This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft File: ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json) Hash identifier: bh1X5O4n/Od06UQTWDZ40s9DwGX7k0wBwrBSybvCzqU= Subject key identifier: 9F:CE:4D:CA:7E:84:F2:72:94:B5:2C:64:EE:66:10:FC:B3:52:B6:2E Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d Certificate serial: 019AEFE3FB13369EDCAE0A57F5120C7F1994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft Manifest number: 176A Signing time: Fri 05 Dec 2025 19:01:26 +0000 Manifest this update: Fri 05 Dec 2025 19:01:26 +0000 Manifest next update: Sat 06 Dec 2025 19:01:26 +0000 Files and hashes: 1: 8AY6X4XCRyiZxzFlt6tsbjR30jM.roa (hash: 5ZRaImHY2F/S3wQVqNNqg0MgU/7l0llwd1UlTTznV7w=) 2: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: Epo7/ZouegPHyppODftSJilpEO1PvV14x7SzNsEzv04=) 3: bth8nL17vmRfjOgOkE44hcyUW-U.roa (hash: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=) 4: fyItLKzWB2M2DcciXcjMC9ehbVo.roa (hash: 3hotdI7UkUaU/+3bTtSUK7y3DutUUFvTPfXcX54WRXY=) 5: xn5m4EslppaLzMQirkAjRslNCRc.roa (hash: UOBKdq1hXA/nlG6uZfbozsCpkf5JEX4D4dlwEvI1lPs=) 6: y9bz4yP_EEqSJFJp-Pek8JbvZOc.roa (hash: kA5Ei/WRVk5KhopTqBlcPpplFexyb5cDOtoJ1Rgm79k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:e3:fb:13:36:9e:dc:ae:0a:57:f5:12:0c:7f:19:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d Validity Not Before: Dec 5 19:01:26 2025 GMT Not After : Dec 6 19:01:26 2025 GMT Subject: CN=9fce4dca7e84f27294b52c64ee6610fcb352b62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:f6:4a:0f:6b:8c:ba:c9:86:fd:4c:73:e5: e6:f6:84:ce:57:ec:af:4d:0d:a4:4b:2b:18:27:59: c5:5b:ab:52:59:a4:16:03:7e:45:e4:8c:e9:4e:25: 1c:65:d5:38:47:fa:9a:87:32:81:40:3d:e8:b9:04: ed:d8:c7:61:e8:d2:44:58:1b:65:1e:96:0e:c3:a6: 9e:fa:67:0c:37:4f:b2:ff:f2:2e:82:42:8b:7c:2d: cc:55:3b:e9:05:9a:16:b0:9a:f7:07:d7:ef:37:b7: 88:65:cb:97:91:27:43:79:04:f1:7b:b5:9e:e9:19: 30:f5:c1:14:b4:e6:6d:ff:4b:47:6b:17:08:e9:ca: 40:75:c9:aa:9b:43:f6:53:9c:32:eb:71:4b:44:91: 2a:fa:06:fb:52:83:86:0d:6d:23:aa:87:03:9b:86: c4:19:7d:d2:bf:2f:d0:7d:88:b0:48:c7:d8:01:6f: 36:48:bd:3c:ab:e8:07:37:c9:cf:ed:ad:eb:39:0d: 23:d2:b1:a8:ce:33:cc:bf:81:e0:b6:48:ad:ce:a7: 72:f4:25:8e:ca:19:ac:ac:89:64:7f:cc:db:91:06: 73:f6:c9:2d:85:d5:64:5b:a9:28:c6:99:d2:56:99: d0:19:e9:b3:2f:41:c6:9e:fa:5c:32:8c:fe:f2:57: 97:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CE:4D:CA:7E:84:F2:72:94:B5:2C:64:EE:66:10:FC:B3:52:B6:2E X509v3 Authority Key Identifier: keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0e:5d:dd:c4:e7:4d:f0:a4:7d:39:d9:64:14:a3:c7:48:46: 22:47:ed:28:53:3e:4f:3b:84:72:a8:10:f3:95:f4:98:8b:38: c7:42:12:11:5c:ae:5f:5d:ec:d7:5f:f0:97:d8:79:8f:73:ad: de:21:cd:8b:dd:d1:5a:28:30:25:17:16:98:71:73:46:c5:82: ce:3f:29:7e:e9:73:9f:d6:b9:4f:2e:fe:55:70:8c:37:ac:b8: e3:1c:5f:81:d8:e3:c8:d7:5c:df:d7:5c:4f:69:81:fb:0e:ea: 19:79:d4:c8:0f:6d:0d:c9:73:dd:77:5a:85:29:23:19:fc:db: 7c:87:cf:2f:ed:02:67:d1:fd:43:42:cc:0e:50:2f:13:28:f1: 4c:a4:f2:75:d6:59:4a:42:82:8d:9d:0d:67:c5:49:65:be:48: db:7f:74:fe:b0:da:5f:61:a6:e8:22:e7:5e:1b:b7:59:85:56: 7f:55:f7:db:7b:72:bd:d3:54:40:64:c1:d0:f6:a8:1d:41:fa: 6c:71:a4:b4:4e:8a:cb:1e:2e:47:17:7c:40:31:e7:21:06:b3: 1f:c3:6a:ff:3f:f9:55:01:e9:d2:b9:f9:2e:77:fb:82:9b:5f: f4:7c:8a:3c:9d:c7:43:e5:8a:2f:24:40:7b:68:ab:d8:77:a6: f3:4e:ac:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrv4/sTNp7crgpX9RIMfxmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGZlMjZkNDAzMTQxYmU5MDU5YWIyMTQ0MzI1YjQwMmQ0 Y2FiN2QwHhcNMjUxMjA1MTkwMTI2WhcNMjUxMjA2MTkwMTI2WjAzMTEwLwYDVQQD Eyg5ZmNlNGRjYTdlODRmMjcyOTRiNTJjNjRlZTY2MTBmY2IzNTJiNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmv2Sg9rjLrJhv1Mc+Xm9oTOV+yv TQ2kSysYJ1nFW6tSWaQWA35F5IzpTiUcZdU4R/qahzKBQD3ouQTt2Mdh6NJEWBtl HpYOw6ae+mcMN0+y//IugkKLfC3MVTvpBZoWsJr3B9fvN7eIZcuXkSdDeQTxe7We 6Rkw9cEUtOZt/0tHaxcI6cpAdcmqm0P2U5wy63FLRJEq+gb7UoOGDW0jqocDm4bE GX3Svy/QfYiwSMfYAW82SL08q+gHN8nP7a3rOQ0j0rGozjPMv4Hgtkitzqdy9CWO yhmsrIlkf8zbkQZz9skthdVkW6koxpnSVpnQGemzL0HGnvpcMoz+8leX3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/OTcp+hPJylLUsZO5mEPyzUrYuMB8GA1UdIwQY MBaAFGTf4m1AMUG+kFmrIUQyW0AtTKt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDct ZjY1NzUxOWQwMjMzLzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDctZjY1NzUxOWQwMjMz LzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQ5d3cTn TfCkfTnZZBSjx0hGIkftKFM+TzuEcqgQ85X0mIs4x0ISEVyuX13s11/wl9h5j3Ot 3iHNi93RWigwJRcWmHFzRsWCzj8pfulzn9a5Ty7+VXCMN6y44xxfgdjjyNdc39dc T2mB+w7qGXnUyA9tDclz3XdahSkjGfzbfIfPL+0CZ9H9Q0LMDlAvEyjxTKTyddZZ SkKCjZ0NZ8VJZb5I2390/rDaX2Gm6CLnXhu3WYVWf1X323tyvdNUQGTB0PaoHUH6 bHGktE6Kyx4uRxd8QDHnIQazH8Nq/z/5VQHp0rn5Lnf7gptf9HyKPJ3HQ+WKLyRA e2ir2Hem806scw== -----END CERTIFICATE-----Generated at Fri Dec 5 22:58:48 2025 by rpki-client