This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json) Hash identifier: NyuscbvB0RRrTUmbakhiG1fiX1jsBrrGN4gU9O2kEsM= Subject key identifier: F5:60:39:37:3D:8C:D5:EE:2F:2C:99:8D:F8:82:F4:E9:3D:07:3F:66 Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Certificate serial: 019B3F47D793B074B345CE8BC583A4246777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 05:00:31 +0000 Manifest this update: Sun 21 Dec 2025 05:00:31 +0000 Manifest next update: Mon 22 Dec 2025 05:00:31 +0000 Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=) 2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: r9urcNyLEEJM5V7F48iZoRNNV8nfSz0+A6pIzglPBt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:d7:93:b0:74:b3:45:ce:8b:c5:83:a4:24:67:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Validity Not Before: Dec 21 05:00:31 2025 GMT Not After : Dec 22 05:00:31 2025 GMT Subject: CN=f56039373d8cd5ee2f2c998df882f4e93d073f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:9b:37:18:e6:b7:ae:a1:b8:16:f2:01:ef: de:f6:3d:84:bd:8f:52:52:7a:46:62:a3:09:3c:46: f1:dd:65:23:13:c1:fa:2d:92:b4:27:15:77:d1:ec: 57:bf:3e:9e:07:47:8f:34:50:5f:24:f6:67:99:dc: f2:90:76:81:e8:bd:09:ec:5f:60:58:fe:ae:3e:2d: 8a:73:48:3f:63:e8:eb:6c:52:f4:bf:c7:9d:38:6f: ee:cd:d1:57:5b:cb:23:30:6a:b3:ed:97:ea:b6:b6: 0d:a6:57:91:30:4f:91:c5:eb:e6:1a:53:00:95:14: 4e:33:c9:e5:40:5d:e0:d9:67:c2:31:2b:5e:58:8e: 8a:7a:87:f7:84:ed:e3:1b:4e:94:07:50:7a:78:6a: 89:f6:17:db:5e:d4:4c:b7:d3:e8:ad:73:6e:da:8a: 1b:ba:43:a9:79:02:1a:a5:fc:85:7a:2d:8d:4a:ed: ff:94:8f:f6:63:71:af:f9:dd:f7:3b:fd:fc:c9:fe: b2:f4:02:6d:06:46:42:62:97:f4:c7:05:48:6f:78: 08:3c:56:5e:43:9c:09:c1:5f:89:cc:95:3e:5f:82: e4:e0:f5:e3:c2:fb:63:57:c1:76:9c:46:b0:45:e9: d1:bf:2e:c0:e7:6d:4c:69:3d:7d:cf:ce:8d:04:78: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:60:39:37:3D:8C:D5:EE:2F:2C:99:8D:F8:82:F4:E9:3D:07:3F:66 X509v3 Authority Key Identifier: keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ea:5b:76:25:2d:37:da:9a:72:30:45:b6:07:33:3f:20:bb: bf:1f:cb:fe:06:83:59:0b:fd:15:42:a4:ea:53:62:e5:47:41: 49:3b:9f:86:1d:83:f7:76:f4:0e:c3:df:d4:0a:c5:9e:aa:6d: 23:66:cc:23:d7:1d:31:01:8e:c4:1c:d3:a6:21:f3:47:1e:bd: 47:12:0e:ca:eb:19:b8:d3:9f:f9:50:b8:25:82:db:b6:3f:cb: 12:aa:58:c2:aa:d9:d6:33:0a:fd:06:d5:e8:46:b1:20:f9:73: 7b:b5:f9:4f:da:66:32:7f:e4:78:8f:35:f4:c7:3d:52:ea:ec: 6a:8c:16:62:c8:d7:a8:e7:6a:dc:79:22:2f:1b:ed:5b:84:80: ce:83:86:ae:38:79:67:bd:f2:d8:30:59:01:c1:5e:30:60:9f: 14:ae:9f:f4:45:a3:93:2e:60:f5:7b:ff:ab:06:a6:a4:3a:bf: 2f:89:64:51:48:2d:df:a2:ea:90:b9:e8:aa:db:2c:dc:38:f4: c7:d6:6c:08:fc:32:36:75:52:00:d3:e0:70:53:47:7a:05:b5: 09:da:9a:ba:e8:60:a8:95:97:69:89:cb:31:76:ab:1b:69:39: b1:e6:07:6a:3b:74:0c:3f:9f:de:2c:8c:88:e1:9f:d6:0c:8c: f0:80:91:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R9eTsHSzRc6LxYOkJGd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzhiZmNlYjQxYmFmZWZjMDJmNzk1MmUxYWEyNDgwZTk4 NmYwMzcwHhcNMjUxMjIxMDUwMDMxWhcNMjUxMjIyMDUwMDMxWjAzMTEwLwYDVQQD EyhmNTYwMzkzNzNkOGNkNWVlMmYyYzk5OGRmODgyZjRlOTNkMDczZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwqbNxjmt66huBbyAe/e9j2EvY9S UnpGYqMJPEbx3WUjE8H6LZK0JxV30exXvz6eB0ePNFBfJPZnmdzykHaB6L0J7F9g WP6uPi2Kc0g/Y+jrbFL0v8edOG/uzdFXW8sjMGqz7ZfqtrYNpleRME+RxevmGlMA lRROM8nlQF3g2WfCMSteWI6Keof3hO3jG06UB1B6eGqJ9hfbXtRMt9PorXNu2oob ukOpeQIapfyFei2NSu3/lI/2Y3Gv+d33O/38yf6y9AJtBkZCYpf0xwVIb3gIPFZe Q5wJwV+JzJU+X4Lk4PXjwvtjV8F2nEawRenRvy7A521MaT19z86NBHjVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVgOTc9jNXuLyyZjfiC9Ok9Bz9mMB8GA1UdIwQY MBaAFMx4v860G6/vwC95UuGqJIDphvA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEt MTI3MmQyYWI0M2Q4LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEtMTI3MmQyYWI0M2Q4 LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+pbdiUt N9qacjBFtgczPyC7vx/L/gaDWQv9FUKk6lNi5UdBSTufhh2D93b0DsPf1ArFnqpt I2bMI9cdMQGOxBzTpiHzRx69RxIOyusZuNOf+VC4JYLbtj/LEqpYwqrZ1jMK/QbV 6EaxIPlze7X5T9pmMn/keI819Mc9UursaowWYsjXqOdq3HkiLxvtW4SAzoOGrjh5 Z73y2DBZAcFeMGCfFK6f9EWjky5g9Xv/qwampDq/L4lkUUgt36LqkLnoqtss3Dj0 x9ZsCPwyNnVSANPgcFNHegW1CdqauuhgqJWXaYnLMXarG2k5seYHajt0DD+f3iyM iOGf1gyM8ICRrg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:19 2025 by rpki-client