This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json) Hash identifier: JgR3IBmI7q4BQ297bgAHk4pDc/ckqMcdOuz1OfzvH7I= Subject key identifier: AC:63:AF:39:79:3C:6A:EB:E0:80:B5:74:1E:29:31:0F:DA:DD:5B:16 Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Certificate serial: 019AF50A9A67E276380260C42DEDDDEE9A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 19:01:44 +0000 Manifest this update: Sat 06 Dec 2025 19:01:44 +0000 Manifest next update: Sun 07 Dec 2025 19:01:44 +0000 Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=) 2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=) 3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: LzabTcGXRgzz+rbCUI3yOVSipomLR0NHP/xpx22Rv4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:9a:67:e2:76:38:02:60:c4:2d:ed:dd:ee:9a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86 Validity Not Before: Dec 6 19:01:44 2025 GMT Not After : Dec 7 19:01:44 2025 GMT Subject: CN=ac63af39793c6aebe080b5741e29310fdadd5b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:a7:c3:5c:c5:cd:a0:2a:6d:ef:b2:d1:91: 5b:12:d2:0a:dc:ff:26:c3:22:a5:5d:97:b9:f0:3e: 91:43:c9:c2:12:97:f6:8d:e6:46:b6:5d:33:1a:bc: d4:48:e6:8a:57:76:de:21:8f:01:a1:b1:df:c7:aa: 11:64:fc:1c:9c:2a:a8:98:7b:47:08:0f:96:09:c8: 64:19:d4:db:1a:d5:09:28:1b:5b:02:35:b4:4c:34: a8:6b:9f:d1:c5:60:b9:01:9c:83:c0:42:89:11:f4: d3:c6:0e:44:a1:80:2a:ff:0c:be:2b:ba:66:d1:d1: 1c:2e:f5:fa:87:05:44:71:b5:dd:6f:f1:dc:80:69: b2:68:61:33:9d:2f:91:97:0b:f5:6f:06:1a:c8:cd: eb:db:39:58:47:62:f1:56:8d:50:3e:91:2e:e0:61: ee:45:3e:5f:c9:1e:16:3a:fb:b3:3c:41:fa:1e:13: 88:42:a4:30:ae:48:fc:25:ac:22:2d:1d:8f:44:22: e9:d8:b0:97:f3:f2:3f:dd:40:06:79:be:4b:9a:0f: 6b:92:fa:f9:29:7e:88:24:f1:02:c3:5d:7e:84:b3: cc:96:93:47:34:61:c1:a7:98:ab:5c:2b:eb:13:1a: dd:27:64:84:cc:c1:b9:27:54:0d:ae:66:a8:c8:04: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:AF:39:79:3C:6A:EB:E0:80:B5:74:1E:29:31:0F:DA:DD:5B:16 X509v3 Authority Key Identifier: keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8c:43:b1:a1:ed:75:80:27:50:55:cd:80:94:38:db:bc:b9: 98:73:39:1f:47:f9:59:2a:a7:8d:3d:db:dd:3a:c0:99:b6:6f: 58:dd:61:ac:16:88:ad:c8:5c:06:7f:af:f5:03:79:28:58:60: c3:71:4f:d5:ba:a2:de:07:69:63:54:a6:a7:85:a2:05:10:dc: 82:23:7c:6a:9a:e7:c3:81:6b:e2:fc:44:ce:78:71:a9:49:f7: bd:24:85:93:c8:2b:2d:cf:53:d8:29:fe:a6:57:e3:c1:c1:09: 9e:c5:3c:95:10:55:47:b8:42:6b:f7:90:72:14:92:b5:ad:a9: 7f:97:6b:41:63:da:61:6f:cf:d3:31:04:a5:0a:9b:b5:21:5e: 22:db:53:41:21:07:fd:d2:4d:f3:7d:f1:38:fd:8f:74:56:02: 5a:2d:0a:12:56:a0:5e:51:1a:53:53:3f:31:83:9b:93:ab:96: a2:0e:33:c2:fc:e0:34:1d:9b:cb:be:ed:c6:41:d6:d3:f3:42: 5d:e5:11:c8:ef:95:c2:df:92:4c:19:0f:ab:9d:f4:17:18:3f: 7d:85:01:b3:0f:2c:f7:46:24:62:42:f2:3c:3a:01:21:96:32: 21:8a:a9:3f:be:63:db:b1:e1:38:f5:ed:1e:e0:10:7b:09:66: 89:8a:c0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cppn4nY4AmDELe3d7pqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmExNWQ0N2JhNGY0NDgyNzY0NDcyZDhkOTcxNDZhMWVi YmJmODYwHhcNMjUxMjA2MTkwMTQ0WhcNMjUxMjA3MTkwMTQ0WjAzMTEwLwYDVQQD EyhhYzYzYWYzOTc5M2M2YWViZTA4MGI1NzQxZTI5MzEwZmRhZGQ1YjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lqnw1zFzaAqbe+y0ZFbEtIK3P8m wyKlXZe58D6RQ8nCEpf2jeZGtl0zGrzUSOaKV3beIY8BobHfx6oRZPwcnCqomHtH CA+WCchkGdTbGtUJKBtbAjW0TDSoa5/RxWC5AZyDwEKJEfTTxg5EoYAq/wy+K7pm 0dEcLvX6hwVEcbXdb/HcgGmyaGEznS+Rlwv1bwYayM3r2zlYR2LxVo1QPpEu4GHu RT5fyR4WOvuzPEH6HhOIQqQwrkj8JawiLR2PRCLp2LCX8/I/3UAGeb5Lmg9rkvr5 KX6IJPECw11+hLPMlpNHNGHBp5irXCvrExrdJ2SEzMG5J1QNrmaoyASD4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxjrzl5PGrr4IC1dB4pMQ/a3VsWMB8GA1UdIwQY MBaAFGW6FdR7pPRIJ2RHLY2XFGoeu7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAt ZmUzYjkxOGMzMDk3LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMDkwZGMtN2QyOC00MjI4LTgzODAtZmUzYjkxOGMzMDk3 LzEvWmJvVjFIdWs5RWduWkVjdGpaY1VhaDY3djRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIxDsaHt dYAnUFXNgJQ427y5mHM5H0f5WSqnjT3b3TrAmbZvWN1hrBaIrchcBn+v9QN5KFhg w3FP1bqi3gdpY1Smp4WiBRDcgiN8aprnw4Fr4vxEznhxqUn3vSSFk8grLc9T2Cn+ plfjwcEJnsU8lRBVR7hCa/eQchSSta2pf5drQWPaYW/P0zEEpQqbtSFeIttTQSEH /dJN833xOP2PdFYCWi0KElagXlEaU1M/MYObk6uWog4zwvzgNB2by77txkHW0/NC XeURyO+Vwt+STBkPq530Fxg/fYUBsw8s90YkYkLyPDoBIZYyIYqpP75j27HhOPXt HuAQewlmiYrAOw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:39 2025 by rpki-client