This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json) Hash identifier: XbG2am0M6ax8H7Vht8uHjmlHw3F3CobzTgr6tO0bHFA= Subject key identifier: 2B:51:CE:1D:B1:04:1C:04:FD:7C:3C:4C:00:F3:1A:05:06:0F:99:B2 Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Certificate serial: 019B3E6DD108BF5EA5652261790FECFC078C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft Manifest number: 0878 Signing time: Sun 21 Dec 2025 01:02:22 +0000 Manifest this update: Sun 21 Dec 2025 01:02:22 +0000 Manifest next update: Mon 22 Dec 2025 01:02:22 +0000 Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: UFD+VYK9Lz69/ji54OdpuWLKyc9Mv7v6uRcVD2JQtpg=) 2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:d1:08:bf:5e:a5:65:22:61:79:0f:ec:fc:07:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Validity Not Before: Dec 21 01:02:22 2025 GMT Not After : Dec 22 01:02:22 2025 GMT Subject: CN=2b51ce1db1041c04fd7c3c4c00f31a05060f99b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:ee:38:65:e8:9f:de:e4:28:f6:53:c3:24: 61:3a:5e:3c:93:04:5b:62:4b:b0:2e:29:52:49:1e: 54:15:d6:c8:e8:b7:b5:48:c0:53:bc:21:44:27:88: 70:b7:7c:79:0b:22:67:02:cd:f4:d5:e1:dd:6f:49: 8b:71:f3:3e:51:6f:38:4a:6a:f0:74:94:26:d1:65: 83:df:36:34:04:43:38:ba:af:f5:06:94:a2:3c:ed: 92:17:c5:97:f1:58:e4:06:97:0e:11:b7:ce:d4:dd: aa:b9:a4:1e:e2:7f:e0:2d:5a:91:67:ba:0c:a9:4e: 71:da:a9:c6:d9:80:b3:9c:a9:d3:3b:04:1e:d6:98: d3:e6:67:f3:c8:0a:c3:96:25:c7:69:da:ed:d3:28: 9c:b2:93:c6:4b:83:c3:c7:6c:4e:fd:7e:50:46:a8: a5:7b:87:cb:2b:a9:55:2e:28:d0:4f:da:ea:ea:96: 2e:a5:22:d0:d1:b7:80:4a:4d:34:97:df:0b:86:ef: df:08:0b:86:4d:a3:99:3b:c6:ec:83:45:0f:f1:f7: 5f:ab:0d:f4:b8:04:36:10:d7:7e:59:36:22:70:34: ee:d0:e9:40:4b:92:4b:85:38:f6:2f:2e:c9:60:28: a6:49:70:98:f2:98:84:82:41:18:79:20:d4:a8:65: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:51:CE:1D:B1:04:1C:04:FD:7C:3C:4C:00:F3:1A:05:06:0F:99:B2 X509v3 Authority Key Identifier: keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2a:e8:f0:7f:d5:6d:fd:6a:4a:67:99:d8:a4:5c:a6:f2:41: eb:d3:7b:5b:d5:2d:76:65:96:d2:2a:e5:a5:5a:2a:fd:2d:10: d9:37:f6:59:d5:da:99:14:64:41:b4:df:40:81:25:e3:b7:94: 7b:5a:e9:c1:d4:69:a6:7c:77:e6:e1:e3:33:c7:0f:9c:72:af: ad:5d:b5:cb:0d:8c:d0:82:f5:6a:eb:46:18:4e:73:20:c3:e2: b6:33:85:07:7c:3c:46:26:0c:94:12:32:fc:d7:73:f9:50:1b: 83:5c:89:f2:e1:1e:f5:27:68:0e:57:54:8b:f7:bd:a3:f5:74: 92:94:e4:2b:ee:ba:06:34:a5:02:4a:c3:af:be:4e:77:85:43: 11:1c:67:a8:99:54:c2:1c:e0:4d:74:58:c1:eb:ba:ec:a4:ab: 9d:d2:57:01:bd:f4:3f:ad:86:54:3e:48:36:6d:88:a2:88:ac: 4b:10:18:f1:37:c7:40:a0:23:bd:aa:cd:9d:7c:e3:f8:5a:30: ce:3b:4c:6c:cf:51:b6:b3:f6:57:4b:51:c9:ad:78:c3:cd:bf: 63:53:d3:4a:71:73:ff:ed:2b:1d:51:dc:42:ac:ce:4d:f5:4f: 65:0b:6d:fa:08:e0:32:09:cb:e0:24:f8:ce:35:cc:3d:f7:ed: 5d:43:a3:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bdEIv16lZSJheQ/s/AeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz Yzc1NTYwHhcNMjUxMjIxMDEwMjIyWhcNMjUxMjIyMDEwMjIyWjAzMTEwLwYDVQQD EygyYjUxY2UxZGIxMDQxYzA0ZmQ3YzNjNGMwMGYzMWEwNTA2MGY5OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39nuOGXon97kKPZTwyRhOl48kwRb YkuwLilSSR5UFdbI6Le1SMBTvCFEJ4hwt3x5CyJnAs301eHdb0mLcfM+UW84Smrw dJQm0WWD3zY0BEM4uq/1BpSiPO2SF8WX8VjkBpcOEbfO1N2quaQe4n/gLVqRZ7oM qU5x2qnG2YCznKnTOwQe1pjT5mfzyArDliXHadrt0yicspPGS4PDx2xO/X5QRqil e4fLK6lVLijQT9rq6pYupSLQ0beASk00l98Lhu/fCAuGTaOZO8bsg0UP8fdfqw30 uAQ2ENd+WTYicDTu0OlAS5JLhTj2Ly7JYCimSXCY8piEgkEYeSDUqGWEiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtRzh2xBBwE/Xw8TADzGgUGD5myMB8GA1UdIwQY MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSro8H/V bf1qSmeZ2KRcpvJB69N7W9UtdmWW0irlpVoq/S0Q2Tf2WdXamRRkQbTfQIEl47eU e1rpwdRppnx35uHjM8cPnHKvrV21yw2M0IL1autGGE5zIMPitjOFB3w8RiYMlBIy /Ndz+VAbg1yJ8uEe9SdoDldUi/e9o/V0kpTkK+66BjSlAkrDr75Od4VDERxnqJlU whzgTXRYweu67KSrndJXAb30P62GVD5INm2IooisSxAY8TfHQKAjvarNnXzj+Fow zjtMbM9RtrP2V0tRya14w82/Y1PTSnFz/+0rHVHcQqzOTfVPZQtt+gjgMgnL4CT4 zjXMPfftXUOj8w== -----END CERTIFICATE-----Generated at Sun Dec 21 09:13:02 2025 by rpki-client