This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json) Hash identifier: IBY4pib+xHve6ptJMzdodcEGReU6Luh6GFJ5SANQFx4= Subject key identifier: 36:D1:A6:CC:BB:EC:A8:46:78:00:7A:3A:74:35:F5:4E:D5:DA:A5:22 Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96 Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196 Certificate serial: 019B552B42716E0C92CA1F64AAAA2F248DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft Manifest number: 0E3B Signing time: Thu 25 Dec 2025 11:00:56 +0000 Manifest this update: Thu 25 Dec 2025 11:00:56 +0000 Manifest next update: Fri 26 Dec 2025 11:00:56 +0000 Files and hashes: 1: FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa (hash: 7pDJDV3PAprmagYY0WEztJ7b9H5DGoPcWbYIPWhc9l8=) 2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: 9R4aZs52AXWN5PGw3XBc93FaCkqzZ/6NK5H/mgctdkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:42:71:6e:0c:92:ca:1f:64:aa:aa:2f:24:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196 Validity Not Before: Dec 25 11:00:56 2025 GMT Not After : Dec 26 11:00:56 2025 GMT Subject: CN=36d1a6ccbbeca84678007a3a7435f54ed5daa522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:64:c4:34:7e:05:88:16:90:07:20:38:e4: 1e:20:64:fb:56:27:2f:c0:db:44:e2:2b:ef:92:93: ba:e0:42:35:68:17:95:70:0f:27:19:db:4b:97:3d: 14:0e:51:e2:38:b4:15:cc:f3:cc:cb:f3:be:a1:3d: 72:42:96:2e:5f:67:aa:9b:ce:a2:98:ba:d8:1c:74: 1b:28:23:20:bf:6a:6b:18:9b:7f:fa:c2:6a:fb:51: c3:40:ce:5f:93:3b:d6:73:be:70:02:16:a6:33:ed: e0:63:56:3b:8b:b0:ab:fc:5b:f8:a7:45:94:40:f1: da:9f:50:ef:2a:76:61:73:99:0f:d9:0a:8b:f6:23: b2:46:37:3a:e4:9e:16:c2:48:fb:6f:d9:c1:c5:b4: f8:92:82:ae:1b:14:4d:8c:86:50:66:84:42:59:18: 9f:a0:84:89:56:ae:18:54:ae:08:93:f7:3c:19:99: 28:ff:db:d7:92:f4:cf:e7:f4:71:f7:0a:5c:1d:b0: bf:b7:fc:c5:9b:e4:88:6a:a7:f2:39:e0:7b:55:4a: 5f:0c:8e:4f:ba:86:9f:f3:d7:c4:fe:8a:43:82:57: de:61:b3:90:3e:88:cd:b0:5d:68:5a:f9:e7:c6:2d: 1f:fc:bb:7e:50:44:76:20:e9:21:2e:86:51:9e:bb: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D1:A6:CC:BB:EC:A8:46:78:00:7A:3A:74:35:F5:4E:D5:DA:A5:22 X509v3 Authority Key Identifier: keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:6a:7d:01:b7:2c:2c:6f:04:88:cb:f2:e2:2b:a5:26:4c:7b: 08:c8:9c:3a:57:82:6b:06:a6:c4:1b:d4:24:ee:74:c5:9a:b1: 56:a9:0f:f0:3d:df:d7:e6:89:03:4b:53:d5:d7:60:50:d0:6b: 01:5c:3f:a1:18:a5:89:72:11:ad:43:e2:38:45:8c:e6:4c:49: 88:77:80:1b:a9:d9:fe:77:4d:54:bc:f4:aa:72:1f:f5:20:80: 2f:99:0f:bc:a7:c5:ea:ce:11:14:67:95:f1:9d:65:ea:2d:54: fb:79:b7:df:86:b5:ac:e7:5b:23:bb:5d:07:4c:44:f2:bf:df: f8:f9:8f:a8:2b:47:cd:e4:3c:08:ca:c3:e6:d1:b2:10:c0:7b: 26:1d:f3:d4:06:f7:df:be:0e:97:1e:0d:16:fe:92:82:bc:9d: 32:be:61:e4:f8:e0:86:05:b6:b7:ee:cd:25:c5:df:8d:49:d1: 94:e3:cb:ef:ec:8d:e8:23:d8:97:6b:a6:68:d0:6e:1f:79:84: ee:26:50:80:0c:96:48:44:58:90:52:ee:be:20:58:10:51:83: 6d:81:5c:1a:ed:98:9b:c8:d7:bd:59:a7:05:e8:1a:70:30:1f: db:de:30:0a:41:62:17:bf:5b:7b:86:81:05:bc:28:d2:9d:d7: 65:05:56:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK0JxbgySyh9kqqovJI2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2 NGQxOTYwHhcNMjUxMjI1MTEwMDU2WhcNMjUxMjI2MTEwMDU2WjAzMTEwLwYDVQQD EygzNmQxYTZjY2JiZWNhODQ2NzgwMDdhM2E3NDM1ZjU0ZWQ1ZGFhNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzxkxDR+BYgWkAcgOOQeIGT7Vicv wNtE4ivvkpO64EI1aBeVcA8nGdtLlz0UDlHiOLQVzPPMy/O+oT1yQpYuX2eqm86i mLrYHHQbKCMgv2prGJt/+sJq+1HDQM5fkzvWc75wAhamM+3gY1Y7i7Cr/Fv4p0WU QPHan1DvKnZhc5kP2QqL9iOyRjc65J4Wwkj7b9nBxbT4koKuGxRNjIZQZoRCWRif oISJVq4YVK4Ik/c8GZko/9vXkvTP5/Rx9wpcHbC/t/zFm+SIaqfyOeB7VUpfDI5P uoaf89fE/opDglfeYbOQPojNsF1oWvnnxi0f/Lt+UER2IOkhLoZRnrsntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbRpsy77KhGeAB6OnQ19U7V2qUiMB8GA1UdIwQY MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt YTQ2MTE2OWYxZGMyLzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWp9Abcs LG8EiMvy4iulJkx7CMicOleCawamxBvUJO50xZqxVqkP8D3f1+aJA0tT1ddgUNBr AVw/oRiliXIRrUPiOEWM5kxJiHeAG6nZ/ndNVLz0qnIf9SCAL5kPvKfF6s4RFGeV 8Z1l6i1U+3m334a1rOdbI7tdB0xE8r/f+PmPqCtHzeQ8CMrD5tGyEMB7Jh3z1Ab3 374Olx4NFv6SgrydMr5h5PjghgW2t+7NJcXfjUnRlOPL7+yN6CPYl2umaNBuH3mE 7iZQgAyWSERYkFLuviBYEFGDbYFcGu2Ym8jXvVmnBegacDAf294wCkFiF79be4aB Bbwo0p3XZQVWoA== -----END CERTIFICATE-----Generated at Thu Dec 25 19:46:18 2025 by rpki-client