This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json) Hash identifier: BcyUtxcsZizphO5eeQR7ElSit3p39SxXgena1osKX7I= Subject key identifier: D5:33:B0:14:BC:9A:5F:7A:F4:C2:A9:49:06:27:24:68:F1:71:58:A4 Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43 Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243 Certificate serial: 019AF240064BD9F2CC74CDB98FE90CF8B409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=) 2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: w26wLCT9ieDEXnWH6pN4CFdkWno/DdwBCyyCaq7JZ5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:06:4b:d9:f2:cc:74:cd:b9:8f:e9:0c:f8:b4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=d533b014bc9a5f7af4c2a94906272468f17158a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0f:30:5d:c0:ef:55:fc:9b:81:87:ed:6b:24: 6e:9f:50:79:96:e8:e4:f6:d7:3f:7c:5e:49:43:b2: 6d:e1:5e:fe:87:c8:22:75:da:b3:43:30:ce:58:b1: 27:82:65:ea:49:24:03:77:36:00:c2:35:d2:29:dd: 08:c7:0b:74:4f:d9:b4:f5:81:eb:66:b9:79:85:f7: 20:b4:2c:cd:4c:3b:1f:2b:d6:2c:73:87:3b:5d:cc: 0a:28:d6:f5:a6:04:4e:a6:1c:51:e7:8d:bc:b3:4c: 23:84:6f:88:b9:32:3f:a2:75:33:a3:7d:c7:49:37: 06:4e:bf:ac:6e:b7:a6:b0:49:63:47:48:60:7d:3c: 9f:7e:e4:0b:7a:96:77:65:76:96:7d:40:d7:8a:7e: af:31:b7:d7:41:8d:70:49:48:1f:41:fd:0c:09:df: 97:d1:5d:cb:dd:73:92:37:b2:93:f5:ff:b8:ed:7d: 7c:51:22:74:9a:3b:94:06:80:ac:bd:d5:5f:24:65: d4:d7:68:5c:37:3f:89:19:01:83:0c:61:47:a1:31: 36:d4:02:57:bc:9a:b1:e6:67:40:42:e6:de:36:08: 83:e6:bf:0d:61:b5:a0:c4:08:5a:a5:8f:67:d7:f3: 60:d2:4c:70:d5:34:7f:80:f2:85:e9:b1:48:6c:59: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:33:B0:14:BC:9A:5F:7A:F4:C2:A9:49:06:27:24:68:F1:71:58:A4 X509v3 Authority Key Identifier: keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:18:c8:2c:6b:bf:cc:27:71:a6:f0:cb:cb:3b:9d:bd:18:85: 29:1c:fd:95:66:ae:5b:cf:d4:fc:e2:51:49:5d:60:fc:19:df: 66:9b:ad:7c:03:b2:c6:92:bb:e7:4f:77:76:02:e2:6a:19:ae: ae:bd:c4:de:0f:6a:32:9e:89:ae:b2:70:c1:23:d6:aa:10:80: fd:4c:49:69:e2:eb:ad:4a:c9:73:23:ac:7b:d8:51:01:37:da: 82:2a:ad:df:e5:50:b9:9f:e9:d6:ff:90:d8:ba:a0:b6:2c:c7: fd:9f:91:82:f9:92:a7:77:64:cd:19:d4:0b:4f:60:4c:55:db: dd:ec:eb:fd:a4:ab:98:5c:6d:48:22:b6:ef:46:97:61:18:36: c5:8c:a3:b3:cf:2b:c4:5b:d8:63:b1:7d:b3:07:7d:e0:ec:e6: 4b:39:2f:23:e1:4d:96:a1:34:fa:6b:2b:ca:05:51:f3:61:88: 8c:48:d6:18:a6:a7:82:a9:33:aa:b2:39:9f:10:44:8f:94:06: 1f:1c:ee:66:a7:b6:ee:67:64:c6:ba:ac:0f:80:74:8c:70:de: f3:ef:a0:21:d5:d6:3d:a1:68:bc:3c:f5:96:10:29:e1:45:78: 18:05:70:37:16:be:02:b3:22:4a:2a:f2:3b:bd:f0:df:13:cc: 1c:8c:4c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAZL2fLMdM25j+kM+LQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMGNjN2ZkODg5OGIwZjdkZjRiOWRmMGI5OTMxOWJjYjI5 ZWMyNDMwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhkNTMzYjAxNGJjOWE1ZjdhZjRjMmE5NDkwNjI3MjQ2OGYxNzE1OGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q8wXcDvVfybgYftayRun1B5lujk 9tc/fF5JQ7Jt4V7+h8giddqzQzDOWLEngmXqSSQDdzYAwjXSKd0Ixwt0T9m09YHr Zrl5hfcgtCzNTDsfK9Ysc4c7XcwKKNb1pgROphxR5428s0wjhG+IuTI/onUzo33H STcGTr+sbremsEljR0hgfTyffuQLepZ3ZXaWfUDXin6vMbfXQY1wSUgfQf0MCd+X 0V3L3XOSN7KT9f+47X18USJ0mjuUBoCsvdVfJGXU12hcNz+JGQGDDGFHoTE21AJX vJqx5mdAQubeNgiD5r8NYbWgxAhapY9n1/Ng0kxw1TR/gPKF6bFIbFmHzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUzsBS8ml969MKpSQYnJGjxcVikMB8GA1UdIwQY MBaAFM0Mx/2ImLD330ud8LmTGbyynsJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEt YWIwNjM5MzhmMWNlLzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEtYWIwNjM5MzhmMWNl LzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhjILGu/ zCdxpvDLyzudvRiFKRz9lWauW8/U/OJRSV1g/BnfZputfAOyxpK75093dgLiahmu rr3E3g9qMp6JrrJwwSPWqhCA/UxJaeLrrUrJcyOse9hRATfagiqt3+VQuZ/p1v+Q 2LqgtizH/Z+RgvmSp3dkzRnUC09gTFXb3ezr/aSrmFxtSCK270aXYRg2xYyjs88r xFvYY7F9swd94OzmSzkvI+FNlqE0+msrygVR82GIjEjWGKangqkzqrI5nxBEj5QG HxzuZqe27mdkxrqsD4B0jHDe8++gIdXWPaFovDz1lhAp4UV4GAVwNxa+ArMiSiry O73w3xPMHIxMGw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:10 2025 by rpki-client