This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json) Hash identifier: hPLZd9ILQfcQD2RnyoNA9hBGYXZ/GPlgWMwphww75fI= Subject key identifier: DF:2C:95:A7:FD:36:DC:46:9C:5C:CD:C1:3A:37:C1:D3:3E:F1:95:AD Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5 Certificate serial: 019B35A023A7DB609B01C2C8DF984BEF499B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft Manifest number: 1509 Signing time: Fri 19 Dec 2025 08:00:45 +0000 Manifest this update: Fri 19 Dec 2025 08:00:45 +0000 Manifest next update: Sat 20 Dec 2025 08:00:45 +0000 Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=) 2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: 9RHg0y6LtOmRajozQ5a/ZW8R/g6hUFjPDpObn8UsZWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:23:a7:db:60:9b:01:c2:c8:df:98:4b:ef:49:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5 Validity Not Before: Dec 19 08:00:45 2025 GMT Not After : Dec 20 08:00:45 2025 GMT Subject: CN=df2c95a7fd36dc469c5ccdc13a37c1d33ef195ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:9a:dd:10:cb:14:7e:a4:b5:f6:0d:8a:6f: 68:9a:2e:0b:8c:45:2a:be:83:51:85:75:96:db:48: 22:39:42:74:8e:d2:25:5f:eb:2c:d6:e6:03:6f:f4: 41:00:c8:e7:17:c8:00:e2:26:83:48:55:9c:4a:b3: dc:71:63:f0:2e:93:4e:82:b6:a3:02:58:9f:66:f2: c0:07:5a:64:9c:b5:13:98:6b:35:ff:9c:6b:d1:6b: 67:fe:e6:99:6b:da:41:a6:94:c2:67:1e:57:79:e4: f0:6d:c5:fa:4d:28:f2:4a:49:21:35:db:04:19:61: 1e:c6:4d:98:99:95:3d:9b:bc:56:ac:95:95:33:3e: 7c:bb:06:c2:26:08:c2:42:1b:51:38:6a:5f:f9:b7: 06:ea:7b:17:cc:f6:1f:ca:35:6a:92:5d:35:15:19: 0f:60:f1:bb:45:35:83:aa:ef:62:83:c2:57:37:fb: af:c9:28:c4:29:8e:64:dd:a9:ca:fa:fe:71:0c:6f: 74:5e:b2:21:fa:57:1a:e0:ea:ea:32:52:a2:9d:a6: 94:ea:d1:20:1b:ee:77:0e:0d:b2:af:ab:3f:32:15: 31:08:f5:ea:97:86:c6:0f:67:6d:48:c2:e6:72:41: 66:f9:3a:a8:54:52:38:27:f8:98:0a:18:55:26:3b: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2C:95:A7:FD:36:DC:46:9C:5C:CD:C1:3A:37:C1:D3:3E:F1:95:AD X509v3 Authority Key Identifier: keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:55:02:bc:e2:8d:68:f1:eb:d6:d7:4d:2f:fb:c3:62:05:1a: 89:39:d4:f3:e3:1f:ea:e6:f7:9e:19:be:3b:b6:3b:84:ee:33: 8a:4f:2a:64:f2:de:c8:ed:ab:8e:08:99:24:0f:97:fd:c2:62: 32:72:57:1d:3b:09:09:09:c1:a5:01:45:3c:b2:4a:ce:95:e3: 66:a4:b7:14:08:9b:75:8b:75:50:d6:ac:d7:8f:72:3a:51:8c: 29:87:7d:84:56:ab:7c:43:bc:df:e7:da:09:74:8d:f5:9a:50: d1:ff:0d:e3:1e:b4:84:1f:99:45:f4:46:cb:39:34:7a:4f:08: 34:04:3a:8b:78:07:e8:52:aa:88:42:32:62:ba:31:33:cb:e2: 99:1f:12:73:7b:bc:86:7b:eb:f9:4b:22:7b:d6:1c:29:22:26: 01:7a:d2:1e:ff:9a:10:62:74:63:d0:bb:23:51:dc:3e:ec:e3: 2b:a6:95:c3:08:b9:47:40:ea:3d:14:d9:35:8e:8a:50:a6:b0: bb:5c:23:cd:8e:8c:e2:c9:5c:9f:9f:84:b4:9d:56:44:4e:46: 78:77:c1:32:aa:83:64:6b:d3:ed:59:52:fb:9c:fb:ff:81:73: 13:c1:38:7a:ad:3d:cb:fd:0f:8d:ed:39:44:bb:56:e4:0f:62: 23:4d:58:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oCOn22CbAcLI35hL70mbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTNiZTg0NzE4ZjU1MWMyNDE0NzdmMjJhMDQxYzczNGVi OTdkYzUwHhcNMjUxMjE5MDgwMDQ1WhcNMjUxMjIwMDgwMDQ1WjAzMTEwLwYDVQQD EyhkZjJjOTVhN2ZkMzZkYzQ2OWM1Y2NkYzEzYTM3YzFkMzNlZjE5NWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi2a3RDLFH6ktfYNim9omi4LjEUq voNRhXWW20giOUJ0jtIlX+ss1uYDb/RBAMjnF8gA4iaDSFWcSrPccWPwLpNOgraj AlifZvLAB1pknLUTmGs1/5xr0Wtn/uaZa9pBppTCZx5XeeTwbcX6TSjySkkhNdsE GWEexk2YmZU9m7xWrJWVMz58uwbCJgjCQhtROGpf+bcG6nsXzPYfyjVqkl01FRkP YPG7RTWDqu9ig8JXN/uvySjEKY5k3anK+v5xDG90XrIh+lca4OrqMlKinaaU6tEg G+53Dg2yr6s/MhUxCPXql4bGD2dtSMLmckFm+TqoVFI4J/iYChhVJjvS7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8slaf9NtxGnFzNwTo3wdM+8ZWtMB8GA1UdIwQY MBaAFMwTvoRxj1UcJBR38ioEHHNOuX3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUt NzQxZDU1Yzk5ODAyLzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUtNzQxZDU1Yzk5ODAy LzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVUCvOKN aPHr1tdNL/vDYgUaiTnU8+Mf6ub3nhm+O7Y7hO4zik8qZPLeyO2rjgiZJA+X/cJi MnJXHTsJCQnBpQFFPLJKzpXjZqS3FAibdYt1UNas149yOlGMKYd9hFarfEO83+fa CXSN9ZpQ0f8N4x60hB+ZRfRGyzk0ek8INAQ6i3gH6FKqiEIyYroxM8vimR8Sc3u8 hnvr+Usie9YcKSImAXrSHv+aEGJ0Y9C7I1HcPuzjK6aVwwi5R0DqPRTZNY6KUKaw u1wjzY6M4slcn5+EtJ1WRE5GeHfBMqqDZGvT7VlS+5z7/4FzE8E4eq09y/0Pje05 RLtW5A9iI01Yng== -----END CERTIFICATE-----Generated at Fri Dec 19 09:44:43 2025 by rpki-client