This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json) Hash identifier: 81d1l1V93m6+6BaJWo3GsHOGVeySDy0vUBjbmiAdNtw= Subject key identifier: CB:C1:63:6A:03:24:92:FE:DF:CB:E8:32:8A:5C:9A:E3:CB:2B:A8:14 Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67 Certificate serial: 019B53066BDE9BFD100B3647AEA2510AACB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft Manifest number: 1792 Signing time: Thu 25 Dec 2025 01:01:28 +0000 Manifest this update: Thu 25 Dec 2025 01:01:28 +0000 Manifest next update: Fri 26 Dec 2025 01:01:28 +0000 Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=) 2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: ldm1hmoy2Z8UvoOO8dFymZAFGROwdgRuL71oFNJa+7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:6b:de:9b:fd:10:0b:36:47:ae:a2:51:0a:ac:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67 Validity Not Before: Dec 25 01:01:28 2025 GMT Not After : Dec 26 01:01:28 2025 GMT Subject: CN=cbc1636a032492fedfcbe8328a5c9ae3cb2ba814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:3e:18:d5:08:72:5f:90:88:ea:8c:07:cf: c1:e6:af:75:b7:0d:94:e8:53:83:52:2d:b4:2d:87: f2:46:08:0d:50:40:67:37:76:52:b1:5b:d0:73:3f: 9c:d4:01:11:cd:ef:48:a2:f2:ed:1b:a9:a6:85:bd: 6b:1f:35:89:0a:47:79:43:06:86:54:d0:c2:b8:27: 69:57:29:07:f2:b3:bb:6b:fb:f6:13:51:dc:44:d6: 34:17:6b:ff:67:b7:4b:87:a7:51:4e:8f:27:1b:78: 37:b4:56:b5:4d:53:f4:20:1d:79:16:29:c1:71:64: f6:82:88:ad:16:6b:01:9e:35:51:a6:a4:ef:9f:4b: f8:bc:75:b8:eb:5d:d9:f7:11:71:4c:39:68:05:df: a0:2f:03:b3:f2:44:7b:c9:83:8c:5c:35:36:58:b8: a0:be:b0:aa:42:96:b6:75:8b:e7:d9:84:36:9a:bb: 54:e6:b2:58:3c:68:ea:20:c4:6c:5f:3d:a7:cf:b6: 27:3d:eb:1a:1e:19:77:9c:ac:96:47:22:b6:59:3c: 20:72:93:bf:a5:fe:be:39:3d:98:da:94:54:98:a0: a2:67:8e:3e:c1:d8:9d:b7:b1:6f:00:c2:29:3e:69: 8a:b3:8b:51:82:9b:d9:e3:a0:72:ac:8d:4b:5a:84: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:63:6A:03:24:92:FE:DF:CB:E8:32:8A:5C:9A:E3:CB:2B:A8:14 X509v3 Authority Key Identifier: keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:7d:f7:3c:c9:11:99:9f:21:12:5c:94:79:da:a6:e7:21:ac: 52:20:f5:8c:f0:54:f3:67:c3:42:0b:b7:a1:e0:bd:41:f9:5b: 13:ef:aa:ef:81:1f:49:40:b1:1f:31:a0:ff:8d:d5:71:66:2c: e4:a5:4e:a0:19:0a:3f:bc:aa:e9:dc:ac:b3:f2:01:64:f3:ff: fc:60:b9:c5:29:6c:01:b1:f1:6b:d9:8a:13:6a:c2:a1:73:cf: 2f:a1:51:1b:f3:c4:34:ae:b2:73:bd:57:d7:29:63:2e:d3:c0: f9:c6:81:e4:06:16:25:60:0a:6c:57:79:15:e9:1a:65:ac:26: 3b:38:d4:1a:fc:39:c9:2b:b1:c0:3a:62:68:ff:95:ec:18:5e: 0a:f4:07:29:20:1b:b3:78:e4:a2:96:d0:3a:7a:90:eb:5d:f7: 0d:37:db:ae:58:c8:1c:e1:82:c6:26:0b:5c:bc:5e:d3:6a:fa: 4e:a7:cf:fe:62:42:5b:ad:d2:b1:2b:b4:12:bc:7d:01:71:72: df:7b:b2:d3:72:9e:c0:20:ac:29:df:15:5c:ba:7d:22:14:c3: 82:4a:32:78:44:97:b3:c4:39:17:ea:38:af:b4:80:17:9b:be: 93:7f:6b:fd:41:23:ca:ae:48:05:53:6f:bc:64:8d:f3:25:01: 1d:f6:05:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBmvem/0QCzZHrqJRCqywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTEwYmVmOWM1Yjk2YTgzMWM3YWJmOTU1OTI3NDRiYmFm MWVlNjcwHhcNMjUxMjI1MDEwMTI4WhcNMjUxMjI2MDEwMTI4WjAzMTEwLwYDVQQD EyhjYmMxNjM2YTAzMjQ5MmZlZGZjYmU4MzI4YTVjOWFlM2NiMmJhODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki8+GNUIcl+QiOqMB8/B5q91tw2U 6FODUi20LYfyRggNUEBnN3ZSsVvQcz+c1AERze9IovLtG6mmhb1rHzWJCkd5QwaG VNDCuCdpVykH8rO7a/v2E1HcRNY0F2v/Z7dLh6dRTo8nG3g3tFa1TVP0IB15FinB cWT2goitFmsBnjVRpqTvn0v4vHW4613Z9xFxTDloBd+gLwOz8kR7yYOMXDU2WLig vrCqQpa2dYvn2YQ2mrtU5rJYPGjqIMRsXz2nz7YnPesaHhl3nKyWRyK2WTwgcpO/ pf6+OT2Y2pRUmKCiZ44+wdidt7FvAMIpPmmKs4tRgpvZ46ByrI1LWoQKqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvBY2oDJJL+38voMopcmuPLK6gUMB8GA1UdIwQY MBaAFMwRC++cW5aoMcer+VWSdEu68e5nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2Qt YzhhY2I3MTczYjYyLzEvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2QtYzhhY2I3MTczYjYy LzEvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcX33PMkR mZ8hElyUedqm5yGsUiD1jPBU82fDQgu3oeC9QflbE++q74EfSUCxHzGg/43VcWYs 5KVOoBkKP7yq6dyss/IBZPP//GC5xSlsAbHxa9mKE2rCoXPPL6FRG/PENK6yc71X 1yljLtPA+caB5AYWJWAKbFd5FekaZawmOzjUGvw5ySuxwDpiaP+V7BheCvQHKSAb s3jkopbQOnqQ6133DTfbrljIHOGCxiYLXLxe02r6TqfP/mJCW63SsSu0Erx9AXFy 33uy03KewCCsKd8VXLp9IhTDgkoyeESXs8Q5F+o4r7SAF5u+k39r/UEjyq5IBVNv vGSN8yUBHfYF6A== -----END CERTIFICATE-----Generated at Thu Dec 25 07:14:21 2025 by rpki-client