This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json) Hash identifier: gvST01zdIx7NjNUyeC3Fg+PJq9diMF6j/e3WHilixAA= Subject key identifier: 67:97:49:25:96:CA:04:EB:23:57:C2:FB:F0:43:33:9E:25:A8:A1:5C Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Certificate serial: 019B3E6CA8A1D33C0B9AACFDC34BD7BC0CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 01:01:06 +0000 Manifest this update: Sun 21 Dec 2025 01:01:06 +0000 Manifest next update: Mon 22 Dec 2025 01:01:06 +0000 Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=) 2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=) 3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: TIg6oMakVmA3tx8TplIjL/SPSTKe/uTflhxAT+iEcJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:a8:a1:d3:3c:0b:9a:ac:fd:c3:4b:d7:bc:0c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Validity Not Before: Dec 21 01:01:06 2025 GMT Not After : Dec 22 01:01:06 2025 GMT Subject: CN=6797492596ca04eb2357c2fbf043339e25a8a15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:80:2c:a7:52:18:42:5d:23:06:a7:02:bb: 2d:13:2a:58:ca:32:65:17:8b:b9:46:2d:b4:a3:a7: 69:af:9d:90:91:f5:72:12:92:2a:43:a9:d7:ad:db: fe:eb:3d:2a:a3:86:ee:91:2c:7d:13:a5:9b:98:0e: b0:3f:0b:7f:31:92:73:0b:1d:35:32:9a:2c:81:bf: 0f:4c:08:02:6f:1e:6a:7d:16:9f:2e:0c:be:2d:3d: 88:06:a6:f0:3c:01:37:6c:76:3f:7b:4b:58:f3:c9: aa:52:fb:10:99:cc:5a:19:98:8f:d9:85:79:9e:fa: 4c:58:95:58:77:12:82:b6:e2:45:36:22:0c:e0:7e: 19:71:bd:5c:35:95:ee:64:1e:c8:68:4c:87:bf:b9: 90:29:a0:e8:09:bb:0e:b7:bf:4c:be:38:79:ff:93: 81:b5:37:dd:b2:5e:4b:ec:a6:82:80:02:cd:fa:0a: 51:e9:17:54:82:d5:90:b4:11:1e:31:d0:a5:6d:83: ba:80:c7:c7:2f:6a:b9:bc:56:2b:bf:38:4b:66:3b: fe:26:bb:14:f6:c0:2a:b4:e2:f6:c0:a3:e2:a5:e4: 38:4c:d6:b4:28:3d:c3:d2:16:f3:c1:4b:80:04:5e: 65:47:e8:a7:07:53:6a:c2:4b:79:90:bf:09:fb:5d: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:97:49:25:96:CA:04:EB:23:57:C2:FB:F0:43:33:9E:25:A8:A1:5C X509v3 Authority Key Identifier: keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:bc:86:e7:a0:c8:00:26:7c:5f:db:90:26:07:e7:c3:61:52: 1c:d5:e1:a5:2f:98:a6:3c:6b:8e:09:af:65:40:68:3f:91:90: e4:68:89:5b:f2:6d:f6:60:3a:fa:02:23:9a:66:33:d6:cc:15: 3d:c8:9d:99:a2:99:b9:a9:2b:53:a5:46:96:03:63:e4:bf:a8: e4:d0:3f:26:50:87:21:72:b6:85:1f:12:61:06:85:dc:10:90: 94:ec:18:fd:ee:04:98:c4:ab:39:15:30:f6:9c:93:8d:b6:82: 84:14:c2:26:5d:99:67:4b:9a:76:bb:34:d7:56:f7:34:a6:12: 0a:64:45:e3:c1:4b:3b:34:18:37:d7:38:17:47:18:d5:56:a6: b3:16:a7:50:fd:fe:b4:49:f7:5b:85:3c:ab:d1:81:54:4d:e8: f9:35:6a:95:ef:56:d3:f3:35:ad:ac:c6:e5:10:f4:58:e4:a0: 5e:a7:38:e6:a6:3d:4c:36:f5:bb:0f:09:ab:14:24:65:c7:80: 60:08:c0:31:d5:45:fb:34:64:d3:8b:51:5d:b6:82:56:88:ca: 83:35:ce:1a:9a:e5:d7:3c:4f:d2:84:0e:26:41:1c:09:29:c2: f1:34:6d:6c:25:96:c2:a1:a4:b4:35:06:26:a0:68:d9:08:7e: 76:42:58:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bKih0zwLmqz9w0vXvAztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmExNWQ0N2JhNGY0NDgyNzY0NDcyZDhkOTcxNDZhMWVi YmJmODYwHhcNMjUxMjIxMDEwMTA2WhcNMjUxMjIyMDEwMTA2WjAzMTEwLwYDVQQD Eyg2Nzk3NDkyNTk2Y2EwNGViMjM1N2MyZmJmMDQzMzM5ZTI1YThhMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRyALKdSGEJdIwanArstEypYyjJl F4u5Ri20o6dpr52QkfVyEpIqQ6nXrdv+6z0qo4bukSx9E6WbmA6wPwt/MZJzCx01 Mposgb8PTAgCbx5qfRafLgy+LT2IBqbwPAE3bHY/e0tY88mqUvsQmcxaGZiP2YV5 nvpMWJVYdxKCtuJFNiIM4H4Zcb1cNZXuZB7IaEyHv7mQKaDoCbsOt79Mvjh5/5OB tTfdsl5L7KaCgALN+gpR6RdUgtWQtBEeMdClbYO6gMfHL2q5vFYrvzhLZjv+JrsU 9sAqtOL2wKPipeQ4TNa0KD3D0hbzwUuABF5lR+inB1Nqwkt5kL8J+10wWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeXSSWWygTrI1fC+/BDM54lqKFcMB8GA1UdIwQY MBaAFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAt ZmUzYjkxOGMzMDk3LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAtZmUzYjkxOGMzMDk3 LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLyG56DI ACZ8X9uQJgfnw2FSHNXhpS+YpjxrjgmvZUBoP5GQ5GiJW/Jt9mA6+gIjmmYz1swV PcidmaKZuakrU6VGlgNj5L+o5NA/JlCHIXK2hR8SYQaF3BCQlOwY/e4EmMSrORUw 9pyTjbaChBTCJl2ZZ0uadrs011b3NKYSCmRF48FLOzQYN9c4F0cY1VamsxanUP3+ tEn3W4U8q9GBVE3o+TVqle9W0/M1razG5RD0WOSgXqc45qY9TDb1uw8JqxQkZceA YAjAMdVF+zRk04tRXbaCVojKgzXOGprl1zxP0oQOJkEcCSnC8TRtbCWWwqGktDUG JqBo2Qh+dkJYkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:38 2025 by rpki-client