This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft File: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json) Hash identifier: d9RkPJwJ+mWISAxTldDDkAKtW911N3VYH7A/m8jAXz8= Subject key identifier: 05:45:CA:53:8D:5A:72:F4:5C:C8:E7:12:25:D3:8A:A3:71:B2:3D:17 Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3 Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3 Certificate serial: 019AF23FE45E926230DC472DF0772B88DF15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft Manifest number: 10CF Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa (hash: PCZ0sNE5BS8dEXbU+ksvDG3w1iOi7xIBrn9yDW7TZ/U=) 2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: JycN8Hs3UiRo76MgMQI3ISl3RJHfesPbiSqRYEN/jQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e4:5e:92:62:30:dc:47:2d:f0:77:2b:88:df:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=0545ca538d5a72f45cc8e71225d38aa371b23d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:e0:63:a5:84:92:ee:94:fd:00:4c:a7:6e: d5:38:64:37:bb:8b:bf:96:95:86:76:22:dc:b1:77: 6f:49:2f:42:1d:6f:25:e9:7f:37:73:71:26:da:7c: 53:03:0a:da:23:7a:5d:09:b0:f6:cb:81:a8:68:cc: f1:06:e5:6c:c1:18:77:d0:7d:9d:4f:79:95:d7:b0: 6d:d4:a7:42:9b:e9:bd:07:e2:3c:e1:d2:5e:de:3c: ed:fe:81:ae:e1:55:2a:a5:a0:ac:08:ab:05:cd:21: dc:83:fc:28:ac:33:28:cf:2e:e8:c2:95:6d:aa:37: ba:4e:96:9b:d5:ce:35:fc:15:2d:fe:67:0d:40:c0: c0:9b:cd:7c:ef:37:54:87:77:cc:e7:f2:6f:e6:74: 8c:36:c8:8f:11:b3:3f:1f:c2:7b:5e:f9:d9:80:aa: 8c:df:3f:fa:fe:9d:5c:ee:bc:75:6c:15:af:3e:9b: d1:8f:5c:2e:96:6c:0e:3f:77:d3:4e:3c:71:92:eb: 4e:80:75:21:c7:87:be:b0:ab:ef:92:fb:53:c6:98: 71:65:b6:d4:5c:e4:00:d4:b0:11:b3:3f:7b:bc:c7: 37:c8:ed:8d:21:10:16:a1:42:72:6b:4a:0e:86:56: 44:a6:51:83:4c:89:85:b8:b8:5d:6e:d8:6b:09:cf: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:45:CA:53:8D:5A:72:F4:5C:C8:E7:12:25:D3:8A:A3:71:B2:3D:17 X509v3 Authority Key Identifier: keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:77:2c:ca:94:26:c7:39:69:fd:38:cf:2b:1d:ac:cb:ab:99: a0:d4:86:e7:e9:26:ed:27:a6:6d:68:4b:c8:25:37:c5:47:d9: 3c:eb:b6:f5:2f:08:3f:fb:6d:0c:d4:b1:e8:26:0b:c2:f6:0c: 7b:db:8a:d3:c4:be:d0:93:f6:16:d8:ef:da:51:64:40:8b:c9: 72:21:eb:77:79:b4:1f:37:8a:0a:09:e2:44:18:ba:69:22:c2: f5:e0:4c:9a:0b:31:9d:e5:0c:59:d7:16:85:cf:37:e4:bd:7d: 54:69:a9:78:7c:9a:e5:f8:8f:fd:30:4e:d7:ca:45:7d:e0:b3: 17:0e:98:02:11:20:4c:30:dc:11:6e:46:cc:9b:d1:a2:d9:5d: 2c:23:a9:10:c4:0c:46:10:7c:2a:1e:16:b2:cf:ee:3d:c5:8f: e2:c0:86:ef:89:7b:5c:09:5c:c8:aa:a0:bd:94:43:48:49:c1: 30:8c:5c:d2:2c:e8:64:be:7c:ac:8d:4a:bf:a8:86:a9:23:3a: 62:19:34:f6:26:66:29:ce:a3:2e:40:42:d2:0e:61:7d:98:30: ef:1b:19:e8:4a:3d:b7:0e:a3:03:38:85:09:17:d0:38:1e:bd: 27:ff:43:1d:a7:6c:2f:b3:96:b6:64:ee:58:ac:87:d3:2c:ef: e4:8d:fc:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+RekmIw3Ect8HcriN8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmE4ZDY0ZTkwMWIzOWI1MDFlZDM2OTNlYzI3NDMwNzEz ODg2ZTMwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EygwNTQ1Y2E1MzhkNWE3MmY0NWNjOGU3MTIyNWQzOGFhMzcxYjIzZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWngY6WEku6U/QBMp27VOGQ3u4u/ lpWGdiLcsXdvSS9CHW8l6X83c3Em2nxTAwraI3pdCbD2y4GoaMzxBuVswRh30H2d T3mV17Bt1KdCm+m9B+I84dJe3jzt/oGu4VUqpaCsCKsFzSHcg/worDMozy7owpVt qje6Tpab1c41/BUt/mcNQMDAm8187zdUh3fM5/Jv5nSMNsiPEbM/H8J7XvnZgKqM 3z/6/p1c7rx1bBWvPpvRj1wulmwOP3fTTjxxkutOgHUhx4e+sKvvkvtTxphxZbbU XOQA1LARsz97vMc3yO2NIRAWoUJya0oOhlZEplGDTImFuLhdbthrCc8ViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVFylONWnL0XMjnEiXTiqNxsj0XMB8GA1UdIwQY MBaAFGa6jWTpAbObUB7TaT7CdDBxOIbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEt MGIzZTdlYmU0YWMyLzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEtMGIzZTdlYmU0YWMy LzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3csypQm xzlp/TjPKx2sy6uZoNSG5+km7SembWhLyCU3xUfZPOu29S8IP/ttDNSx6CYLwvYM e9uK08S+0JP2Ftjv2lFkQIvJciHrd3m0HzeKCgniRBi6aSLC9eBMmgsxneUMWdcW hc835L19VGmpeHya5fiP/TBO18pFfeCzFw6YAhEgTDDcEW5GzJvRotldLCOpEMQM RhB8Kh4Wss/uPcWP4sCG74l7XAlcyKqgvZRDSEnBMIxc0izoZL58rI1Kv6iGqSM6 Yhk09iZmKc6jLkBC0g5hfZgw7xsZ6Eo9tw6jAziFCRfQOB69J/9DHadsL7OWtmTu WKyH0yzv5I38Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:24 2025 by rpki-client