This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json) Hash identifier: AMwydUVh8fvTZFmeaBgwTKU9sUMnbGJfpiiPqQAOESU= Subject key identifier: B0:23:90:EA:17:E3:E5:4D:90:F2:65:4D:A6:69:C9:65:F1:53:F8:98 Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb Certificate serial: 019AF23F70613810D4BE852571B584282D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft Manifest number: 0549 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=) 2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: ytTqUlNwV2Y34bWJlb4yPb9LBfDBhFK9s5Gb12w6XNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:70:61:38:10:d4:be:85:25:71:b5:84:28:2d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=b02390ea17e3e54d90f2654da669c965f153f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:ff:79:a2:df:d0:55:96:af:4c:69:38:bf: 94:49:e4:a3:bf:52:5c:0f:97:57:b5:91:8b:e3:9b: 2d:a1:2e:ce:35:de:e5:13:30:62:1c:d6:fd:c5:55: 3a:ba:f0:6c:77:62:b9:5b:59:de:3a:96:5a:fb:ba: f8:36:97:f8:04:70:ac:ce:d9:54:c4:a9:8b:7a:3f: dd:91:3f:2d:a2:3a:f5:09:c5:5e:fd:d7:7b:85:a3: ab:28:d6:d3:03:35:7a:25:9f:ce:ad:c0:99:b7:ba: 89:ad:88:6e:3e:71:05:b6:bf:62:88:fb:97:58:45: b8:f8:ea:bf:16:f4:03:90:4a:41:ce:b1:f1:a2:90: e1:80:db:77:87:98:3c:0e:44:d6:32:31:26:f2:95: 8e:91:da:08:ea:08:36:f7:be:fe:a0:2d:8a:04:68: 77:a6:cb:ad:3d:2b:2e:35:7c:25:ff:65:9c:a5:0e: 20:dc:78:41:95:92:75:c7:9e:fb:7a:1c:50:e5:30: 71:c9:9b:ff:5b:8b:5f:ba:54:f6:c7:6f:9d:14:6b: ab:2a:4d:90:81:23:ed:df:35:48:dd:53:63:5d:23: c4:27:12:26:9a:14:48:6f:50:30:94:e3:a8:a1:47: 3c:a0:84:66:bd:76:ef:8d:95:73:35:20:ee:e3:6e: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:23:90:EA:17:E3:E5:4D:90:F2:65:4D:A6:69:C9:65:F1:53:F8:98 X509v3 Authority Key Identifier: keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6f:c3:b8:e9:d5:56:a9:6c:b7:52:8e:0e:47:3a:61:f1:8c: 36:0d:45:0e:35:df:f1:eb:23:7f:b6:b9:bd:ea:e5:09:57:9f: 73:97:cd:1a:dc:5d:01:d8:74:d6:47:97:db:d7:5b:2a:4d:3a: cf:25:6c:1e:a5:08:ba:9f:30:1c:9f:99:65:66:5e:db:03:39: 4c:6c:bf:55:0a:1e:86:a0:ed:73:44:99:29:f4:52:e8:51:57: 3b:f9:10:4d:d4:13:f6:1d:d9:85:a3:03:e5:f8:8c:68:12:6b: eb:35:d6:2b:a8:79:e5:7c:57:db:55:7b:31:4f:b7:89:ba:d3: cf:3c:93:c5:cf:3f:c1:cb:58:b3:a6:af:c2:6b:1b:72:76:8b: 79:77:03:f1:9c:72:7c:c6:0f:7e:0b:39:4e:ec:fa:75:3d:0c: d9:b4:1d:03:dc:5c:94:76:8a:98:95:56:0a:1a:fc:be:67:fc: ba:12:1f:db:ce:98:e4:06:86:04:6c:e8:ef:a1:21:6d:c9:25: 48:a5:7f:94:ae:f6:85:57:f9:c8:c0:44:2a:0d:79:00:30:05: f1:a9:c7:33:57:8d:06:35:df:4a:e1:73:d0:ba:40:40:20:c5: ef:16:7d:b8:0c:43:90:00:e4:10:29:b7:cd:e6:63:9f:d5:57: 7a:b5:90:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3BhOBDUvoUlcbWEKC1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjEyOGE1YWRjYmNjZGYxNWNiOTc5YWQ2YWJmMmI5NjQw ZmRiZGIwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EyhiMDIzOTBlYTE3ZTNlNTRkOTBmMjY1NGRhNjY5Yzk2NWYxNTNmODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWr/eaLf0FWWr0xpOL+USeSjv1Jc D5dXtZGL45stoS7ONd7lEzBiHNb9xVU6uvBsd2K5W1neOpZa+7r4Npf4BHCsztlU xKmLej/dkT8tojr1CcVe/dd7haOrKNbTAzV6JZ/OrcCZt7qJrYhuPnEFtr9iiPuX WEW4+Oq/FvQDkEpBzrHxopDhgNt3h5g8DkTWMjEm8pWOkdoI6gg2977+oC2KBGh3 psutPSsuNXwl/2WcpQ4g3HhBlZJ1x577ehxQ5TBxyZv/W4tfulT2x2+dFGurKk2Q gSPt3zVI3VNjXSPEJxImmhRIb1AwlOOooUc8oIRmvXbvjZVzNSDu4272fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAjkOoX4+VNkPJlTaZpyWXxU/iYMB8GA1UdIwQY MBaAFGWxKKWty8zfFcuXmtar8rlkD9vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUt YmQ4NmQ0YjMyYzU4LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUtYmQ4NmQ0YjMyYzU4 LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2/DuOnV Vqlst1KODkc6YfGMNg1FDjXf8esjf7a5verlCVefc5fNGtxdAdh01keX29dbKk06 zyVsHqUIup8wHJ+ZZWZe2wM5TGy/VQoehqDtc0SZKfRS6FFXO/kQTdQT9h3ZhaMD 5fiMaBJr6zXWK6h55XxX21V7MU+3ibrTzzyTxc8/wctYs6avwmsbcnaLeXcD8Zxy fMYPfgs5Tuz6dT0M2bQdA9xclHaKmJVWChr8vmf8uhIf286Y5AaGBGzo76Ehbckl SKV/lK72hVf5yMBEKg15ADAF8anHM1eNBjXfSuFz0LpAQCDF7xZ9uAxDkADkECm3 zeZjn9VXerWQBA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:48 2025 by rpki-client