This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json) Hash identifier: VCBz73wtKHaWeEPnikXhbmMYp8OWzR7n1yTNZPM1AjI= Subject key identifier: 20:13:1B:D7:3D:AB:A2:80:83:48:F8:0F:85:C6:EA:56:51:BF:28:FA Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Certificate serial: 019AF509F428C832466CFFD7251377F45454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:01:01 +0000 Manifest this update: Sat 06 Dec 2025 19:01:01 +0000 Manifest next update: Sun 07 Dec 2025 19:01:01 +0000 Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=) 2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: Q2Ky7DDRsiZmIRHB143lpurUD+3G6ECwFYKErVra2Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f4:28:c8:32:46:6c:ff:d7:25:13:77:f4:54:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Validity Not Before: Dec 6 19:01:01 2025 GMT Not After : Dec 7 19:01:01 2025 GMT Subject: CN=20131bd73daba2808348f80f85c6ea5651bf28fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:62:72:89:65:fb:9c:72:70:f2:d2:61:3c: 5c:74:71:3e:af:7c:7e:d8:5a:a1:0a:09:02:39:a3: bd:67:5d:e3:91:d5:f4:88:9e:77:59:f1:84:60:88: 70:3a:1e:73:df:5c:72:62:65:7a:1f:18:cb:ee:0b: 19:a0:80:90:bd:b2:db:d0:47:28:2d:06:30:ae:9a: c7:1c:bc:b9:43:c0:9c:68:b4:35:6b:f8:f4:28:56: 38:4e:5e:f8:52:17:91:67:82:d4:70:2f:0a:73:c3: a6:38:c1:87:81:e6:a9:51:ed:c1:ba:b5:86:08:bc: 62:8e:b0:1d:d6:fc:5d:8b:4d:fe:32:63:cd:dd:42: b9:2c:f8:63:00:3b:c7:3e:29:a2:66:0b:fa:77:46: 62:17:68:03:52:a5:49:6b:4d:58:dc:4b:40:88:4b: b8:d0:08:f7:23:e7:8f:33:5b:28:50:9e:67:f6:26: dc:e6:b4:e1:b2:84:69:e0:9d:c8:58:76:9c:01:43: 48:40:3d:7e:a3:15:9b:29:6d:be:8b:37:c4:f3:aa: 0d:5f:f8:a7:4f:e6:d3:d9:0e:fe:e6:88:59:87:7c: e9:9f:d4:41:3b:eb:8b:b4:21:bb:52:57:87:15:68: 27:44:18:a4:2d:1b:ca:8f:c9:c0:38:84:cc:cf:f7: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:13:1B:D7:3D:AB:A2:80:83:48:F8:0F:85:C6:EA:56:51:BF:28:FA X509v3 Authority Key Identifier: keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d0:18:49:e7:9f:a4:a4:65:49:10:9f:5b:c6:c8:5f:4c:66: 1a:16:63:18:1c:c3:36:7a:e1:a3:9a:58:40:fd:97:f6:65:f9: d3:10:20:1e:8f:c7:49:0c:fd:9a:fb:e0:8c:75:1d:06:85:4a: 19:b0:9c:f1:61:5e:8c:e3:b0:3e:ec:f6:e6:f2:5e:9e:8f:ac: 7f:e8:88:e2:d2:58:9c:cd:7c:8f:cd:2f:5b:34:27:93:74:fc: 2b:c8:3b:ed:31:b6:07:fd:2d:28:dd:ea:3f:d3:48:1d:cc:2e: 84:4b:58:f4:1a:b2:02:c6:3a:2b:d9:c0:ec:aa:a9:ea:e4:28: 6f:0e:cd:ff:eb:63:dd:1f:f1:aa:c9:71:41:81:5f:87:d3:f9: 5d:7f:43:e6:75:6a:9d:55:6c:04:eb:88:40:6d:57:94:13:4b: c1:e6:b1:dd:fb:30:cc:de:1b:3c:f3:35:73:15:43:34:ae:b3: 86:e9:a5:b6:c3:86:d8:00:77:e6:cb:6f:9d:c0:46:c2:31:79: 17:5d:30:db:9a:6f:52:f5:df:b4:8f:ea:df:fa:ad:d4:56:bd: 5a:54:c6:3e:52:97:14:3a:f7:07:da:89:e6:c2:ec:14:eb:8e: 62:4e:52:be:40:27:aa:ef:62:ce:a7:ff:b6:27:ad:a6:39:7e: d0:29:0f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfQoyDJGbP/XJRN39FRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk OWJlMDUwHhcNMjUxMjA2MTkwMTAxWhcNMjUxMjA3MTkwMTAxWjAzMTEwLwYDVQQD EygyMDEzMWJkNzNkYWJhMjgwODM0OGY4MGY4NWM2ZWE1NjUxYmYyOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotxicoll+5xycPLSYTxcdHE+r3x+ 2FqhCgkCOaO9Z13jkdX0iJ53WfGEYIhwOh5z31xyYmV6HxjL7gsZoICQvbLb0Eco LQYwrprHHLy5Q8CcaLQ1a/j0KFY4Tl74UheRZ4LUcC8Kc8OmOMGHgeapUe3BurWG CLxijrAd1vxdi03+MmPN3UK5LPhjADvHPimiZgv6d0ZiF2gDUqVJa01Y3EtAiEu4 0Aj3I+ePM1soUJ5n9ibc5rThsoRp4J3IWHacAUNIQD1+oxWbKW2+izfE86oNX/in T+bT2Q7+5ohZh3zpn9RBO+uLtCG7UleHFWgnRBikLRvKj8nAOITMz/cEPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCATG9c9q6KAg0j4D4XG6lZRvyj6MB8GA1UdIwQY MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2 LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetAYSeef pKRlSRCfW8bIX0xmGhZjGBzDNnrho5pYQP2X9mX50xAgHo/HSQz9mvvgjHUdBoVK GbCc8WFejOOwPuz25vJeno+sf+iI4tJYnM18j80vWzQnk3T8K8g77TG2B/0tKN3q P9NIHcwuhEtY9BqyAsY6K9nA7Kqp6uQobw7N/+tj3R/xqslxQYFfh9P5XX9D5nVq nVVsBOuIQG1XlBNLweax3fswzN4bPPM1cxVDNK6zhumltsOG2AB35stvncBGwjF5 F10w25pvUvXftI/q3/qt1Fa9WlTGPlKXFDr3B9qJ5sLsFOuOYk5SvkAnqu9izqf/ tietpjl+0CkPIA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:42 2025 by rpki-client