This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json) Hash identifier: UIAuoYyyINVTuhy1oUgj5zljnihj7+zDaZeNPr5oAuQ= Subject key identifier: 37:96:6F:4E:37:BD:71:3F:C8:A5:0E:F4:95:D2:49:48:F2:B5:ED:1D Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09 Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209 Certificate serial: 019B34C4C0CF0BD4DEA771F7C8470CCE210A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft Manifest number: 0CD3 Signing time: Fri 19 Dec 2025 04:01:08 +0000 Manifest this update: Fri 19 Dec 2025 04:01:08 +0000 Manifest next update: Sat 20 Dec 2025 04:01:08 +0000 Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=) 2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: thQoslwwSFgchmIFEu1xm20scE08EPwKfgEgWV87ix0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:c0:cf:0b:d4:de:a7:71:f7:c8:47:0c:ce:21:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209 Validity Not Before: Dec 19 04:01:08 2025 GMT Not After : Dec 20 04:01:08 2025 GMT Subject: CN=37966f4e37bd713fc8a50ef495d24948f2b5ed1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:dd:14:74:4e:31:6b:ed:57:f3:27:3e:e3: 51:d6:f6:77:01:19:64:60:4c:ad:75:07:ab:6e:a2: 36:a5:85:81:d5:22:af:2d:51:4e:5e:21:06:ca:80: fc:24:76:2b:41:68:77:5b:70:12:bd:a6:57:2c:02: b0:70:1b:30:53:b5:96:b4:dd:14:ef:5c:1e:3c:76: 15:3c:ce:00:ba:10:e7:97:7a:55:02:87:1d:26:c6: 63:66:a1:38:7f:fb:8a:6a:71:d0:26:69:e5:9f:2f: 8e:af:ec:e1:8c:54:07:86:0c:a6:0f:19:6b:50:a6: 9a:8c:44:66:de:02:4f:16:fa:e4:24:a2:41:8e:0c: eb:03:9a:46:03:ff:1e:3f:fa:e3:2d:dc:77:82:28: 49:a9:41:b0:3e:fe:0a:3d:ad:44:17:69:f8:80:83: cc:2b:50:71:ce:20:48:97:63:db:ef:b5:d6:d1:f4: df:9a:ab:ba:3e:d5:47:5f:38:cf:04:72:c7:81:01: b9:0d:e9:db:38:ab:3b:b6:55:fd:90:3e:3c:7a:86: c5:25:a5:7c:5c:9d:c1:8c:24:7c:fb:71:fd:ac:88: a2:7e:da:00:c1:6a:4b:cf:8e:a1:32:e2:f2:3d:b2: 12:ae:62:38:fc:e8:fc:6e:dc:fc:5a:4b:31:b5:ea: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:96:6F:4E:37:BD:71:3F:C8:A5:0E:F4:95:D2:49:48:F2:B5:ED:1D X509v3 Authority Key Identifier: keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1f:fd:c0:01:5c:d6:78:8d:8e:b1:d5:cd:e5:6d:66:11:95: ac:fe:2a:f9:15:1e:a2:d9:2b:b3:cf:6f:40:9c:c1:ea:3e:a1: ff:27:04:59:20:5d:b6:af:d9:48:a5:66:dc:82:5a:ed:d4:a1: 58:1a:d6:e6:59:0a:47:36:64:9e:a6:a6:a1:82:d1:07:57:89: f2:ef:16:8e:5c:d2:a3:e0:57:2a:8b:18:6e:82:43:f9:a7:c3: 9b:e9:60:e3:52:22:f9:c4:a0:32:a3:9c:64:3c:14:e1:2e:49: 43:60:da:e9:95:ab:64:6d:b4:63:99:a0:f4:ca:b3:cb:a8:b0: 88:97:c5:1f:c1:cd:51:c1:e5:1d:46:12:ba:92:93:d0:83:14: 84:50:da:74:30:8e:06:83:53:1b:a3:ea:61:51:d2:cf:e9:ed: 0b:6c:29:05:35:8d:78:ab:ec:56:49:83:dd:43:7b:86:34:b5: 8d:13:63:86:88:71:1c:0f:b4:d3:05:f4:79:57:99:68:89:90: 81:cb:56:8e:25:54:91:c7:aa:5d:38:f6:dc:09:1f:7f:2d:f2: f7:41:3d:f8:2b:7c:8f:fa:13:1b:f8:1b:fd:7a:1b:c8:ae:30: c4:3a:ae:a2:05:9e:52:ee:b0:cf:b3:f3:8b:32:b6:b1:d2:1d: f2:01:ab:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xMDPC9Tep3H3yEcMziEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDFjZGEwMzAyYjgxM2ViMTQ1NTc5YWQ4MWY1ZWQ3ZDI5 YzAyMDkwHhcNMjUxMjE5MDQwMTA4WhcNMjUxMjIwMDQwMTA4WjAzMTEwLwYDVQQD EygzNzk2NmY0ZTM3YmQ3MTNmYzhhNTBlZjQ5NWQyNDk0OGYyYjVlZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdXdFHROMWvtV/MnPuNR1vZ3ARlk YEytdQerbqI2pYWB1SKvLVFOXiEGyoD8JHYrQWh3W3ASvaZXLAKwcBswU7WWtN0U 71wePHYVPM4AuhDnl3pVAocdJsZjZqE4f/uKanHQJmnlny+Or+zhjFQHhgymDxlr UKaajERm3gJPFvrkJKJBjgzrA5pGA/8eP/rjLdx3gihJqUGwPv4KPa1EF2n4gIPM K1BxziBIl2Pb77XW0fTfmqu6PtVHXzjPBHLHgQG5DenbOKs7tlX9kD48eobFJaV8 XJ3BjCR8+3H9rIiiftoAwWpLz46hMuLyPbISrmI4/Oj8btz8WksxtergnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeWb043vXE/yKUO9JXSSUjyte0dMB8GA1UdIwQY MBaAFM0BzaAwK4E+sUVXmtgfXtfSnAIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEt ZGQ3MjU1MGQ3OGFjLzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEtZGQ3MjU1MGQ3OGFj LzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh/9wAFc 1niNjrHVzeVtZhGVrP4q+RUeotkrs89vQJzB6j6h/ycEWSBdtq/ZSKVm3IJa7dSh WBrW5lkKRzZknqamoYLRB1eJ8u8WjlzSo+BXKosYboJD+afDm+lg41Ii+cSgMqOc ZDwU4S5JQ2Da6ZWrZG20Y5mg9Mqzy6iwiJfFH8HNUcHlHUYSupKT0IMUhFDadDCO BoNTG6PqYVHSz+ntC2wpBTWNeKvsVkmD3UN7hjS1jRNjhohxHA+00wX0eVeZaImQ gctWjiVUkceqXTj23Akffy3y90E9+Ct8j/oTG/gb/XobyK4wxDquogWeUu6wz7Pz izK2sdId8gGrAw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:06:08 2025 by rpki-client