This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft File: ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json) Hash identifier: u5sLRmWRiRMWREXZycZknUwCgBZFtH/Z5J5d6qlMoHc= Subject key identifier: 22:DA:F2:97:F2:AD:20:EE:64:44:99:C0:B9:D7:4E:F0:47:BE:65:05 Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Certificate serial: 019AF0BF5E3B09DD495C8455324F04D1EA1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft Manifest number: 1280 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=) 2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=) 3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: lb8TGyHnb80S/tvVxEOM0IpBba8uTypgr5QjmsqNBOI=) 4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5e:3b:09:dd:49:5c:84:55:32:4f:04:d1:ea:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157 Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=22daf297f2ad20ee644499c0b9d74ef047be6505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:29:2e:32:a4:68:a7:d7:c5:23:62:8b:ac: 83:1c:05:01:8e:86:6d:e7:a4:ef:0e:0b:e1:0b:1a: 1a:a0:9c:e3:00:03:11:ec:2d:79:a8:df:4e:24:e8: a0:1d:bb:c8:39:4e:20:b0:65:30:96:e7:af:19:d3: bf:d1:cc:78:4a:fe:fe:a3:9e:09:da:dd:22:94:3e: 89:68:c5:30:2c:75:8c:ac:20:4e:d2:8c:1a:2e:72: 77:b6:93:1d:49:b6:89:12:e1:bb:ae:0f:4d:0f:9b: f6:39:96:27:02:5a:25:83:d7:a0:df:f9:2f:e5:4a: ab:5d:fa:56:a6:e3:32:e9:1d:14:e9:f2:19:fa:83: 11:af:a7:29:7b:8a:11:83:af:f0:41:1f:62:c2:c9: 47:4e:a9:7a:d2:41:9e:63:2e:c3:83:09:58:d8:cb: 06:67:3e:58:1d:f3:74:df:15:94:04:c4:39:46:a2: b6:ec:c4:ba:e4:09:60:0c:fe:9a:e3:73:54:35:7b: b5:ba:8c:30:3b:92:48:41:00:23:04:14:6d:b7:d1: da:00:a5:fb:f8:b4:63:7c:13:d8:8a:36:92:5d:02: c5:49:d9:63:d9:92:67:44:19:aa:c1:c0:05:ee:8e: 34:44:e0:f3:77:46:97:85:8f:0b:61:af:4f:94:e3: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DA:F2:97:F2:AD:20:EE:64:44:99:C0:B9:D7:4E:F0:47:BE:65:05 X509v3 Authority Key Identifier: keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:44:9e:84:2a:35:73:7a:0f:df:69:60:39:23:b5:8c:f4:04: 5f:04:53:6a:6a:80:2d:85:b8:ff:19:e4:6b:80:bf:72:e5:43: 10:ce:08:1c:b3:ee:2e:39:65:e8:96:c6:9f:0d:19:27:16:c5: 57:f9:d4:c7:e5:c8:cb:42:2f:ec:a0:27:b7:73:e3:b9:13:a5: b2:1a:18:4c:e2:dd:c1:94:a0:0c:e7:fe:3d:7b:5c:2b:cf:d4: 41:bf:0b:6f:90:52:8a:7f:3e:38:25:f2:17:c5:23:5b:c1:ef: 6f:8d:5e:75:33:68:a7:cf:bc:fc:f9:c2:cc:02:04:f1:04:7d: 31:8e:18:91:d0:ba:a9:b9:3d:9b:75:6d:56:ce:23:8a:c7:d7: 26:e0:e0:80:13:5c:55:1a:5b:3a:7c:11:c3:1a:c2:4c:da:cb: 66:a4:20:6e:55:78:46:b5:25:8f:e5:1c:59:27:f2:0e:61:f8: be:60:2c:2a:7e:28:20:3a:b8:43:8e:23:ad:f0:a1:4d:fc:dd: 2b:b5:a1:0a:04:3b:38:9f:47:c5:a9:91:6b:45:7f:7c:3c:a0: c8:81:5b:b8:32:30:e1:27:1b:68:69:ae:c9:4e:fc:60:91:85: 25:6a:69:0c:e5:64:58:0e:26:c3:7b:16:8c:6e:3d:48:24:05: 96:1f:04:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv147Cd1JXIRVMk8E0eobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5 MGMxNTcwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EygyMmRhZjI5N2YyYWQyMGVlNjQ0NDk5YzBiOWQ3NGVmMDQ3YmU2NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZApLjKkaKfXxSNii6yDHAUBjoZt 56TvDgvhCxoaoJzjAAMR7C15qN9OJOigHbvIOU4gsGUwluevGdO/0cx4Sv7+o54J 2t0ilD6JaMUwLHWMrCBO0owaLnJ3tpMdSbaJEuG7rg9ND5v2OZYnAlolg9eg3/kv 5UqrXfpWpuMy6R0U6fIZ+oMRr6cpe4oRg6/wQR9iwslHTql60kGeYy7DgwlY2MsG Zz5YHfN03xWUBMQ5RqK27MS65AlgDP6a43NUNXu1uowwO5JIQQAjBBRtt9HaAKX7 +LRjfBPYijaSXQLFSdlj2ZJnRBmqwcAF7o40RODzd0aXhY8LYa9PlOPdMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLa8pfyrSDuZESZwLnXTvBHvmUFMB8GA1UdIwQY MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUSehCo1 c3oP32lgOSO1jPQEXwRTamqALYW4/xnka4C/cuVDEM4IHLPuLjll6JbGnw0ZJxbF V/nUx+XIy0Iv7KAnt3PjuROlshoYTOLdwZSgDOf+PXtcK8/UQb8Lb5BSin8+OCXy F8UjW8Hvb41edTNop8+8/PnCzAIE8QR9MY4YkdC6qbk9m3VtVs4jisfXJuDggBNc VRpbOnwRwxrCTNrLZqQgblV4RrUlj+UcWSfyDmH4vmAsKn4oIDq4Q44jrfChTfzd K7WhCgQ7OJ9HxamRa0V/fDygyIFbuDIw4ScbaGmuyU78YJGFJWppDOVkWA4mw3sW jG49SCQFlh8ERw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:29 2025 by rpki-client