This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json) Hash identifier: su3zxxU1zvpIPkzwkXcPS//CoQKAaHZtEh6VkZAB+Ew= Subject key identifier: CE:32:01:B2:E0:99:97:F4:94:7F:64:E6:CE:EF:D9:14:F0:CD:BB:9D Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67 Certificate serial: 019AF2773874C345EABA7AD63AF87B095DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=) 2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: IpYWKI33ZaXoYjjxKrm4bQzNExT7vXI53kXjZKiXK1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:38:74:c3:45:ea:ba:7a:d6:3a:f8:7b:09:5d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=ce3201b2e09997f4947f64e6ceefd914f0cdbb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:3b:4a:7a:f7:2b:f1:60:23:42:4d:d6:02: 6d:94:86:5b:16:d6:40:36:1e:a8:13:7b:fe:f4:94: e5:b8:17:54:2d:a2:4f:ac:bb:17:68:25:11:d4:45: 15:c4:6f:42:be:2b:ff:42:3e:54:83:05:ec:a4:f8: 1b:93:c0:d5:ff:b2:80:72:2f:25:a4:dd:04:ef:8d: 13:0c:6f:52:9a:49:19:8f:a0:0c:02:df:61:7d:9f: bf:68:4c:d6:59:ba:3d:5b:41:77:c4:9a:88:a6:8f: e5:0b:7e:40:a5:de:b2:4a:6a:a2:e2:31:74:33:43: 1f:c9:2e:4b:96:16:15:4d:28:cf:1f:69:47:f8:f7: 10:73:53:9a:30:ce:a0:55:ed:4e:82:c9:c0:8e:44: 48:7d:e4:84:1b:e6:09:c9:0f:47:ae:7f:75:d4:72: bf:18:e6:44:d9:fb:49:5f:ef:80:63:f4:fc:bf:d5: b9:4d:17:1c:c2:b1:b8:01:2b:ca:31:9c:52:bf:5d: f6:23:ef:b0:26:74:89:5a:11:8b:6f:f1:87:92:bf: e3:8d:7e:8e:84:03:b2:b1:df:2d:4f:22:22:8f:98: 27:ae:18:3d:48:7c:73:03:16:ae:6a:15:cd:ae:04: ca:b2:d3:1d:ea:cb:73:62:51:de:dc:db:ea:d8:a1: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:01:B2:E0:99:97:F4:94:7F:64:E6:CE:EF:D9:14:F0:CD:BB:9D X509v3 Authority Key Identifier: keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:54:40:1a:de:4f:4d:8b:ae:b9:65:85:3f:b4:ba:f4:f9:71: 8c:97:01:fc:63:d4:e8:01:41:a3:6c:f3:de:de:d1:c5:20:a9: c3:fe:7a:02:3a:49:c6:c2:5a:07:74:9e:56:5a:3e:9e:2d:98: 77:1c:68:ec:fb:8e:76:eb:ab:e2:0e:af:b1:a5:33:66:df:6d: bb:21:1d:e8:17:55:9c:11:e5:df:ec:42:9b:43:82:5e:d1:68: 6d:4b:fb:08:35:a9:d6:3e:ad:2b:e5:e6:1a:cd:94:f5:be:4b: c3:f0:7f:9d:02:ad:e7:20:0c:12:ee:ff:8f:4b:98:ba:57:39: a4:d6:f4:e9:71:13:bb:39:a1:d0:d9:4f:bb:b5:34:87:8f:3f: 3d:6e:87:01:22:15:17:c2:dc:24:e6:2c:d4:e1:5f:79:dc:57: 32:7a:3f:3b:aa:dc:2b:a2:52:e9:93:46:4c:0e:ee:39:a8:e2: 39:7b:0d:ba:f6:64:f3:f6:ad:1a:d3:04:80:e7:a5:a9:6b:0a: d5:d8:bd:4b:a6:ab:2a:7a:76:25:c5:58:ea:bb:ef:8f:4b:ec: 14:12:77:92:5b:7c:51:7f:4f:29:f9:00:ba:42:48:77:28:97: a7:0e:43:f0:ae:05:51:36:b8:61:0d:36:0d:09:e9:9b:c9:67: 55:a3:77:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzh0w0XqunrWOvh7CV38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTEwYmVmOWM1Yjk2YTgzMWM3YWJmOTU1OTI3NDRiYmFm MWVlNjcwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD EyhjZTMyMDFiMmUwOTk5N2Y0OTQ3ZjY0ZTZjZWVmZDkxNGYwY2RiYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkc7Snr3K/FgI0JN1gJtlIZbFtZA Nh6oE3v+9JTluBdULaJPrLsXaCUR1EUVxG9Cviv/Qj5UgwXspPgbk8DV/7KAci8l pN0E740TDG9SmkkZj6AMAt9hfZ+/aEzWWbo9W0F3xJqIpo/lC35Apd6ySmqi4jF0 M0MfyS5LlhYVTSjPH2lH+PcQc1OaMM6gVe1OgsnAjkRIfeSEG+YJyQ9Hrn911HK/ GOZE2ftJX++AY/T8v9W5TRccwrG4ASvKMZxSv132I++wJnSJWhGLb/GHkr/jjX6O hAOysd8tTyIij5gnrhg9SHxzAxauahXNrgTKstMd6stzYlHe3Nvq2KHC7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4yAbLgmZf0lH9k5s7v2RTwzbudMB8GA1UdIwQY MBaAFMwRC++cW5aoMcer+VWSdEu68e5nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2Qt YzhhY2I3MTczYjYyLzEvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81MjliZTktMWZjZi00NmEzLWIxM2QtYzhhY2I3MTczYjYy LzEvekJFTDc1eGJscWd4eDZ2NVZaSjBTN3J4N21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1RAGt5P TYuuuWWFP7S69PlxjJcB/GPU6AFBo2zz3t7RxSCpw/56AjpJxsJaB3SeVlo+ni2Y dxxo7PuOduur4g6vsaUzZt9tuyEd6BdVnBHl3+xCm0OCXtFobUv7CDWp1j6tK+Xm Gs2U9b5Lw/B/nQKt5yAMEu7/j0uYulc5pNb06XETuzmh0NlPu7U0h48/PW6HASIV F8LcJOYs1OFfedxXMno/O6rcK6JS6ZNGTA7uOajiOXsNuvZk8/atGtMEgOelqWsK 1di9S6arKnp2JcVY6rvvj0vsFBJ3klt8UX9PKfkAukJIdyiXpw5D8K4FUTa4YQ02 DQnpm8lnVaN3mw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:41 2025 by rpki-client