This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json) Hash identifier: NREIi/gvYunOcLDCoMfyDop3EkS5Zkmg9nn0LrO2qmk= Subject key identifier: 46:3D:6D:55:2E:1A:1B:CE:8D:C8:F5:75:54:DA:D7:2D:B9:83:BD:18 Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a Certificate serial: 019AF0F5DAE5A03AD97E5CCCCF27B86548A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft Manifest number: 0A79 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: kVqwxWn3YyzCEcaXZuI3WlFauKGt43YAsZQpdaKH/us=) 2: kKgi-TtCN3ONXzc5dOLgjXmeD4Y.roa (hash: ThrWPeEKYfxXyDvqo92XPXVjCuwCt73viQ6BGTVTHKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:da:e5:a0:3a:d9:7e:5c:cc:cf:27:b8:65:48:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=463d6d552e1a1bce8dc8f57554dad72db983bd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4d:f5:51:e1:45:48:7c:c2:b4:6f:05:8e:5c: d6:70:13:87:8d:cf:67:72:5f:ec:c7:65:31:33:71: b2:58:f9:7a:54:b4:1c:52:3e:c5:85:eb:d2:68:24: ba:e6:e4:ef:71:3d:40:b2:97:5e:96:6a:7c:cc:11: e0:15:21:6e:11:c0:51:64:54:7d:6e:1d:89:a5:8d: fa:34:4f:f7:81:8c:cc:2e:0c:19:c3:b1:8e:2f:ce: a1:a9:6f:37:ac:9b:f6:2f:74:80:33:1d:99:ec:88: cd:99:0b:01:0f:e0:97:d3:91:b4:ee:e6:9b:57:96: 85:7d:44:e5:3c:22:c4:76:69:24:1b:4a:38:e8:f9: fb:c4:6b:38:be:77:e5:d9:b7:f7:96:e4:d5:2b:89: ec:d0:c4:0c:bb:21:c4:3f:de:e6:d3:85:ee:76:00: 51:44:7d:3e:51:12:f8:c7:f9:3a:bf:79:20:98:c7: 3e:46:28:71:7b:8f:36:7a:73:8e:99:96:46:98:ea: 90:3e:53:61:f3:bd:51:0a:e0:c4:9e:da:55:80:ff: 8b:ff:98:b9:1e:fa:b5:01:4a:ba:9d:e3:32:2e:75: da:5e:2b:5a:ec:a0:97:c6:ec:3b:77:5d:b5:50:d2: ef:a4:b4:7e:fe:07:1c:ef:3f:84:7e:84:57:77:fe: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3D:6D:55:2E:1A:1B:CE:8D:C8:F5:75:54:DA:D7:2D:B9:83:BD:18 X509v3 Authority Key Identifier: keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:55:57:60:7d:4b:3d:23:c6:18:e9:22:5a:21:d3:11:ef: 82:83:b0:5c:00:16:a6:e9:6b:81:83:ab:e5:63:e4:a7:ff:e3: 01:5c:39:d3:cb:86:d5:0c:82:d3:76:b6:a4:7d:50:2c:c2:60: 0c:d8:1c:11:58:7a:08:5c:cf:13:95:87:4d:68:7f:4d:ca:cc: 93:97:de:51:f3:12:4f:e6:f9:05:28:ff:3d:fe:e7:76:06:8a: 68:0f:ed:c4:90:9b:c1:14:8c:7a:36:59:4f:f1:00:d1:c8:9f: 76:49:75:25:ae:c5:fa:f6:0d:1c:7a:e0:96:6a:46:34:e6:77: f2:bf:d9:76:74:6e:9d:e8:81:cf:a7:2d:81:ba:2b:e6:6e:72: 92:ee:84:7e:e5:ec:7f:5e:56:ed:7c:6f:78:10:77:a2:e4:42: a2:ca:d6:e5:1f:7a:44:fc:4d:71:35:e5:08:27:f3:6a:17:7c: ca:9b:9e:b4:24:f4:82:cb:b3:88:79:f1:6c:4c:fa:22:59:2b: a0:4e:c3:24:7c:5a:01:72:6e:11:a6:b2:4b:2e:aa:68:1b:6f: e6:a2:e3:a0:03:4f:d3:ef:e3:c1:c5:0a:ab:68:a0:45:86:b2: a0:8b:28:f6:e2:b6:8b:b2:44:f7:1b:29:f3:e2:d3:ae:7c:a8: 51:aa:ec:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9drloDrZflzMzye4ZUihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTFkMWEwMTc4MDJlNWM1N2RhNTk3ODU0NGZjNTM3NDAz ZGE3M2EwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD Eyg0NjNkNmQ1NTJlMWExYmNlOGRjOGY1NzU1NGRhZDcyZGI5ODNiZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U31UeFFSHzCtG8FjlzWcBOHjc9n cl/sx2UxM3GyWPl6VLQcUj7FhevSaCS65uTvcT1Aspdelmp8zBHgFSFuEcBRZFR9 bh2JpY36NE/3gYzMLgwZw7GOL86hqW83rJv2L3SAMx2Z7IjNmQsBD+CX05G07uab V5aFfUTlPCLEdmkkG0o46Pn7xGs4vnfl2bf3luTVK4ns0MQMuyHEP97m04XudgBR RH0+URL4x/k6v3kgmMc+Rihxe482enOOmZZGmOqQPlNh871RCuDEntpVgP+L/5i5 Hvq1AUq6neMyLnXaXita7KCXxuw7d121UNLvpLR+/gcc7z+EfoRXd/47tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY9bVUuGhvOjcj1dVTa1y25g70YMB8GA1UdIwQY MBaAFGah0aAXgC5cV9pZeFRPxTdAPac6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGIt MTlmMmExZDE2MDMzLzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGItMTlmMmExZDE2MDMz LzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeNVV2B9 Sz0jxhjpIloh0xHvgoOwXAAWpulrgYOr5WPkp//jAVw508uG1QyC03a2pH1QLMJg DNgcEVh6CFzPE5WHTWh/TcrMk5feUfMST+b5BSj/Pf7ndgaKaA/txJCbwRSMejZZ T/EA0cifdkl1Ja7F+vYNHHrglmpGNOZ38r/ZdnRuneiBz6ctgbor5m5yku6EfuXs f15W7XxveBB3ouRCosrW5R96RPxNcTXlCCfzahd8ypuetCT0gsuziHnxbEz6Ilkr oE7DJHxaAXJuEaaySy6qaBtv5qLjoANP0+/jwcUKq2igRYayoIso9uK2i7JE9xsp 8+LTrnyoUarsDw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:19 2025 by rpki-client