This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json) Hash identifier: 62eV8C4kgq2RuUAG6uUqHst0khqF/oEFVQ9wG+RMPzM= Subject key identifier: 63:AF:53:0E:C1:E1:17:44:A1:25:40:4D:D2:10:DC:96:5E:F1:57:A8 Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43 Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43 Certificate serial: 019AF1D1CF55D34B155EEDAEAD8B62D01410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft Manifest number: 03AF Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: 2f3iJSIm_gwsjLqHKwwPCgVXmU4.roa (hash: N9m+XB9yu5/umOhHO4AH3n4GJdoAiP1f7gS+JghQR/w=) 2: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: z0hDSQgSk81Hab5IEHG4kO9XyF1UyUjlRf9kkl+2Sok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cf:55:d3:4b:15:5e:ed:ae:ad:8b:62:d0:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=63af530ec1e11744a125404dd210dc965ef157a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:14:09:a2:ab:31:ac:11:2f:54:a3:40:ec: 42:f5:f8:7c:d5:7d:aa:1b:ee:79:c5:5a:d0:3b:27: 26:a0:d3:7e:e4:72:b9:0f:25:d8:31:22:01:ce:38: a5:a3:90:21:48:48:af:ac:8a:b3:02:07:fb:5b:56: c0:ec:ef:4a:8f:86:19:8b:79:a1:b4:87:e1:59:f1: 90:4a:5c:66:28:64:dc:50:bb:6e:ab:ee:5c:c9:ea: 96:9c:34:fd:94:26:4c:da:bb:52:0f:7f:b9:fc:78: fb:90:c4:dd:f7:6e:46:4f:ed:f8:b1:41:bc:88:b7: 67:3c:4c:05:bb:59:c0:3e:e4:c7:4a:1e:55:f0:8f: bf:c4:e4:23:0a:3c:73:7e:f4:6b:20:10:05:bc:51: 4c:80:c5:30:f8:21:d2:e0:a4:b5:3c:e4:f9:31:7f: a9:83:41:c2:2d:39:19:97:02:52:3e:d3:13:50:ed: 31:4c:ed:fd:de:6b:a2:13:06:3a:48:0c:6d:e0:3b: 6e:2a:2b:cc:69:ee:65:96:b2:d0:62:3c:9d:76:a9: ba:63:e2:2e:1e:ea:51:c1:a7:84:5c:de:24:e4:64: 3d:a5:54:c0:d8:07:35:4a:8d:f5:91:b7:98:c5:b0: ae:10:3d:92:2a:5a:d3:39:14:f4:c0:2a:a8:18:ae: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AF:53:0E:C1:E1:17:44:A1:25:40:4D:D2:10:DC:96:5E:F1:57:A8 X509v3 Authority Key Identifier: keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:21:97:32:66:f8:2d:2f:cf:81:1e:1b:4e:f0:c5:17:6b:b0: 26:f5:79:db:ed:85:e3:29:c6:46:ef:58:64:be:f2:af:62:b9: 92:90:9e:c0:4a:58:5d:86:1d:09:fd:99:cd:fe:36:30:bf:19: 4b:c8:5e:3b:4b:52:e3:4f:ce:49:03:90:43:f8:4a:3d:57:60: f9:5b:15:8a:2a:20:41:b3:85:36:96:b9:28:93:a7:84:8f:de: 76:b7:91:2e:54:b4:d1:ee:ee:d8:6e:98:29:a5:d8:7a:c9:b1: cc:7c:a1:36:7e:a3:90:dc:50:1c:a7:b4:2d:30:cf:1e:a9:12: 12:eb:24:2a:4d:a6:a2:d4:db:9b:e5:1d:a7:ef:1e:5a:ae:41: bf:19:e2:07:97:f5:49:52:eb:8d:c3:83:d4:72:a0:18:71:de: f6:78:1c:c9:cb:7f:62:4b:2b:a6:2c:1f:29:df:13:09:b1:c8: 7e:00:a6:a5:18:3a:61:f2:d5:87:e4:83:60:4d:af:cd:31:9c: 34:18:1a:96:2f:9f:4e:1c:1f:1e:0a:7b:70:d7:58:0b:78:6c: 3d:c1:59:c3:f9:11:08:8e:70:95:18:ee:24:90:a0:c9:e5:aa: bb:06:83:85:d3:3f:91:47:13:17:64:84:da:e2:a3:ee:66:d1: 56:cd:a4:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c9V00sVXu2urYti0BQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YWYxYzIyNGRiMjlhNTEwNGE2MWFhYzMyZjYwOTU2MDI1 ZmFkNDMwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD Eyg2M2FmNTMwZWMxZTExNzQ0YTEyNTQwNGRkMjEwZGM5NjVlZjE1N2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yAUCaKrMawRL1SjQOxC9fh81X2q G+55xVrQOycmoNN+5HK5DyXYMSIBzjilo5AhSEivrIqzAgf7W1bA7O9Kj4YZi3mh tIfhWfGQSlxmKGTcULtuq+5cyeqWnDT9lCZM2rtSD3+5/Hj7kMTd925GT+34sUG8 iLdnPEwFu1nAPuTHSh5V8I+/xOQjCjxzfvRrIBAFvFFMgMUw+CHS4KS1POT5MX+p g0HCLTkZlwJSPtMTUO0xTO393muiEwY6SAxt4DtuKivMae5llrLQYjyddqm6Y+Iu HupRwaeEXN4k5GQ9pVTA2Ac1So31kbeYxbCuED2SKlrTORT0wCqoGK6FBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOvUw7B4RdEoSVATdIQ3JZe8VeoMB8GA1UdIwQY MBaAFGavHCJNsppRBKYarDL2CVYCX61DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnE4Y0lrMnltbEVFcGhxc012WUpWZ0pmclVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMjhhMWQtZjQ3MS00ZWI3LWE4ZGUt YzBjNzQ4MDk0MzllLzEvWnE4Y0lrMnltbEVFcGhxc012WUpWZ0pmclVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMjhhMWQtZjQ3MS00ZWI3LWE4ZGUtYzBjNzQ4MDk0Mzll LzEvWnE4Y0lrMnltbEVFcGhxc012WUpWZ0pmclVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyGXMmb4 LS/PgR4bTvDFF2uwJvV52+2F4ynGRu9YZL7yr2K5kpCewEpYXYYdCf2Zzf42ML8Z S8heO0tS40/OSQOQQ/hKPVdg+VsViiogQbOFNpa5KJOnhI/edreRLlS00e7u2G6Y KaXYesmxzHyhNn6jkNxQHKe0LTDPHqkSEuskKk2motTbm+Udp+8eWq5BvxniB5f1 SVLrjcOD1HKgGHHe9ngcyct/YksrpiwfKd8TCbHIfgCmpRg6YfLVh+SDYE2vzTGc NBgali+fThwfHgp7cNdYC3hsPcFZw/kRCI5wlRjuJJCgyeWquwaDhdM/kUcTF2SE 2uKj7mbRVs2kFg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:18 2025 by rpki-client