This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft File: ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json) Hash identifier: ncbhxWo26w3KP5Mpc7sicr+eCHY9RGjn2jcMDB1prj0= Subject key identifier: 83:B3:0E:AA:51:1F:03:5A:47:32:A9:01:DA:0F:FF:16:C9:5F:50:AC Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Certificate serial: 019B3268B00A76AA8DB0E01A367819E3DC03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft Manifest number: 12A2 Signing time: Thu 18 Dec 2025 17:01:20 +0000 Manifest this update: Thu 18 Dec 2025 17:01:20 +0000 Manifest next update: Fri 19 Dec 2025 17:01:20 +0000 Files and hashes: 1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=) 2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=) 3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: vphodXlYt8NT08gf0SUm9Rb+yWZ0qXvVgv/PJ8pvUfY=) 4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:b0:0a:76:aa:8d:b0:e0:1a:36:78:19:e3:dc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Validity Not Before: Dec 18 17:01:20 2025 GMT Not After : Dec 19 17:01:20 2025 GMT Subject: CN=83b30eaa511f035a4732a901da0fff16c95f50ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:2b:5f:12:85:ee:d8:cc:0e:a8:7a:af:5e: 7a:03:b4:55:70:92:c4:c8:d3:93:30:71:4a:fa:5b: c4:d7:64:1c:b5:ac:43:2f:26:17:35:c0:6f:55:ac: 1d:5b:91:0d:ec:72:00:d4:f2:a7:97:1f:6c:1b:b9: e7:4f:b8:f8:91:2d:cf:40:a6:58:40:3e:30:a6:50: 9a:96:40:62:22:db:09:a9:63:cd:2d:ee:23:a7:6f: 9d:73:fc:1e:fb:35:29:6a:8a:6b:06:a9:00:34:1e: f9:0e:ed:48:9c:43:f4:57:8a:72:07:64:6a:80:50: 9f:13:10:4f:2d:64:9e:4e:8c:7b:3b:0a:b4:c9:57: b2:39:c9:d5:54:ba:e4:e2:8e:58:a9:65:ca:8f:a6: 62:41:40:ac:bd:74:c3:3f:b8:4f:9a:d6:46:05:29: be:ef:32:80:2b:91:2a:1d:5d:b5:11:35:72:a6:5b: c8:6b:3e:14:c4:24:c0:49:7b:3c:ff:4f:f5:ff:de: ee:2a:72:80:c0:9b:d8:f2:a2:98:fa:52:4c:d9:a0: 08:f1:36:62:b4:4d:ba:62:26:1f:9a:dc:73:36:5a: 49:83:40:87:fc:38:6a:32:6a:e8:4a:9c:5f:c5:dd: 7e:0f:7a:58:5f:78:e3:d0:c3:d1:bf:a6:25:f8:7b: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B3:0E:AA:51:1F:03:5A:47:32:A9:01:DA:0F:FF:16:C9:5F:50:AC X509v3 Authority Key Identifier: keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8a:05:2a:33:76:82:ad:21:90:32:45:58:37:19:8d:9b:7e: b7:d6:56:bc:93:d3:3b:fb:b5:86:83:a5:66:1b:af:da:11:f7: a6:fc:ee:54:cc:0a:6b:96:28:d8:e1:f1:90:2a:a8:db:4b:01: c2:b7:cf:ab:5d:46:52:b4:43:22:ba:ab:a7:a0:9f:16:86:f2: d6:f3:25:dc:c0:96:8f:34:2a:c2:00:e5:30:3b:6e:76:e2:ca: dc:69:f8:d7:3d:fe:da:f6:24:1f:ea:d1:c9:4d:c7:9a:c4:10: 60:e6:0e:a5:f7:84:51:98:d1:55:dd:44:9d:d8:0a:57:c2:ab: 8a:a7:a9:8f:1e:a6:75:73:61:73:08:5b:1c:60:29:d2:be:9f: 38:27:a4:d2:8c:d6:37:5c:7c:75:23:aa:95:59:25:89:ea:9c: 34:f5:39:e7:ca:7a:c6:38:d2:97:6b:1b:ae:cf:b6:88:73:fa: 54:21:16:2b:f7:30:ad:ed:6f:4f:68:9a:e1:a7:3d:fc:b9:24: 89:0d:63:8f:62:61:4e:00:6a:86:bb:78:67:12:c3:11:9f:2f: 79:d2:67:20:dc:17:50:1a:8b:78:74:8e:08:e4:84:f4:14:bd: f4:ee:9e:71:5c:13:94:9a:20:61:75:86:72:56:b5:8e:a9:e6: 73:ac:e2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaLAKdqqNsOAaNngZ49wDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5 MGMxNTcwHhcNMjUxMjE4MTcwMTIwWhcNMjUxMjE5MTcwMTIwWjAzMTEwLwYDVQQD Eyg4M2IzMGVhYTUxMWYwMzVhNDczMmE5MDFkYTBmZmYxNmM5NWY1MGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqwrXxKF7tjMDqh6r156A7RVcJLE yNOTMHFK+lvE12QctaxDLyYXNcBvVawdW5EN7HIA1PKnlx9sG7nnT7j4kS3PQKZY QD4wplCalkBiItsJqWPNLe4jp2+dc/we+zUpaoprBqkANB75Du1InEP0V4pyB2Rq gFCfExBPLWSeTox7Owq0yVeyOcnVVLrk4o5YqWXKj6ZiQUCsvXTDP7hPmtZGBSm+ 7zKAK5EqHV21ETVyplvIaz4UxCTASXs8/0/1/97uKnKAwJvY8qKY+lJM2aAI8TZi tE26YiYfmtxzNlpJg0CH/DhqMmroSpxfxd1+D3pYX3jj0MPRv6Yl+Hv+cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOzDqpRHwNaRzKpAdoP/xbJX1CsMB8GA1UdIwQY MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQooFKjN2 gq0hkDJFWDcZjZt+t9ZWvJPTO/u1hoOlZhuv2hH3pvzuVMwKa5Yo2OHxkCqo20sB wrfPq11GUrRDIrqrp6CfFoby1vMl3MCWjzQqwgDlMDtuduLK3Gn41z3+2vYkH+rR yU3HmsQQYOYOpfeEUZjRVd1EndgKV8Kriqepjx6mdXNhcwhbHGAp0r6fOCek0ozW N1x8dSOqlVklieqcNPU558p6xjjSl2sbrs+2iHP6VCEWK/cwre1vT2ia4ac9/Lkk iQ1jj2JhTgBqhrt4ZxLDEZ8vedJnINwXUBqLeHSOCOSE9BS99O6ecVwTlJogYXWG cla1jqnmc6zi/w== -----END CERTIFICATE-----Generated at Thu Dec 18 20:32:34 2025 by rpki-client