This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json) Hash identifier: uFZ/lB9tqln/rq5aGbHhBcDeUAWlkiJSxHe4gz7o8SQ= Subject key identifier: 48:4F:BF:3F:2B:E0:FF:92:89:55:D4:18:A9:37:A5:19:B1:3D:73:3C Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb Certificate serial: 019B2E1D48B11821EDFF6DA72B381492951E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft Manifest number: 0568 Signing time: Wed 17 Dec 2025 21:00:29 +0000 Manifest this update: Wed 17 Dec 2025 21:00:29 +0000 Manifest next update: Thu 18 Dec 2025 21:00:29 +0000 Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=) 2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: WCwX+E9hO3yIYnwiEyq+wbKHpIVFPcQgxidb0W6Vucg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:48:b1:18:21:ed:ff:6d:a7:2b:38:14:92:95:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb Validity Not Before: Dec 17 21:00:29 2025 GMT Not After : Dec 18 21:00:29 2025 GMT Subject: CN=484fbf3f2be0ff928955d418a937a519b13d733c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:82:98:75:74:e8:ac:cc:bd:2b:50:1a:a8: e3:99:c1:c1:e4:05:60:2c:95:4f:e4:1c:cd:66:65: 6c:d6:7a:73:19:af:e5:a4:b2:a5:fc:fb:43:e2:7e: 36:52:a9:3e:fe:43:55:47:39:71:1c:ba:84:76:01: 95:f4:21:41:c8:8e:e5:09:00:ab:a2:d5:f9:b3:c3: de:19:89:11:75:85:f7:9a:7d:28:0d:e6:a9:77:7f: 7e:b2:3c:b2:ce:52:87:a9:45:2e:14:58:18:d9:9d: 87:19:e3:ee:41:69:a8:c8:59:a0:03:04:72:09:35: 33:60:82:a5:ae:9a:b2:03:a1:1d:9d:eb:28:f2:84: d3:2f:a3:61:0c:fb:2d:b6:c8:34:89:d5:78:09:6c: dc:e0:30:48:d8:e4:3d:bb:c8:9e:a5:a4:e0:1d:37: 66:09:87:b3:77:9e:5e:c9:2b:d8:5e:dc:85:e7:9e: 0d:72:8c:c4:de:ab:e6:19:46:b0:37:1c:f3:f8:2c: 72:53:69:f7:b0:22:50:13:b7:7a:3a:12:b8:d7:9b: 55:4d:e4:1e:3a:16:da:3a:01:a6:83:94:c7:17:82: d3:46:5f:30:a7:62:ec:d8:a8:33:30:aa:a0:a7:ce: 3b:5d:58:ee:a0:c7:14:48:9e:3e:91:83:20:68:69: fd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:BF:3F:2B:E0:FF:92:89:55:D4:18:A9:37:A5:19:B1:3D:73:3C X509v3 Authority Key Identifier: keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:ea:66:1c:a0:08:94:b5:8a:c5:d1:79:46:c9:63:e3:b9: 36:bd:b5:1a:37:c6:66:d7:87:9d:3d:20:d8:34:a8:8c:1b:d0: 3a:88:5d:cd:42:23:ba:71:7a:ec:62:ce:bb:67:f0:16:9b:0f: af:40:ed:db:43:79:e5:aa:23:59:f4:09:50:e0:40:8b:d1:d4: bd:4c:a2:da:e5:95:ee:a1:4c:c2:44:69:7f:49:91:0e:c7:6a: 08:6b:cf:1f:f6:f2:ea:de:8e:e0:18:0a:8f:dd:42:3a:a4:2d: 3a:4d:7f:b6:e2:3e:9a:af:c7:56:a1:8a:bd:83:a3:23:a6:5d: 29:20:21:5c:c3:f6:9d:65:c6:08:fd:bc:fa:bd:5f:b0:0f:99: b3:af:e9:47:fd:60:7b:0c:d8:16:8a:4f:fe:51:5f:ad:da:06: 04:b6:36:79:7f:ed:7c:87:64:b0:5f:13:3f:7f:e5:21:0e:bf: fc:47:7f:87:ed:11:67:da:f1:32:fb:33:4a:7f:36:a6:0f:ed: 34:aa:5a:4e:37:a1:c3:9b:c5:2b:5a:b1:fe:f4:26:38:fb:d2: 38:79:63:f2:90:6c:e8:1d:65:1e:ea:0d:5b:07:5a:11:c4:8d: 94:a5:db:77:90:6c:a3:fa:21:6a:17:08:d4:af:bb:a7:a5:e0: 1a:07:e6:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHUixGCHt/22nKzgUkpUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjEyOGE1YWRjYmNjZGYxNWNiOTc5YWQ2YWJmMmI5NjQw ZmRiZGIwHhcNMjUxMjE3MjEwMDI5WhcNMjUxMjE4MjEwMDI5WjAzMTEwLwYDVQQD Eyg0ODRmYmYzZjJiZTBmZjkyODk1NWQ0MThhOTM3YTUxOWIxM2Q3MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGCmHV06KzMvStQGqjjmcHB5AVg LJVP5BzNZmVs1npzGa/lpLKl/PtD4n42Uqk+/kNVRzlxHLqEdgGV9CFByI7lCQCr otX5s8PeGYkRdYX3mn0oDeapd39+sjyyzlKHqUUuFFgY2Z2HGePuQWmoyFmgAwRy CTUzYIKlrpqyA6Edneso8oTTL6NhDPsttsg0idV4CWzc4DBI2OQ9u8iepaTgHTdm CYezd55eySvYXtyF554NcozE3qvmGUawNxzz+CxyU2n3sCJQE7d6OhK415tVTeQe OhbaOgGmg5THF4LTRl8wp2Ls2KgzMKqgp847XVjuoMcUSJ4+kYMgaGn9+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhPvz8r4P+SiVXUGKk3pRmxPXM8MB8GA1UdIwQY MBaAFGWxKKWty8zfFcuXmtar8rlkD9vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUt YmQ4NmQ0YjMyYzU4LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUtYmQ4NmQ0YjMyYzU4 LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcInqZhyg CJS1isXReUbJY+O5Nr21GjfGZteHnT0g2DSojBvQOohdzUIjunF67GLOu2fwFpsP r0Dt20N55aojWfQJUOBAi9HUvUyi2uWV7qFMwkRpf0mRDsdqCGvPH/by6t6O4BgK j91COqQtOk1/tuI+mq/HVqGKvYOjI6ZdKSAhXMP2nWXGCP28+r1fsA+Zs6/pR/1g ewzYFopP/lFfrdoGBLY2eX/tfIdksF8TP3/lIQ6//Ed/h+0RZ9rxMvszSn82pg/t NKpaTjehw5vFK1qx/vQmOPvSOHlj8pBs6B1lHuoNWwdaEcSNlKXbd5Bso/ohahcI 1K+7p6XgGgfmwQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:22:53 2025 by rpki-client