This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft File: ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json) Hash identifier: iBoFWQl0d6DUmiOKksTTSIYw9abcru+hGqFBXzEqbFg= Subject key identifier: B8:FC:B1:14:98:9B:C3:B6:9F:BC:62:55:68:E6:9F:4E:28:E9:F6:32 Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d Certificate serial: 019AF1D267732428B29A4F3F51D87BD76E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 04:01:29 +0000 Manifest this update: Sat 06 Dec 2025 04:01:29 +0000 Manifest next update: Sun 07 Dec 2025 04:01:29 +0000 Files and hashes: 1: 8AY6X4XCRyiZxzFlt6tsbjR30jM.roa (hash: 5ZRaImHY2F/S3wQVqNNqg0MgU/7l0llwd1UlTTznV7w=) 2: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: An1HyXFvAQHSPptYZp5IoIXOf4OPhtR+VRFoCsragC4=) 3: bth8nL17vmRfjOgOkE44hcyUW-U.roa (hash: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=) 4: fyItLKzWB2M2DcciXcjMC9ehbVo.roa (hash: 3hotdI7UkUaU/+3bTtSUK7y3DutUUFvTPfXcX54WRXY=) 5: xn5m4EslppaLzMQirkAjRslNCRc.roa (hash: UOBKdq1hXA/nlG6uZfbozsCpkf5JEX4D4dlwEvI1lPs=) 6: y9bz4yP_EEqSJFJp-Pek8JbvZOc.roa (hash: kA5Ei/WRVk5KhopTqBlcPpplFexyb5cDOtoJ1Rgm79k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:67:73:24:28:b2:9a:4f:3f:51:d8:7b:d7:6e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d Validity Not Before: Dec 6 04:01:29 2025 GMT Not After : Dec 7 04:01:29 2025 GMT Subject: CN=b8fcb114989bc3b69fbc625568e69f4e28e9f632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:ea:44:2c:82:6c:bc:dc:b0:1f:8a:5e:b6: 69:41:23:60:15:ae:f2:1b:4c:2e:c1:83:9f:85:00: 4f:95:7d:ae:9f:67:a9:0b:da:eb:c2:d6:8d:6b:f8: 45:3d:0b:0a:ec:5e:f1:f6:8a:62:d8:50:12:3a:8c: 10:74:7b:b6:50:ac:64:b1:71:5a:21:d7:6f:10:c9: 3c:89:94:97:83:1f:c7:3f:f7:7d:e1:e6:8b:71:0e: 15:3e:f4:53:f9:ac:ee:05:b8:c3:9c:fa:95:a2:76: d2:93:35:64:a5:16:02:47:2b:9d:9c:62:ab:38:89: 04:9f:ac:eb:c7:97:5d:5a:3a:b6:22:cc:f7:70:c0: 40:82:46:b1:96:bd:08:0f:30:b8:20:ee:12:b4:00: e8:37:e5:81:4a:49:b3:f0:7d:99:34:c5:dd:63:21: 58:5d:35:9f:fd:32:09:c8:dc:69:25:5f:b9:e4:d0: 8a:e5:bb:a8:8a:25:57:d4:c2:94:ca:08:89:7b:56: 35:45:92:a8:bf:50:6c:f2:62:73:87:96:5d:f8:8b: 5c:91:0c:8a:3f:42:b4:45:25:5c:8d:9e:5c:1c:df: c2:2c:63:7e:41:6f:c7:b5:02:e0:91:8a:11:c4:3d: 8d:57:3e:5f:a0:18:2d:27:d1:6d:23:18:59:77:3d: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FC:B1:14:98:9B:C3:B6:9F:BC:62:55:68:E6:9F:4E:28:E9:F6:32 X509v3 Authority Key Identifier: keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f7:8a:b8:66:22:5f:10:77:21:4c:d8:6f:79:07:09:06:07: e2:2e:b1:6c:00:b8:d5:ba:f6:76:44:11:04:06:89:ed:2e:e6: d0:54:52:19:0f:69:a0:08:95:3b:09:87:11:88:2a:06:49:e6: 5f:cc:71:17:10:35:4d:2e:1d:d7:46:82:6d:2b:20:17:ff:eb: ed:4f:13:b8:18:72:0c:85:fa:44:a8:b8:c3:65:bb:95:27:ce: 3b:89:25:ab:e6:48:32:79:89:55:70:04:5a:a2:19:16:08:1b: fe:13:03:18:56:2c:07:f2:ea:08:2c:f7:2c:5d:65:86:41:a0: 91:99:77:53:ac:0e:ef:96:ed:fc:49:29:56:8f:6c:8f:4e:94: 76:b4:65:02:34:a1:58:53:27:fc:cf:09:b9:1f:6d:3d:3f:32: a5:d3:c7:5e:2a:52:46:fb:2f:b9:ea:d4:13:2e:f4:b1:d1:e5: 0c:30:33:c9:08:ba:8f:da:7c:26:e8:b5:98:d0:ee:e7:12:54: 2d:ae:41:e4:a0:cc:4f:79:85:49:10:e0:b9:56:a8:d0:f2:df: a2:01:58:99:e7:26:61:42:90:c2:ca:f8:97:c7:7a:de:87:40: b0:83:f6:17:3b:61:91:8e:ed:67:24:8a:a9:fc:16:e3:b1:86: 35:3b:2c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mdzJCiymk8/Udh7125BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGZlMjZkNDAzMTQxYmU5MDU5YWIyMTQ0MzI1YjQwMmQ0 Y2FiN2QwHhcNMjUxMjA2MDQwMTI5WhcNMjUxMjA3MDQwMTI5WjAzMTEwLwYDVQQD EyhiOGZjYjExNDk4OWJjM2I2OWZiYzYyNTU2OGU2OWY0ZTI4ZTlmNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMHqRCyCbLzcsB+KXrZpQSNgFa7y G0wuwYOfhQBPlX2un2epC9rrwtaNa/hFPQsK7F7x9opi2FASOowQdHu2UKxksXFa IddvEMk8iZSXgx/HP/d94eaLcQ4VPvRT+azuBbjDnPqVonbSkzVkpRYCRyudnGKr OIkEn6zrx5ddWjq2Isz3cMBAgkaxlr0IDzC4IO4StADoN+WBSkmz8H2ZNMXdYyFY XTWf/TIJyNxpJV+55NCK5buoiiVX1MKUygiJe1Y1RZKov1Bs8mJzh5Zd+ItckQyK P0K0RSVcjZ5cHN/CLGN+QW/HtQLgkYoRxD2NVz5foBgtJ9FtIxhZdz0bLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj8sRSYm8O2n7xiVWjmn04o6fYyMB8GA1UdIwQY MBaAFGTf4m1AMUG+kFmrIUQyW0AtTKt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDct ZjY1NzUxOWQwMjMzLzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDctZjY1NzUxOWQwMjMz LzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfeKuGYi XxB3IUzYb3kHCQYH4i6xbAC41br2dkQRBAaJ7S7m0FRSGQ9poAiVOwmHEYgqBknm X8xxFxA1TS4d10aCbSsgF//r7U8TuBhyDIX6RKi4w2W7lSfOO4klq+ZIMnmJVXAE WqIZFggb/hMDGFYsB/LqCCz3LF1lhkGgkZl3U6wO75bt/EkpVo9sj06UdrRlAjSh WFMn/M8JuR9tPT8ypdPHXipSRvsvuerUEy70sdHlDDAzyQi6j9p8Jui1mNDu5xJU La5B5KDMT3mFSRDguVao0PLfogFYmecmYUKQwsr4l8d63odAsIP2FzthkY7tZySK qfwW47GGNTssog== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:20 2025 by rpki-client