This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft File: ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json) Hash identifier: nk4huzp4HoOqNWPiv2/RUbnwNLUZIX2sqXnudlA/sVo= Subject key identifier: FD:AB:FD:CE:52:70:10:CE:74:0C:A3:91:B0:87:01:6F:A5:96:FD:CC Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Certificate serial: 019B3C10709F9F49935793CB73FEABD5DC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft Manifest number: 12A7 Signing time: Sat 20 Dec 2025 14:01:08 +0000 Manifest this update: Sat 20 Dec 2025 14:01:08 +0000 Manifest next update: Sun 21 Dec 2025 14:01:08 +0000 Files and hashes: 1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=) 2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=) 3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: fxWTiQwVE7ctId9JrP6jkJtX6YrwckTbVzQ+i1V53cY=) 4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:70:9f:9f:49:93:57:93:cb:73:fe:ab:d5:dc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Validity Not Before: Dec 20 14:01:08 2025 GMT Not After : Dec 21 14:01:08 2025 GMT Subject: CN=fdabfdce527010ce740ca391b087016fa596fdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:c3:6d:30:df:77:56:5b:01:84:24:1f:f9: 7b:c8:35:5d:ae:f0:ea:bb:7b:22:e1:29:39:5d:3f: 5f:63:bc:7a:93:d8:87:27:03:40:21:98:56:49:82: 59:87:02:bf:16:52:f6:88:ac:32:3c:39:74:d3:56: 1b:17:7a:9d:37:97:d4:73:b2:b2:37:8c:82:aa:50: 36:c0:4d:64:a9:6b:38:1f:c8:64:75:63:12:b4:c3: c9:ad:77:83:f4:ce:39:19:56:e3:9f:5c:46:c6:f0: a6:a5:8c:6b:98:ba:44:26:be:d8:eb:49:e0:df:e6: 54:6a:f7:d9:8d:a8:ce:eb:a3:e2:93:82:4c:92:64: 25:6f:d9:83:37:a5:0f:5b:1a:7d:e6:1d:92:c9:60: 60:57:4f:f1:6b:8c:c0:c9:97:c7:cc:0c:6c:14:05: bb:a7:a6:76:70:48:4a:87:d4:a4:0d:a8:6a:8d:a3: 78:e5:69:39:9d:97:8c:34:36:85:24:02:b5:17:8c: 5a:f3:41:46:18:1b:8a:f2:e3:a6:65:88:74:8b:de: 80:2f:0e:0d:52:12:99:aa:66:9e:37:8d:ab:59:f4: db:07:ad:ef:15:dc:41:d8:7c:c3:09:89:f8:c0:69: ad:20:c4:8d:9e:18:97:52:ec:31:cb:3d:0e:75:f1: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AB:FD:CE:52:70:10:CE:74:0C:A3:91:B0:87:01:6F:A5:96:FD:CC X509v3 Authority Key Identifier: keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:23:1e:2a:30:3a:04:ca:91:7f:69:a9:e0:2d:0d:04:01:84: bb:7a:f5:63:76:c6:cb:6d:03:0d:e4:af:bc:41:1a:cf:f2:58: e1:35:db:7b:a0:d3:8a:23:a4:db:ba:2a:43:19:c5:6f:1c:3d: 35:ef:c9:2f:5f:d2:73:19:87:73:05:7d:aa:ba:c4:3b:ca:d9: 80:5b:a3:81:11:5f:79:1d:6f:c9:f5:48:99:3e:9e:4a:79:62: 3f:d2:21:b7:7d:f4:e6:3e:c9:ac:c9:89:2c:2c:5c:d0:a3:5d: f0:76:14:d3:10:57:de:1b:63:04:cc:7c:50:5e:62:6a:6e:26: 37:ca:24:b5:a4:ee:d5:4b:09:18:00:07:fe:da:79:56:17:45: f0:f5:54:3b:d6:7a:1b:6f:55:2a:67:37:56:2b:8c:25:c9:1c: ce:ef:ae:4d:f2:bc:24:60:50:19:f2:83:62:3b:b8:41:88:73: 78:c2:4c:e3:bc:08:ac:fe:0c:97:17:df:96:74:9a:47:cf:4d: df:d5:9d:50:d5:ff:a3:63:ce:0f:99:df:f3:f5:6c:3c:47:b1: 05:a0:e8:3f:12:05:ab:7b:1c:1f:6b:59:45:6a:36:5b:e4:70: 6e:c9:97:b6:90:89:a0:6c:b4:c3:23:ff:96:0c:10:2e:86:8f: 87:58:ed:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHCfn0mTV5PLc/6r1dwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5 MGMxNTcwHhcNMjUxMjIwMTQwMTA4WhcNMjUxMjIxMTQwMTA4WjAzMTEwLwYDVQQD EyhmZGFiZmRjZTUyNzAxMGNlNzQwY2EzOTFiMDg3MDE2ZmE1OTZmZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLjDbTDfd1ZbAYQkH/l7yDVdrvDq u3si4Sk5XT9fY7x6k9iHJwNAIZhWSYJZhwK/FlL2iKwyPDl001YbF3qdN5fUc7Ky N4yCqlA2wE1kqWs4H8hkdWMStMPJrXeD9M45GVbjn1xGxvCmpYxrmLpEJr7Y60ng 3+ZUavfZjajO66Pik4JMkmQlb9mDN6UPWxp95h2SyWBgV0/xa4zAyZfHzAxsFAW7 p6Z2cEhKh9SkDahqjaN45Wk5nZeMNDaFJAK1F4xa80FGGBuK8uOmZYh0i96ALw4N UhKZqmaeN42rWfTbB63vFdxB2HzDCYn4wGmtIMSNnhiXUuwxyz0OdfG7FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2r/c5ScBDOdAyjkbCHAW+llv3MMB8GA1UdIwQY MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiMeKjA6 BMqRf2mp4C0NBAGEu3r1Y3bGy20DDeSvvEEaz/JY4TXbe6DTiiOk27oqQxnFbxw9 Ne/JL1/ScxmHcwV9qrrEO8rZgFujgRFfeR1vyfVImT6eSnliP9Iht3305j7JrMmJ LCxc0KNd8HYU0xBX3htjBMx8UF5iam4mN8oktaTu1UsJGAAH/tp5VhdF8PVUO9Z6 G29VKmc3ViuMJckczu+uTfK8JGBQGfKDYju4QYhzeMJM47wIrP4MlxfflnSaR89N 39WdUNX/o2POD5nf8/VsPEexBaDoPxIFq3scH2tZRWo2W+RwbsmXtpCJoGy0wyP/ lgwQLoaPh1jtWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:59:48 2025 by rpki-client