This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json) Hash identifier: PoH9J3Z83ghq9vvmePmmE/6PUAPocyt+mc50BBX+Of8= Subject key identifier: 02:5B:93:A8:08:3C:42:02:12:DE:5E:D5:01:DD:15:66:C9:98:8D:7B Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Certificate serial: 019AF19B9B93155D6F6F34F4E5FE0B1AB039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft Manifest number: 1428 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=) 2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=) 3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: 48pkk+UXv9OYAnSjAjQzH5aUMWNC3wDRQH8Kp4x31Yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9b:93:15:5d:6f:6f:34:f4:e5:fe:0b:1a:b0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=025b93a8083c420212de5ed501dd1566c9988d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:7d:d2:e4:28:e7:0c:0c:56:fe:ee:a4:1e: a5:be:f5:d0:06:8e:08:d5:6b:76:69:73:bc:89:3e: de:e6:71:7a:d2:af:2a:ac:bc:c4:ac:56:1b:32:3c: 32:86:6f:62:90:57:47:74:9e:f3:9b:0d:1c:62:7e: 19:bd:d9:0b:0a:05:49:32:80:79:67:72:e5:bb:df: 35:13:9f:6b:1e:a8:1f:f2:d3:e3:27:7e:9d:74:73: 63:e9:de:9c:de:44:33:7f:f0:ad:c1:34:fe:15:50: af:2c:63:62:30:a4:af:36:7d:8d:04:a2:10:3e:f8: b9:46:f1:b2:c3:2d:56:de:9d:2f:a2:ac:a1:aa:0a: 76:40:18:91:9d:20:d0:60:24:7a:68:55:96:72:bd: 0a:26:46:fc:55:ea:7e:3f:85:fa:1b:b7:23:57:2a: 0a:47:fb:b7:57:d3:c7:df:3f:26:ef:bc:68:09:0a: af:5d:b2:64:a2:82:fd:5d:98:65:40:b9:aa:df:4c: e9:b9:83:87:37:82:fb:4a:4c:0e:e8:16:85:1c:08: 91:16:11:4b:b1:4a:cd:d9:30:d6:ee:ed:80:8d:ef: 98:6d:62:81:e7:ff:e1:2f:fa:96:ae:f2:45:30:e0: 36:94:73:81:2c:70:0c:4b:3f:c0:69:fe:a5:6f:58: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5B:93:A8:08:3C:42:02:12:DE:5E:D5:01:DD:15:66:C9:98:8D:7B X509v3 Authority Key Identifier: keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:75:f4:27:8d:ac:8d:9f:cf:88:d5:3f:11:37:ad:ac:34:a6: 6e:d3:41:35:72:f9:e6:6f:44:34:29:b0:7f:dc:00:8b:eb:f7: 5a:af:96:3d:2a:d3:59:02:06:b4:ce:7f:f0:8b:95:e3:f1:34: 64:30:aa:77:10:64:aa:13:34:8a:ed:96:cf:d1:92:1c:8a:cf: d0:06:e2:49:db:39:20:d0:b6:1c:5d:59:41:ac:41:32:ca:87: 80:e1:5e:49:45:4f:56:ab:8d:49:32:f6:37:34:6a:e2:07:06: 6f:1b:78:e1:d1:01:cc:66:5e:a7:ed:e2:43:e4:40:c4:7e:53: 15:30:36:e1:29:cd:54:ec:a1:66:e0:7d:64:22:7f:47:60:8a: 81:4d:75:f9:24:dc:6a:7a:4f:08:e5:55:7e:c5:69:f0:99:77: 55:69:0a:e6:64:22:20:ed:f7:4a:17:f8:30:1a:7c:fc:15:f5: 6e:ce:ca:e1:27:0f:99:98:8b:15:7a:c8:8e:70:4b:7a:80:ce: fe:2b:04:de:57:3f:4c:d5:b9:9f:ac:4d:78:c2:23:09:8a:3d: 64:ab:17:c4:07:57:fd:7e:c7:3c:c4:a8:dd:4d:d8:4f:d0:03: 16:a4:ff:56:39:9e:83:c0:1d:aa:10:3e:ac:f6:18:2f:25:5a: 20:33:2b:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5uTFV1vbzT05f4LGrA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3 M2NhZjIwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD EygwMjViOTNhODA4M2M0MjAyMTJkZTVlZDUwMWRkMTU2NmM5OTg4ZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUR90uQo5wwMVv7upB6lvvXQBo4I 1Wt2aXO8iT7e5nF60q8qrLzErFYbMjwyhm9ikFdHdJ7zmw0cYn4ZvdkLCgVJMoB5 Z3Llu981E59rHqgf8tPjJ36ddHNj6d6c3kQzf/CtwTT+FVCvLGNiMKSvNn2NBKIQ Pvi5RvGywy1W3p0voqyhqgp2QBiRnSDQYCR6aFWWcr0KJkb8Vep+P4X6G7cjVyoK R/u3V9PH3z8m77xoCQqvXbJkooL9XZhlQLmq30zpuYOHN4L7SkwO6BaFHAiRFhFL sUrN2TDW7u2Aje+YbWKB5//hL/qWrvJFMOA2lHOBLHAMSz/Aaf6lb1jwbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJbk6gIPEICEt5e1QHdFWbJmI17MB8GA1UdIwQY MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2 LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXX0J42s jZ/PiNU/ETetrDSmbtNBNXL55m9ENCmwf9wAi+v3Wq+WPSrTWQIGtM5/8IuV4/E0 ZDCqdxBkqhM0iu2Wz9GSHIrP0AbiSds5INC2HF1ZQaxBMsqHgOFeSUVPVquNSTL2 NzRq4gcGbxt44dEBzGZep+3iQ+RAxH5TFTA24SnNVOyhZuB9ZCJ/R2CKgU11+STc anpPCOVVfsVp8Jl3VWkK5mQiIO33Shf4MBp8/BX1bs7K4ScPmZiLFXrIjnBLeoDO /isE3lc/TNW5n6xNeMIjCYo9ZKsXxAdX/X7HPMSo3U3YT9ADFqT/Vjmeg8AdqhA+ rPYYLyVaIDMrAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:17 2025 by rpki-client