This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json) Hash identifier: kFrvvqUKEeYn3wucNbwvSsYnTVjZ+fDh+QGq6gXUh58= Subject key identifier: 7B:8F:0D:75:55:1B:4E:42:58:1E:E2:39:51:32:F0:23:E7:7D:85:7C Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26 Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426 Certificate serial: 019AF12CB8AB4DFF777B324C81E979078599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft Manifest number: 1461 Signing time: Sat 06 Dec 2025 01:00:30 +0000 Manifest this update: Sat 06 Dec 2025 01:00:30 +0000 Manifest next update: Sun 07 Dec 2025 01:00:30 +0000 Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: HxOTGpZ5xm8BiHSyxggjepDoxA+FBTF+gAIXLcxIirU=) 2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b8:ab:4d:ff:77:7b:32:4c:81:e9:79:07:85:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426 Validity Not Before: Dec 6 01:00:30 2025 GMT Not After : Dec 7 01:00:30 2025 GMT Subject: CN=7b8f0d75551b4e42581ee2395132f023e77d857c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:fb:e2:85:d3:90:f6:83:26:d9:f0:f4:01: 8f:c1:d1:c5:09:82:66:d4:f0:99:ec:11:f9:6c:d4: 27:9a:aa:da:2b:93:af:ae:37:72:1e:ed:e9:7b:b6: 5b:56:68:5d:f0:cd:58:48:f4:22:65:65:54:a3:3e: 92:b3:34:11:80:4a:8e:40:ba:97:8c:98:20:a7:ca: 65:6f:af:b5:12:01:f5:7e:36:ab:78:0a:e3:fc:c7: 2c:b0:07:ea:06:b5:ad:55:77:72:16:00:7a:ec:05: bb:02:a1:3b:1f:37:f9:98:9a:7f:1e:bf:9a:3f:9f: 54:73:33:03:28:7e:69:15:64:58:9f:a3:4f:e5:cc: 32:47:9f:0e:37:92:64:72:88:dd:a7:30:8e:fc:29: 20:48:11:62:76:26:f8:39:89:b7:17:50:c0:72:b0: 3c:bd:3e:45:97:7e:48:7f:4e:da:d6:86:46:7c:34: c5:2d:b9:23:fa:38:40:90:5b:8d:7f:35:83:0d:8c: 86:76:91:c7:43:f2:46:e0:31:d9:47:b5:47:5e:24: cf:6a:eb:a2:f6:02:d5:82:62:d5:14:a6:63:ee:03: 29:7d:b3:d8:d5:85:f5:1c:43:c2:11:d4:15:be:bf: 88:64:f7:c7:e4:54:2a:d6:41:67:4e:50:71:ef:78: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8F:0D:75:55:1B:4E:42:58:1E:E2:39:51:32:F0:23:E7:7D:85:7C X509v3 Authority Key Identifier: keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e2:39:51:c4:58:d6:75:f4:af:f0:62:46:83:0f:12:66:f9: f5:ba:4f:02:3a:73:c3:44:90:ce:5f:be:bd:ab:28:a1:fc:1a: bf:1e:6f:91:56:f2:33:dd:eb:2c:1a:f6:68:0b:31:58:de:85: 54:37:0b:0f:11:3f:5e:61:2f:16:7a:a0:5f:3e:8e:00:0e:06: 48:67:64:a2:d9:68:29:12:69:91:bb:be:06:49:be:ae:47:ae: 9f:e2:a5:eb:78:6e:a3:4f:77:57:4c:9c:1d:95:0f:52:66:48: 4a:65:77:5b:19:9f:41:63:f8:36:b1:6f:d7:4c:0e:5d:7b:16: b6:13:c4:a0:c7:c8:d5:5b:fd:d3:19:96:e1:9d:ad:3d:72:94: ca:4b:38:d4:03:08:62:6d:8f:22:cd:c6:55:45:59:ad:ab:6a: 6f:e6:91:ed:fb:76:52:28:55:be:f9:e6:d3:3d:22:65:89:b1: 60:a8:25:2d:83:bd:a6:2e:12:8c:04:a0:19:51:36:d0:69:ed: 68:19:32:ec:57:fb:62:a1:e9:7f:06:e6:cc:90:49:b4:2b:1e: 2e:d5:3a:7c:48:7e:cf:c2:1b:d4:10:46:dd:66:b2:ed:b4:f2: 4c:86:b0:46:4a:77:7a:a5:8c:cf:73:30:20:84:8f:28:47:9a: b2:06:dc:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLirTf93ezJMgel5B4WZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjQ4ZDBhMzdhYmZjMzRiNDFkMmQyYmFlOGM2ODJlZDIz ZWM0MjYwHhcNMjUxMjA2MDEwMDMwWhcNMjUxMjA3MDEwMDMwWjAzMTEwLwYDVQQD Eyg3YjhmMGQ3NTU1MWI0ZTQyNTgxZWUyMzk1MTMyZjAyM2U3N2Q4NTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY/74oXTkPaDJtnw9AGPwdHFCYJm 1PCZ7BH5bNQnmqraK5OvrjdyHu3pe7ZbVmhd8M1YSPQiZWVUoz6SszQRgEqOQLqX jJggp8plb6+1EgH1fjareArj/McssAfqBrWtVXdyFgB67AW7AqE7Hzf5mJp/Hr+a P59UczMDKH5pFWRYn6NP5cwyR58ON5JkcojdpzCO/CkgSBFidib4OYm3F1DAcrA8 vT5Fl35If07a1oZGfDTFLbkj+jhAkFuNfzWDDYyGdpHHQ/JG4DHZR7VHXiTPauui 9gLVgmLVFKZj7gMpfbPY1YX1HEPCEdQVvr+IZPfH5FQq1kFnTlBx73gHqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuPDXVVG05CWB7iOVEy8CPnfYV8MB8GA1UdIwQY MBaAFGW0jQo3q/w0tB0tK66MaC7SPsQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUt OWExNWJjMGQzOTg4LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUtOWExNWJjMGQzOTg4 LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeI5UcRY 1nX0r/BiRoMPEmb59bpPAjpzw0SQzl++vasoofwavx5vkVbyM93rLBr2aAsxWN6F VDcLDxE/XmEvFnqgXz6OAA4GSGdkotloKRJpkbu+Bkm+rkeun+Kl63huo093V0yc HZUPUmZISmV3WxmfQWP4NrFv10wOXXsWthPEoMfI1Vv90xmW4Z2tPXKUyks41AMI Ym2PIs3GVUVZratqb+aR7ft2UihVvvnm0z0iZYmxYKglLYO9pi4SjASgGVE20Gnt aBky7Ff7YqHpfwbmzJBJtCseLtU6fEh+z8Ib1BBG3Way7bTyTIawRkp3eqWMz3Mw IISPKEeasgbcIw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:32 2025 by rpki-client