This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft File: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json) Hash identifier: pgsUphwUlgguqs5rMm3o8w3YMhhj3UaW1/TYmBLTh/8= Subject key identifier: 0E:CC:9D:34:8A:49:36:32:00:27:00:CC:44:D0:B9:FC:03:5B:3C:FC Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C Certificate issuer: /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c Certificate serial: 019B544F3E7377B0D9311811FEED1718AECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft Manifest number: 0717 Signing time: Thu 25 Dec 2025 07:00:37 +0000 Manifest this update: Thu 25 Dec 2025 07:00:37 +0000 Manifest next update: Fri 26 Dec 2025 07:00:37 +0000 Files and hashes: 1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: IcRXL06LCe7wET9Pb0cdsFXCeBIlEKKszBEUz1ypeXM=) 2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:3e:73:77:b0:d9:31:18:11:fe:ed:17:18:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c Validity Not Before: Dec 25 07:00:37 2025 GMT Not After : Dec 26 07:00:37 2025 GMT Subject: CN=0ecc9d348a493632002700cc44d0b9fc035b3cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:d9:21:72:6f:2c:ff:96:34:cf:74:01:c9: 65:c4:ce:42:e5:5b:c3:78:ec:8d:a6:9e:0f:fb:1c: 69:3b:63:60:f5:40:ed:56:e6:59:37:66:d2:f6:8c: 42:ef:8a:a9:2e:d3:af:c1:2a:02:5b:b2:53:29:9c: 0f:40:9d:4b:66:5b:43:67:33:e4:40:51:3b:b3:ba: 6d:c2:06:9b:8a:aa:27:8d:7b:90:99:9d:4f:18:16: 1e:7a:6f:16:cc:53:8d:b0:08:8e:6e:86:6e:a9:ea: 05:8a:e4:c2:2b:1c:d4:04:ea:80:3e:2d:e2:86:54: 53:76:85:fa:ee:9a:96:06:5d:6f:0e:71:fb:2b:61: 44:98:a8:2c:87:a8:eb:d5:a7:02:3b:3b:c9:2f:26: da:b8:88:77:67:fc:8a:54:00:6b:23:85:f1:28:db: ce:8a:2f:a2:e9:c0:a3:f3:9a:7d:af:9a:20:d5:fb: d5:c1:75:3e:cc:3a:1a:d0:53:57:28:c5:3e:52:28: 10:b1:c2:cb:06:dd:9a:f3:78:66:a6:2f:67:c7:9c: 32:9f:9a:64:15:2d:e0:dd:6d:20:a2:33:15:cf:28: 6b:cd:c6:cb:c8:65:a0:a7:67:e3:b2:7c:2d:0f:4c: 1a:f0:9f:1f:c9:25:ca:74:63:cf:e8:34:08:10:ac: ab:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:9D:34:8A:49:36:32:00:27:00:CC:44:D0:B9:FC:03:5B:3C:FC X509v3 Authority Key Identifier: keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6b:c6:c9:a7:e5:55:f9:f8:96:48:db:e1:6d:f5:bf:ff:d6: e7:cc:ac:00:5b:fd:ba:d7:0e:35:6b:34:43:e7:b8:e5:4b:dd: 4e:a5:b5:16:26:6d:51:5f:6a:55:42:8f:e9:99:90:8d:f5:1c: 28:17:e2:b0:f5:a3:f3:0b:bd:23:54:4d:c5:61:62:91:1c:d4: 1d:d2:92:e0:df:f5:5f:de:a2:81:35:40:73:28:45:4c:2b:ee: 42:ef:47:18:5e:61:f8:fb:53:58:d4:3d:87:00:f5:70:e9:1e: ca:65:8f:16:b3:88:fc:b3:7e:07:b5:13:d0:aa:bb:21:9e:81: e6:29:d3:26:fb:ee:34:dc:85:8f:62:f3:0f:68:95:f0:d2:44: c5:ff:4a:c7:f9:f2:e1:3d:b0:49:ff:66:ec:7f:31:c6:10:69: 0f:b8:19:d3:f7:04:91:1d:f7:be:2d:07:61:f4:e2:9c:d8:5a: 07:4e:6f:74:70:5b:e5:e9:39:45:43:7f:b6:42:87:02:83:7e: c4:de:a0:92:0d:dd:7c:37:73:4f:46:f7:2e:4a:c9:86:35:b5: 83:54:63:76:8e:e0:45:fa:b3:d0:87:2b:2d:cc:63:e3:f2:7f: 94:22:01:19:5a:75:70:fa:55:0d:7d:7b:93:81:2c:7f:f2:4e: 24:6c:34:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUTz5zd7DZMRgR/u0XGK7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOTA0ZjU0MDlmZTU0MzVmMWZiZjVjZjQ2ZTRjZTk1ODgw YjYxM2MwHhcNMjUxMjI1MDcwMDM3WhcNMjUxMjI2MDcwMDM3WjAzMTEwLwYDVQQD EygwZWNjOWQzNDhhNDkzNjMyMDAyNzAwY2M0NGQwYjlmYzAzNWIzY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkHZIXJvLP+WNM90AcllxM5C5VvD eOyNpp4P+xxpO2Ng9UDtVuZZN2bS9oxC74qpLtOvwSoCW7JTKZwPQJ1LZltDZzPk QFE7s7ptwgabiqonjXuQmZ1PGBYeem8WzFONsAiOboZuqeoFiuTCKxzUBOqAPi3i hlRTdoX67pqWBl1vDnH7K2FEmKgsh6jr1acCOzvJLybauIh3Z/yKVABrI4XxKNvO ii+i6cCj85p9r5og1fvVwXU+zDoa0FNXKMU+UigQscLLBt2a83hmpi9nx5wyn5pk FS3g3W0gojMVzyhrzcbLyGWgp2fjsnwtD0wa8J8fySXKdGPP6DQIEKyrHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7MnTSKSTYyACcAzETQufwDWzz8MB8GA1UdIwQY MBaAFP2QT1QJ/lQ18fv1z0bkzpWIC2E8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTIt NWZmMDdjM2I2Zjg4LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTItNWZmMDdjM2I2Zjg4 LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWvGyafl Vfn4lkjb4W31v//W58ysAFv9utcONWs0Q+e45UvdTqW1FiZtUV9qVUKP6ZmQjfUc KBfisPWj8wu9I1RNxWFikRzUHdKS4N/1X96igTVAcyhFTCvuQu9HGF5h+PtTWNQ9 hwD1cOkeymWPFrOI/LN+B7UT0Kq7IZ6B5inTJvvuNNyFj2LzD2iV8NJExf9Kx/ny 4T2wSf9m7H8xxhBpD7gZ0/cEkR33vi0HYfTinNhaB05vdHBb5ek5RUN/tkKHAoN+ xN6gkg3dfDdzT0b3LkrJhjW1g1Rjdo7gRfqz0IcrLcxj4/J/lCIBGVp1cPpVDX17 k4Esf/JOJGw0yA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:20:07 2025 by rpki-client