This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json) Hash identifier: P3oycGofqkvtbMOELnbSGQ3yGXN6ksvzWXfClu+pxZw= Subject key identifier: 95:2D:70:01:B3:0C:07:83:DD:B8:49:72:A3:A9:B1:F2:4B:D8:0B:E4 Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Certificate serial: 019AF0BF24D20B4F96616CE52B39E2719C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft Manifest number: 1012 Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=) 2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: SvuqtfsjB8Y2T5WzC2oFdyHf4L0VXJDbV5G9dPQgZxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:24:d2:0b:4f:96:61:6c:e5:2b:39:e2:71:9c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=952d7001b30c0783ddb84972a3a9b1f24bd80be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:68:d0:08:db:2d:06:91:e4:de:8c:57:59: a5:8c:d1:a3:bb:c3:58:9e:ee:92:39:88:8d:f6:ff: 56:7f:e0:b5:54:c8:6d:17:fb:60:8b:15:7c:53:16: ec:6b:f6:a9:f4:c6:67:db:3f:9e:2d:91:82:51:9e: 9c:a5:72:ab:d8:0c:8b:79:a7:17:78:f5:34:8f:71: 15:66:11:ce:fa:31:31:1c:7d:26:00:cc:f3:15:c9: 19:17:46:0f:4f:3f:c3:a6:c3:5b:91:df:ee:d4:72: 1b:f8:1f:f6:56:bc:c1:76:09:75:5d:0d:f3:bb:bd: 08:9b:40:14:2d:c1:ad:eb:b7:6f:cc:36:5d:84:f6: a7:9f:6d:37:c5:45:26:97:af:53:3e:7c:fd:e9:1c: b0:51:ee:d8:a9:50:d3:78:11:18:de:18:7b:d7:ad: d6:1e:fb:88:df:85:11:e8:b2:b4:91:fc:d0:5c:5f: ed:fd:29:d7:b8:11:b7:5c:a6:ba:cc:69:9e:f9:cc: a0:28:8a:75:67:b9:d5:77:e7:b5:24:28:1f:2c:cb: ee:16:67:18:4e:34:ff:0a:11:d1:09:38:7d:79:26: 14:99:b4:25:9e:b3:5e:95:c6:59:81:5d:29:d9:be: 0a:d8:fb:08:6d:f5:33:8e:bf:69:ae:e1:70:43:fb: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:70:01:B3:0C:07:83:DD:B8:49:72:A3:A9:B1:F2:4B:D8:0B:E4 X509v3 Authority Key Identifier: keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7e:5d:1c:7c:23:91:c0:60:73:f0:2f:a7:04:52:3a:8d:b0: 86:f9:a7:b3:74:f1:e7:02:1f:e0:3d:19:a6:e6:f6:d7:1e:af: 76:ae:49:6d:99:4b:ee:1e:99:bb:6f:fe:14:0f:37:b4:e8:74: 95:81:46:94:df:8c:0d:1d:ca:f1:5f:90:a0:dd:3e:23:0c:87: db:2b:2a:5a:e0:6f:98:00:00:7b:da:54:ba:56:d0:38:49:12: 9f:c6:49:f2:5d:43:4f:24:3e:87:00:e9:bd:7f:fa:8b:ca:1f: ba:d3:d1:c5:2d:49:6f:3c:03:13:a6:6a:c3:7a:cd:4a:86:dd: 5e:15:42:60:9a:da:0c:6a:1e:45:48:68:c2:eb:e8:35:00:e7: e0:b9:58:32:8f:ed:eb:8d:6e:3b:69:89:ee:e5:7c:65:f1:8b: f7:5b:58:36:7d:77:d2:fc:f1:5d:49:0d:b3:fa:d2:89:15:80: 63:ef:b1:13:dc:20:33:75:d0:2b:6d:66:c0:ee:8e:ca:9f:b9: 49:5d:dd:40:e4:d9:45:6c:f5:a0:01:5f:73:fb:7e:ae:38:f9: e1:a3:a4:5e:1b:73:62:3e:88:98:c9:ba:32:a5:10:63:ae:7c: 10:f1:4e:ec:7f:04:b3:23:14:97:09:04:a3:61:dc:bf:a9:aa: bc:61:00:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyTSC0+WYWzlKznicZwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi YjQ1YTQwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD Eyg5NTJkNzAwMWIzMGMwNzgzZGRiODQ5NzJhM2E5YjFmMjRiZDgwYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0po0AjbLQaR5N6MV1mljNGju8NY nu6SOYiN9v9Wf+C1VMhtF/tgixV8Uxbsa/ap9MZn2z+eLZGCUZ6cpXKr2AyLeacX ePU0j3EVZhHO+jExHH0mAMzzFckZF0YPTz/DpsNbkd/u1HIb+B/2VrzBdgl1XQ3z u70Im0AULcGt67dvzDZdhPann203xUUml69TPnz96RywUe7YqVDTeBEY3hh7163W HvuI34UR6LK0kfzQXF/t/SnXuBG3XKa6zGme+cygKIp1Z7nVd+e1JCgfLMvuFmcY TjT/ChHRCTh9eSYUmbQlnrNelcZZgV0p2b4K2PsIbfUzjr9pruFwQ/ss9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUtcAGzDAeD3bhJcqOpsfJL2AvkMB8GA1UdIwQY MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt N2UxODRiMDcwYmJkLzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg35dHHwj kcBgc/AvpwRSOo2whvmns3Tx5wIf4D0Zpub21x6vdq5JbZlL7h6Zu2/+FA83tOh0 lYFGlN+MDR3K8V+QoN0+IwyH2ysqWuBvmAAAe9pUulbQOEkSn8ZJ8l1DTyQ+hwDp vX/6i8ofutPRxS1JbzwDE6Zqw3rNSobdXhVCYJraDGoeRUhowuvoNQDn4LlYMo/t 641uO2mJ7uV8ZfGL91tYNn130vzxXUkNs/rSiRWAY++xE9wgM3XQK21mwO6Oyp+5 SV3dQOTZRWz1oAFfc/t+rjj54aOkXhtzYj6ImMm6MqUQY658EPFO7H8EsyMUlwkE o2Hcv6mqvGEAOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:46 2025 by rpki-client