This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft File: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json) Hash identifier: Fs93kS6CtZPWTAq5OTPyMAWW10d+JBoFLr+SebR8Z08= Subject key identifier: 6A:D0:39:9D:BE:DF:86:D4:C4:B1:77:FF:B5:58:17:B2:36:A5:68:77 Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C Certificate issuer: /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c Certificate serial: 019AF5AEFDD8EDAB496901E97208D000937E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft Manifest number: 06E6 Signing time: Sat 06 Dec 2025 22:01:17 +0000 Manifest this update: Sat 06 Dec 2025 22:01:17 +0000 Manifest next update: Sun 07 Dec 2025 22:01:17 +0000 Files and hashes: 1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: QrDKvSBjZn/Qq3H2wYlUp3N+GDaro81JObunolwM5/E=) 2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:fd:d8:ed:ab:49:69:01:e9:72:08:d0:00:93:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c Validity Not Before: Dec 6 22:01:17 2025 GMT Not After : Dec 7 22:01:17 2025 GMT Subject: CN=6ad0399dbedf86d4c4b177ffb55817b236a56877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:dc:96:31:42:06:30:d0:e3:ec:3b:30:07: 11:45:43:46:64:89:43:c9:6e:b9:9f:50:2b:35:d5: 0e:57:a1:03:0f:11:79:0a:eb:70:95:03:36:7a:e7: 77:22:0b:6e:01:16:db:2d:66:a4:bb:05:e9:d7:4a: 20:b3:95:68:02:e9:d8:8c:cb:fe:08:96:1e:23:a9: fd:6e:8e:25:0b:3b:e3:12:ba:82:22:77:21:f4:65: 75:9d:2f:86:ba:60:79:74:3e:ac:9f:b6:3c:29:8f: a8:9f:f0:74:86:91:5b:db:d8:67:27:31:ac:7c:a2: 64:72:42:fa:16:ec:ff:83:58:1f:70:e7:84:2e:1f: cc:fd:90:d7:ee:41:5c:a2:b4:e8:17:fb:2b:a4:1d: 13:7c:db:9f:46:90:6d:62:df:5c:c9:7d:56:07:20: b4:4a:5d:97:b5:ae:bb:c4:e4:69:9a:d5:95:84:86: 34:19:25:93:f5:14:55:94:53:a9:ca:f0:c9:e7:0e: d2:6d:f3:82:fc:ac:35:4c:40:b5:01:5d:7c:16:2a: 05:a4:ab:d4:d2:4d:27:d0:26:d4:58:90:d2:42:dd: 64:05:44:e7:e1:8a:72:fc:c8:f9:55:04:4e:85:16: dc:56:2f:c2:06:ee:3c:f7:88:ff:12:a0:91:f9:0d: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D0:39:9D:BE:DF:86:D4:C4:B1:77:FF:B5:58:17:B2:36:A5:68:77 X509v3 Authority Key Identifier: keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9f:43:c3:b5:81:81:17:bd:bb:2c:63:a4:dc:40:67:e3:e6: b0:f8:76:2f:03:9b:91:95:0a:4b:1e:a3:8f:06:8c:36:c5:48: bc:5a:e0:4d:d4:e3:5d:3f:94:df:c8:c5:ff:f7:1a:1d:9d:5c: 1f:61:1b:60:fb:d5:5e:ad:3e:26:77:1c:d6:86:28:19:17:08: 30:18:f2:65:06:b6:e1:18:98:0c:c6:53:0b:e2:b6:10:f7:46: 4e:a1:8d:86:2e:db:53:8b:4d:3d:35:d3:3e:74:42:ef:0a:e6: 17:93:04:1a:2d:45:b0:ba:63:b0:4a:45:6c:f4:17:56:a3:ff: e1:cd:5c:86:9a:87:7b:8b:46:5b:c5:8c:47:85:d7:74:29:cf: e6:4f:6b:ca:87:79:7c:21:c7:1a:31:47:03:97:b1:8d:7b:30: 6e:a6:56:bb:0b:35:a1:9c:81:eb:f4:b9:1d:d5:52:4b:f9:f8: 0e:29:ba:13:82:69:90:bd:36:f0:12:e8:6c:fb:6e:5a:d6:b5: 5e:80:e4:3b:1e:16:71:07:da:a2:ff:ef:0c:f4:c0:f4:be:56: 6b:dc:09:e3:a6:20:68:7e:29:6f:0e:af:15:a4:c9:e7:27:ad: 90:16:38:df:5b:10:44:52:a6:d2:d2:13:2c:e0:05:ad:ac:f9: ef:3e:5e:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rv3Y7atJaQHpcgjQAJN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOTA0ZjU0MDlmZTU0MzVmMWZiZjVjZjQ2ZTRjZTk1ODgw YjYxM2MwHhcNMjUxMjA2MjIwMTE3WhcNMjUxMjA3MjIwMTE3WjAzMTEwLwYDVQQD Eyg2YWQwMzk5ZGJlZGY4NmQ0YzRiMTc3ZmZiNTU4MTdiMjM2YTU2ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AjcljFCBjDQ4+w7MAcRRUNGZIlD yW65n1ArNdUOV6EDDxF5CutwlQM2eud3IgtuARbbLWakuwXp10ogs5VoAunYjMv+ CJYeI6n9bo4lCzvjErqCInch9GV1nS+GumB5dD6sn7Y8KY+on/B0hpFb29hnJzGs fKJkckL6Fuz/g1gfcOeELh/M/ZDX7kFcorToF/srpB0TfNufRpBtYt9cyX1WByC0 Sl2Xta67xORpmtWVhIY0GSWT9RRVlFOpyvDJ5w7SbfOC/Kw1TEC1AV18FioFpKvU 0k0n0CbUWJDSQt1kBUTn4Ypy/Mj5VQROhRbcVi/CBu4894j/EqCR+Q3hLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrQOZ2+34bUxLF3/7VYF7I2pWh3MB8GA1UdIwQY MBaAFP2QT1QJ/lQ18fv1z0bkzpWIC2E8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTIt NWZmMDdjM2I2Zjg4LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTItNWZmMDdjM2I2Zjg4 LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU59Dw7WB gRe9uyxjpNxAZ+PmsPh2LwObkZUKSx6jjwaMNsVIvFrgTdTjXT+U38jF//caHZ1c H2EbYPvVXq0+Jncc1oYoGRcIMBjyZQa24RiYDMZTC+K2EPdGTqGNhi7bU4tNPTXT PnRC7wrmF5MEGi1FsLpjsEpFbPQXVqP/4c1chpqHe4tGW8WMR4XXdCnP5k9ryod5 fCHHGjFHA5exjXswbqZWuws1oZyB6/S5HdVSS/n4Dim6E4JpkL028BLobPtuWta1 XoDkOx4WcQfaov/vDPTA9L5Wa9wJ46YgaH4pbw6vFaTJ5yetkBY431sQRFKm0tIT LOAFraz57z5eew== -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:17 2025 by rpki-client