This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json) Hash identifier: Vkyt3mtxqg25C9JpPqKekRG5YxukJln9I7GI9ITApno= Subject key identifier: E6:F5:39:2C:AE:C1:EB:53:A3:13:AB:79:8F:FA:99:29:DE:D0:ED:D4 Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Certificate serial: 019B60F84F941B6A77B8473CC18DDC796B76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft Manifest number: 0312 Signing time: Sat 27 Dec 2025 18:00:44 +0000 Manifest this update: Sat 27 Dec 2025 18:00:44 +0000 Manifest next update: Sun 28 Dec 2025 18:00:44 +0000 Files and hashes: 1: 0CSlGIx0OwbwIhlMLuRynXyuKoY.roa (hash: lWoSiXzEyVBM+dBqTVH3J+MjpuIW59UUJj+VrqqRdHY=) 2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: LWtZasj7/oZeUffkg1gOi9IVIa13z0sr71o5dUZACZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:f8:4f:94:1b:6a:77:b8:47:3c:c1:8d:dc:79:6b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c Validity Not Before: Dec 27 18:00:44 2025 GMT Not After : Dec 28 18:00:44 2025 GMT Subject: CN=e6f5392caec1eb53a313ab798ffa9929ded0edd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fe:b7:01:12:80:d6:49:30:c2:2e:78:be:87: 37:9f:84:5a:7d:d7:e7:a1:83:5f:ee:d9:f2:d8:bd: 7d:08:d4:62:01:ed:7a:b1:e2:18:bb:ca:f2:40:ba: 61:10:78:a1:b9:7f:9f:82:88:55:6b:dd:c5:32:fb: ee:f5:2b:cd:51:f0:b3:cd:7c:e7:dc:75:84:af:72: 92:56:23:3b:50:0b:16:db:f9:5e:eb:a5:f8:6a:44: e2:48:fd:5e:13:67:c9:47:dd:3e:a2:48:fc:7a:41: fe:d8:2a:0c:59:90:76:51:dc:ff:e0:03:3e:3b:44: 5a:ed:fa:5e:c6:3f:44:dd:5c:af:95:30:6e:3d:ec: a4:73:14:23:62:2a:24:03:8d:f5:a9:6c:6c:04:16: f6:5e:5c:9d:bf:00:89:5a:17:04:b9:09:91:65:e4: 56:bf:1b:cb:89:59:18:94:4e:ca:d8:b5:f7:33:0c: d6:8a:2d:5e:85:e1:9d:82:32:2f:38:89:f5:29:42: 7e:47:1b:07:b9:3d:a2:fe:13:3a:05:93:42:13:ea: a0:2a:3a:1c:85:81:23:21:b6:00:f0:8e:4b:2e:ea: 3c:9f:c7:5a:1a:56:5d:77:71:53:51:ad:b6:8e:77: f0:bb:c2:05:23:3e:c6:ae:ca:c4:f6:46:cc:01:24: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F5:39:2C:AE:C1:EB:53:A3:13:AB:79:8F:FA:99:29:DE:D0:ED:D4 X509v3 Authority Key Identifier: keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:b3:81:d3:12:98:0b:69:c7:cd:bf:a7:36:e5:e8:59:a2: 1b:46:c6:b7:85:a9:36:35:43:f6:2b:88:9a:df:4f:c2:6a:89: 7a:d9:af:40:27:6b:bb:7a:db:a0:90:01:8c:e5:4e:53:b4:ce: 39:7d:89:ca:51:78:7a:5d:5b:28:43:28:4b:f3:00:26:82:a9: f9:5c:6f:02:18:91:84:1b:69:58:1a:b3:5c:cd:92:30:d8:fe: 0f:a9:b6:8b:f4:08:10:fe:a6:70:86:94:d7:f9:7b:0d:a6:73: 5b:42:6f:21:55:9c:52:58:76:8d:62:7a:b8:db:bd:1e:0e:64: 98:e8:8a:dc:b8:90:89:9c:a8:ed:1a:53:a3:86:d7:2c:b2:d5: 36:a2:71:9b:88:85:5b:84:db:7e:c8:b7:a0:03:4e:b2:3d:29: b3:28:d5:48:ae:a4:6a:9f:8f:dd:a3:5e:8b:7c:ec:a3:68:11: 78:be:8f:42:af:fa:53:0f:e7:32:88:d4:82:51:0f:06:e1:26: 56:62:0f:24:fc:ea:3d:8a:52:b4:34:0c:be:8e:3a:7b:a8:86: 49:78:dc:db:73:75:0d:b9:9d:31:a4:51:5c:b0:e9:2d:b2:08: 77:a0:72:9b:ac:0d:75:f4:1d:e6:de:85:73:ca:5a:4b:90:f0: dd:e2:cb:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtg+E+UG2p3uEc8wY3ceWt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMTIyOGEzYTNkMDA2NTRkNGIxMTE3MzM4NzRlMzFkODBj MGEyMGMwHhcNMjUxMjI3MTgwMDQ0WhcNMjUxMjI4MTgwMDQ0WjAzMTEwLwYDVQQD EyhlNmY1MzkyY2FlYzFlYjUzYTMxM2FiNzk4ZmZhOTkyOWRlZDBlZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/63ARKA1kkwwi54voc3n4Rafdfn oYNf7tny2L19CNRiAe16seIYu8ryQLphEHihuX+fgohVa93FMvvu9SvNUfCzzXzn 3HWEr3KSViM7UAsW2/le66X4akTiSP1eE2fJR90+okj8ekH+2CoMWZB2Udz/4AM+ O0Ra7fpexj9E3VyvlTBuPeykcxQjYiokA431qWxsBBb2XlydvwCJWhcEuQmRZeRW vxvLiVkYlE7K2LX3MwzWii1eheGdgjIvOIn1KUJ+RxsHuT2i/hM6BZNCE+qgKjoc hYEjIbYA8I5LLuo8n8daGlZdd3FTUa22jnfwu8IFIz7GrsrE9kbMASSgKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb1OSyuwetToxOreY/6mSne0O3UMB8GA1UdIwQY MBaAFM4SKKOj0AZU1LERczh04x2AwKIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMt ZmQ3ZGJkZjhlMzAwLzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMtZmQ3ZGJkZjhlMzAw LzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjSzgdMS mAtpx82/pzbl6FmiG0bGt4WpNjVD9iuImt9PwmqJetmvQCdru3rboJABjOVOU7TO OX2JylF4el1bKEMoS/MAJoKp+VxvAhiRhBtpWBqzXM2SMNj+D6m2i/QIEP6mcIaU 1/l7DaZzW0JvIVWcUlh2jWJ6uNu9Hg5kmOiK3LiQiZyo7RpTo4bXLLLVNqJxm4iF W4Tbfsi3oANOsj0psyjVSK6kap+P3aNei3zso2gReL6PQq/6Uw/nMojUglEPBuEm VmIPJPzqPYpStDQMvo46e6iGSXjc23N1DbmdMaRRXLDpLbIId6Bym6wNdfQd5t6F c8paS5Dw3eLLNw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:01:09 2025 by rpki-client