This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json) Hash identifier: c1umlWO62C9wB8foSgTuEFqLr+ugr1JWBg8eWgmkQow= Subject key identifier: 84:5B:6E:4E:70:B5:61:6F:09:07:A7:87:EB:2A:D1:EA:77:FF:5F:57 Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6 Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6 Certificate serial: 019AF2093ACC6C5CF2B4F88B98E43FE44CE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=) 2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=) 3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: CZTMgdcD8gz48dizHvdxB8tm1ajgAaZ/ogWbDb4mH3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3a:cc:6c:5c:f2:b4:f8:8b:98:e4:3f:e4:4c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=845b6e4e70b5616f0907a787eb2ad1ea77ff5f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:8a:4e:4a:8f:5e:f0:65:ca:15:c9:6b:c8: 52:4d:dc:45:7c:95:b0:5a:76:f1:3f:e1:4b:21:51: ce:44:91:49:cc:87:c7:ac:e2:cf:03:50:07:10:6c: f9:90:19:e5:c8:2c:66:2d:39:91:b6:a6:f9:07:f9: 77:eb:d2:f8:01:1a:17:c0:b9:f4:d3:c1:f2:61:a7: 74:9a:e1:f5:05:2e:57:24:67:59:f2:cf:27:78:3d: bb:c8:e3:65:f5:9f:d4:ce:64:e0:f3:6b:c2:29:2a: 4f:bd:b5:61:98:3a:89:d4:29:bb:a3:7d:e2:24:95: 3c:5f:aa:68:98:14:46:d2:aa:91:aa:30:1e:0d:be: db:63:bf:1d:26:cc:24:35:27:59:5f:1d:a5:a0:d6: 01:23:c8:78:ad:f4:88:ce:e8:3b:08:1d:de:07:63: d6:db:cc:24:17:e7:d9:88:ed:56:16:9f:f1:90:0d: fc:bf:e2:b0:4c:c0:49:77:31:97:2b:37:7f:4f:95: bb:4f:2e:90:07:f6:12:59:ef:2d:ca:6a:e3:99:78: 6b:e2:83:c8:b4:01:91:f1:bd:45:5d:7a:09:a1:3c: 37:93:d1:bb:45:77:61:7b:51:f8:79:c3:3d:1a:7e: fa:f4:f7:9a:9b:a1:e8:3b:c9:d8:26:c9:1d:11:61: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5B:6E:4E:70:B5:61:6F:09:07:A7:87:EB:2A:D1:EA:77:FF:5F:57 X509v3 Authority Key Identifier: keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6c:3b:35:67:9e:3d:18:b2:c8:b4:c5:66:b9:21:3c:bc:78: 65:a7:18:7c:c0:a7:1d:ba:30:cd:60:51:75:21:16:a6:c0:7a: 27:31:01:05:1c:50:df:4b:aa:fe:97:4f:f8:ea:c2:ac:4e:e3: 44:8f:6d:3b:e1:42:f4:cd:0d:65:fa:73:6a:eb:71:22:fb:28: e9:7e:01:39:ad:f1:df:f0:db:30:12:ba:da:4a:46:86:50:e0: 7f:c2:47:14:4b:9b:43:50:b6:59:1b:ac:c5:3b:33:86:a7:2e: f6:83:63:61:f2:4c:32:ac:ac:57:eb:95:15:65:66:73:d5:ee: 8a:da:0b:48:2f:d4:fa:e0:69:28:7b:04:7d:24:24:4d:fb:d3: c2:be:dd:f6:a0:31:b4:4c:82:63:70:f5:e6:82:3b:c2:bc:6a: 80:42:15:6f:dc:19:df:08:51:21:62:92:fd:41:7b:ba:67:29: 19:4e:23:da:fd:aa:2c:6f:22:e3:49:a2:4e:07:da:ee:3b:bc: 19:88:76:72:7e:92:c5:71:ef:c8:6f:2e:36:5b:20:63:90:5c: 1c:a3:2d:de:ea:31:c7:30:b8:71:90:a8:df:33:75:6e:17:f7: 6e:a6:ab:54:16:2e:02:dd:a4:fc:47:2e:00:7e:7a:28:1d:e2: 03:0c:52:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTrMbFzytPiLmOQ/5EzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDJkMDc3NDg1YTE1ZThhMjU0YTQ5ZWRkOTk0ZDRmYzJh OTA4YTYwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD Eyg4NDViNmU0ZTcwYjU2MTZmMDkwN2E3ODdlYjJhZDFlYTc3ZmY1ZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomWKTkqPXvBlyhXJa8hSTdxFfJWw WnbxP+FLIVHORJFJzIfHrOLPA1AHEGz5kBnlyCxmLTmRtqb5B/l369L4ARoXwLn0 08HyYad0muH1BS5XJGdZ8s8neD27yONl9Z/UzmTg82vCKSpPvbVhmDqJ1Cm7o33i JJU8X6pomBRG0qqRqjAeDb7bY78dJswkNSdZXx2loNYBI8h4rfSIzug7CB3eB2PW 28wkF+fZiO1WFp/xkA38v+KwTMBJdzGXKzd/T5W7Ty6QB/YSWe8tymrjmXhr4oPI tAGR8b1FXXoJoTw3k9G7RXdhe1H4ecM9Gn769Peam6HoO8nYJskdEWHG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRbbk5wtWFvCQenh+sq0ep3/19XMB8GA1UdIwQY MBaAFM0C0HdIWhXoolSknt2ZTU/CqQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEt MzdlODBkYWI5MzAyLzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEtMzdlODBkYWI5MzAy LzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2w7NWee PRiyyLTFZrkhPLx4ZacYfMCnHbowzWBRdSEWpsB6JzEBBRxQ30uq/pdP+OrCrE7j RI9tO+FC9M0NZfpzautxIvso6X4BOa3x3/DbMBK62kpGhlDgf8JHFEubQ1C2WRus xTszhqcu9oNjYfJMMqysV+uVFWVmc9XuitoLSC/U+uBpKHsEfSQkTfvTwr7d9qAx tEyCY3D15oI7wrxqgEIVb9wZ3whRIWKS/UF7umcpGU4j2v2qLG8i40miTgfa7ju8 GYh2cn6SxXHvyG8uNlsgY5BcHKMt3uoxxzC4cZCo3zN1bhf3bqarVBYuAt2k/Ecu AH56KB3iAwxSPg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:35 2025 by rpki-client