This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json) Hash identifier: 5Ub7ssQ/2/Z8VIDJSdlLvsIdFq+DLl1Ox4Z9epP3znk= Subject key identifier: 5D:25:63:C6:7C:98:D8:A7:2B:B4:EF:8E:5B:3C:2B:1B:7B:27:9A:D4 Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8 Certificate serial: 019B1012EDA45F2BDC34315F77EC9A14068E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft Manifest number: 1026 Signing time: Fri 12 Dec 2025 01:00:34 +0000 Manifest this update: Fri 12 Dec 2025 01:00:34 +0000 Manifest next update: Sat 13 Dec 2025 01:00:34 +0000 Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=) 2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=) 3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: ii0xx2AwkAUT7/Df0gjLO1qZFQozfa34MFEZ30N7SW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:ed:a4:5f:2b:dc:34:31:5f:77:ec:9a:14:06:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8 Validity Not Before: Dec 12 01:00:34 2025 GMT Not After : Dec 13 01:00:34 2025 GMT Subject: CN=5d2563c67c98d8a72bb4ef8e5b3c2b1b7b279ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:bd:de:f1:ec:ab:76:4d:1c:5c:c3:9c:82: b2:9d:c3:d4:0a:ff:01:5d:76:d8:83:61:21:50:b7: 95:f2:95:81:86:79:d2:a7:6a:c2:08:0f:28:6b:0e: d6:85:2e:35:c7:23:87:1c:3b:fb:79:68:dc:49:3a: 8c:e9:a8:8e:aa:f3:89:27:5b:59:8e:b2:76:87:57: 2f:4b:37:38:33:65:45:d0:02:1a:ba:79:6f:8f:b8: b6:f1:3a:ea:64:e4:cd:90:3e:a9:eb:fa:4c:9b:2d: f4:bf:b3:bb:54:33:9b:55:fc:a6:e5:9a:32:67:61: 34:12:c5:7e:a3:35:74:c5:eb:ab:19:17:b7:04:89: 95:ae:1e:c2:f6:f8:66:36:fa:4b:d0:21:58:96:dd: 1d:fb:77:43:ae:3a:76:a8:b1:cc:06:36:fe:db:c4: 18:5a:f8:97:77:eb:04:e2:51:63:fa:77:ac:d4:96: bb:54:08:06:87:ee:b4:7a:29:73:49:f5:a2:61:e9: f2:63:0a:f5:d0:83:61:a9:12:44:40:d6:69:44:6b: 16:c4:33:8d:ed:85:81:d2:16:ae:b4:69:da:62:5b: de:e0:a1:b9:47:21:00:52:fa:04:60:36:2b:c2:f9: 80:34:1d:16:2e:8b:66:d2:fe:5b:0e:38:b2:d5:e9: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:25:63:C6:7C:98:D8:A7:2B:B4:EF:8E:5B:3C:2B:1B:7B:27:9A:D4 X509v3 Authority Key Identifier: keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:1f:17:57:1d:be:8b:16:bd:13:5f:fd:4e:b9:ca:e4:30:6f: bc:14:ec:50:e0:5a:95:de:49:0d:c9:6c:53:19:1d:cf:df:10: d9:f9:7d:d7:60:92:cd:04:f0:aa:ec:91:55:ff:6e:1f:69:85: 5f:9e:ae:70:4d:33:f6:81:95:45:fb:32:35:89:3e:68:80:7b: e7:3d:3d:24:62:9e:75:a0:a5:3f:fa:5b:4e:6f:11:48:f6:97: f3:81:5c:88:e2:c5:47:65:5c:1c:a0:ee:77:c9:7c:f1:58:ee: 68:a6:38:35:8c:23:6f:74:db:72:f5:cb:0d:64:8d:95:fb:75: e7:c3:96:46:04:e0:76:ec:eb:b0:7f:fd:57:7b:52:e0:2d:d9: 42:13:5c:a6:a2:e3:be:1e:47:15:b0:f5:f7:c2:ec:cd:81:3a: d6:ff:a6:ab:bd:85:64:01:b2:1e:06:17:00:4a:31:60:1a:f0: 0c:7c:a5:c1:f1:7f:50:cf:c8:50:d5:9f:97:de:a4:be:34:bc: 22:43:f1:64:8e:64:59:3f:e1:35:3e:19:fa:b8:36:b7:92:2e: 7a:97:73:df:40:b0:33:e6:56:e6:76:14:4e:fa:fc:50:40:55: f0:f1:10:3f:28:fe:37:41:61:ed:95:f0:bc:e8:f1:e6:12:ba: df:6d:2c:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEu2kXyvcNDFfd+yaFAaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk OWRjYzgwHhcNMjUxMjEyMDEwMDM0WhcNMjUxMjEzMDEwMDM0WjAzMTEwLwYDVQQD Eyg1ZDI1NjNjNjdjOThkOGE3MmJiNGVmOGU1YjNjMmIxYjdiMjc5YWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtia93vHsq3ZNHFzDnIKyncPUCv8B XXbYg2EhULeV8pWBhnnSp2rCCA8oaw7WhS41xyOHHDv7eWjcSTqM6aiOqvOJJ1tZ jrJ2h1cvSzc4M2VF0AIaunlvj7i28TrqZOTNkD6p6/pMmy30v7O7VDObVfym5Zoy Z2E0EsV+ozV0xeurGRe3BImVrh7C9vhmNvpL0CFYlt0d+3dDrjp2qLHMBjb+28QY WviXd+sE4lFj+nes1Ja7VAgGh+60eilzSfWiYenyYwr10INhqRJEQNZpRGsWxDON 7YWB0hautGnaYlve4KG5RyEAUvoEYDYrwvmANB0WLotm0v5bDjiy1ekbTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0lY8Z8mNinK7Tvjls8Kxt7J5rUMB8GA1UdIwQY MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut NmQyZTExZmUwOGNkLzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwx8XVx2+ ixa9E1/9TrnK5DBvvBTsUOBald5JDclsUxkdz98Q2fl912CSzQTwquyRVf9uH2mF X56ucE0z9oGVRfsyNYk+aIB75z09JGKedaClP/pbTm8RSPaX84FciOLFR2VcHKDu d8l88VjuaKY4NYwjb3TbcvXLDWSNlft158OWRgTgduzrsH/9V3tS4C3ZQhNcpqLj vh5HFbD198LszYE61v+mq72FZAGyHgYXAEoxYBrwDHylwfF/UM/IUNWfl96kvjS8 IkPxZI5kWT/hNT4Z+rg2t5Iuepdz30CwM+ZW5nYUTvr8UEBV8PEQPyj+N0Fh7ZXw vOjx5hK6320scw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:03:48 2025 by rpki-client