This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json) Hash identifier: eGWaZrajlend8ptpu3TGdvnM8eVfNj+nbT+UiYOsjhM= Subject key identifier: 67:B7:36:EB:96:66:6E:83:77:B8:19:6F:7D:5E:7B:91:C4:DC:56:0B Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4 Certificate serial: 019B262D7C792473316C863D9F01AF9CB1F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft Manifest number: 3E Signing time: Tue 16 Dec 2025 08:01:13 +0000 Manifest this update: Tue 16 Dec 2025 08:01:13 +0000 Manifest next update: Wed 17 Dec 2025 08:01:13 +0000 Files and hashes: 1: 1-p3QeTY1ZxhyRMnOfJn0ixWHq9s.asa (hash: pblQKRL+2L4/KfUMB5sc7FC0Ejb3N8yKez82SqNphag=) 2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: l7o+6uB/krSKpw/nFt4pIR8WwvPPI7LecjjL2sHvRXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:7c:79:24:73:31:6c:86:3d:9f:01:af:9c:b1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4 Validity Not Before: Dec 16 08:01:13 2025 GMT Not After : Dec 17 08:01:13 2025 GMT Subject: CN=67b736eb96666e8377b8196f7d5e7b91c4dc560b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:16:42:03:89:aa:3e:2c:2a:ac:b6:d6:d4:82: eb:c4:11:33:ca:dc:0f:f3:f1:b8:03:1f:a7:85:96: b7:79:da:07:78:16:7e:12:4e:b0:b6:44:1c:b3:a6: f0:4f:10:29:51:42:08:4f:ba:6f:84:6c:3e:10:48: 0a:a6:b6:cb:2a:c5:fb:81:66:f5:e7:ea:6a:ac:92: 33:28:da:1b:6b:85:61:a2:c5:ee:47:9a:e2:20:83: 4b:52:d9:72:b4:82:d6:35:43:c2:73:fe:b0:c6:db: 30:c0:fb:fa:b2:38:37:bd:a1:56:57:c3:8f:55:16: 71:51:82:09:6e:d2:24:6c:36:5c:57:16:35:45:a9: f7:a3:a2:1e:f7:b0:7b:e8:04:29:b8:b6:05:89:b9: b1:b5:7a:43:e5:69:a8:1f:da:dc:15:47:e7:c4:08: e9:e6:4d:9c:21:62:94:cf:5a:85:5b:a2:ea:65:18: c9:83:70:b8:ef:ef:3f:62:c2:3d:b3:8e:9d:c2:d4: 73:6e:49:b1:45:8e:74:1a:56:da:29:f1:86:ad:68: 49:a5:de:ca:04:a5:68:c2:15:e3:0e:11:31:f9:f3: c8:23:66:2f:46:cd:01:dc:af:13:94:ae:99:36:83: 70:e2:78:1d:df:6b:3f:c1:65:29:6f:95:f2:63:4f: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B7:36:EB:96:66:6E:83:77:B8:19:6F:7D:5E:7B:91:C4:DC:56:0B X509v3 Authority Key Identifier: keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ff:4b:82:6e:ff:6f:d7:e8:9b:27:e1:2f:67:fd:74:75:95: 94:24:30:e0:46:4e:90:3c:bb:03:f8:07:e9:7e:c6:51:47:3b: 94:a5:b0:dc:7a:71:1c:5f:fb:bf:85:33:43:7d:0e:4e:5c:d2: 0f:9f:86:e1:47:21:6b:a8:a8:55:f3:91:99:0f:00:2d:dd:f2: 77:a8:fa:d4:3c:79:16:c2:a8:17:37:34:6a:0d:5f:6a:22:e0: 1b:a4:d1:fe:b1:7f:c3:cc:74:bb:38:07:a2:e6:ff:db:ba:e6: e4:0d:00:23:cf:d4:1a:a8:c5:7f:5b:95:31:a2:99:04:b5:b5: fc:41:19:bc:11:96:75:08:48:90:2c:72:03:6d:ed:f7:32:f9: 95:e4:bf:1e:7f:8f:0b:5b:6a:5d:12:d6:ec:a7:01:7a:d2:e5: 88:bd:99:be:e4:53:dc:8a:38:19:6e:95:05:f7:36:95:f9:a9: ab:59:3f:79:cd:91:cf:35:df:56:99:b7:60:9c:4a:cb:35:2a: 60:3f:cc:32:8e:38:5d:d1:81:ee:63:1d:4b:8b:17:d1:d4:51: 65:43:73:4c:5e:3c:1c:68:46:ff:00:10:40:59:a8:5a:80:67: e9:7e:5b:95:98:9e:ba:d8:6c:5a:a3:8b:cb:95:9c:a8:4f:08: 43:f7:bf:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLXx5JHMxbIY9nwGvnLH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh NzVjZDQwHhcNMjUxMjE2MDgwMTEzWhcNMjUxMjE3MDgwMTEzWjAzMTEwLwYDVQQD Eyg2N2I3MzZlYjk2NjY2ZTgzNzdiODE5NmY3ZDVlN2I5MWM0ZGM1NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhZCA4mqPiwqrLbW1ILrxBEzytwP 8/G4Ax+nhZa3edoHeBZ+Ek6wtkQcs6bwTxApUUIIT7pvhGw+EEgKprbLKsX7gWb1 5+pqrJIzKNoba4VhosXuR5riIINLUtlytILWNUPCc/6wxtswwPv6sjg3vaFWV8OP VRZxUYIJbtIkbDZcVxY1Ran3o6Ie97B76AQpuLYFibmxtXpD5WmoH9rcFUfnxAjp 5k2cIWKUz1qFW6LqZRjJg3C47+8/YsI9s46dwtRzbkmxRY50GlbaKfGGrWhJpd7K BKVowhXjDhEx+fPII2YvRs0B3K8TlK6ZNoNw4ngd32s/wWUpb5XyY0+R6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGe3NuuWZm6Dd7gZb31ee5HE3FYLMB8GA1UdIwQY MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt ZTI5MWE1MmE5ZDE1LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1 LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP9Lgm7/ b9fomyfhL2f9dHWVlCQw4EZOkDy7A/gH6X7GUUc7lKWw3HpxHF/7v4UzQ30OTlzS D5+G4Ucha6ioVfORmQ8ALd3yd6j61Dx5FsKoFzc0ag1faiLgG6TR/rF/w8x0uzgH oub/27rm5A0AI8/UGqjFf1uVMaKZBLW1/EEZvBGWdQhIkCxyA23t9zL5leS/Hn+P C1tqXRLW7KcBetLliL2ZvuRT3Io4GW6VBfc2lfmpq1k/ec2RzzXfVpm3YJxKyzUq YD/MMo44XdGB7mMdS4sX0dRRZUNzTF48HGhG/wAQQFmoWoBn6X5blZieuthsWqOL y5WcqE8IQ/e/6g== -----END CERTIFICATE-----Generated at Tue Dec 16 12:52:54 2025 by rpki-client