This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json) Hash identifier: NICnraTk9lDRoqy5JCpensMNeDoB/5DVqIgdVyugIhY= Subject key identifier: 01:C6:EE:79:4D:04:5D:38:AF:14:F3:25:2C:35:1F:D5:CB:2B:E0:AD Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19 Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119 Certificate serial: 019AFCC3C86AE9A6935352CF3890D8066651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft Manifest number: 0730 Signing time: Mon 08 Dec 2025 07:01:20 +0000 Manifest this update: Mon 08 Dec 2025 07:01:20 +0000 Manifest next update: Tue 09 Dec 2025 07:01:20 +0000 Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=) 2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: 0udEimV88qKxsTGwIQ5PXbVYu9H7PLV6I7rWhB6zj00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:c8:6a:e9:a6:93:53:52:cf:38:90:d8:06:66:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119 Validity Not Before: Dec 8 07:01:20 2025 GMT Not After : Dec 9 07:01:20 2025 GMT Subject: CN=01c6ee794d045d38af14f3252c351fd5cb2be0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:cf:66:ad:1a:24:ef:a5:28:e0:42:6f:74: 60:ae:a4:79:e1:e3:b0:75:34:e9:84:b6:fd:cd:c7: da:c7:07:3a:f7:b6:db:95:46:18:b9:9f:41:ca:52: c9:a2:09:54:65:56:d3:a8:2b:85:34:0d:62:39:c7: bf:64:7f:cc:36:61:aa:2d:7a:a0:d6:e3:11:bc:a0: ca:df:4d:77:8a:94:9b:1e:ff:68:77:3f:f8:ca:7f: 62:88:dd:83:74:c9:e9:22:c4:1b:99:e3:89:a8:c8: da:f7:c5:b4:bd:3a:1b:05:0e:0c:41:ea:0f:53:64: c9:bd:4c:39:ef:30:d7:35:7e:02:c1:c5:57:8a:5d: 9c:5b:93:67:6c:26:4c:1e:bb:ae:6e:87:2e:3b:09: bd:cb:c5:24:4b:3a:f9:74:10:f3:5a:c0:74:13:25: c1:4d:41:a9:cc:27:da:8d:5a:16:6b:58:c9:6d:0e: 2d:68:0a:95:56:e2:81:e9:ef:d4:2c:61:39:74:84: 88:4c:0f:4f:f0:59:db:7b:b9:da:d0:4c:b4:63:27: db:d5:0e:92:ed:8c:cc:4b:29:f1:58:b8:1e:5b:f7: 34:05:f1:fd:8b:76:2f:98:04:6b:4d:6d:7a:08:fd: 33:0a:6f:d7:cf:dc:29:e0:dd:20:36:b2:f4:c5:4d: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C6:EE:79:4D:04:5D:38:AF:14:F3:25:2C:35:1F:D5:CB:2B:E0:AD X509v3 Authority Key Identifier: keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:72:0c:81:09:8a:08:37:d6:76:3f:ec:16:98:a3:f8:b4:8f: 6a:37:f3:b9:77:04:b8:ad:88:0d:dd:b0:db:e9:2f:a5:0f:d9: 01:58:dd:65:f5:55:96:fc:e2:b5:dc:80:ce:29:31:cb:da:3c: ac:c7:4f:43:ca:a0:34:a2:4a:35:c9:a0:e2:60:37:54:2d:83: 87:80:d9:9f:69:b6:10:41:84:e0:64:83:78:3b:db:d1:6d:3c: ec:07:e2:95:e7:7f:cf:37:a9:b4:87:ee:53:93:c5:7d:6d:e7: 25:aa:17:94:8b:c7:50:3e:56:2e:93:0b:3d:17:1e:4a:cf:ad: f8:f7:bc:a9:34:fd:e8:bc:48:73:5c:67:88:90:9e:5b:b9:52: ef:16:a3:33:e5:82:31:a7:2b:7b:b9:8c:e6:50:d0:27:bd:3b: 30:c2:c2:30:82:ed:bc:72:8a:f9:40:6e:8a:48:de:c5:e4:29: 91:e3:cf:4c:39:be:32:a6:df:61:55:6d:f8:b7:fd:c8:bb:fe: ce:f9:a4:72:4e:32:2a:b7:e2:ad:92:3d:7e:0c:04:2b:c4:41: 42:e9:c9:6c:c9:e1:3b:b9:a9:dd:71:50:63:3d:2e:26:c3:8f: 30:08:2e:6c:20:96:bc:3a:9b:26:59:13:15:90:7b:bd:ac:ff: c7:03:3c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w8hq6aaTU1LPOJDYBmZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWE4ODcyYzJiM2Y5NzRjOTUxNjhkMjE0YmZkNTdmMGY5 ZTkxMTkwHhcNMjUxMjA4MDcwMTIwWhcNMjUxMjA5MDcwMTIwWjAzMTEwLwYDVQQD EygwMWM2ZWU3OTRkMDQ1ZDM4YWYxNGYzMjUyYzM1MWZkNWNiMmJlMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U3PZq0aJO+lKOBCb3RgrqR54eOw dTTphLb9zcfaxwc697bblUYYuZ9BylLJoglUZVbTqCuFNA1iOce/ZH/MNmGqLXqg 1uMRvKDK3013ipSbHv9odz/4yn9iiN2DdMnpIsQbmeOJqMja98W0vTobBQ4MQeoP U2TJvUw57zDXNX4CwcVXil2cW5NnbCZMHruubocuOwm9y8UkSzr5dBDzWsB0EyXB TUGpzCfajVoWa1jJbQ4taAqVVuKB6e/ULGE5dISITA9P8Fnbe7na0Ey0Yyfb1Q6S 7YzMSynxWLgeW/c0BfH9i3YvmARrTW16CP0zCm/Xz9wp4N0gNrL0xU2vxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHG7nlNBF04rxTzJSw1H9XLK+CtMB8GA1UdIwQY MBaAFMyqiHLCs/l0yVFo0hS/1X8PnpEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQt ZTA0YzU4YTQxZjY2LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQtZTA0YzU4YTQxZjY2 LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXIMgQmK CDfWdj/sFpij+LSPajfzuXcEuK2IDd2w2+kvpQ/ZAVjdZfVVlvzitdyAzikxy9o8 rMdPQ8qgNKJKNcmg4mA3VC2Dh4DZn2m2EEGE4GSDeDvb0W087Afiled/zzeptIfu U5PFfW3nJaoXlIvHUD5WLpMLPRceSs+t+Pe8qTT96LxIc1xniJCeW7lS7xajM+WC Macre7mM5lDQJ707MMLCMILtvHKK+UBuikjexeQpkePPTDm+MqbfYVVt+Lf9yLv+ zvmkck4yKrfirZI9fgwEK8RBQunJbMnhO7mp3XFQYz0uJsOPMAgubCCWvDqbJlkT FZB7vaz/xwM8VA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:35:59 2025 by rpki-client