This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json) Hash identifier: MpkgxpuFaEzqy9vevcFRMg/qufSuD5LKW+0h3MCT1H4= Subject key identifier: C3:AE:3E:FA:36:5B:12:E0:9B:F8:67:25:84:50:A6:29:40:2E:76:D3 Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Certificate serial: 019B3B6BC39D46AB87B42266C22928D58F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 11:01:16 +0000 Manifest this update: Sat 20 Dec 2025 11:01:16 +0000 Manifest next update: Sun 21 Dec 2025 11:01:16 +0000 Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=) 2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: fzez1BUtD3RIdZigoaztw/pWiqQZpc5YY2jREG9sel8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:c3:9d:46:ab:87:b4:22:66:c2:29:28:d5:8f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Validity Not Before: Dec 20 11:01:16 2025 GMT Not After : Dec 21 11:01:16 2025 GMT Subject: CN=c3ae3efa365b12e09bf867258450a629402e76d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:0f:a5:39:f1:ea:49:bb:c6:4a:e5:c6:6a: 80:85:29:fd:68:4b:cd:8c:e2:e7:90:2e:65:05:6b: ff:fd:48:4d:8a:4a:7f:a9:0d:69:06:8a:bc:4d:2e: 83:8c:48:18:5e:9c:e7:ed:56:a3:78:cc:95:74:3f: 65:2f:26:2a:a9:a5:56:48:f2:3d:e3:56:2f:e6:d0: 9a:07:99:da:4f:4c:c6:93:a9:c4:99:44:47:2a:51: c0:b8:bc:ab:79:70:95:05:06:9c:0c:72:d7:7e:cd: 02:90:c1:34:f6:67:32:db:40:19:4d:f1:48:04:0c: 2a:33:b7:1f:8f:cc:8d:77:2d:bb:e2:79:23:34:d1: d4:a3:fe:5d:8e:44:08:f1:e3:37:42:0c:d8:40:b2: bd:31:c2:05:cf:10:51:ca:3d:57:c8:e2:5b:b2:e0: b0:53:13:4e:6c:ee:e2:49:ee:c1:a5:ab:fe:f5:f2: af:4f:f7:67:ab:b9:5c:6a:08:8a:07:5f:a8:da:c6: cc:1b:68:76:3e:ff:03:a2:29:c8:d5:3e:a5:02:ec: 02:76:4c:33:41:84:f6:1f:aa:2e:f7:0f:d0:56:e7: 27:73:72:46:bd:ab:3b:bb:7a:6f:c9:c7:78:c2:da: 5e:f9:76:e7:d9:d3:79:a5:47:58:47:18:10:8b:10: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AE:3E:FA:36:5B:12:E0:9B:F8:67:25:84:50:A6:29:40:2E:76:D3 X509v3 Authority Key Identifier: keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c7:4c:2c:9e:7e:9d:08:60:47:66:ee:35:d2:33:ee:b9:fc: b1:d9:f8:04:ba:b5:7c:cf:7f:89:38:cd:3d:2f:99:a5:6c:94: c1:9c:0c:e8:9a:c9:2f:fc:51:7f:f2:63:dc:2d:5d:6d:9d:54: 06:7f:f8:32:c2:71:14:bd:2e:0a:43:bb:4c:8a:d3:82:93:5d: 84:dc:17:81:34:a8:c1:50:83:32:79:17:5e:d2:7e:bf:b4:24: d4:b2:53:3c:e8:ce:2a:8c:f1:d9:6e:a0:a2:0e:b4:30:0e:e7: b8:9e:bd:4e:46:08:87:79:0d:c2:65:0b:4d:63:f8:26:a8:5a: ad:1c:19:13:87:b0:f2:88:61:b7:e1:b2:2b:ae:7e:80:27:c2: 9d:29:e9:ef:37:c5:37:91:66:cf:98:a0:b4:78:9b:62:3f:f5: c1:fe:59:bd:9a:3d:e5:62:76:f0:c3:75:70:d8:0e:93:e9:c5: c5:2b:fc:5e:c7:ef:5d:8a:f7:c3:26:74:b4:41:92:06:b0:69: dc:9c:bb:67:fe:be:e7:3f:6c:d7:d5:be:f2:72:7f:3f:7f:f0: 88:c2:67:4a:88:c3:70:92:2b:67:ab:87:b4:02:a3:33:d9:df: 1a:af:b8:1c:e2:69:5e:be:3e:ed:9c:f7:99:9c:fc:0a:e3:49: 66:8d:ea:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a8OdRquHtCJmwiko1Y8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzhiZmNlYjQxYmFmZWZjMDJmNzk1MmUxYWEyNDgwZTk4 NmYwMzcwHhcNMjUxMjIwMTEwMTE2WhcNMjUxMjIxMTEwMTE2WjAzMTEwLwYDVQQD EyhjM2FlM2VmYTM2NWIxMmUwOWJmODY3MjU4NDUwYTYyOTQwMmU3NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4kPpTnx6km7xkrlxmqAhSn9aEvN jOLnkC5lBWv//UhNikp/qQ1pBoq8TS6DjEgYXpzn7VajeMyVdD9lLyYqqaVWSPI9 41Yv5tCaB5naT0zGk6nEmURHKlHAuLyreXCVBQacDHLXfs0CkME09mcy20AZTfFI BAwqM7cfj8yNdy274nkjNNHUo/5djkQI8eM3QgzYQLK9McIFzxBRyj1XyOJbsuCw UxNObO7iSe7Bpav+9fKvT/dnq7lcagiKB1+o2sbMG2h2Pv8DoinI1T6lAuwCdkwz QYT2H6ou9w/QVucnc3JGvas7u3pvycd4wtpe+Xbn2dN5pUdYRxgQixA7iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOuPvo2WxLgm/hnJYRQpilALnbTMB8GA1UdIwQY MBaAFMx4v860G6/vwC95UuGqJIDphvA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEt MTI3MmQyYWI0M2Q4LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEtMTI3MmQyYWI0M2Q4 LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscdMLJ5+ nQhgR2buNdIz7rn8sdn4BLq1fM9/iTjNPS+ZpWyUwZwM6JrJL/xRf/Jj3C1dbZ1U Bn/4MsJxFL0uCkO7TIrTgpNdhNwXgTSowVCDMnkXXtJ+v7Qk1LJTPOjOKozx2W6g og60MA7nuJ69TkYIh3kNwmULTWP4JqharRwZE4ew8ohht+GyK65+gCfCnSnp7zfF N5Fmz5igtHibYj/1wf5ZvZo95WJ28MN1cNgOk+nFxSv8XsfvXYr3wyZ0tEGSBrBp 3Jy7Z/6+5z9s19W+8nJ/P3/wiMJnSojDcJIrZ6uHtAKjM9nfGq+4HOJpXr4+7Zz3 mZz8CuNJZo3qmQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:33:06 2025 by rpki-client