This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft File: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json) Hash identifier: KgYbWAHrGwJ8z0gxcv3UEbOPxLMUO+W3rOiXkxrKbFk= Subject key identifier: 9E:45:A8:8F:1A:D3:E5:F2:EB:00:A7:3F:85:83:E4:6E:5C:81:C3:02 Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3 Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3 Certificate serial: 019B341FCC3EA05D1CBBB96375BD82BA1CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft Manifest number: 06BB Signing time: Fri 19 Dec 2025 01:00:57 +0000 Manifest this update: Fri 19 Dec 2025 01:00:57 +0000 Manifest next update: Sat 20 Dec 2025 01:00:57 +0000 Files and hashes: 1: HUQfSbUXQ8o5sejAFjmqjv9tlM4.roa (hash: 0zqsTYbHTNoaCDejiRL7Xvvp739hTKFX211y1GkZqpw=) 2: IRgLAnTQtNSoAjzAdTJssFWXSw8.roa (hash: OLDZQBhRqUKwifuLNk5oWPjP3iOP3ZFBViXpFb8/RAs=) 3: Vup9fyUkHCfDJpESeC6MCFBYGVI.roa (hash: /S5Qqrc+NbRKs+h/9lbQsMks6Y2KKec0Iu5Oh/qYLdo=) 4: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: EAkZFCVIjxIZBN1QtkKE8Rmvmoxo5n02srpND7v18EM=) 5: r-mMpss0ZPS6wfcro6Yc6v3bf5I.roa (hash: AfE+ZyYoM7YopSTeu6QdJkZ27/i6Ksf0AYTOdnxfZrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:cc:3e:a0:5d:1c:bb:b9:63:75:bd:82:ba:1c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3 Validity Not Before: Dec 19 01:00:57 2025 GMT Not After : Dec 20 01:00:57 2025 GMT Subject: CN=9e45a88f1ad3e5f2eb00a73f8583e46e5c81c302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:7d:00:28:74:11:78:85:5c:28:9e:26:17: 88:21:c8:72:76:ad:ea:43:1b:3a:4a:32:10:4e:6c: 7a:f4:c5:3f:41:7a:fa:33:4e:dc:a8:d5:14:97:b6: bc:e9:9c:17:2a:13:47:72:69:9c:37:6a:66:cc:18: 13:b4:bf:69:22:c5:c7:d9:7c:74:92:bf:91:88:5d: bf:ca:01:5a:c3:26:d2:18:1e:50:45:47:c6:99:20: 49:6e:b5:c3:30:7c:09:75:03:55:64:1a:7f:50:38: cc:f5:02:e0:68:72:c1:54:29:74:9a:7f:8b:68:3d: de:dd:38:c0:e2:62:7c:c9:b0:84:1c:3a:6f:60:92: f5:17:4e:da:13:bd:90:c2:5a:68:03:31:22:ef:dc: fc:a2:6e:41:e6:99:25:ee:d8:e4:56:44:1e:99:81: 5e:6c:9c:a9:ab:99:09:ba:37:83:53:a2:aa:ea:a4: 7a:57:c4:e2:77:d9:91:32:db:53:9d:18:2f:42:d4: d2:18:47:d7:19:50:43:54:ea:d6:c7:c3:9b:86:23: c5:e7:f8:89:d2:3f:54:4d:55:9e:ab:a8:4c:e2:a8: 7d:7e:2e:11:df:27:7d:ee:17:fc:71:cf:8a:f2:aa: ce:25:af:9c:34:54:9a:56:f3:1b:a8:ee:bf:91:61: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:A8:8F:1A:D3:E5:F2:EB:00:A7:3F:85:83:E4:6E:5C:81:C3:02 X509v3 Authority Key Identifier: keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fe:50:51:67:15:bc:c7:80:c7:96:d8:b0:15:f2:b5:06:31: 33:b9:23:58:fd:f8:95:e5:50:ad:a4:0e:15:14:10:25:9e:5d: 9e:7d:f5:8a:af:3b:0b:8c:b2:46:3f:03:cd:dd:46:a6:39:26: af:80:71:04:ac:d6:33:8e:5a:37:77:34:9e:40:00:f7:eb:f7: af:99:44:7a:d8:56:27:7b:d6:2b:33:20:63:74:d8:55:c4:fd: 3e:0b:cb:67:03:75:0f:19:0b:fe:a4:69:d5:2b:e8:f3:2e:f0: 14:84:ae:6f:f9:cf:a7:66:71:05:2a:03:62:5a:dc:7b:33:3f: a3:ed:ee:f3:41:33:63:f1:01:e9:dd:9a:12:ed:4b:7a:fa:4b: 8f:40:e7:0c:f8:c1:f8:40:a1:62:85:21:1e:8f:f4:ef:aa:1d: 67:c6:74:b3:87:a0:57:95:c8:5d:30:62:5e:cd:de:8a:09:cb: 0c:41:47:e8:51:ad:fd:d7:45:67:5b:84:0f:ea:91:ab:ab:71: c8:bd:9b:fd:77:07:37:42:a9:8e:2b:6d:8d:f1:f9:b9:a2:34: 2b:bd:4f:98:02:e2:f2:13:14:f7:1b:85:20:00:34:b4:c2:51: 07:19:7f:ec:af:55:77:1c:37:9f:a8:40:36:78:0e:3e:63:eb: eb:87:ee:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H8w+oF0cu7ljdb2CuhzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTdiMWUxM2QzMmVkM2E2NGE3YzM1MjI3NTE2MjNlZWZh YmU1ZjMwHhcNMjUxMjE5MDEwMDU3WhcNMjUxMjIwMDEwMDU3WjAzMTEwLwYDVQQD Eyg5ZTQ1YTg4ZjFhZDNlNWYyZWIwMGE3M2Y4NTgzZTQ2ZTVjODFjMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvF9ACh0EXiFXCieJheIIchydq3q Qxs6SjIQTmx69MU/QXr6M07cqNUUl7a86ZwXKhNHcmmcN2pmzBgTtL9pIsXH2Xx0 kr+RiF2/ygFawybSGB5QRUfGmSBJbrXDMHwJdQNVZBp/UDjM9QLgaHLBVCl0mn+L aD3e3TjA4mJ8ybCEHDpvYJL1F07aE72QwlpoAzEi79z8om5B5pkl7tjkVkQemYFe bJypq5kJujeDU6Kq6qR6V8Tid9mRMttTnRgvQtTSGEfXGVBDVOrWx8ObhiPF5/iJ 0j9UTVWeq6hM4qh9fi4R3yd97hf8cc+K8qrOJa+cNFSaVvMbqO6/kWGCgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5FqI8a0+Xy6wCnP4WD5G5cgcMCMB8GA1UdIwQY MBaAFGQXseE9Mu06ZKfDUidRYj7vq+XzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjkt OGZmZGRiNWUzYzI2LzEvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80NDUyMjgtYjQ0Mi00ZTE2LWFkNjktOGZmZGRiNWUzYzI2 LzEvWkJleDRUMHk3VHBrcDhOU0oxRmlQdS1yNWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/5QUWcV vMeAx5bYsBXytQYxM7kjWP34leVQraQOFRQQJZ5dnn31iq87C4yyRj8Dzd1Gpjkm r4BxBKzWM45aN3c0nkAA9+v3r5lEethWJ3vWKzMgY3TYVcT9PgvLZwN1DxkL/qRp 1Svo8y7wFISub/nPp2ZxBSoDYlrcezM/o+3u80EzY/EB6d2aEu1LevpLj0DnDPjB +EChYoUhHo/076odZ8Z0s4egV5XIXTBiXs3eignLDEFH6FGt/ddFZ1uED+qRq6tx yL2b/XcHN0KpjittjfH5uaI0K71PmALi8hMU9xuFIAA0tMJRBxl/7K9Vdxw3n6hA NngOPmPr64fu/w== -----END CERTIFICATE-----Generated at Fri Dec 19 04:56:02 2025 by rpki-client