This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json) Hash identifier: Gkf+gNcAipHtHXHvMRhUDA7lSiHBEOmUO0E+l0f6Obw= Subject key identifier: 3E:2E:A1:F9:DF:16:25:7B:E7:DF:94:11:E2:30:4E:5F:EA:53:4E:E4 Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae Certificate serial: 019AF276DF8AC121ABADF4046EF42C951011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft Manifest number: 0DF1 Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=) 2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: aNK5FetQuv4JDie6AQdkPzSZinU9waUzX/gqT2x87v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:df:8a:c1:21:ab:ad:f4:04:6e:f4:2c:95:10:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=3e2ea1f9df16257be7df9411e2304e5fea534ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1c:90:38:96:5d:10:e5:98:8e:84:58:4a:b6: 26:eb:ec:5c:7a:e2:b1:bd:0a:95:d2:f1:e8:60:f4: fa:4e:93:ff:fa:6f:0e:12:f7:57:54:a9:7d:2c:03: 81:e5:bd:7d:ac:cb:6e:fa:e0:8d:ed:08:f1:7c:70: 40:15:55:83:87:55:f1:59:2b:b2:8b:36:bd:8b:c6: 9c:88:3a:b4:46:1a:6f:f8:64:fd:2d:a2:c4:bc:84: 54:d4:c9:7f:fc:04:e5:07:cc:ce:69:f9:2a:58:fa: 7d:70:7c:17:41:df:de:d4:af:1d:7c:ee:ac:6d:97: 53:ba:ec:e5:a6:8f:34:04:ed:3e:47:87:83:b2:e4: 73:d1:53:ae:d9:00:a0:9c:4f:f6:37:ce:bb:b1:49: bb:fb:9d:70:b1:41:76:8c:86:07:24:af:ab:e2:ce: 21:60:ac:41:97:ac:17:ab:98:0b:f2:57:8e:97:79: c2:94:9d:7e:3e:ee:72:98:4c:7d:92:01:ce:38:ef: 87:11:f8:90:3b:14:26:f0:8e:bc:56:cf:83:0b:57: a4:29:8b:74:a7:15:7b:3a:1c:57:62:4e:79:0f:3f: 46:4e:d0:82:ac:0e:84:fe:8f:3d:b1:f2:30:5a:f5: 29:b9:07:58:b8:8c:3e:b5:31:82:48:2c:fa:55:fc: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2E:A1:F9:DF:16:25:7B:E7:DF:94:11:E2:30:4E:5F:EA:53:4E:E4 X509v3 Authority Key Identifier: keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:42:c0:c2:f7:61:88:60:34:97:3c:ac:f4:96:ab:eb:18:65: ba:44:79:98:d6:36:05:38:e3:96:a0:9e:3e:a7:5b:a8:30:0a: fa:e7:02:6e:24:f6:40:e4:e3:ae:ef:d4:03:21:1e:81:5a:ef: ae:69:d4:ed:3a:68:bd:98:d4:e9:9d:22:3a:1f:61:f9:3f:22: d5:31:b4:03:7e:dd:3d:e2:eb:ea:dd:48:3d:57:0a:91:39:90: dc:46:7c:2d:64:25:64:5f:f4:a1:9a:e5:b7:38:71:ee:6b:93: ac:bf:f8:09:a0:50:40:67:b4:10:19:38:14:2a:78:b8:7a:c9: 55:fa:7c:33:14:70:d8:3c:d8:44:a8:41:95:6d:65:08:92:e3: 83:fb:76:ca:43:66:a2:7c:ff:12:28:bb:e5:28:37:6d:ef:45: ff:ed:24:c2:8f:84:83:77:39:f5:b8:c6:50:c8:68:b2:f6:43: ed:f2:bb:d2:ef:f8:e6:7b:13:02:00:db:67:db:33:9d:de:3f: 8a:db:bf:23:5d:4d:a2:3e:a9:df:e7:fa:ab:08:45:fb:3b:13: c5:3d:04:aa:fc:3b:16:73:19:31:c2:6c:4f:e1:d7:19:3d:ab: bc:18:d0:2b:78:fd:29:1e:3b:bf:d7:2f:14:e9:53:97:f8:a1: 4e:b4:f0:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydt+KwSGrrfQEbvQslRARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDYwMjM4ZDA2NjhkNDVhMDQxNjE4YWM1ZGY3NjdmNTlh MGM0YWUwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EygzZTJlYTFmOWRmMTYyNTdiZTdkZjk0MTFlMjMwNGU1ZmVhNTM0ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzByQOJZdEOWYjoRYSrYm6+xceuKx vQqV0vHoYPT6TpP/+m8OEvdXVKl9LAOB5b19rMtu+uCN7QjxfHBAFVWDh1XxWSuy iza9i8aciDq0Rhpv+GT9LaLEvIRU1Ml//ATlB8zOafkqWPp9cHwXQd/e1K8dfO6s bZdTuuzlpo80BO0+R4eDsuRz0VOu2QCgnE/2N867sUm7+51wsUF2jIYHJK+r4s4h YKxBl6wXq5gL8leOl3nClJ1+Pu5ymEx9kgHOOO+HEfiQOxQm8I68Vs+DC1ekKYt0 pxV7OhxXYk55Dz9GTtCCrA6E/o89sfIwWvUpuQdYuIw+tTGCSCz6VfwLJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4uofnfFiV759+UEeIwTl/qU07kMB8GA1UdIwQY MBaAFM0GAjjQZo1FoEFhisXfdn9ZoMSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYt N2ZiNmVhODk2MzdmLzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYtN2ZiNmVhODk2Mzdm LzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0LAwvdh iGA0lzys9Jar6xhlukR5mNY2BTjjlqCePqdbqDAK+ucCbiT2QOTjru/UAyEegVrv rmnU7TpovZjU6Z0iOh9h+T8i1TG0A37dPeLr6t1IPVcKkTmQ3EZ8LWQlZF/0oZrl tzhx7muTrL/4CaBQQGe0EBk4FCp4uHrJVfp8MxRw2DzYRKhBlW1lCJLjg/t2ykNm onz/Eii75Sg3be9F/+0kwo+Eg3c59bjGUMhosvZD7fK70u/45nsTAgDbZ9sznd4/ itu/I11Noj6p3+f6qwhF+zsTxT0Eqvw7FnMZMcJsT+HXGT2rvBjQK3j9KR47v9cv FOlTl/ihTrTw6w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:53 2025 by rpki-client