This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json) Hash identifier: HGIWWM0za+QGXEQ5MFUm+tXfLFrBDH+5qCoAT+L1NSY= Subject key identifier: AB:C8:B1:CA:F7:5D:B4:C6:B3:EE:85:BD:5C:AE:6F:90:26:45:65:3F Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11 Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411 Certificate serial: 019AF389F34F27ACE932692AB97878DCD9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft Manifest number: 0E99 Signing time: Sat 06 Dec 2025 12:01:35 +0000 Manifest this update: Sat 06 Dec 2025 12:01:35 +0000 Manifest next update: Sun 07 Dec 2025 12:01:35 +0000 Files and hashes: 1: 3vOkms1tZ1ngilXRsF2AnSNXRpc.roa (hash: /PiOxJIXqSLan9pb27DlpE7/naqh5TR5sTdBHisw3+w=) 2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: 0bon/5tN/qng6U84cRYcVJDKXpXnJdtmC8b6oj/AcLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f3:4f:27:ac:e9:32:69:2a:b9:78:78:dc:d9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411 Validity Not Before: Dec 6 12:01:35 2025 GMT Not After : Dec 7 12:01:35 2025 GMT Subject: CN=abc8b1caf75db4c6b3ee85bd5cae6f902645653f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:65:86:ed:e6:0b:54:d1:d0:26:5f:95:ac: 28:80:6c:a7:dd:24:ce:24:3d:c5:ba:e3:b9:02:09: 13:31:e1:7e:95:e8:63:13:aa:16:7d:7d:ed:b5:30: 67:b8:23:a5:13:53:2f:ec:79:c2:d4:3b:ab:dc:18: af:8a:0f:f6:58:cf:85:be:db:0e:b1:ff:30:8d:5b: 65:14:41:2b:84:db:f5:74:a0:2d:68:fc:8a:aa:8a: c0:af:ff:df:c0:cf:b6:b0:5e:a9:60:75:f4:96:aa: 50:c3:49:95:87:b6:95:c2:d3:d5:f8:2d:33:a3:66: b9:75:57:fd:37:f3:40:32:2b:cb:e4:8a:bc:e3:ef: fa:ed:dd:68:d0:96:43:54:f4:4f:6e:1c:be:35:1b: 4a:f6:a6:d7:27:c0:b1:69:5d:e4:3e:68:1e:d1:c6: 66:d0:32:ca:f4:5e:9e:47:fe:77:ed:97:30:57:ae: b6:01:df:42:8e:b5:cc:8d:3c:3f:fe:ae:58:9a:29: c8:b7:90:e1:21:c3:23:0e:6e:f3:c2:a6:d3:63:3f: f1:49:68:73:10:0f:a3:d6:1d:90:da:7e:20:ec:de: 1c:e9:46:fa:39:26:bf:ce:43:ab:1c:a6:46:41:2e: 0f:be:f7:6e:fa:14:88:51:ff:e2:01:af:3a:63:97: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:B1:CA:F7:5D:B4:C6:B3:EE:85:BD:5C:AE:6F:90:26:45:65:3F X509v3 Authority Key Identifier: keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f9:f2:eb:11:0e:68:98:e7:b1:6a:09:f5:f7:3b:d2:7b:c9: ce:b1:83:1a:e5:ad:1b:33:2d:b6:51:e5:f9:f2:ac:2f:d0:a0: 03:b8:01:9e:b9:6e:25:db:ad:74:05:bf:55:dd:2e:fb:92:fa: 54:17:da:f6:48:ae:85:77:16:4d:01:35:07:72:09:7b:0b:ac: ea:06:e3:04:68:bf:aa:76:32:7a:b3:70:a5:7d:85:4f:fb:51: 53:c6:68:03:ae:6b:dd:c4:ae:35:8d:59:dd:ce:bf:ed:44:2a: bb:b4:8b:a4:3e:b2:4b:7d:9d:39:65:9b:74:dc:ec:3c:35:3b: a7:73:9a:9c:ca:38:e6:92:08:b7:a8:d6:44:34:72:bc:5b:ee: e4:65:cb:9e:5e:e8:3e:09:9e:5a:db:21:73:03:58:ff:36:5c: 0a:3a:bf:49:f2:c2:22:ca:19:f4:a1:c0:a5:6b:a4:35:cb:4a: 92:de:34:d9:37:66:f3:8a:ec:d7:2f:48:21:a5:79:fa:36:d4: ac:e5:76:0f:4b:6f:33:2c:70:2e:21:cf:64:87:d5:fa:9b:8a: dd:1f:7e:fe:de:71:90:ef:77:54:a1:4d:23:b3:48:fc:81:8a: 0f:05:5c:18:50:82:9f:be:41:39:53:d3:81:af:07:25:ab:d9: 51:e6:8a:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifNPJ6zpMmkquXh43NnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjYzZWZhMjY5YTE0MTE3NTRlMWNkYWFiODQ4ZmIwNmZh MDg0MTEwHhcNMjUxMjA2MTIwMTM1WhcNMjUxMjA3MTIwMTM1WjAzMTEwLwYDVQQD EyhhYmM4YjFjYWY3NWRiNGM2YjNlZTg1YmQ1Y2FlNmY5MDI2NDU2NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiFlhu3mC1TR0CZflawogGyn3STO JD3FuuO5AgkTMeF+lehjE6oWfX3ttTBnuCOlE1Mv7HnC1Dur3Bivig/2WM+FvtsO sf8wjVtlFEErhNv1dKAtaPyKqorAr//fwM+2sF6pYHX0lqpQw0mVh7aVwtPV+C0z o2a5dVf9N/NAMivL5Iq84+/67d1o0JZDVPRPbhy+NRtK9qbXJ8CxaV3kPmge0cZm 0DLK9F6eR/537ZcwV662Ad9CjrXMjTw//q5YminIt5DhIcMjDm7zwqbTYz/xSWhz EA+j1h2Q2n4g7N4c6Ub6OSa/zkOrHKZGQS4Pvvdu+hSIUf/iAa86Y5cMlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvIscr3XbTGs+6FvVyub5AmRWU/MB8GA1UdIwQY MBaAFM22PvommhQRdU4c2quEj7BvoIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYt NDM4ODM0ODdlNDkyLzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYtNDM4ODM0ODdlNDky LzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafny6xEO aJjnsWoJ9fc70nvJzrGDGuWtGzMttlHl+fKsL9CgA7gBnrluJdutdAW/Vd0u+5L6 VBfa9kiuhXcWTQE1B3IJewus6gbjBGi/qnYyerNwpX2FT/tRU8ZoA65r3cSuNY1Z 3c6/7UQqu7SLpD6yS32dOWWbdNzsPDU7p3OanMo45pIIt6jWRDRyvFvu5GXLnl7o PgmeWtshcwNY/zZcCjq/SfLCIsoZ9KHApWukNctKkt402Tdm84rs1y9IIaV5+jbU rOV2D0tvMyxwLiHPZIfV+puK3R9+/t5xkO93VKFNI7NI/IGKDwVcGFCCn75BOVPT ga8HJavZUeaKyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:55 2025 by rpki-client