This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json) Hash identifier: Wq6VcervCVsLsxyJMsy2zsHgEH952xBONnPGhIXSeB8= Subject key identifier: 56:32:8D:86:AD:54:0C:AC:86:93:2C:86:3A:F0:DC:EB:8F:3D:C1:2B Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019AF68A31002D40887C3981B144137065B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 02:00:42 +0000 Manifest this update: Sun 07 Dec 2025 02:00:42 +0000 Manifest next update: Mon 08 Dec 2025 02:00:42 +0000 Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=) 2: KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa (hash: Hj7QzIpBoHLwEb/zGFK9zyG2I+wY870ZVTkhagEh2v4=) 3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: cjUMetddh2ts6AfU/f1SN3yEuMeWJa2QJtosTYIFnKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:31:00:2d:40:88:7c:39:81:b1:44:13:70:65:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Dec 7 02:00:42 2025 GMT Not After : Dec 8 02:00:42 2025 GMT Subject: CN=56328d86ad540cac86932c863af0dceb8f3dc12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:1e:bb:82:7c:0b:ed:03:44:eb:94:1d:d7: 56:c4:b7:06:10:dd:e9:9b:26:65:e5:ab:fc:01:f4: a6:81:ab:f4:55:8d:e8:bb:af:4f:80:dc:34:7f:0a: 08:8d:57:f2:50:8c:19:67:2f:c0:b3:61:4d:8f:d8: 30:1e:96:f3:1b:f7:d9:8f:5c:05:5c:a7:6e:91:56: 37:cc:12:c0:65:2f:89:c4:c2:f6:fe:4f:c5:20:04: 31:a2:a9:4d:ac:53:95:5f:da:ac:be:62:7e:93:b3: 05:05:50:f0:fc:ff:15:65:5c:77:30:f9:93:fd:d0: d8:af:6e:8a:73:8d:11:8c:d0:d1:c5:95:10:d3:80: e5:11:97:a8:05:5c:49:2d:5f:ee:90:00:fd:40:81: 98:4f:84:54:1c:cd:54:81:f4:3a:78:5b:95:57:eb: a7:3f:f4:25:64:aa:be:51:b2:d3:d7:a2:2e:20:0f: 84:63:04:f4:60:21:16:3e:19:b0:f6:b2:04:e5:b8: 2d:d0:32:fc:5a:40:70:63:da:0d:1d:e7:32:72:53: 56:f8:ab:31:85:81:20:2d:1d:a6:d5:32:cb:46:fb: 4f:77:95:2f:fe:4c:f6:a3:c1:73:f7:b6:d2:a9:22: c0:be:33:bc:27:cb:6b:84:3f:37:9b:21:42:85:92: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:32:8D:86:AD:54:0C:AC:86:93:2C:86:3A:F0:DC:EB:8F:3D:C1:2B X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:8b:b1:60:5f:41:d3:de:1e:1b:e3:28:40:46:74:6d:ba:5b: 65:48:2a:3e:1d:28:93:fc:c6:33:bf:1a:c4:24:47:53:9a:58: a0:c0:fc:49:f9:8a:1d:d5:12:05:da:3d:c3:02:17:d9:dd:d4: 83:b9:e9:b8:da:d4:47:db:26:4e:02:a9:90:ef:51:d0:38:2f: a0:14:2f:1a:14:c4:8f:ef:1d:16:7e:20:69:6d:ca:50:f0:e3: c5:ec:05:7f:6a:ee:8b:68:26:dc:2b:11:3e:0c:d5:a8:25:49: 98:c6:f2:7d:13:e3:14:aa:e2:ec:85:96:b9:5f:6e:1b:74:71: c9:d0:77:b5:98:14:a8:7b:51:f4:4a:f0:ad:a4:0e:2c:c6:f6: 3b:9d:dc:be:18:44:3d:f3:d2:ee:b6:be:0e:7c:5a:ab:31:37: 55:f5:1c:4b:22:9b:b8:7a:b3:b4:42:f5:35:2f:19:11:77:cd: 30:9a:1a:18:6c:45:97:f1:fd:79:d2:a8:1a:af:55:b3:c8:ef: 91:1f:99:33:ad:ef:b6:53:6b:35:ad:0f:0d:e7:7e:59:a8:42: 7f:89:93:be:3d:e8:6f:91:f6:af:0e:15:36:11:55:47:c2:4f: 70:05:dd:aa:00:15:48:06:24:09:1c:d6:6f:00:fc:73:74:d4: 60:c8:66:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ijEALUCIfDmBsUQTcGW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjUxMjA3MDIwMDQyWhcNMjUxMjA4MDIwMDQyWjAzMTEwLwYDVQQD Eyg1NjMyOGQ4NmFkNTQwY2FjODY5MzJjODYzYWYwZGNlYjhmM2RjMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNseu4J8C+0DROuUHddWxLcGEN3p myZl5av8AfSmgav0VY3ou69PgNw0fwoIjVfyUIwZZy/As2FNj9gwHpbzG/fZj1wF XKdukVY3zBLAZS+JxML2/k/FIAQxoqlNrFOVX9qsvmJ+k7MFBVDw/P8VZVx3MPmT /dDYr26Kc40RjNDRxZUQ04DlEZeoBVxJLV/ukAD9QIGYT4RUHM1UgfQ6eFuVV+un P/QlZKq+UbLT16IuIA+EYwT0YCEWPhmw9rIE5bgt0DL8WkBwY9oNHecyclNW+Ksx hYEgLR2m1TLLRvtPd5Uv/kz2o8Fz97bSqSLAvjO8J8trhD83myFChZLewQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYyjYatVAyshpMshjrw3OuPPcErMB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdouxYF9B 094eG+MoQEZ0bbpbZUgqPh0ok/zGM78axCRHU5pYoMD8SfmKHdUSBdo9wwIX2d3U g7npuNrUR9smTgKpkO9R0DgvoBQvGhTEj+8dFn4gaW3KUPDjxewFf2rui2gm3CsR PgzVqCVJmMbyfRPjFKri7IWWuV9uG3RxydB3tZgUqHtR9ErwraQOLMb2O53cvhhE PfPS7ra+DnxaqzE3VfUcSyKbuHqztEL1NS8ZEXfNMJoaGGxFl/H9edKoGq9Vs8jv kR+ZM63vtlNrNa0PDed+WahCf4mTvj3ob5H2rw4VNhFVR8JPcAXdqgAVSAYkCRzW bwD8c3TUYMhm/g== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:18 2025 by rpki-client