This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json) Hash identifier: d8Zdui80pvo5XRkVOl9petXTAlzUzj1d3iHlqCI9N+E= Subject key identifier: 66:78:1E:DA:CF:3C:7D:8D:EA:F7:FF:08:83:AD:6A:92:47:02:12:AD Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88 Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188 Certificate serial: 019B3D23684515FB5E527C4BC5060B25DA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft Manifest number: 11F1 Signing time: Sat 20 Dec 2025 19:01:29 +0000 Manifest this update: Sat 20 Dec 2025 19:01:29 +0000 Manifest next update: Sun 21 Dec 2025 19:01:29 +0000 Files and hashes: 1: jT9M2q3-JmfBGqlkvqfv7X_lK7k.roa (hash: 2EpzeWTEb3JVIFCKyCL/tj06ZaHz1YBQQFcfRdYnEzo=) 2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: YuXgQ9QfNsBQCX1NV83YF3oui23z2/zLETCKVomyawI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:68:45:15:fb:5e:52:7c:4b:c5:06:0b:25:da:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188 Validity Not Before: Dec 20 19:01:29 2025 GMT Not After : Dec 21 19:01:29 2025 GMT Subject: CN=66781edacf3c7d8deaf7ff0883ad6a92470212ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:6e:04:56:6c:0a:a8:00:ba:2b:81:95:7d: 5e:00:5c:f2:2e:a3:d8:ba:64:81:da:eb:33:90:21: 96:c9:15:22:1d:95:9e:46:e3:f6:b6:4d:54:cb:42: e1:ce:c7:6d:5f:5a:ec:ec:0d:40:4d:2e:ff:4a:8c: 63:d0:e4:7c:ed:16:f1:88:1d:20:11:ca:d5:f3:d7: fa:9c:6e:b4:9b:08:49:a9:df:92:8f:f9:27:0e:88: 7d:b7:11:27:71:93:b5:91:c0:e1:fc:1a:b3:bc:b6: 4d:fe:11:45:00:46:98:24:cf:95:0a:1b:9d:1b:01: 75:96:e4:c6:24:8a:ca:88:da:67:0a:64:e3:a9:84: fb:c2:20:9f:aa:88:68:b0:f6:36:df:17:8c:53:f9: 4e:be:cc:a7:39:84:78:b1:56:b4:ab:cb:ac:b4:66: 0d:f9:c2:03:44:7e:45:20:91:8a:b7:21:76:34:5d: 3c:27:54:5f:05:2f:9b:9a:65:cd:b1:b8:8a:dd:d1: 81:8a:dd:1b:96:94:f9:b9:0a:12:c3:8a:24:e0:47: d7:9d:33:07:7f:cc:1e:98:a2:e7:03:d7:b1:16:44: 23:47:75:ee:fc:6d:c2:cb:aa:af:7a:3d:4c:a9:c6: 56:e6:e0:f1:92:5f:86:fc:52:ff:d4:7f:7a:0c:c3: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:78:1E:DA:CF:3C:7D:8D:EA:F7:FF:08:83:AD:6A:92:47:02:12:AD X509v3 Authority Key Identifier: keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:22:bc:45:2b:34:80:6a:8e:96:ea:b1:7f:1e:23:ea:78:c4: 56:1d:64:5e:b5:66:6f:7d:93:25:4a:1b:3d:93:79:e4:6f:b4: 09:af:e1:3c:db:0a:23:fe:37:74:26:45:be:da:da:cb:25:77: f6:9c:10:b2:7a:8d:77:6b:e3:f8:8b:14:7a:d6:d9:e5:7f:40: 36:8d:25:f6:58:21:3b:75:90:12:45:50:0e:bc:a6:a8:55:6a: 7a:e8:01:09:cc:5f:fa:48:bd:56:ac:df:74:3a:e0:8b:88:5e: 94:11:ca:63:57:39:d9:40:45:38:a3:8e:ca:ad:9c:6e:c2:5a: b1:4a:e5:d2:75:31:09:48:29:d3:17:a9:21:b1:79:fd:e4:91: 12:61:30:58:9e:11:a2:4f:1d:5c:d3:76:3d:e4:c8:6c:c7:14: 6a:88:ab:30:b3:78:80:49:1b:a4:88:2c:82:c5:30:5a:31:b5: cd:d4:a1:31:bd:ea:e5:6c:55:cc:26:49:bb:05:91:86:97:b0: 37:64:ee:43:32:1d:5d:b3:a9:f0:26:fc:1f:88:84:f9:17:9f: 3e:c1:15:9a:52:27:4f:c8:3d:f6:59:3e:dd:7f:a1:bc:c3:5c: 05:69:72:c6:bc:38:b5:db:41:dd:58:9b:86:40:15:d6:a7:d0: c0:ee:c1:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2hFFfteUnxLxQYLJdqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjg0ZTQ3NDljY2NkNTgzZmVmYzc3OTdjM2Q2N2IxMDg5 OGExODgwHhcNMjUxMjIwMTkwMTI5WhcNMjUxMjIxMTkwMTI5WjAzMTEwLwYDVQQD Eyg2Njc4MWVkYWNmM2M3ZDhkZWFmN2ZmMDg4M2FkNmE5MjQ3MDIxMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5VuBFZsCqgAuiuBlX1eAFzyLqPY umSB2uszkCGWyRUiHZWeRuP2tk1Uy0LhzsdtX1rs7A1ATS7/Soxj0OR87RbxiB0g EcrV89f6nG60mwhJqd+Sj/knDoh9txEncZO1kcDh/BqzvLZN/hFFAEaYJM+VChud GwF1luTGJIrKiNpnCmTjqYT7wiCfqohosPY23xeMU/lOvsynOYR4sVa0q8ustGYN +cIDRH5FIJGKtyF2NF08J1RfBS+bmmXNsbiK3dGBit0blpT5uQoSw4ok4EfXnTMH f8wemKLnA9exFkQjR3Xu/G3Cy6qvej1MqcZW5uDxkl+G/FL/1H96DMMeIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ4HtrPPH2N6vf/CIOtapJHAhKtMB8GA1UdIwQY MBaAFM74TkdJzM1YP+/HeXw9Z7EImKGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2Qt ZGFiNmUyYzVmZGQ5LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2QtZGFiNmUyYzVmZGQ5 LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCK8RSs0 gGqOluqxfx4j6njEVh1kXrVmb32TJUobPZN55G+0Ca/hPNsKI/43dCZFvtrayyV3 9pwQsnqNd2vj+IsUetbZ5X9ANo0l9lghO3WQEkVQDrymqFVqeugBCcxf+ki9Vqzf dDrgi4helBHKY1c52UBFOKOOyq2cbsJasUrl0nUxCUgp0xepIbF5/eSREmEwWJ4R ok8dXNN2PeTIbMcUaoirMLN4gEkbpIgsgsUwWjG1zdShMb3q5WxVzCZJuwWRhpew N2TuQzIdXbOp8Cb8H4iE+RefPsEVmlInT8g99lk+3X+hvMNcBWlyxrw4tdtB3Vib hkAV1qfQwO7BQg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:38 2025 by rpki-client