34:06 2025 by rpki-client