This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json) Hash identifier: rLFuWswMrqIUzocB2BNaruhSFkoluP3Ao/L/RcP5pRY= Subject key identifier: 58:6C:A8:86:EC:91:6A:94:C8:43:E5:B5:56:99:EF:A8:41:4A:7C:53 Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c Certificate serial: 019B3E6C7ED51DB39B9AB769343D410A4EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:00:56 +0000 Manifest this update: Sun 21 Dec 2025 01:00:56 +0000 Manifest next update: Mon 22 Dec 2025 01:00:56 +0000 Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=) 2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: zhXpchSdlvFi4/3MpO0gCh6vlDXRoJQ7InwKYOjk7ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:7e:d5:1d:b3:9b:9a:b7:69:34:3d:41:0a:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c Validity Not Before: Dec 21 01:00:56 2025 GMT Not After : Dec 22 01:00:56 2025 GMT Subject: CN=586ca886ec916a94c843e5b55699efa8414a7c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:a2:5a:f7:10:c0:68:00:70:5e:a4:12:0c: fc:98:75:07:35:2f:06:95:a9:48:d2:13:fa:1c:ef: f1:f9:13:af:4e:cd:26:44:70:0e:d3:d2:12:6e:78: c4:8d:95:9e:53:77:d1:4e:58:cd:c5:e0:e5:3d:ac: b6:78:99:b7:a4:1c:37:cc:e8:8f:b7:72:5c:f2:25: df:82:02:43:57:39:69:7b:6c:80:14:ed:b5:e6:88: 20:e1:dd:6e:30:78:b4:25:56:c1:91:eb:13:1e:98: fb:80:0c:30:1e:af:36:f1:0a:06:36:46:62:1c:f1: 8c:f7:45:46:92:40:7b:22:cf:5a:a9:98:11:23:c2: 88:6e:64:4d:85:3f:e1:8a:87:6a:f3:17:51:fe:94: 08:cd:0e:87:72:82:e1:82:b4:f8:f5:74:72:ab:31: a5:4e:7a:fa:16:0f:bf:32:33:e6:24:1a:8e:25:12: 27:84:9d:74:b0:77:ae:fd:90:6d:58:97:29:5a:74: 27:6a:21:83:eb:00:26:61:5a:f8:93:eb:b6:3e:75: 5f:64:8b:fe:b9:83:7a:9d:d9:0e:38:21:13:6b:67: 0a:b6:64:49:92:d4:e0:fb:6b:b2:c1:fa:0d:eb:27: ee:c3:2c:ec:f2:31:97:be:c8:eb:af:26:b5:a0:3d: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:A8:86:EC:91:6A:94:C8:43:E5:B5:56:99:EF:A8:41:4A:7C:53 X509v3 Authority Key Identifier: keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a4:9e:57:0d:91:e6:8a:c6:96:1b:38:70:5d:65:9b:ae:26: 54:7e:0a:f1:ae:a7:91:cb:07:a4:88:5a:da:97:71:5a:57:59: ca:78:7e:70:7c:a2:02:ff:b6:81:29:4b:aa:be:45:33:53:b0: b8:74:ce:4e:16:10:9a:7a:2a:47:d7:76:c0:09:cb:c5:b1:db: e5:52:eb:39:c3:48:f9:20:19:48:0d:5d:7b:ec:36:94:1d:92: 5d:b4:59:88:7f:37:a8:85:41:90:52:d0:bf:5f:ed:ff:c7:89: af:d5:9a:f3:40:88:b3:4f:df:cf:66:3f:a9:53:28:d5:70:bf: 9b:ae:05:f2:c6:b5:e9:38:63:e5:28:d1:27:4e:b3:9a:27:42: 20:63:b8:7a:52:b1:56:a0:d6:8d:3e:6b:a1:9b:43:06:93:c3: 6d:90:af:a9:fc:07:98:ca:80:a9:07:53:a1:cb:cc:f8:c2:d0: ea:ef:f5:05:d0:66:bf:e4:40:89:c7:78:33:16:6d:1d:55:39: c7:a1:c3:d9:b3:5f:df:5c:13:38:e6:7e:d1:b7:1a:4e:e6:d8: b5:7c:ee:9a:88:09:ae:2c:38:35:9d:3a:f3:5e:be:1c:dc:51: b7:71:b7:b8:3d:66:c5:aa:56:27:46:c8:93:87:26:d8:d1:51: 82:d8:cb:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bH7VHbObmrdpND1BCk7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk YzA4OWMwHhcNMjUxMjIxMDEwMDU2WhcNMjUxMjIyMDEwMDU2WjAzMTEwLwYDVQQD Eyg1ODZjYTg4NmVjOTE2YTk0Yzg0M2U1YjU1Njk5ZWZhODQxNGE3YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSWiWvcQwGgAcF6kEgz8mHUHNS8G lalI0hP6HO/x+ROvTs0mRHAO09ISbnjEjZWeU3fRTljNxeDlPay2eJm3pBw3zOiP t3Jc8iXfggJDVzlpe2yAFO215ogg4d1uMHi0JVbBkesTHpj7gAwwHq828QoGNkZi HPGM90VGkkB7Is9aqZgRI8KIbmRNhT/hiodq8xdR/pQIzQ6HcoLhgrT49XRyqzGl Tnr6Fg+/MjPmJBqOJRInhJ10sHeu/ZBtWJcpWnQnaiGD6wAmYVr4k+u2PnVfZIv+ uYN6ndkOOCETa2cKtmRJktTg+2uywfoN6yfuwyzs8jGXvsjrrya1oD0a9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhsqIbskWqUyEPltVaZ76hBSnxTMB8GA1UdIwQY MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKSeVw2R 5orGlhs4cF1lm64mVH4K8a6nkcsHpIha2pdxWldZynh+cHyiAv+2gSlLqr5FM1Ow uHTOThYQmnoqR9d2wAnLxbHb5VLrOcNI+SAZSA1de+w2lB2SXbRZiH83qIVBkFLQ v1/t/8eJr9Wa80CIs0/fz2Y/qVMo1XC/m64F8sa16Thj5SjRJ06zmidCIGO4elKx VqDWjT5roZtDBpPDbZCvqfwHmMqAqQdTocvM+MLQ6u/1BdBmv+RAicd4MxZtHVU5 x6HD2bNf31wTOOZ+0bcaTubYtXzumogJriw4NZ06816+HNxRt3G3uD1mxapWJ0bI k4cm2NFRgtjLhQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:26:35 2025 by rpki-client