This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json) Hash identifier: CEDWblg2gB+HGQM7kkl/JwvGZ2/PfWMrrobTXRL6ueg= Subject key identifier: 11:2A:0F:B7:A7:96:F6:FF:D2:20:B2:2D:66:39:CE:56:9A:E8:8D:2F Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70 Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170 Certificate serial: 019AF12EFBB7EB651DBC106E436DE3DD8C68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:59 +0000 Manifest this update: Sat 06 Dec 2025 01:02:59 +0000 Manifest next update: Sun 07 Dec 2025 01:02:59 +0000 Files and hashes: 1: 7vdGx51ck_YIgYpkt1SPNVfsVKE.roa (hash: Nw+uAqY1I65YKmQSbXqROB23bDhd2atga2x/5hREPHM=) 2: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: Rx3XwUNC+JixSh7sDvb9oZ1sdVVu4reCiGpnerbTJUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:fb:b7:eb:65:1d:bc:10:6e:43:6d:e3:dd:8c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64daba15d1d366cb53095412d06490e23498e170 Validity Not Before: Dec 6 01:02:59 2025 GMT Not After : Dec 7 01:02:59 2025 GMT Subject: CN=112a0fb7a796f6ffd220b22d6639ce569ae88d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:5a:78:df:2c:35:94:9c:6d:b7:5a:20:da: cc:47:c7:f5:1a:95:50:0c:ab:9f:92:79:74:2d:a0: da:8b:f7:28:ba:d0:3c:45:bf:32:d9:22:f1:12:37: a9:97:34:23:55:f2:39:30:26:26:bf:7d:cd:a7:93: 54:98:a6:07:90:0d:68:e2:b7:1b:58:75:9d:7d:0e: 1c:6d:e8:53:f9:3f:36:af:05:ee:55:d1:5e:31:f2: 8d:ba:82:36:6d:72:eb:c2:5f:c4:20:df:de:ad:a2: b4:64:51:86:60:97:a0:0d:29:3c:4b:f8:dc:1b:db: 16:2c:83:ba:0a:d3:03:f4:26:f3:ef:2e:c0:78:10: 41:12:0a:01:14:71:51:8d:46:3f:9e:48:66:b0:0a: 7d:5c:75:4c:40:ee:7d:0b:3b:c1:d4:df:ed:ce:9b: 1d:e5:94:07:ec:2d:4d:02:54:73:a8:88:59:4f:7f: ef:e0:b2:86:6d:ee:da:5e:92:9a:88:81:f0:d9:5d: d6:49:4b:80:77:b1:36:67:af:bf:67:03:67:a5:91: 8a:72:54:a0:14:69:4a:83:94:d3:4c:fd:d6:fc:44: 7c:69:a4:b9:e5:25:a4:05:f4:07:a6:84:cc:d5:cd: 3a:89:87:f4:39:fc:9d:17:30:46:a2:78:27:ea:b6: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2A:0F:B7:A7:96:F6:FF:D2:20:B2:2D:66:39:CE:56:9A:E8:8D:2F X509v3 Authority Key Identifier: keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:70:74:f9:ec:30:d5:25:35:0c:bb:0e:0e:44:23:fb:d6:91: 3f:cd:f3:d9:58:c6:23:88:83:03:22:47:81:2a:f2:af:07:ce: 8b:93:84:55:b4:4c:e5:51:d8:32:79:ff:61:0f:3c:65:57:10: e5:5c:02:61:2b:b2:7b:d0:89:b6:40:cc:67:f6:37:31:08:db: 5a:1a:66:45:85:04:88:4a:cf:0d:fe:b6:83:0e:d9:23:b2:7b: 16:fc:51:08:7c:31:e0:ac:97:01:19:8f:9c:d4:04:1e:0c:58: 69:c2:47:92:cb:bf:3a:d3:91:7e:ea:98:4a:a3:43:91:0d:e8: bf:54:22:fa:54:ae:92:20:58:d6:57:ab:5b:7e:ea:80:77:e5: e5:39:8d:24:d1:e1:c9:b3:81:43:52:44:f5:f1:5a:94:c2:20: 0f:69:96:57:bf:4e:f0:d0:5f:97:af:2d:94:d0:46:b2:43:73: 35:60:e7:b4:f7:5b:b1:46:c9:ba:c3:dc:8b:87:e8:aa:6c:80: 3e:2f:da:a5:cc:5d:45:0a:db:0c:60:22:0b:8e:3d:46:ff:ec: 6b:e7:b1:37:79:74:fc:84:fb:60:04:96:67:d8:bf:f3:58:a8: 24:c4:bc:52:e6:77:5b:e6:69:71:5c:0c:d8:3b:46:4f:87:e0: c6:78:20:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvu362UdvBBuQ23j3YxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGFiYTE1ZDFkMzY2Y2I1MzA5NTQxMmQwNjQ5MGUyMzQ5 OGUxNzAwHhcNMjUxMjA2MDEwMjU5WhcNMjUxMjA3MDEwMjU5WjAzMTEwLwYDVQQD EygxMTJhMGZiN2E3OTZmNmZmZDIyMGIyMmQ2NjM5Y2U1NjlhZTg4ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq91aeN8sNZScbbdaINrMR8f1GpVQ DKufknl0LaDai/coutA8Rb8y2SLxEjeplzQjVfI5MCYmv33Np5NUmKYHkA1o4rcb WHWdfQ4cbehT+T82rwXuVdFeMfKNuoI2bXLrwl/EIN/eraK0ZFGGYJegDSk8S/jc G9sWLIO6CtMD9Cbz7y7AeBBBEgoBFHFRjUY/nkhmsAp9XHVMQO59CzvB1N/tzpsd 5ZQH7C1NAlRzqIhZT3/v4LKGbe7aXpKaiIHw2V3WSUuAd7E2Z6+/ZwNnpZGKclSg FGlKg5TTTP3W/ER8aaS55SWkBfQHpoTM1c06iYf0OfydFzBGongn6rYtWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEqD7enlvb/0iCyLWY5zlaa6I0vMB8GA1UdIwQY MBaAFGTauhXR02bLUwlUEtBkkOI0mOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2Et YTk0ZGQ4Y2NhZjlmLzEvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2EtYTk0ZGQ4Y2NhZjlm LzEvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3B0+eww 1SU1DLsODkQj+9aRP83z2VjGI4iDAyJHgSryrwfOi5OEVbRM5VHYMnn/YQ88ZVcQ 5VwCYSuye9CJtkDMZ/Y3MQjbWhpmRYUEiErPDf62gw7ZI7J7FvxRCHwx4KyXARmP nNQEHgxYacJHksu/OtORfuqYSqNDkQ3ov1Qi+lSukiBY1lerW37qgHfl5TmNJNHh ybOBQ1JE9fFalMIgD2mWV79O8NBfl68tlNBGskNzNWDntPdbsUbJusPci4foqmyA Pi/apcxdRQrbDGAiC449Rv/sa+exN3l0/IT7YASWZ9i/81ioJMS8UuZ3W+ZpcVwM 2DtGT4fgxnggUg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:54 2025 by rpki-client