This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft File: ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft (raw, json) Hash identifier: Jub/41OE/Htcv0VevWGyJ6juNlWC0wP3KN7TrwkEUz4= Subject key identifier: 2F:D7:7B:0E:4B:CC:8D:A2:65:70:6F:9A:DA:83:F2:E4:5D:13:F2:7B Authority key identifier: 66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4 Certificate issuer: /CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4 Certificate serial: 019AF1D182938ABD541D1F6502732185FC2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft Manifest number: 54 Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: MjDiSya5rSIxCbP2JLylYPClbHU.roa (hash: sVwKHPoYwVN9YVNb0RadzlN6+FZIECFGTzUXxcescyI=) 2: ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl (hash: q/YvrZd8bxlQBQ++4+wZULJXoMafCF9G+3TOIWcm7lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:82:93:8a:bd:54:1d:1f:65:02:73:21:85:fc:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4 Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=2fd77b0e4bcc8da265706f9ada83f2e45d13f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:45:95:c6:31:dc:aa:b2:dd:3b:76:3e:1d: d8:fe:9e:64:fd:1a:44:cc:0b:60:a8:fd:ca:d4:36: 8d:b2:10:e5:30:76:ad:b8:3c:66:8b:62:b5:dd:6a: d6:ac:9c:41:76:64:eb:1e:bd:2e:f6:c1:4d:9b:88: 73:5f:c0:37:1a:b3:90:14:b8:b5:58:d0:6e:2f:fc: 70:86:53:25:8e:a5:0a:30:f7:01:7c:5c:75:9b:9d: 7a:d5:06:0c:5b:e6:ec:ab:e6:a8:a3:77:9f:bf:a3: 99:70:39:87:67:79:43:8b:32:f0:9e:d6:f4:e6:ac: 08:92:35:e3:e5:35:2e:90:5b:ab:2c:7a:62:b3:d6: e8:fa:34:4a:bb:c7:f8:6a:07:3f:d0:10:e0:e0:10: 90:70:27:93:50:fa:06:99:08:be:76:75:a4:76:d3: 3d:f0:29:bc:6f:e6:ce:82:02:2f:19:fb:f5:95:c5: 8d:bf:e7:d8:d0:60:c0:9f:fb:34:ce:39:4b:fe:38: 6d:3d:37:c9:3b:a7:45:09:31:e9:53:8b:50:bf:e7: d3:19:6f:32:b5:f8:7d:43:db:fe:d8:66:71:60:f5: 1a:46:c2:0f:1a:57:34:9d:12:9d:13:1d:05:88:e1: e6:a8:2b:77:f8:9e:99:74:d3:e0:72:5a:68:8d:5d: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D7:7B:0E:4B:CC:8D:A2:65:70:6F:9A:DA:83:F2:E4:5D:13:F2:7B X509v3 Authority Key Identifier: keyid:66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:51:40:bc:a5:4a:86:5c:19:12:d4:59:1e:9e:49:b4:a3:cb: 8e:32:18:65:02:fd:2d:ad:e1:73:20:eb:c2:d2:11:24:b8:63: 4e:cf:5b:61:70:55:f8:75:e5:7a:91:54:ac:02:83:1d:7e:53: 73:f0:58:ce:bb:ad:b8:e4:75:26:ce:30:b8:17:53:62:94:2c: 4a:cc:db:07:96:3d:50:6f:c8:13:c9:74:1b:58:a8:b7:f0:5f: 34:10:f4:9a:46:68:24:7b:17:1a:32:2f:3b:40:fa:d0:3e:d0: 2e:5a:0f:7f:28:3d:61:fe:f4:a1:0c:75:93:53:22:71:9d:37: 8d:e4:70:f1:1c:ef:7a:d9:b0:c8:42:66:74:19:4a:26:82:25: 10:1c:ba:a4:ee:e7:03:78:b7:04:11:3d:5a:ee:15:0a:1a:c6: 57:5a:cc:58:39:4b:89:e8:71:5c:4a:3f:d4:a9:50:ea:3f:28: 00:fe:af:b2:71:72:25:f8:64:2c:e6:0e:c1:3a:c6:e8:b5:e7: ef:d9:0b:70:9a:cd:ab:2a:a5:ea:ec:50:b7:72:bf:06:7f:29: 4f:d5:fd:93:34:95:8c:8b:24:a4:d6:c1:9c:06:96:60:88:5c: 4d:85:01:42:af:13:1b:12:7e:77:42:f3:e1:ad:f4:d5:3d:54: 21:22:1a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YKTir1UHR9lAnMhhfwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTJmZTkzNGVkMWRlZjc1ZjA2MzZhZTdjZjAxOThjODFk MzQ4YjQwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD EygyZmQ3N2IwZTRiY2M4ZGEyNjU3MDZmOWFkYTgzZjJlNDVkMTNmMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngdFlcYx3Kqy3Tt2Ph3Y/p5k/RpE zAtgqP3K1DaNshDlMHatuDxmi2K13WrWrJxBdmTrHr0u9sFNm4hzX8A3GrOQFLi1 WNBuL/xwhlMljqUKMPcBfFx1m5161QYMW+bsq+aoo3efv6OZcDmHZ3lDizLwntb0 5qwIkjXj5TUukFurLHpis9bo+jRKu8f4agc/0BDg4BCQcCeTUPoGmQi+dnWkdtM9 8Cm8b+bOggIvGfv1lcWNv+fY0GDAn/s0zjlL/jhtPTfJO6dFCTHpU4tQv+fTGW8y tfh9Q9v+2GZxYPUaRsIPGlc0nRKdEx0FiOHmqCt3+J6ZdNPgclpojV0JVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/Xew5LzI2iZXBvmtqD8uRdE/J7MB8GA1UdIwQY MBaAFGai/pNO0d73XwY2rnzwGYyB00i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYt NGVkZjE5YjM1ZWNhLzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYtNGVkZjE5YjM1ZWNh LzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1FAvKVK hlwZEtRZHp5JtKPLjjIYZQL9La3hcyDrwtIRJLhjTs9bYXBV+HXlepFUrAKDHX5T c/BYzrutuOR1Js4wuBdTYpQsSszbB5Y9UG/IE8l0G1iot/BfNBD0mkZoJHsXGjIv O0D60D7QLloPfyg9Yf70oQx1k1MicZ03jeRw8RzvetmwyEJmdBlKJoIlEBy6pO7n A3i3BBE9Wu4VChrGV1rMWDlLiehxXEo/1KlQ6j8oAP6vsnFyJfhkLOYOwTrG6LXn 79kLcJrNqyql6uxQt3K/Bn8pT9X9kzSVjIskpNbBnAaWYIhcTYUBQq8TGxJ+d0Lz 4a301T1UISIazA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:36 2025 by rpki-client