This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json) Hash identifier: MbAHd6mOqdLtmBljQwtAfjLhFn+c/qVSSKcFlv8KUzQ= Subject key identifier: E4:A3:95:01:72:A8:39:61:8A:92:7E:B5:C1:27:C1:19:70:E0:92:5C Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Certificate serial: 019B48141B5A4F99A7693180EBECF992C5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft Manifest number: 1795 Signing time: Mon 22 Dec 2025 22:00:35 +0000 Manifest this update: Mon 22 Dec 2025 22:00:35 +0000 Manifest next update: Tue 23 Dec 2025 22:00:35 +0000 Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=) 2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=) 3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: +ps8fj/1Q10/6QHPOWw6NjHOw+RlSrH80AKFkh8yXDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:1b:5a:4f:99:a7:69:31:80:eb:ec:f9:92:c5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Validity Not Before: Dec 22 22:00:35 2025 GMT Not After : Dec 23 22:00:35 2025 GMT Subject: CN=e4a3950172a839618a927eb5c127c11970e0925c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:3b:30:b3:c4:32:97:f1:fe:12:05:7a:9a: c2:b3:2a:3e:9e:54:4e:67:14:4a:df:5e:e4:28:e5: 7f:7b:1f:db:cd:20:dd:63:e9:12:11:2b:f1:d4:c6: 0b:56:0e:ac:d0:d7:9d:8b:6e:b6:e7:82:2f:49:3e: bb:67:d2:03:e7:c0:dd:de:de:46:84:31:b0:47:7f: 44:13:12:ed:7f:c6:ec:be:ab:35:f6:89:ed:df:75: 68:3e:18:87:f4:b0:a4:95:58:df:67:26:82:aa:19: b7:45:5e:f7:4a:89:1f:9b:c9:b2:f7:85:71:95:fb: b2:4f:e9:6c:e1:74:69:5b:d5:32:69:68:e7:8d:8d: 56:5c:13:0e:eb:b7:f0:cf:48:4a:f3:52:d4:bb:e7: 96:89:5c:12:12:d9:34:b7:22:a0:bc:75:8c:7a:57: 2e:d0:ed:17:8b:86:de:a7:d5:a4:be:a0:26:d9:c2: b5:49:02:f0:43:5b:fc:c0:1e:06:75:10:e7:aa:d7: b0:7e:55:db:17:06:0b:b6:51:f8:d7:4a:aa:22:65: e3:52:52:47:eb:68:e3:32:7a:44:14:b1:60:34:a8: 0d:c8:0f:ed:a2:7c:9e:a7:d9:9e:e6:cf:5e:ec:99: 74:bf:e9:7e:cd:f5:85:e3:02:4e:b1:54:c5:f3:f6: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A3:95:01:72:A8:39:61:8A:92:7E:B5:C1:27:C1:19:70:E0:92:5C X509v3 Authority Key Identifier: keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:21:d8:f6:e6:50:89:99:7f:8d:90:9f:21:50:4b:c9:5f:a6: 37:19:4b:50:e0:f7:04:cf:37:85:bd:b9:82:80:b6:c6:72:93: e9:19:15:85:80:28:71:ea:9c:40:a6:ad:78:a6:03:7c:58:dc: 7e:ce:28:f6:ba:86:10:39:46:97:32:31:ba:98:96:16:16:d1: 91:9e:4b:ec:69:d6:e1:b5:67:88:3b:b9:50:76:c2:78:85:0e: 6d:df:66:0f:03:34:1e:e3:df:bf:9b:d4:89:f5:ec:03:ff:c3: 96:9e:1b:32:1f:d0:7b:4c:79:e4:37:03:71:f1:b3:8d:06:2e: 95:6f:e9:1e:25:65:5b:59:1c:19:1d:5d:2f:45:c8:be:dd:f0: 4e:89:ee:75:5f:02:6f:2e:a1:24:20:af:d2:dc:50:73:4d:b3: ab:9d:2f:c7:a3:d8:2d:4b:ba:d8:12:5f:9b:ea:61:a0:73:0f: 2d:b0:07:da:ba:88:e5:f9:8b:3c:04:b4:55:2f:bb:f0:df:f8: 3f:96:f1:6e:b3:cf:60:9e:5c:c7:78:6b:88:cc:f2:c4:96:43: e7:88:1a:21:a8:74:25:72:5e:8c:09:f9:a7:3c:08:d5:28:eb: 70:cd:37:12:36:15:af:bb:d8:b2:8e:36:fe:da:41:9f:82:4b: 23:8f:a9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFBtaT5mnaTGA6+z5ksXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmExNWQ0N2JhNGY0NDgyNzY0NDcyZDhkOTcxNDZhMWVi YmJmODYwHhcNMjUxMjIyMjIwMDM1WhcNMjUxMjIzMjIwMDM1WjAzMTEwLwYDVQQD EyhlNGEzOTUwMTcyYTgzOTYxOGE5MjdlYjVjMTI3YzExOTcwZTA5MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hQ7MLPEMpfx/hIFeprCsyo+nlRO ZxRK317kKOV/ex/bzSDdY+kSESvx1MYLVg6s0Nedi26254IvST67Z9ID58Dd3t5G hDGwR39EExLtf8bsvqs19ont33VoPhiH9LCklVjfZyaCqhm3RV73Sokfm8my94Vx lfuyT+ls4XRpW9UyaWjnjY1WXBMO67fwz0hK81LUu+eWiVwSEtk0tyKgvHWMelcu 0O0Xi4bep9WkvqAm2cK1SQLwQ1v8wB4GdRDnqtewflXbFwYLtlH410qqImXjUlJH 62jjMnpEFLFgNKgNyA/tonyep9me5s9e7Jl0v+l+zfWF4wJOsVTF8/YHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSjlQFyqDlhipJ+tcEnwRlw4JJcMB8GA1UdIwQY MBaAFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAt ZmUzYjkxOGMzMDk3LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAtZmUzYjkxOGMzMDk3 LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCHY9uZQ iZl/jZCfIVBLyV+mNxlLUOD3BM83hb25goC2xnKT6RkVhYAoceqcQKateKYDfFjc fs4o9rqGEDlGlzIxupiWFhbRkZ5L7GnW4bVniDu5UHbCeIUObd9mDwM0HuPfv5vU ifXsA//Dlp4bMh/Qe0x55DcDcfGzjQYulW/pHiVlW1kcGR1dL0XIvt3wTonudV8C by6hJCCv0txQc02zq50vx6PYLUu62BJfm+phoHMPLbAH2rqI5fmLPAS0VS+78N/4 P5bxbrPPYJ5cx3hriMzyxJZD54gaIah0JXJejAn5pzwI1SjrcM03EjYVr7vYso42 /tpBn4JLI4+peQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:17:23 2025 by rpki-client