This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json) Hash identifier: Bwsd3WEl4zOpOA3s+jpotdia7tObiqHROXLXOhIO2ik= Subject key identifier: DD:65:13:C2:E2:6D:09:0A:BF:C1:74:B1:20:2A:CB:E6:1C:13:F2:5B Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Certificate serial: 019B46279992CA802ED71AF8F7B43CF89B9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft Manifest number: 087C Signing time: Mon 22 Dec 2025 13:02:38 +0000 Manifest this update: Mon 22 Dec 2025 13:02:38 +0000 Manifest next update: Tue 23 Dec 2025 13:02:38 +0000 Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: UFmTy+VyuAMQs/Ur+nJNtKYX5Ivx+GIfVKRO4adlZmU=) 2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:99:92:ca:80:2e:d7:1a:f8:f7:b4:3c:f8:9b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Validity Not Before: Dec 22 13:02:38 2025 GMT Not After : Dec 23 13:02:38 2025 GMT Subject: CN=dd6513c2e26d090abfc174b1202acbe61c13f25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:c6:8a:8d:38:e8:7d:b6:55:fd:f1:e3:22: 33:51:94:b2:ed:f8:d9:e1:ed:41:4b:df:f0:74:fa: 12:3f:02:ae:23:6f:ce:09:8b:96:57:58:10:9c:08: 15:99:b2:4e:63:b8:86:87:92:f5:3a:52:58:05:f4: 08:a4:cc:48:0d:02:5c:db:e6:9b:3a:20:0e:f9:c0: 44:6e:d2:c8:c6:5a:5f:2c:52:8d:6a:0e:f2:20:bb: 6f:4e:70:1c:e8:0f:bc:a1:af:c5:2b:55:dc:ca:6f: 66:d4:97:32:7d:29:41:7c:56:ad:c6:7c:45:9e:eb: aa:7c:79:84:07:a5:0d:5b:da:b7:2d:98:f3:62:b6: db:04:f6:4f:ea:72:d9:1e:a2:f8:db:fb:7c:39:c7: a1:10:ad:e5:a8:4d:ed:ad:9c:e4:65:ef:2b:59:b1: a1:70:6c:32:b0:4d:55:fe:87:fd:ca:81:ae:4a:e4: d2:42:a7:b3:f6:66:be:d3:7c:31:b0:b9:1b:ab:db: 88:30:d9:c4:30:47:e3:b4:be:c8:80:ba:89:4f:e7: d6:26:23:bc:16:30:aa:eb:52:62:b2:cf:f4:f7:b4: 74:54:26:66:7f:db:7c:91:17:89:1c:f5:c6:95:9d: 2e:84:e8:5a:a9:01:11:82:00:e7:38:39:7b:39:da: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:65:13:C2:E2:6D:09:0A:BF:C1:74:B1:20:2A:CB:E6:1C:13:F2:5B X509v3 Authority Key Identifier: keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:17:11:9a:75:f8:b9:e6:c7:eb:9f:52:93:33:0a:14:25:eb: c7:14:b0:c2:e9:33:8e:a8:05:10:68:1f:eb:98:5d:67:ed:9a: 8e:ef:a7:8e:ad:cb:d2:cc:6e:71:33:7c:0d:7e:41:69:a5:91: 56:89:da:b0:0e:94:02:92:d9:2e:89:80:f0:d8:ea:d9:f4:be: 3c:f5:e7:84:1d:4f:e9:ad:90:2c:69:c5:ce:55:2f:7a:28:37: f0:01:af:84:b1:a8:b6:6f:6d:18:41:27:6f:68:7b:69:72:21: 44:1d:82:d9:de:94:ed:35:99:3a:51:c2:5e:6c:18:be:40:0b: 6a:b8:29:55:74:d1:02:3a:21:79:0e:70:40:68:10:6e:48:f3: 71:7d:25:f9:ed:7a:84:bb:aa:df:c7:50:6d:9a:34:99:87:fe: 5c:3c:63:15:0c:4c:a1:44:65:e7:3b:8b:2d:a6:5d:48:77:9b: 91:55:3b:23:d4:76:53:99:ff:e5:b6:ca:5d:2c:c4:4a:df:93: 3f:9a:48:a2:f0:78:c6:a2:eb:e3:cd:3f:0f:95:49:93:5f:dd: 5e:63:7b:16:17:19:7f:9a:fc:78:bc:20:3e:5d:35:0d:02:69: 85:c9:d5:de:53:2e:b6:85:7b:55:63:06:22:e2:35:03:33:66: d1:ba:55:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ5mSyoAu1xr497Q8+JueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz Yzc1NTYwHhcNMjUxMjIyMTMwMjM4WhcNMjUxMjIzMTMwMjM4WjAzMTEwLwYDVQQD EyhkZDY1MTNjMmUyNmQwOTBhYmZjMTc0YjEyMDJhY2JlNjFjMTNmMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqabGio046H22Vf3x4yIzUZSy7fjZ 4e1BS9/wdPoSPwKuI2/OCYuWV1gQnAgVmbJOY7iGh5L1OlJYBfQIpMxIDQJc2+ab OiAO+cBEbtLIxlpfLFKNag7yILtvTnAc6A+8oa/FK1Xcym9m1JcyfSlBfFatxnxF nuuqfHmEB6UNW9q3LZjzYrbbBPZP6nLZHqL42/t8OcehEK3lqE3trZzkZe8rWbGh cGwysE1V/of9yoGuSuTSQqez9ma+03wxsLkbq9uIMNnEMEfjtL7IgLqJT+fWJiO8 FjCq61Jiss/097R0VCZmf9t8kReJHPXGlZ0uhOhaqQERggDnODl7OdrHdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1lE8LibQkKv8F0sSAqy+YcE/JbMB8GA1UdIwQY MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBcRmnX4 uebH659SkzMKFCXrxxSwwukzjqgFEGgf65hdZ+2aju+njq3L0sxucTN8DX5BaaWR VonasA6UApLZLomA8Njq2fS+PPXnhB1P6a2QLGnFzlUveig38AGvhLGotm9tGEEn b2h7aXIhRB2C2d6U7TWZOlHCXmwYvkALargpVXTRAjoheQ5wQGgQbkjzcX0l+e16 hLuq38dQbZo0mYf+XDxjFQxMoURl5zuLLaZdSHebkVU7I9R2U5n/5bbKXSzESt+T P5pIovB4xqLr480/D5VJk1/dXmN7FhcZf5r8eLwgPl01DQJphcnV3lMutoV7VWMG IuI1AzNm0bpVBw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:49:48 2025 by rpki-client