This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier: XvMtnc0wd8O6VmkYFtnCGSZ7Rkc5bzLvlF42FHl1Fto=
Subject key identifier: A0:18:83:19:9D:EC:0B:53:29:11:06:17:E5:E1:28:DA:B7:EA:0F:F1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019AF3C07B887AEF38F6B4F74647B53190E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number: 14A7
Signing time: Sat 06 Dec 2025 13:01:09 +0000
Manifest this update: Sat 06 Dec 2025 13:01:09 +0000
Manifest next update: Sun 07 Dec 2025 13:01:09 +0000
Files and hashes: 1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=)
2: 2yRk6SsZyzxd97urdmhc8NDfCuM.roa (hash: aBtxwiV85yKOVZA6goNJCJM1LR9KIwykly7UnkM0oEA=)
3: 4UiXhtETLKTMkHz3S-uQaXznz_E.roa (hash: gnGy/YUjs4JsCA+d2xBhiOFhMv2kiG5pO4relezItQI=)
4: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=)
5: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=)
6: 7FPmotCR-R9wzv_XbMtnjpG5dwQ.roa (hash: wZrYOUuRAIwSPFEINw7jG0Anj/wWBpx6jCtbZE+QjZE=)
7: 7Vg026GilsAdwwmReGqAOt7uEBk.roa (hash: o2eCEEPEnYtuReTatMEMg5W6/8oDYNB6JVy+I8yx6Gk=)
8: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=)
9: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=)
10: 9X4NbzOONT_zL9f7V32Lk3r2UPc.roa (hash: ePj/TJrlBihPQ55mW/QDsw9mwXJbpJXSQABPJ3xbBZw=)
11: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=)
12: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=)
13: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=)
14: CKlFzis5ddR6idDvEBBrH0Xa6vo.roa (hash: czH8er4Hjx+q0WmCslCOyi041nxgXD53Afz3H8wneHo=)
15: DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa (hash: 5tBAqqFCun3qMuyt3hnlLRBwJNJimso2u+1bTRY1BKk=)
16: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=)
17: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=)
18: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=)
19: Ff6PjCKYxksSpT1f0K8hi0k7er8.roa (hash: VflQNvUfdCGYwmZ2tB2YKnhTx72Pgu7vVHPUvzvijoU=)
20: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=)
21: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=)
22: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=)
23: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=)
24: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=)
25: KFUGUcvmIlpq5q-ckZr_I-ACd8A.roa (hash: AxeqJ69DtzRoZ5va8UeQbeRY3eDeB2zp97Cos2PtkpE=)
26: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=)
27: LtbBjOx_hJolvH_RVCG_bLfXxFE.roa (hash: aDMsbWlPq04kYD/9xZ5j12OT+fpd9/fPTH0UbEVWOEo=)
28: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=)
29: N3BMqylkh9bvWHMwFiLf-gKt05c.roa (hash: hbID2qn5kDk4YQKXpd21YknUsj5EZcvRK/uXiyYmeQs=)
30: NqEDSyCU-4MS42jFZzpvAT-HI8I.roa (hash: 9FbUsU13J/GmaYBC86KZ74ejALBebmKkz0F4iRu7cz4=)
31: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=)
32: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=)
33: QHyMXzRpY79TSI5ErCSD6tj6Ocw.roa (hash: BWQGmwoOMlvewCbObDq4CJcmSEL6GFX//gAeLk6lb8w=)
34: QWF8iPmkcL6NOooL8tPM7IMPoUo.roa (hash: bzBipE6wAO2T/yEjaOJi1+OmhaU74b59cVPkctxln9Y=)
35: RK1O-a2mHIy_nQ5roRSHFEMArKI.roa (hash: UJRbqwcH/HImxZn6bg73LlWy7wN6vSCErzYOKPapKao=)
36: UFM7V0QaEQk5iMcLePQNtrCnBuU.roa (hash: 1KCm2LnslOt1Go2n1GlY4KXw/ywbLjggHVGzM3KYrZI=)
37: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=)
38: Ya5-h2ETMjyWDhCB2tvxKRLAqsQ.roa (hash: coLWeAGOhf5VNkz6Fd+O+ZH/zyRAc6w/wTvM49zi9Dc=)
39: YoHOUTeXKgXzP9JZE_T3K8vbxhE.roa (hash: mFP2MB6CpHFOvJE3w4bZCsZ+Qgr70MagtyzLIYwSNiM=)
40: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=)
41: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=)
42: bjRr7IWjofFhY5UaTK36gjVTmJw.roa (hash: 8Uet42He0JUZ3FcDIiHrwMRWDjvtV5w/CbqK7W2EWwk=)
43: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=)
44: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=)
45: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=)
46: eg20MWLn5BnzbPm-JB9g3jwd7Ik.roa (hash: XZYTz30xSkWfeR5v/o3m5U51K3z6T9Ox5jbcOv8+FtI=)
47: exmOhRi-6QM5QMwrvTDO0PpHlU8.roa (hash: 4Qp1/ibvMkLGC74o2WsGwKqLvwHH0XDSfh5c29oEHq0=)
48: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=)
49: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=)
50: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=)
51: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=)
52: n8KrkCOeu372DfA7gb7CXyt4MkA.roa (hash: m6YplWM+G0Bt8JF0DAD2p3UhAQO9YK+EkRMI1CUMIoE=)
53: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=)
54: pKvjwRUlHi2ipoRbHuJZKjovPsA.roa (hash: tADGhzzcq52xmuNgy60XvYvU5fuD40EAiCENEdVP0Dc=)
55: sw-YdJtO7LqDRDnxiy4Ot9H11mg.roa (hash: x7kfkuvHS2v5S0oP4sdYGQmb6qEX7ZB8cPgf3bWxfMI=)
56: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=)
57: uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa (hash: +A1T+WhnOHYIEIZ7mEVu1afaFwmjRRKYqLMFQ3ckAmE=)
58: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=)
59: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=)
60: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=)
61: zApogsM3wQj9narTfcznfWq1dXo.roa (hash: 1tg1q8PEOxBvvA0QAQP8MTd3rfrMbFvAfVfpg3Is4go=)
62: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: zovwM6MVPxvfe5FsJGMOc1DwPmERy5XT4IlRARiH/b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:7b:88:7a:ef:38:f6:b4:f7:46:47:b5:31:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 6 13:01:09 2025 GMT
Not After : Dec 7 13:01:09 2025 GMT
Subject: CN=a01883199dec0b5329110617e5e128dab7ea0ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:14:0c:40:8c:c2:c2:c4:af:bd:19:df:01:
59:7d:54:a7:5a:e0:d3:95:31:12:1e:a3:2d:35:f8:
21:34:f5:1b:be:31:84:78:4b:dd:b8:f4:bc:07:f1:
d2:de:9b:87:7a:08:af:36:98:03:13:a4:03:00:38:
c6:dc:33:cb:f7:53:14:be:d6:f2:d8:bb:93:40:71:
30:eb:34:2a:da:f6:7d:36:b3:52:ba:09:cc:b9:92:
7d:d6:cf:15:cd:3d:3c:1f:03:f7:6e:76:d8:dd:c6:
25:da:e8:5e:a6:01:e2:14:9c:91:2d:4c:2a:fa:e8:
a1:fd:f8:10:a6:e3:54:7e:6b:a8:05:7f:3e:92:d5:
15:7b:69:6e:ca:8e:40:0f:b6:31:cb:9e:73:ea:bf:
3a:14:f7:64:01:67:8e:72:9e:19:6a:be:12:47:03:
76:46:fa:04:34:6b:00:4a:4c:d1:28:d6:8c:12:c1:
21:f3:4d:6c:74:dc:ef:f9:c3:af:9b:fc:89:c8:37:
44:fe:94:bc:a0:65:0f:f7:1f:88:4c:e5:98:49:5d:
ee:84:70:07:fb:12:d6:8d:99:20:51:88:3e:3e:83:
cd:49:29:95:6a:13:d3:ba:f3:99:5e:23:02:38:68:
4e:cc:54:93:3b:3d:f6:8e:03:94:d8:6a:87:26:c5:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:83:19:9D:EC:0B:53:29:11:06:17:E5:E1:28:DA:B7:EA:0F:F1
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0f:c3:f3:1a:88:09:e0:a8:ea:09:21:04:2f:aa:c9:23:d8:
ff:a4:0c:b8:47:43:1a:e2:67:cf:44:0b:1c:20:ea:73:f5:14:
dc:e1:69:70:94:a4:a6:ba:6a:c1:dd:61:5a:dc:06:aa:89:d6:
18:66:22:92:9a:32:e2:ab:39:66:bb:8b:9a:16:c0:09:dc:46:
ad:ed:a4:05:1d:00:56:a2:c6:3c:99:80:31:96:b2:24:b9:6c:
43:31:35:cb:27:99:4b:ef:20:f1:0c:0a:19:59:69:e3:14:01:
f0:24:29:7a:4d:77:3d:32:7d:cb:b4:e6:89:47:4c:b7:50:a4:
5b:0a:90:7e:d9:9e:51:59:7b:c4:97:15:d4:57:63:a5:47:55:
d2:f3:61:08:4f:92:3b:ce:9b:f5:5f:9f:60:c3:c7:86:ec:6a:
49:c7:51:b7:bf:97:03:8e:ff:54:a3:05:c3:6c:36:92:8c:de:
29:d2:66:79:88:41:d6:46:34:c1:78:04:d9:59:b6:8c:fa:7c:
be:a2:d0:71:ea:32:e1:4d:78:e9:54:a2:97:66:97:05:a8:b3:
69:6d:4f:85:4e:1e:6d:94:a0:57:c9:2b:1d:65:ae:39:ae:1b:
78:88:1e:eb:86:43:69:76:4b:df:6b:63:1d:3a:db:92:19:5f:
9c:74:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:30:08 2025 by rpki-client