This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft File: ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json) Hash identifier: pVejrV3diI2xBxWa9P04YdZhxpYZ53lN09RmUwXZhKM= Subject key identifier: 7F:94:43:84:DC:EC:3C:2F:96:8D:DA:8F:21:1A:BC:81:1B:CA:83:63 Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Certificate serial: 019B5AF63CFCC5AB742BE11A3684C9DED8F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft Manifest number: 12B7 Signing time: Fri 26 Dec 2025 14:00:45 +0000 Manifest this update: Fri 26 Dec 2025 14:00:45 +0000 Manifest next update: Sat 27 Dec 2025 14:00:45 +0000 Files and hashes: 1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=) 2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=) 3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: S9IzOF4pe4CPQ6uwN0XZMUnuugnucoJN7KcsRtLODeA=) 4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:3c:fc:c5:ab:74:2b:e1:1a:36:84:c9:de:d8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Validity Not Before: Dec 26 14:00:45 2025 GMT Not After : Dec 27 14:00:45 2025 GMT Subject: CN=7f944384dcec3c2f968dda8f211abc811bca8363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:8a:60:42:42:e7:f7:5f:d4:00:19:84:0c: 00:fd:5d:2b:e1:38:f9:f8:42:03:cb:22:d0:41:38: bf:98:e3:b6:7d:d8:a8:97:d5:4c:91:c0:1e:77:28: 30:4e:a5:35:75:8d:42:09:99:5a:0a:86:ea:1e:bc: 3e:eb:4f:78:c0:cc:37:31:c1:87:05:93:01:32:a0: 27:db:ca:1f:76:07:e0:15:9d:70:bc:e8:6b:87:fe: 2c:8f:eb:00:96:da:89:bd:fc:20:ad:3f:da:8c:bb: 70:35:68:88:b4:01:90:f2:17:7a:5c:60:a7:70:22: 4c:96:56:28:d5:eb:65:a8:42:88:3e:54:10:59:4e: da:93:7d:01:bd:5c:92:cd:e7:0a:cd:af:26:eb:d5: 87:d2:ec:30:c4:78:26:3f:1a:1d:bf:a7:8c:2b:6c: 09:6b:80:b6:54:42:54:40:f9:d4:d2:1d:a6:59:e9: 1f:44:58:ee:39:80:78:b5:65:7c:2f:2d:38:21:4e: 3f:4e:b7:5b:1f:c1:0b:99:84:7c:94:54:f9:8f:cd: 19:82:01:98:0b:c1:f0:74:e3:ae:2f:58:8e:8b:51: 08:ae:2c:4e:04:8f:d2:f7:f2:5b:b3:4b:5b:ef:68: e1:eb:7c:ba:3b:3a:67:8a:69:8b:4f:d8:a7:38:35: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:94:43:84:DC:EC:3C:2F:96:8D:DA:8F:21:1A:BC:81:1B:CA:83:63 X509v3 Authority Key Identifier: keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:cf:19:8f:41:cc:05:74:f5:ff:cf:5a:e8:d5:6f:61:51: 35:13:47:cd:e0:c9:83:3b:cf:2a:ae:11:40:8b:7f:d6:f5:70: 05:9f:06:63:0c:47:cf:c5:22:31:58:c0:32:d2:5a:f3:ea:a2: 25:ef:14:1a:df:e9:d5:fb:64:7a:fc:1a:f7:21:eb:a8:3a:6f: e8:3d:12:83:f2:ba:31:39:dc:e0:04:fc:82:7e:58:a2:e7:36: bd:6f:f7:fd:0a:c7:68:e9:f1:fb:e8:ba:31:74:ea:dc:9f:0e: f9:35:be:5e:a7:c1:22:5e:54:55:e7:cd:b5:24:6d:e3:16:41: 7b:c6:65:69:d5:73:f6:d9:e1:49:99:cb:00:0c:e3:79:f8:3e: ea:ff:38:2d:81:6b:2d:60:4c:59:43:99:73:20:c2:6c:1e:a5: d8:22:3d:16:8f:99:06:54:cf:52:94:2e:6d:e6:75:46:96:f8: 3d:ae:47:20:e9:2c:7f:d4:33:60:b9:87:2a:49:52:b3:34:43: 95:d7:66:02:9a:a6:ab:18:c4:50:a1:db:34:8e:ea:f5:17:b0: 6c:0b:ce:0e:8b:fe:30:fb:24:e9:10:54:f7:50:7c:e4:c8:43: 46:38:6f:6b:5f:10:df:13:70:64:c2:b4:11:b2:05:26:3e:6a: 00:fb:d7:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9jz8xat0K+EaNoTJ3tj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5 MGMxNTcwHhcNMjUxMjI2MTQwMDQ1WhcNMjUxMjI3MTQwMDQ1WjAzMTEwLwYDVQQD Eyg3Zjk0NDM4NGRjZWMzYzJmOTY4ZGRhOGYyMTFhYmM4MTFiY2E4MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EiKYEJC5/df1AAZhAwA/V0r4Tj5 +EIDyyLQQTi/mOO2fdiol9VMkcAedygwTqU1dY1CCZlaCobqHrw+6094wMw3McGH BZMBMqAn28ofdgfgFZ1wvOhrh/4sj+sAltqJvfwgrT/ajLtwNWiItAGQ8hd6XGCn cCJMllYo1etlqEKIPlQQWU7ak30BvVySzecKza8m69WH0uwwxHgmPxodv6eMK2wJ a4C2VEJUQPnU0h2mWekfRFjuOYB4tWV8Ly04IU4/TrdbH8ELmYR8lFT5j80ZggGY C8HwdOOuL1iOi1EIrixOBI/S9/Jbs0tb72jh63y6OzpnimmLT9inODUGcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+UQ4Tc7Dwvlo3ajyEavIEbyoNjMB8GA1UdIwQY MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzLPGY9B zAV09f/PWujVb2FRNRNHzeDJgzvPKq4RQIt/1vVwBZ8GYwxHz8UiMVjAMtJa8+qi Je8UGt/p1ftkevwa9yHrqDpv6D0Sg/K6MTnc4AT8gn5Youc2vW/3/QrHaOnx++i6 MXTq3J8O+TW+XqfBIl5UVefNtSRt4xZBe8ZladVz9tnhSZnLAAzjefg+6v84LYFr LWBMWUOZcyDCbB6l2CI9Fo+ZBlTPUpQubeZ1Rpb4Pa5HIOksf9QzYLmHKklSszRD lddmApqmqxjEUKHbNI7q9RewbAvODov+MPsk6RBU91B85MhDRjhva18Q3xNwZMK0 EbIFJj5qAPvXZg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:26 2025 by rpki-client