This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft (raw, json) Hash identifier: +J30DxgxAmZPnrD1hghD70rJFBiD4riXaohcCk8rYdU= Subject key identifier: EC:E7:BD:B7:D3:FA:4C:DA:16:0A:79:E0:85:3D:E4:15:ED:B8:81:77 Authority key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C Certificate issuer: /CN=cdbc431b1c9886dc2b21008dccfde18db735371c Certificate serial: 019AF12D3C8A2E212ECBD71F6418CAEDD2CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft Manifest number: 04DB Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl (hash: YV8R2I9f+Notkf2O5ZQ5x8E5sNXUx+m2LRmDlCVxGBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3c:8a:2e:21:2e:cb:d7:1f:64:18:ca:ed:d2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbc431b1c9886dc2b21008dccfde18db735371c Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=ece7bdb7d3fa4cda160a79e0853de415edb88177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:5a:24:82:2d:48:d2:b3:90:bf:9b:f3:71: 9f:96:31:ca:0d:c0:f7:44:55:6a:37:e8:da:d8:95: 7c:86:59:0c:37:4e:e1:4a:c5:2f:b0:47:28:eb:03: 6e:cb:99:d4:5a:fb:dd:2c:5a:2d:63:41:57:60:19: fe:e1:3c:38:b0:b6:42:16:bb:8c:44:ee:5a:89:04: 01:5b:59:46:1b:3e:4f:21:9f:1c:08:c0:e9:0e:6a: bc:06:17:5f:ea:70:56:97:e5:6e:5b:b1:9b:1e:3a: ac:c7:1f:3b:14:cc:ac:14:bd:98:f8:78:1e:6d:88: d6:87:61:d0:74:b1:11:d9:a5:0a:22:72:dd:ee:72: e1:3a:c5:f3:21:95:70:2c:1c:5c:4f:f1:ce:d6:f5: df:5a:3a:50:a3:d9:bb:c3:a7:ff:b4:cd:cc:8e:f1: f8:d3:a6:f6:7f:81:92:93:9a:70:40:88:2b:cc:98: e0:07:de:56:79:90:f5:b3:e8:cb:20:8b:c8:2e:c2: eb:45:34:83:cd:61:02:7c:6f:44:58:1a:e3:cb:fe: c2:f4:21:f0:11:c3:53:b8:6a:8a:f2:1c:d2:dd:c7: 5e:3e:b7:03:ca:6e:9d:7c:ea:67:d6:7e:2c:7f:b2: d9:e4:5e:5c:64:f0:45:b4:0c:64:e9:60:2d:e0:40: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:BD:B7:D3:FA:4C:DA:16:0A:79:E0:85:3D:E4:15:ED:B8:81:77 X509v3 Authority Key Identifier: keyid:CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:63:1b:e1:77:33:4f:0b:88:27:40:47:0f:7f:71:3e:96:ba: 5f:05:88:76:49:89:39:ba:f2:ea:9b:35:63:78:2a:22:10:a0: 3f:38:e7:c8:cd:d6:f9:30:c2:9b:ed:2b:a1:8e:b6:25:75:79: 7a:af:4f:c5:c8:28:4e:21:ff:72:20:84:36:ad:90:81:ce:7f: 5d:cc:54:ae:fc:b9:ec:3e:a3:f0:ee:cf:5b:5c:c9:49:cc:a9: 92:35:6f:68:e7:91:7c:7f:0d:2e:52:28:92:74:c4:1e:c3:d9: 70:d4:ee:21:05:50:2a:06:f0:25:81:29:2a:70:42:9f:88:41: cf:ee:cf:c1:73:2e:06:23:64:d6:2c:4f:42:95:79:50:e7:33: 71:41:a5:d6:d9:ae:03:5d:13:c2:47:20:22:c9:b4:ef:58:f4: 2b:b9:cf:ea:ce:3e:07:0b:ee:c1:fc:5a:05:fb:d0:d5:c9:c8: b7:e2:4a:00:74:03:36:12:7b:1a:8d:bf:16:78:d5:56:20:81: 69:17:9e:12:5d:d3:16:c3:fb:50:02:98:a3:9a:8b:be:20:67: ce:22:65:a9:e1:6c:e4:fe:91:af:da:de:c8:84:cb:8b:c4:6d: 0c:0e:f4:8e:32:6e:32:7b:da:89:13:b5:a1:8d:ff:b2:93:e5: 79:d2:f6:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTyKLiEuy9cfZBjK7dLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYmM0MzFiMWM5ODg2ZGMyYjIxMDA4ZGNjZmRlMThkYjcz NTM3MWMwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD EyhlY2U3YmRiN2QzZmE0Y2RhMTYwYTc5ZTA4NTNkZTQxNWVkYjg4MTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzZaJIItSNKzkL+b83GfljHKDcD3 RFVqN+ja2JV8hlkMN07hSsUvsEco6wNuy5nUWvvdLFotY0FXYBn+4Tw4sLZCFruM RO5aiQQBW1lGGz5PIZ8cCMDpDmq8Bhdf6nBWl+VuW7GbHjqsxx87FMysFL2Y+Hge bYjWh2HQdLER2aUKInLd7nLhOsXzIZVwLBxcT/HO1vXfWjpQo9m7w6f/tM3MjvH4 06b2f4GSk5pwQIgrzJjgB95WeZD1s+jLIIvILsLrRTSDzWECfG9EWBrjy/7C9CHw EcNTuGqK8hzS3cdePrcDym6dfOpn1n4sf7LZ5F5cZPBFtAxk6WAt4EATrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOznvbfT+kzaFgp54IU95BXtuIF3MB8GA1UdIwQY MBaAFM28QxscmIbcKyEAjcz94Y23NTccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zNjg5YmUtODE1Mi00YmFkLWI5OTYt M2NkYTcxMzczZGM5LzEvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zNjg5YmUtODE1Mi00YmFkLWI5OTYtM2NkYTcxMzczZGM5 LzEvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGMb4Xcz TwuIJ0BHD39xPpa6XwWIdkmJObry6ps1Y3gqIhCgPzjnyM3W+TDCm+0roY62JXV5 eq9PxcgoTiH/ciCENq2Qgc5/XcxUrvy57D6j8O7PW1zJScypkjVvaOeRfH8NLlIo knTEHsPZcNTuIQVQKgbwJYEpKnBCn4hBz+7PwXMuBiNk1ixPQpV5UOczcUGl1tmu A10TwkcgIsm071j0K7nP6s4+BwvuwfxaBfvQ1cnIt+JKAHQDNhJ7Go2/FnjVViCB aReeEl3TFsP7UAKYo5qLviBnziJlqeFs5P6Rr9reyITLi8RtDA70jjJuMnvaiRO1 oY3/spPledL2Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:22 2025 by rpki-client