This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft File: ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json) Hash identifier: 3Ac1+Ry/Q8yEBwBLutSHB+wEUhg3xHKEdq2Zk6BR7S4= Subject key identifier: 21:0F:FB:F3:CF:B9:85:EB:F6:59:53:99:B3:CC:79:AE:E6:57:1C:C0 Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf Certificate serial: 019AF3C05AF11E13AED71B855B12BFEC06FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft Manifest number: 13F8 Signing time: Sat 06 Dec 2025 13:01:00 +0000 Manifest this update: Sat 06 Dec 2025 13:01:00 +0000 Manifest next update: Sun 07 Dec 2025 13:01:00 +0000 Files and hashes: 1: 47NYg-phdSB9NeK2va9JIKsAb5A.roa (hash: 86ZHiVMTfTtd+skHx8yHsEGyhHphyGuDVxjbPZ3RryU=) 2: 9C2OE_UiXlf9d9G1cIpAZTGa-qE.roa (hash: r/TntNYFZZscNnR6FrYLxeeivbdyseJ1z7nSB0IzeU8=) 3: PBRIpRP-Yi2Zwr1ZnkM_l4qFPgs.roa (hash: ekiRbPByfTM7Fnyz7R+Df6+K5P9KMDqYABA3L68ThWc=) 4: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: G3cdZU3+tazO326qvpVSIsGcRbwOjN9VO32wGNYWD7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:5a:f1:1e:13:ae:d7:1b:85:5b:12:bf:ec:06:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf Validity Not Before: Dec 6 13:01:00 2025 GMT Not After : Dec 7 13:01:00 2025 GMT Subject: CN=210ffbf3cfb985ebf6595399b3cc79aee6571cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:ad:ab:ea:18:8c:8e:79:e3:70:29:75:8a: 73:76:96:8b:21:10:ef:27:e7:72:38:6c:38:e6:7e: f3:ac:2d:83:86:b3:01:d1:ff:66:90:34:85:b1:fa: 12:2d:21:19:b2:d8:a7:2b:b5:47:5c:a6:13:59:2f: c0:93:e3:75:6e:a4:1a:65:09:85:76:75:ac:e7:0a: 85:9c:17:62:46:7f:b0:1a:e1:ad:48:a0:87:ee:3c: e1:3a:d6:6d:2c:8c:3a:f4:f3:a2:1a:fc:44:87:83: 9b:be:98:3f:b1:12:4c:4c:3f:42:66:c9:1b:31:20: 48:a2:c4:69:62:fe:3a:4e:23:b6:7d:8d:76:58:48: 7d:96:47:e7:38:cb:16:64:c1:30:94:c2:6d:fb:2a: 59:ca:15:b1:c9:21:42:41:fe:28:24:aa:55:06:57: 23:3c:2f:24:7d:2d:05:a1:4b:00:6f:6c:21:f8:f8: 14:76:a4:8b:56:ed:29:d0:af:bc:60:53:c2:19:92: 16:b0:87:c7:30:4c:83:f2:5a:70:7d:92:65:86:7e: f2:88:0f:76:d6:04:5d:44:d4:7c:a8:25:b1:14:99: a5:83:97:4c:94:55:90:1b:79:04:bc:71:af:d8:a3: 1e:fd:7e:81:a8:9d:5e:db:f9:7b:30:ca:4c:bf:fb: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0F:FB:F3:CF:B9:85:EB:F6:59:53:99:B3:CC:79:AE:E6:57:1C:C0 X509v3 Authority Key Identifier: keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:77:54:16:2a:26:6a:7d:62:f6:c7:e3:bd:3d:e0:f1:94:66: 05:5b:d9:53:8d:e4:65:3f:26:5d:ab:de:ce:6a:91:05:b6:4a: c6:0e:9e:a6:09:48:fd:fb:95:bc:aa:0c:61:e7:8c:ce:f2:13: 6c:8a:cb:35:b1:d3:9f:bb:b5:e0:84:3e:09:c6:8f:38:24:a5: 27:05:41:58:94:88:9e:a6:8c:dd:ba:e1:0a:93:a2:ef:27:de: 92:1c:c2:f5:d3:06:f1:e0:6d:13:b4:63:a9:df:47:bb:35:c8: 60:e5:cc:95:53:76:13:aa:8c:77:28:8a:fb:8c:07:01:4e:53: 28:e4:c5:a2:07:63:69:8b:3c:10:77:fd:9e:39:3b:a2:80:e8: e9:c4:d4:48:e6:9a:88:b9:36:b2:85:e4:1c:00:88:49:86:fa: c6:1b:47:b6:f4:b1:4f:2b:5f:5d:93:b2:ef:70:b9:23:1c:c9: 67:c2:81:89:3c:c3:e6:d9:31:66:21:bf:d3:df:4d:b0:55:9d: f8:35:10:68:43:bd:c2:f0:21:9c:17:75:03:ad:7b:7c:61:4c: b3:5c:bb:b2:40:6b:fa:81:c7:85:dc:96:d7:81:5f:fa:1c:e8: 7d:6a:a0:9a:ef:4e:a7:4d:1b:9f:ec:23:87:d0:4d:72:81:b7: f3:9c:40:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFrxHhOu1xuFWxK/7Ab7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Zjg3M2FkYjZhMWYzZTgxYjMzNDNjNzQ5OTg5NDc1MjZj NDNkY2YwHhcNMjUxMjA2MTMwMTAwWhcNMjUxMjA3MTMwMTAwWjAzMTEwLwYDVQQD EygyMTBmZmJmM2NmYjk4NWViZjY1OTUzOTliM2NjNzlhZWU2NTcxY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyStq+oYjI5543ApdYpzdpaLIRDv J+dyOGw45n7zrC2DhrMB0f9mkDSFsfoSLSEZstinK7VHXKYTWS/Ak+N1bqQaZQmF dnWs5wqFnBdiRn+wGuGtSKCH7jzhOtZtLIw69POiGvxEh4Obvpg/sRJMTD9CZskb MSBIosRpYv46TiO2fY12WEh9lkfnOMsWZMEwlMJt+ypZyhWxySFCQf4oJKpVBlcj PC8kfS0FoUsAb2wh+PgUdqSLVu0p0K+8YFPCGZIWsIfHMEyD8lpwfZJlhn7yiA92 1gRdRNR8qCWxFJmlg5dMlFWQG3kEvHGv2KMe/X6BqJ1e2/l7MMpMv/sh4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEP+/PPuYXr9llTmbPMea7mVxzAMB8GA1UdIwQY MBaAFGT4c622ofPoGzNDx0mYlHUmxD3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2Ut Mzk3ZjM2YzkxOTgyLzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2UtMzk3ZjM2YzkxOTgy LzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXdUFiom an1i9sfjvT3g8ZRmBVvZU43kZT8mXavezmqRBbZKxg6epglI/fuVvKoMYeeMzvIT bIrLNbHTn7u14IQ+CcaPOCSlJwVBWJSInqaM3brhCpOi7yfekhzC9dMG8eBtE7Rj qd9HuzXIYOXMlVN2E6qMdyiK+4wHAU5TKOTFogdjaYs8EHf9njk7ooDo6cTUSOaa iLk2soXkHACISYb6xhtHtvSxTytfXZOy73C5IxzJZ8KBiTzD5tkxZiG/099NsFWd +DUQaEO9wvAhnBd1A617fGFMs1y7skBr+oHHhdyW14Ff+hzofWqgmu9Op00bn+wj h9BNcoG385xA0g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:05:21 2025 by rpki-client