This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json) Hash identifier: J0vknlhAbCHElaALWPzo1SJrvOZ8Y9uM8kqkL1ziftc= Subject key identifier: F4:FF:76:C7:DF:11:4D:71:1C:C5:07:09:95:51:F3:0C:A7:A5:EB:90 Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a Certificate serial: 019B0F01196497B1B05DCEA3866CC5088387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 20:01:28 +0000 Manifest this update: Thu 11 Dec 2025 20:01:28 +0000 Manifest next update: Fri 12 Dec 2025 20:01:28 +0000 Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=) 2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: g8LPC477lSGH3Cau/Qhc04meCDwAjb3EYCd5z0IrftI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:19:64:97:b1:b0:5d:ce:a3:86:6c:c5:08:83:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a Validity Not Before: Dec 11 20:01:28 2025 GMT Not After : Dec 12 20:01:28 2025 GMT Subject: CN=f4ff76c7df114d711cc507099551f30ca7a5eb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:75:ce:e6:b7:17:81:83:04:99:0f:77:91: 24:b0:3b:51:1b:a7:e8:c6:2f:18:d0:f7:ef:16:99: 56:03:9a:c0:9e:bb:cd:86:ea:0f:49:cf:f3:67:16: e4:00:e1:bc:35:d3:61:db:f0:23:4e:4b:b6:c1:6c: e7:27:ac:94:ae:96:85:72:61:db:2a:a6:19:11:f3: 13:25:13:b0:0a:c9:f3:c0:57:93:71:cc:d3:15:f8: 34:d2:03:73:68:91:16:8b:70:14:80:85:47:d8:9c: f3:cd:d3:b8:b5:6b:b4:96:70:56:1b:75:cb:c4:2c: 07:9c:30:89:85:ec:b6:22:23:71:18:77:a2:af:cc: f9:76:ac:db:7b:c5:b2:c9:44:94:9f:62:38:6f:13: 1f:11:41:ee:6f:3d:ce:ed:f8:64:9a:59:23:30:f9: 7b:02:8a:f8:72:8e:5d:30:1f:e8:99:d8:54:c1:49: 30:90:aa:26:04:32:9d:c7:cb:c8:97:d6:6e:3c:ea: 3f:a7:7b:47:c9:67:b3:c4:2f:db:5a:6c:fe:ca:3d: 2e:48:50:61:c1:7c:d9:1c:32:36:58:1d:0d:a0:5c: 7c:ca:2b:67:91:45:5f:79:99:e2:80:76:5d:a0:72: 3a:fd:8f:b9:4e:0b:22:0e:09:19:70:5a:22:52:0f: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FF:76:C7:DF:11:4D:71:1C:C5:07:09:95:51:F3:0C:A7:A5:EB:90 X509v3 Authority Key Identifier: keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b0:50:9e:2b:af:9a:53:35:27:5e:a6:89:74:fe:cf:b0:63: 92:2f:74:5f:5c:d9:f2:6a:2c:93:99:f4:f8:bd:9d:89:f1:d7: f2:6f:75:f1:57:46:f1:af:e1:72:79:0e:79:76:d5:53:e3:23: cf:0e:d6:6d:56:48:34:aa:13:39:5d:8f:45:6d:52:dd:f2:eb: 90:a4:1a:96:5f:df:a0:7d:4c:0d:3a:34:9a:85:68:62:6c:fe: 18:58:d8:75:28:99:bb:d0:50:dc:4b:fd:fb:38:b9:c0:e6:c2: c1:39:71:f4:12:23:4b:60:2f:12:0a:71:97:22:dc:b1:1c:8b: f0:14:20:ef:69:f4:e6:4b:c5:d5:6b:c8:3a:c9:f9:c3:bc:53: e6:2f:16:72:e3:f3:bc:e6:a4:d3:c4:c1:33:9f:2f:e8:b4:0b: 6c:79:6b:f3:1d:77:61:a4:94:39:4e:f7:84:6c:64:e5:79:4e: d7:7f:cf:db:2c:18:bd:2b:c2:f2:6f:d1:57:78:44:41:43:dc: 9f:d0:cd:8c:57:87:0e:74:ea:e8:39:3c:68:5f:16:5d:f6:37: 09:6b:56:c7:a0:6c:5e:94:e5:0c:10:7f:5c:9c:4b:cd:26:f9: e6:61:9b:30:24:27:6f:f3:76:4d:12:a8:41:b7:71:48:e9:47: cd:5b:2d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPARlkl7GwXc6jhmzFCIOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjE1MDI3NmY1NWJhZTQ1NTk4OGQzYTEzZTU5MzQxMDc0 ZGNkMGEwHhcNMjUxMjExMjAwMTI4WhcNMjUxMjEyMjAwMTI4WjAzMTEwLwYDVQQD EyhmNGZmNzZjN2RmMTE0ZDcxMWNjNTA3MDk5NTUxZjMwY2E3YTVlYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyt1zua3F4GDBJkPd5EksDtRG6fo xi8Y0PfvFplWA5rAnrvNhuoPSc/zZxbkAOG8NdNh2/AjTku2wWznJ6yUrpaFcmHb KqYZEfMTJROwCsnzwFeTcczTFfg00gNzaJEWi3AUgIVH2JzzzdO4tWu0lnBWG3XL xCwHnDCJhey2IiNxGHeir8z5dqzbe8WyyUSUn2I4bxMfEUHubz3O7fhkmlkjMPl7 Aor4co5dMB/omdhUwUkwkKomBDKdx8vIl9ZuPOo/p3tHyWezxC/bWmz+yj0uSFBh wXzZHDI2WB0NoFx8yitnkUVfeZnigHZdoHI6/Y+5TgsiDgkZcFoiUg+aQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT/dsffEU1xHMUHCZVR8wynpeuQMB8GA1UdIwQY MBaAFM2xUCdvVbrkVZiNOhPlk0EHTc0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEt MzQwN2ZjYTEyMjY3LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEtMzQwN2ZjYTEyMjY3 LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLBQniuv mlM1J16miXT+z7Bjki90X1zZ8mosk5n0+L2difHX8m918VdG8a/hcnkOeXbVU+Mj zw7WbVZINKoTOV2PRW1S3fLrkKQall/foH1MDTo0moVoYmz+GFjYdSiZu9BQ3Ev9 +zi5wObCwTlx9BIjS2AvEgpxlyLcsRyL8BQg72n05kvF1WvIOsn5w7xT5i8WcuPz vOak08TBM58v6LQLbHlr8x13YaSUOU73hGxk5XlO13/P2ywYvSvC8m/RV3hEQUPc n9DNjFeHDnTq6Dk8aF8WXfY3CWtWx6BsXpTlDBB/XJxLzSb55mGbMCQnb/N2TRKo QbdxSOlHzVstWQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:19 2025 by rpki-client