This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json) Hash identifier: erw77r4D+y1Xqm9/dAzGNFq4MgsDRpM0224e8cpCkw0= Subject key identifier: 19:39:55:32:DE:F6:22:05:38:32:D6:1C:01:F9:1A:D4:B8:C1:2C:1B Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70 Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870 Certificate serial: 019AF42E7E6856A49490A1F9AC01EFF49254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft Manifest number: 1534 Signing time: Sat 06 Dec 2025 15:01:18 +0000 Manifest this update: Sat 06 Dec 2025 15:01:18 +0000 Manifest next update: Sun 07 Dec 2025 15:01:18 +0000 Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: 0i7eoRKvnAYx9jWLGRf9QyGg42kydPshJPtyOTaHVhM=) 2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7e:68:56:a4:94:90:a1:f9:ac:01:ef:f4:92:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870 Validity Not Before: Dec 6 15:01:18 2025 GMT Not After : Dec 7 15:01:18 2025 GMT Subject: CN=19395532def622053832d61c01f91ad4b8c12c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:c9:9d:6f:f1:51:10:8b:ca:cc:5d:d9:89: 67:72:53:af:e0:de:9c:60:9f:b2:1d:db:04:c2:0c: 2e:f4:7b:c6:2e:3b:73:a3:b5:e6:65:64:b1:3e:d2: c1:21:c5:b6:81:8d:f7:c6:91:a0:49:bb:c9:18:fe: 7c:ef:20:27:9b:4f:1e:6e:a6:3a:78:91:da:89:a2: ab:45:db:f8:5f:0c:95:c4:52:c1:28:2b:17:0f:e7: 16:f5:55:db:7c:38:8a:87:53:00:5b:78:71:d6:bd: ed:aa:aa:7f:4c:f9:a5:e9:73:01:18:ce:47:33:f6: 64:4d:c3:9b:ce:c2:33:42:70:fe:d9:d3:b8:71:c8: fd:b2:62:de:a8:2e:b2:74:ec:50:25:e7:34:1a:3f: 98:6a:fa:3b:4d:17:d0:d4:11:58:e3:90:2e:1f:07: 9a:3f:ad:76:63:21:19:14:17:38:e9:fc:15:43:d2: b2:15:3a:39:31:43:2c:cb:26:8a:30:f6:23:55:90: e5:87:d6:a1:ae:8d:36:a0:03:ba:8d:f2:30:95:ff: b7:f4:8e:c9:59:d7:1d:4b:c5:ac:ec:25:bc:50:ac: 98:5c:29:47:20:f0:b6:77:db:6a:bb:ea:ef:36:cc: aa:70:a8:50:3d:79:de:88:5a:9e:a0:d8:8e:33:eb: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:55:32:DE:F6:22:05:38:32:D6:1C:01:F9:1A:D4:B8:C1:2C:1B X509v3 Authority Key Identifier: keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b5:34:48:55:50:ae:1c:7a:2d:22:f4:1b:d1:18:d8:05:b3: 91:3b:78:b2:17:09:0b:c0:70:4d:cc:eb:bc:da:89:5c:3a:2c: 3b:86:69:c7:e1:bf:70:4d:49:35:b6:8f:07:b7:97:09:84:63: 92:30:96:8b:44:42:b7:b3:5c:7f:96:f5:a2:44:5f:ac:b6:a6: eb:66:3d:6e:ac:85:e2:99:c6:00:86:6d:22:ed:17:16:77:cc: 3e:29:d8:da:db:6f:74:9e:36:61:e6:4a:95:1e:f9:50:34:a0: b7:6e:0d:3a:a6:ec:71:0a:bc:87:a7:bb:4e:4d:22:8f:28:69: 2d:ab:49:4c:be:1a:1c:4b:39:21:ac:c4:e7:ea:ff:c8:f5:43: 7d:39:1d:b0:b1:3f:89:ae:4d:d0:20:d4:60:bf:39:85:14:1c: 1e:90:c8:b9:ad:ad:9e:4c:8f:fb:57:b2:82:43:01:3f:70:0c: 3f:0c:a8:a3:dd:b4:be:5c:2c:d0:11:61:f3:83:b7:69:84:d3: e7:42:f6:08:4a:45:fc:0d:f3:d3:b4:bd:8d:54:d6:e7:f3:90: 63:3a:bb:8f:66:12:de:31:eb:db:9e:01:eb:4d:9d:e1:d6:c9: c7:1a:03:31:b0:48:e0:a5:4f:c0:f8:18:9f:36:22:c2:15:8c: e5:bc:2f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ln5oVqSUkKH5rAHv9JJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjY2YTQxYmNhNjg3YjI3NThjZmM3YmIxYzVmNGIzNDY5 ZWQ4NzAwHhcNMjUxMjA2MTUwMTE4WhcNMjUxMjA3MTUwMTE4WjAzMTEwLwYDVQQD EygxOTM5NTUzMmRlZjYyMjA1MzgzMmQ2MWMwMWY5MWFkNGI4YzEyYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtifJnW/xURCLysxd2YlnclOv4N6c YJ+yHdsEwgwu9HvGLjtzo7XmZWSxPtLBIcW2gY33xpGgSbvJGP587yAnm08ebqY6 eJHaiaKrRdv4XwyVxFLBKCsXD+cW9VXbfDiKh1MAW3hx1r3tqqp/TPml6XMBGM5H M/ZkTcObzsIzQnD+2dO4ccj9smLeqC6ydOxQJec0Gj+Yavo7TRfQ1BFY45AuHwea P612YyEZFBc46fwVQ9KyFTo5MUMsyyaKMPYjVZDlh9ahro02oAO6jfIwlf+39I7J WdcdS8Ws7CW8UKyYXClHIPC2d9tqu+rvNsyqcKhQPXneiFqeoNiOM+ueyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBk5VTLe9iIFODLWHAH5GtS4wSwbMB8GA1UdIwQY MBaAFNf2akG8poeydYz8e7HF9LNGnthwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jOWUwMmMtYWQ1MS00MzE0LTkwZmMt NGE3Y2M3NWUzZTZmLzEvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9jOWUwMmMtYWQ1MS00MzE0LTkwZmMtNGE3Y2M3NWUzZTZm LzEvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubU0SFVQ rhx6LSL0G9EY2AWzkTt4shcJC8BwTczrvNqJXDosO4Zpx+G/cE1JNbaPB7eXCYRj kjCWi0RCt7Ncf5b1okRfrLam62Y9bqyF4pnGAIZtIu0XFnfMPinY2ttvdJ42YeZK lR75UDSgt24NOqbscQq8h6e7Tk0ijyhpLatJTL4aHEs5IazE5+r/yPVDfTkdsLE/ ia5N0CDUYL85hRQcHpDIua2tnkyP+1eygkMBP3AMPwyoo920vlws0BFh84O3aYTT 50L2CEpF/A3z07S9jVTW5/OQYzq7j2YS3jHr254B602d4dbJxxoDMbBI4KVPwPgY nzYiwhWM5bwv5w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:04 2025 by rpki-client