This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json) Hash identifier: HhXWwxoUylyLdl1HIBk/so6NeeUqXb1cwVXW6VXOZyw= Subject key identifier: FA:A9:DA:36:2D:CA:23:E4:B5:6C:DB:31:30:21:49:95:84:A1:EF:98 Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5 Certificate serial: 019AF3F77196C2621BF8DE649C6A0D06463C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft Manifest number: 14E7 Signing time: Sat 06 Dec 2025 14:01:11 +0000 Manifest this update: Sat 06 Dec 2025 14:01:11 +0000 Manifest next update: Sun 07 Dec 2025 14:01:11 +0000 Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=) 2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: Z55VOXmw+VuqKglG7Ji0HbS9/k5lk8tKNRjbcfAlHS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:71:96:c2:62:1b:f8:de:64:9c:6a:0d:06:46:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5 Validity Not Before: Dec 6 14:01:11 2025 GMT Not After : Dec 7 14:01:11 2025 GMT Subject: CN=faa9da362dca23e4b56cdb313021499584a1ef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:69:4f:9b:ca:f9:ca:95:3b:ed:25:13:47: 66:82:06:0d:8a:fb:52:5d:5a:ca:03:aa:8c:5a:c5: b0:a8:ec:fb:38:f2:5a:4e:55:4d:e8:d1:1b:e9:8e: ad:6c:41:bf:3c:c8:1d:b6:75:99:2a:ad:14:ed:79: b4:20:b1:f5:d7:b3:16:8f:bc:ff:ab:e3:84:6e:92: a1:ac:b3:3e:bf:1c:fe:f7:1a:b6:44:ce:c0:d3:89: fb:4b:4c:1a:02:da:e6:2f:83:a3:68:15:d7:a6:49: 03:b9:65:c5:0f:c9:dc:ca:27:52:28:91:66:69:e4: c8:6b:05:4b:8e:b7:e4:08:39:5a:76:d0:4d:b3:cf: ba:e9:4f:8b:43:26:24:a6:a7:6a:9b:f4:54:a1:37: b6:16:04:d4:d5:ac:1d:5a:5f:bc:69:be:07:89:e9: 39:f5:d2:a3:9e:0f:93:9c:82:72:3a:ad:e1:a1:60: 6b:f7:f9:3e:90:82:2f:fe:16:e3:8a:6e:64:d4:af: c7:6e:73:5a:ec:ce:d9:3a:fb:19:0c:ec:6b:bc:4b: 30:f6:4e:c0:5f:c1:05:50:d2:98:6f:65:b4:af:11: 38:92:e6:94:a5:7c:b7:5c:d6:68:a3:ed:37:ec:c6: d2:62:e3:59:0b:f0:19:af:f9:1d:9a:54:de:2f:da: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A9:DA:36:2D:CA:23:E4:B5:6C:DB:31:30:21:49:95:84:A1:EF:98 X509v3 Authority Key Identifier: keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e3:2c:ff:99:80:58:d0:5a:1b:54:20:8e:41:c0:6a:7e:77: 4f:ab:d6:9b:fe:72:3e:e9:16:7c:84:d9:9b:a5:2d:3a:6b:87: 69:d0:37:5e:d1:cb:bc:38:57:c1:ba:71:1b:3e:aa:43:ff:23: c2:a6:83:17:1b:79:ad:b0:ab:ca:af:6d:4f:af:57:64:e9:65: e6:dd:8b:08:68:c8:4b:12:60:08:b8:d8:94:ae:e4:cd:13:cd: 58:d1:29:bc:4b:59:8e:e8:48:85:56:fd:a4:f0:1c:7a:98:4b: e9:49:e7:5f:c9:c3:6d:78:f4:fe:4b:65:71:75:80:d2:ff:d5: 8f:e0:0a:55:7a:b9:c7:f4:7a:64:57:47:e4:52:cf:33:af:be: dd:16:03:8c:f0:ea:76:67:20:54:7f:a0:0d:a9:98:0c:4f:4a: a9:df:ee:6c:8b:20:e3:9b:80:4e:ec:5c:51:d5:b3:b2:74:84: 64:e7:5c:c7:fd:e1:ed:92:e7:ed:f7:ee:0c:b7:0f:d8:42:74: f3:c3:f2:5f:07:e0:01:bd:b2:cd:aa:6b:20:0e:b5:86:94:8d: 1e:75:8f:2d:02:9c:b4:27:b3:64:84:85:1c:85:44:e3:64:f6: 6c:03:a2:2b:38:70:d7:de:78:ca:59:34:96:00:ab:e2:bd:bb: 43:65:84:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93GWwmIb+N5knGoNBkY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTNiZTg0NzE4ZjU1MWMyNDE0NzdmMjJhMDQxYzczNGVi OTdkYzUwHhcNMjUxMjA2MTQwMTExWhcNMjUxMjA3MTQwMTExWjAzMTEwLwYDVQQD EyhmYWE5ZGEzNjJkY2EyM2U0YjU2Y2RiMzEzMDIxNDk5NTg0YTFlZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cppT5vK+cqVO+0lE0dmggYNivtS XVrKA6qMWsWwqOz7OPJaTlVN6NEb6Y6tbEG/PMgdtnWZKq0U7Xm0ILH117MWj7z/ q+OEbpKhrLM+vxz+9xq2RM7A04n7S0waAtrmL4OjaBXXpkkDuWXFD8ncyidSKJFm aeTIawVLjrfkCDladtBNs8+66U+LQyYkpqdqm/RUoTe2FgTU1awdWl+8ab4Hiek5 9dKjng+TnIJyOq3hoWBr9/k+kIIv/hbjim5k1K/HbnNa7M7ZOvsZDOxrvEsw9k7A X8EFUNKYb2W0rxE4kuaUpXy3XNZoo+037MbSYuNZC/AZr/kdmlTeL9r76QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqp2jYtyiPktWzbMTAhSZWEoe+YMB8GA1UdIwQY MBaAFMwTvoRxj1UcJBR38ioEHHNOuX3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUt NzQxZDU1Yzk5ODAyLzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUtNzQxZDU1Yzk5ODAy LzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuMs/5mA WNBaG1QgjkHAan53T6vWm/5yPukWfITZm6UtOmuHadA3XtHLvDhXwbpxGz6qQ/8j wqaDFxt5rbCryq9tT69XZOll5t2LCGjISxJgCLjYlK7kzRPNWNEpvEtZjuhIhVb9 pPAcephL6UnnX8nDbXj0/ktlcXWA0v/Vj+AKVXq5x/R6ZFdH5FLPM6++3RYDjPDq dmcgVH+gDamYDE9Kqd/ubIsg45uATuxcUdWzsnSEZOdcx/3h7ZLn7ffuDLcP2EJ0 88PyXwfgAb2yzaprIA61hpSNHnWPLQKctCezZISFHIVE42T2bAOiKzhw1954ylk0 lgCr4r27Q2WEdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:41 2025 by rpki-client