This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json) Hash identifier: Oe/9vZg8xD0k/5BqUaqz9edh4CHvyCCqrEO1CMJDDSg= Subject key identifier: 2A:8A:05:DF:71:60:50:31:B9:5D:85:35:AF:F3:EB:14:41:83:A2:7A Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Certificate serial: 019B3A588784B17A170AF300127A47500E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft Manifest number: 016C Signing time: Sat 20 Dec 2025 06:00:38 +0000 Manifest this update: Sat 20 Dec 2025 06:00:38 +0000 Manifest next update: Sun 21 Dec 2025 06:00:38 +0000 Files and hashes: 1: oQ5fumIcVB85Uy2dYh229j_WaHg.roa (hash: vl4buX4gY0bD8VM1N3aDm+YQLtmBqcCMCCyk6V68GNc=) 2: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: Dh7DJs5M8ZVVglA7p88rpENMcmGQRYd6dZmlUcgl2wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:87:84:b1:7a:17:0a:f3:00:12:7a:47:50:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Validity Not Before: Dec 20 06:00:38 2025 GMT Not After : Dec 21 06:00:38 2025 GMT Subject: CN=2a8a05df71605031b95d8535aff3eb144183a27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:8c:0b:76:77:61:3b:05:1d:c3:4f:b9:27: e4:14:e7:a2:69:c5:59:1a:28:b0:3d:a2:e2:46:2c: 72:27:7b:c0:0e:eb:d2:29:78:83:08:6f:67:b1:72: b3:b4:2c:0f:ea:9f:30:4a:60:a6:48:3d:9a:38:9c: be:88:77:95:0d:2e:d1:2a:fe:1c:37:31:93:10:43: b5:aa:bf:38:d4:ca:77:a3:51:dc:13:66:8d:4f:6c: 46:78:25:fd:21:50:8d:de:d1:6b:0b:4f:67:61:88: 95:c2:89:2a:c7:e7:37:0b:e7:2a:30:61:38:e0:48: 61:49:86:73:df:17:a7:25:a4:fb:0b:43:9e:9f:a6: 91:20:a9:cb:f6:36:7b:56:2f:03:8d:77:e3:6c:23: 49:80:70:58:79:60:24:e9:35:81:b6:8f:31:75:8e: 7c:e6:8a:9c:b1:84:7b:33:dd:74:cf:ee:a4:7a:b2: 6a:68:45:68:41:dc:52:8a:6e:11:3d:33:58:5e:2c: 81:53:f4:f2:b5:b2:c0:f4:72:f3:d4:3f:62:d7:d2: 8b:29:5e:76:b9:76:7a:41:62:24:58:af:0a:e7:df: 9f:1c:95:b9:9c:9f:76:60:97:83:2f:13:ce:62:68: 02:1c:c6:41:1f:ed:f1:3c:cf:1c:0b:53:9b:58:5b: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:05:DF:71:60:50:31:B9:5D:85:35:AF:F3:EB:14:41:83:A2:7A X509v3 Authority Key Identifier: keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:cf:de:b7:6d:e3:b0:d4:d9:67:80:04:a6:80:d0:e0:7d:83: 99:39:03:45:cd:36:73:b6:de:c6:db:b5:a7:bd:ed:ce:51:1b: 71:e9:47:83:db:26:05:6c:44:26:87:6d:a7:74:c2:ac:e8:0d: 35:e3:d9:9e:98:96:2c:81:e8:b3:1a:db:8e:ac:a2:5f:d5:b5: f3:28:87:3d:ea:6d:39:dc:88:8f:15:31:d6:34:ad:aa:cc:1a: a8:f0:e0:c0:4f:66:97:5b:ab:f8:51:a1:0b:ba:49:4c:c7:a7: 72:0e:6b:08:1f:13:91:13:c6:12:9a:22:9a:11:f9:91:87:ee: c7:bb:51:16:c2:23:07:e6:17:be:55:df:73:a8:1f:cc:4a:bd: 6e:37:4b:10:99:39:ac:2e:9c:c8:bc:75:c0:2c:9d:f2:c0:9c: eb:b4:f0:89:6f:d8:32:b8:a1:39:7c:75:8d:4b:77:20:30:7f: 76:6b:f7:b1:92:45:f0:e8:99:2f:70:9a:e6:58:88:b2:b0:46: fa:5a:a1:38:ed:a0:f2:10:10:6a:93:d1:93:4a:10:36:37:42: ac:38:e4:da:34:eb:e8:45:39:c2:2a:61:17:1a:0c:25:2b:e1: be:61:4d:66:42:5d:d4:6b:74:2a:0b:42:d7:54:6c:15:aa:cb: d9:d1:e8:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIeEsXoXCvMAEnpHUA4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTY2MmIyZTk3ZmQyYmRhOTFmMzJiMmNjZTllNzQ1Y2Jh NTg2MDIwHhcNMjUxMjIwMDYwMDM4WhcNMjUxMjIxMDYwMDM4WjAzMTEwLwYDVQQD EygyYThhMDVkZjcxNjA1MDMxYjk1ZDg1MzVhZmYzZWIxNDQxODNhMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl+MC3Z3YTsFHcNPuSfkFOeiacVZ GiiwPaLiRixyJ3vADuvSKXiDCG9nsXKztCwP6p8wSmCmSD2aOJy+iHeVDS7RKv4c NzGTEEO1qr841Mp3o1HcE2aNT2xGeCX9IVCN3tFrC09nYYiVwokqx+c3C+cqMGE4 4EhhSYZz3xenJaT7C0Oen6aRIKnL9jZ7Vi8DjXfjbCNJgHBYeWAk6TWBto8xdY58 5oqcsYR7M910z+6kerJqaEVoQdxSim4RPTNYXiyBU/TytbLA9HLz1D9i19KLKV52 uXZ6QWIkWK8K59+fHJW5nJ92YJeDLxPOYmgCHMZBH+3xPM8cC1ObWFvzXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqKBd9xYFAxuV2FNa/z6xRBg6J6MB8GA1UdIwQY MBaAFK/mYrLpf9K9qR8ysszp50XLpYYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjkt MzRkMGMwZTRjMTEzLzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjktMzRkMGMwZTRjMTEz LzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuM/et23j sNTZZ4AEpoDQ4H2DmTkDRc02c7bextu1p73tzlEbcelHg9smBWxEJodtp3TCrOgN NePZnpiWLIHosxrbjqyiX9W18yiHPeptOdyIjxUx1jStqswaqPDgwE9ml1ur+FGh C7pJTMencg5rCB8TkRPGEpoimhH5kYfux7tRFsIjB+YXvlXfc6gfzEq9bjdLEJk5 rC6cyLx1wCyd8sCc67TwiW/YMrihOXx1jUt3IDB/dmv3sZJF8OiZL3Ca5liIsrBG +lqhOO2g8hAQapPRk0oQNjdCrDjk2jTr6EU5wiphFxoMJSvhvmFNZkJd1Gt0KgtC 11RsFarL2dHoEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:58 2025 by rpki-client