This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json) Hash identifier: XJNVUfpba+/oUVib+TBFnnxGI8frh1YvtUD1qlnNgoo= Subject key identifier: BC:39:69:AB:D4:40:24:18:D0:C7:56:7F:5B:B7:20:71:8A:08:05:21 Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50 Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050 Certificate serial: 019AF72EFE17AB8A8D05E6CB7AB92562CAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 05:00:43 +0000 Manifest this update: Sun 07 Dec 2025 05:00:43 +0000 Manifest next update: Mon 08 Dec 2025 05:00:43 +0000 Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: YGDt8xEibY4CPwxjxkKaDFfdvVceLIy1p0N0jNVHT50=) 2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2e:fe:17:ab:8a:8d:05:e6:cb:7a:b9:25:62:ca:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050 Validity Not Before: Dec 7 05:00:43 2025 GMT Not After : Dec 8 05:00:43 2025 GMT Subject: CN=bc3969abd4402418d0c7567f5bb720718a080521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:05:09:08:55:93:f7:7c:c5:15:95:13:5b: b7:aa:db:37:cf:fb:4d:4a:82:39:ba:71:70:39:e7: ae:1c:fc:c9:18:29:17:e7:08:25:02:ad:da:41:63: ab:04:5e:93:83:ce:9b:cd:fb:9a:fb:b6:58:f4:3e: 96:43:3c:6e:b1:b8:b8:81:94:5f:9d:d7:90:d7:fd: f3:9f:fb:5d:e7:66:ec:ae:5d:1b:2e:d0:90:9c:ad: da:d4:0f:42:e9:28:ee:a5:ac:80:d0:79:29:d6:d6: be:33:c9:e9:d6:e8:29:38:c4:43:ff:ea:0b:95:ba: 7a:f8:d0:a9:60:7c:a3:53:7f:9a:ce:52:47:58:fa: 7e:19:21:21:dc:52:b5:c2:a5:d1:7b:88:b5:25:72: 35:e1:4f:34:db:78:d4:25:dd:c8:94:65:11:f7:8b: dd:44:2d:30:62:92:f2:cc:1e:94:5d:5d:c4:cb:f8: 2d:f3:07:49:3a:a1:b9:67:f5:f6:73:f3:dd:1e:4c: 1d:e2:82:37:43:5d:1d:34:84:b7:ca:b5:6f:4f:f3: 4a:4d:ab:08:0d:5f:c4:8a:e9:1c:a7:1e:63:65:3c: 59:f5:f6:ca:49:6a:c5:c7:15:c8:bf:58:ca:aa:06: cb:de:29:03:61:01:7e:bc:25:c7:e5:9f:ea:8b:91: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:39:69:AB:D4:40:24:18:D0:C7:56:7F:5B:B7:20:71:8A:08:05:21 X509v3 Authority Key Identifier: keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2b:f1:b0:dc:f0:bd:e1:5a:f8:99:70:01:bb:a8:e8:5c:3d: b8:49:88:8e:ab:fa:10:1d:5c:4a:bf:f1:73:ab:59:b4:43:ef: 22:92:3e:f7:7a:ad:57:39:fc:da:2b:1d:6f:6b:b0:8c:a4:d6: 5c:5d:9d:3c:1f:cb:07:b5:89:5e:d1:ab:5a:f2:4e:20:41:77: a7:eb:88:32:4e:7f:ec:ce:4e:76:43:ba:fa:82:f1:e3:f5:65: 76:c4:13:f2:26:c2:a9:a6:92:59:68:9d:85:16:c2:31:6d:7e: f0:6c:c8:4a:c2:f9:8f:91:dc:d9:79:9b:0b:fa:d5:d1:a1:b4: 23:84:e1:d5:13:c9:e8:3b:ad:da:7c:b0:f6:a4:21:9b:c6:ae: 96:15:4b:57:54:52:fb:9e:51:2f:14:9b:3f:14:93:5c:af:cb: fe:bb:5e:a9:e7:aa:38:90:cc:e5:c7:cb:a3:0c:0c:95:72:63: a4:ac:76:5e:0e:5a:06:da:6f:ad:78:ff:dd:8a:7c:42:44:4a: 03:a3:8c:c3:b5:5c:36:74:94:77:e4:15:1c:9c:d6:36:a8:03: ea:1f:fa:13:91:e8:2c:e7:75:8b:0e:b7:a0:74:2f:b5:ab:fb: 1c:00:70:96:72:85:94:6b:83:a5:76:b5:d0:8b:f6:5f:3e:c6: 3a:df:a0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Lv4Xq4qNBebLerklYsrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmY0MWEyNGZjNDgyNzFiOTkyMzI3YTJkYWU1YTQzM2Jk ZWQwNTAwHhcNMjUxMjA3MDUwMDQzWhcNMjUxMjA4MDUwMDQzWjAzMTEwLwYDVQQD EyhiYzM5NjlhYmQ0NDAyNDE4ZDBjNzU2N2Y1YmI3MjA3MThhMDgwNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEoFCQhVk/d8xRWVE1u3qts3z/tN SoI5unFwOeeuHPzJGCkX5wglAq3aQWOrBF6Tg86bzfua+7ZY9D6WQzxusbi4gZRf ndeQ1/3zn/td52bsrl0bLtCQnK3a1A9C6SjupayA0Hkp1ta+M8np1ugpOMRD/+oL lbp6+NCpYHyjU3+azlJHWPp+GSEh3FK1wqXRe4i1JXI14U8023jUJd3IlGUR94vd RC0wYpLyzB6UXV3Ey/gt8wdJOqG5Z/X2c/PdHkwd4oI3Q10dNIS3yrVvT/NKTasI DV/Eiukcpx5jZTxZ9fbKSWrFxxXIv1jKqgbL3ikDYQF+vCXH5Z/qi5EKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLw5aavUQCQY0MdWf1u3IHGKCAUhMB8GA1UdIwQY MBaAFGT/QaJPxIJxuZIyei2uWkM73tBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQt ZjAxYTYyNDAwODIxLzEvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kNzk2ZTQtZDY1NC00ZTdiLTg0ZDQtZjAxYTYyNDAwODIx LzEvWlA5Qm9rX0Vnbkc1a2pKNkxhNWFRenZlMEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCvxsNzw veFa+JlwAbuo6Fw9uEmIjqv6EB1cSr/xc6tZtEPvIpI+93qtVzn82isdb2uwjKTW XF2dPB/LB7WJXtGrWvJOIEF3p+uIMk5/7M5OdkO6+oLx4/VldsQT8ibCqaaSWWid hRbCMW1+8GzISsL5j5Hc2XmbC/rV0aG0I4Th1RPJ6Dut2nyw9qQhm8aulhVLV1RS +55RLxSbPxSTXK/L/rteqeeqOJDM5cfLowwMlXJjpKx2Xg5aBtpvrXj/3Yp8QkRK A6OMw7VcNnSUd+QVHJzWNqgD6h/6E5HoLOd1iw63oHQvtav7HABwlnKFlGuDpXa1 0Iv2Xz7GOt+guA== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:46 2025 by rpki-client