This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json) Hash identifier: O/9Z3OH7moJ37j1oqMfYnCm3c2aTNoxG5zrvY3htTOk= Subject key identifier: FB:4E:1C:61:E8:8D:EF:F7:83:2A:A3:C7:F2:AA:E0:DD:11:EA:E9:4A Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50 Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050 Certificate serial: 019B3EA39C028EA8FC0703AF302E34EB2914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 02:01:08 +0000 Manifest this update: Sun 21 Dec 2025 02:01:08 +0000 Manifest next update: Mon 22 Dec 2025 02:01:08 +0000 Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: hJ1eHPyCWE+oT8XKMDaPjsnvbNBkyJBo8/CEi+W0tTs=) 2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:9c:02:8e:a8:fc:07:03:af:30:2e:34:eb:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050 Validity Not Before: Dec 21 02:01:08 2025 GMT Not After : Dec 22 02:01:08 2025 GMT Subject: CN=fb4e1c61e88deff7832aa3c7f2aae0dd11eae94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fc:71:ec:e9:38:e5:6a:33:68:64:72:6a:26: b3:7e:6f:8d:87:97:c8:1a:fa:e7:1e:06:37:3a:5a: 95:51:bc:4e:bd:d7:ee:b8:6c:2e:98:57:f6:b2:9b: 1b:ad:86:87:0f:12:62:61:4c:88:98:59:9b:28:78: c2:15:3f:ea:a6:d5:39:5d:59:78:ed:50:ca:3a:76: 17:72:1f:f4:ad:a8:83:1a:52:b0:95:05:1d:6c:8b: 0b:21:ad:77:4d:4e:e5:4a:2e:f4:a2:12:3a:da:6a: f3:85:8c:bc:e8:a9:42:b4:35:ef:40:49:44:17:92: 17:5c:27:ef:ee:51:f2:76:1f:80:89:5c:91:db:4c: 7d:8b:b1:ef:1e:c7:bd:1b:c2:a7:0c:ce:cd:8a:88: 68:7b:26:a7:ca:54:84:9a:9b:4b:e2:b9:f6:47:c9: 24:5c:43:79:b2:bc:5a:5e:65:86:b8:b5:cf:5f:f4: 54:46:ac:ce:3d:a6:05:8f:ae:90:67:ad:c0:7b:be: d3:c7:81:f8:7c:06:bc:09:43:56:06:cc:a1:b9:37: f5:85:be:bf:35:81:67:f3:71:ee:c1:50:d6:5c:6e: 22:45:83:b7:ae:1d:75:70:5a:10:94:f7:33:62:17: 95:03:ec:99:6f:c0:a9:7f:b0:c6:6a:ad:cc:d5:6e: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4E:1C:61:E8:8D:EF:F7:83:2A:A3:C7:F2:AA:E0:DD:11:EA:E9:4A X509v3 Authority Key Identifier: keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b6:5e:67:76:75:79:47:a3:30:2e:2c:e6:55:af:ec:74:62: a4:3e:49:56:85:56:06:8f:98:aa:aa:88:e7:eb:96:86:56:bd: d4:2a:78:08:76:b9:95:dc:ae:20:15:d1:c7:ee:17:9c:53:a1: c3:35:2f:ca:3f:48:ca:ad:6a:80:ed:8d:25:f8:67:db:a7:58: 4f:1e:b2:b3:22:03:04:23:82:a3:ec:4e:58:ae:30:c9:9a:5c: fd:20:b2:12:c3:13:ce:04:ec:1c:2e:1b:87:c9:e0:7a:11:90: 9a:0c:7e:9a:e1:af:9e:6a:09:3a:92:ae:dc:79:7f:3e:34:2b: 39:63:3e:6c:3f:2c:5f:e1:da:47:5b:d5:5c:c0:30:a7:59:eb: a1:64:41:88:89:c0:a1:e8:68:2b:4e:a5:2d:a7:d1:c0:a5:f3: 37:5f:13:f9:87:67:ee:96:63:cd:b8:e9:42:ed:9d:00:81:a2: 27:16:3f:2d:e3:4b:ed:33:53:15:89:c5:5d:99:4d:18:17:a2: 27:bc:ac:d0:17:e6:8b:4f:a1:71:c9:d8:a4:e5:bb:17:2d:2c: 92:b4:33:3a:ca:d4:46:f5:0c:b4:5b:69:ba:0f:6e:3c:e1:d8: 35:1f:16:af:8f:a7:1e:f3:3e:ba:f6:46:08:bf:6d:3a:b7:41: e5:ca:02:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5wCjqj8BwOvMC406ykUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmY0MWEyNGZjNDgyNzFiOTkyMzI3YTJkYWU1YTQzM2Jk ZWQwNTAwHhcNMjUxMjIxMDIwMTA4WhcNMjUxMjIyMDIwMTA4WjAzMTEwLwYDVQQD EyhmYjRlMWM2MWU4OGRlZmY3ODMyYWEzYzdmMmFhZTBkZDExZWFlOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Pxx7Ok45WozaGRyaiazfm+Nh5fI GvrnHgY3OlqVUbxOvdfuuGwumFf2spsbrYaHDxJiYUyImFmbKHjCFT/qptU5XVl4 7VDKOnYXch/0raiDGlKwlQUdbIsLIa13TU7lSi70ohI62mrzhYy86KlCtDXvQElE F5IXXCfv7lHydh+AiVyR20x9i7HvHse9G8KnDM7NiohoeyanylSEmptL4rn2R8kk XEN5srxaXmWGuLXPX/RURqzOPaYFj66QZ63Ae77Tx4H4fAa8CUNWBsyhuTf1hb6/ NYFn83HuwVDWXG4iRYO3rh11cFoQlPczYheVA+yZb8Cpf7DGaq3M1W6XhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtOHGHoje/3gyqjx/Kq4N0R6ulKMB8GA1UdIwQY MBaAFGT/QaJPxIJxuZIyei2uWkM73tBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQt ZjAxYTYyNDAwODIxLzEvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQtZjAxYTYyNDAwODIx LzEvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbZeZ3Z1 eUejMC4s5lWv7HRipD5JVoVWBo+YqqqI5+uWhla91Cp4CHa5ldyuIBXRx+4XnFOh wzUvyj9Iyq1qgO2NJfhn26dYTx6ysyIDBCOCo+xOWK4wyZpc/SCyEsMTzgTsHC4b h8ngehGQmgx+muGvnmoJOpKu3Hl/PjQrOWM+bD8sX+HaR1vVXMAwp1nroWRBiInA oehoK06lLafRwKXzN18T+Ydn7pZjzbjpQu2dAIGiJxY/LeNL7TNTFYnFXZlNGBei J7ys0Bfmi0+hccnYpOW7Fy0skrQzOsrURvUMtFtpug9uPOHYNR8Wr4+nHvM+uvZG CL9tOrdB5coCSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:45:56 2025 by rpki-client