This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json) Hash identifier: dWZAjzONrYakupdzvhj7QyKwR6Es5MFcbVKK4ZPf6l8= Subject key identifier: A6:37:8E:D6:26:2B:0E:C3:6B:78:04:E4:62:DC:9E:5C:2B:BA:48:6F Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a Certificate serial: 019AF209118CB31543DC9979DFE1E0FB0315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=) 2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: EPq5UyRmolfm2ID8ZS+HBzJPcWBSHK+zIX6XrQ8hH2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:11:8c:b3:15:43:dc:99:79:df:e1:e0:fb:03:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=a6378ed6262b0ec36b7804e462dc9e5c2bba486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:79:8f:0f:21:a1:6d:2e:89:56:96:74:a7: 92:d4:14:54:90:43:13:5b:db:d6:62:f5:6f:93:a7: 8c:5f:c0:08:23:b2:40:c4:5a:e5:c6:71:b2:3e:f4: 3d:a6:1b:79:ab:09:55:09:55:79:83:b1:4b:0e:1a: 1d:b1:94:bf:85:1d:9c:a8:51:2d:b1:3b:be:9a:97: f0:86:a9:1a:d6:5f:96:fb:63:b7:d6:f0:fe:c5:fe: 83:37:48:19:0a:34:30:d9:74:cd:d7:92:9c:9f:fa: 36:0f:81:96:d0:ea:de:7a:6c:53:9f:36:20:0d:9e: 3c:9a:ba:bd:b5:00:84:69:09:2b:ff:e7:24:c0:f1: 40:9e:2f:33:c2:94:b1:70:00:89:9c:b6:de:cc:6f: cd:50:cb:25:74:24:a6:cc:5e:cb:d4:26:1c:75:d7: 06:18:ec:48:50:61:41:ea:6b:76:47:04:9b:83:64: 4b:ed:eb:49:ee:82:d3:59:da:db:20:32:8e:ae:ef: 53:e7:2c:c1:4e:4c:df:48:87:8f:32:00:5a:c5:37: ff:21:57:87:8c:2c:92:cd:6b:57:ae:5c:eb:46:a1: c4:c4:02:2d:57:80:32:58:13:a1:42:52:61:c3:01: a9:80:38:6c:5e:15:0b:b3:92:06:a2:dd:36:8c:5a: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:37:8E:D6:26:2B:0E:C3:6B:78:04:E4:62:DC:9E:5C:2B:BA:48:6F X509v3 Authority Key Identifier: keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2d:42:ed:5e:15:4c:54:7f:e8:c0:29:37:8a:cb:28:ae:fc: 1a:1a:7d:2d:9e:16:42:5b:3c:40:4d:0e:7a:c3:a8:57:4e:1b: 1c:5e:56:45:76:55:47:c7:ed:ec:d7:ad:21:87:5e:98:29:13: 29:54:a2:40:b0:20:06:7b:23:26:7f:dd:e9:47:c0:c8:8d:28: dd:e5:31:54:ec:d9:65:d5:7b:e6:6b:8a:3b:82:df:e7:d8:37: c7:4b:b9:f0:75:cc:bb:f7:e7:70:d0:d1:19:a0:75:f0:19:68: 80:19:7f:08:83:2b:7f:5f:19:43:9b:8d:9f:73:ea:44:57:59: 7c:c0:68:4e:99:0c:78:22:e2:11:3d:d9:ce:c1:57:99:e1:b9: 83:16:30:ec:66:c7:9c:08:bd:64:30:65:91:e4:f3:fa:72:24: 5d:fd:d3:74:b7:cf:d0:a6:c8:3c:66:f1:26:4c:46:e2:23:7e: 30:de:f8:f3:a5:fc:e0:39:a4:d8:3e:7c:4a:d3:bb:ef:6e:99: 64:3f:b2:c2:53:12:2d:e2:7c:62:76:41:be:04:e5:53:3f:6c: 6c:9e:61:26:20:c4:ad:8e:2a:88:4e:b1:0e:1b:ea:a8:b6:f2: fa:e6:8b:ff:f6:79:ef:d1:ab:2f:a0:33:b4:a3:dc:70:8a:c3: 3f:44:6d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRGMsxVD3Jl53+Hg+wMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjE1MDI3NmY1NWJhZTQ1NTk4OGQzYTEzZTU5MzQxMDc0 ZGNkMGEwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EyhhNjM3OGVkNjI2MmIwZWMzNmI3ODA0ZTQ2MmRjOWU1YzJiYmE0ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrF5jw8hoW0uiVaWdKeS1BRUkEMT W9vWYvVvk6eMX8AII7JAxFrlxnGyPvQ9pht5qwlVCVV5g7FLDhodsZS/hR2cqFEt sTu+mpfwhqka1l+W+2O31vD+xf6DN0gZCjQw2XTN15Kcn/o2D4GW0OreemxTnzYg DZ48mrq9tQCEaQkr/+ckwPFAni8zwpSxcACJnLbezG/NUMsldCSmzF7L1CYcddcG GOxIUGFB6mt2RwSbg2RL7etJ7oLTWdrbIDKOru9T5yzBTkzfSIePMgBaxTf/IVeH jCySzWtXrlzrRqHExAItV4AyWBOhQlJhwwGpgDhsXhULs5IGot02jFrK1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY3jtYmKw7Da3gE5GLcnlwrukhvMB8GA1UdIwQY MBaAFM2xUCdvVbrkVZiNOhPlk0EHTc0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEt MzQwN2ZjYTEyMjY3LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEtMzQwN2ZjYTEyMjY3 LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJC1C7V4V TFR/6MApN4rLKK78Ghp9LZ4WQls8QE0OesOoV04bHF5WRXZVR8ft7NetIYdemCkT KVSiQLAgBnsjJn/d6UfAyI0o3eUxVOzZZdV75muKO4Lf59g3x0u58HXMu/fncNDR GaB18BlogBl/CIMrf18ZQ5uNn3PqRFdZfMBoTpkMeCLiET3ZzsFXmeG5gxYw7GbH nAi9ZDBlkeTz+nIkXf3TdLfP0KbIPGbxJkxG4iN+MN7486X84Dmk2D58StO7726Z ZD+ywlMSLeJ8YnZBvgTlUz9sbJ5hJiDErY4qiE6xDhvqqLby+uaL//Z579GrL6Az tKPccIrDP0RtmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:21 2025 by rpki-client