This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json) Hash identifier: tgNALwfJa4hgYWaA+OkdqzwgstkuS+fe94kI8em9EPI= Subject key identifier: C3:62:92:F9:E0:36:19:8A:70:8F:A1:75:A9:A0:A6:5F:F5:A6:DC:FB Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59 Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959 Certificate serial: 019AF1D1A9F845FB1923F6D50E607932F551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft Manifest number: 02F6 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: 69Rv1gXcvuzCZG5dxNVo5nZyHJeHzGJRtdJyMhCmpx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:f8:45:fb:19:23:f6:d5:0e:60:79:32:f5:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=c36292f9e036198a708fa175a9a0a65ff5a6dcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:c6:7f:e6:42:52:02:52:44:29:12:78:fa: 49:a7:d6:dc:5d:a6:68:13:67:25:b7:23:b9:2b:1d: 48:c7:d9:66:2c:0d:dd:dd:ab:e3:85:da:a6:57:80: 9b:df:e9:96:f7:24:6a:ac:d2:a9:1e:c1:9d:f5:c0: a4:0d:8d:e2:40:49:5c:38:b3:c0:0b:b5:24:85:08: 8b:28:14:10:91:bc:9b:49:63:c9:07:74:56:3d:82: 71:f2:9d:da:ea:8b:40:cc:14:84:a3:7c:39:b5:7e: 6b:0e:7b:a4:09:ec:bb:b2:79:e9:05:31:d6:c4:1a: e5:a3:c5:45:d4:68:39:8a:78:2c:58:7b:aa:ee:98: be:7e:0a:3d:b0:a6:54:86:41:de:b7:a5:c7:ed:5f: c3:90:52:00:d1:a2:8a:88:89:f8:64:ae:e6:e8:65: 67:0d:c3:3d:4f:a3:91:86:3e:f4:b9:cf:a4:ec:88: e6:a1:1c:4f:10:d8:3b:53:06:f6:55:90:e7:84:1d: 11:9a:34:07:9e:45:c8:d2:35:f7:17:b0:5f:18:f6: 82:cf:77:b8:c1:91:fe:d9:ad:24:72:e2:45:b6:73: b8:c4:af:2c:c0:63:f2:1c:74:73:fa:f7:79:9a:91: d4:b7:b8:c7:80:7e:3d:9d:7a:86:66:0d:26:8b:b0: d7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:62:92:F9:E0:36:19:8A:70:8F:A1:75:A9:A0:A6:5F:F5:A6:DC:FB X509v3 Authority Key Identifier: keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:f2:17:12:67:0e:33:27:f0:0a:8b:c7:90:2d:00:07:59: ad:a6:2d:22:ef:78:6b:70:19:79:39:e4:a3:cb:3c:7b:74:95: 9f:ae:d2:38:48:5a:31:a8:df:f4:96:80:05:ec:fc:7d:cc:c9: 27:6b:44:60:73:49:b6:f3:f0:b6:0b:be:74:da:6d:60:60:8f: 50:79:58:ab:a6:a8:d9:15:0e:02:af:1e:ae:90:24:31:82:d2: e3:49:90:2c:f7:6c:3e:c6:c4:21:14:e1:a6:21:3e:a6:5d:70: 0d:a2:d5:57:a2:71:36:2e:c2:f7:dd:1e:ba:0e:c1:e5:3b:71: 31:71:09:db:68:66:bd:38:67:9c:19:ae:76:29:42:e5:4c:7d: 0c:03:bd:92:3f:8a:33:e6:3b:75:a2:e9:17:63:e1:20:01:9b: 4f:f2:c7:d3:23:3b:9d:0a:8e:09:c2:5d:33:45:93:1b:39:13: 04:a7:1d:c8:e2:eb:7a:d1:39:a4:30:bc:ca:87:e5:09:f8:5e: 47:f0:f1:d9:65:b0:b5:d1:58:48:1b:7c:6a:67:b5:07:30:61: 3a:43:ab:53:4b:e0:cc:d4:61:75:41:3b:a5:06:b8:3e:e2:ba: f4:a6:98:b6:a6:22:71:7d:fc:18:3c:02:e0:e2:af:60:79:9e: d6:3d:4a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0an4RfsZI/bVDmB5MvVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTdjY2QyYWVjMGJiZWZjNjM1MDg1NjUxMmE5NWZlMDIy NTk5NTkwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EyhjMzYyOTJmOWUwMzYxOThhNzA4ZmExNzVhOWEwYTY1ZmY1YTZkY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MHGf+ZCUgJSRCkSePpJp9bcXaZo E2cltyO5Kx1Ix9lmLA3d3avjhdqmV4Cb3+mW9yRqrNKpHsGd9cCkDY3iQElcOLPA C7UkhQiLKBQQkbybSWPJB3RWPYJx8p3a6otAzBSEo3w5tX5rDnukCey7snnpBTHW xBrlo8VF1Gg5ingsWHuq7pi+fgo9sKZUhkHet6XH7V/DkFIA0aKKiIn4ZK7m6GVn DcM9T6ORhj70uc+k7IjmoRxPENg7Uwb2VZDnhB0RmjQHnkXI0jX3F7BfGPaCz3e4 wZH+2a0kcuJFtnO4xK8swGPyHHRz+vd5mpHUt7jHgH49nXqGZg0mi7DX1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNikvngNhmKcI+hdamgpl/1ptz7MB8GA1UdIwQY MBaAFM6nzNKuwLvvxjUIVlEqlf4CJZlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMt MzdmNTQ0NzZhOWQ3LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMtMzdmNTQ0NzZhOWQ3 LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMLyFxJn DjMn8AqLx5AtAAdZraYtIu94a3AZeTnko8s8e3SVn67SOEhaMajf9JaABez8fczJ J2tEYHNJtvPwtgu+dNptYGCPUHlYq6ao2RUOAq8erpAkMYLS40mQLPdsPsbEIRTh piE+pl1wDaLVV6JxNi7C990eug7B5TtxMXEJ22hmvThnnBmudilC5Ux9DAO9kj+K M+Y7daLpF2PhIAGbT/LH0yM7nQqOCcJdM0WTGzkTBKcdyOLretE5pDC8yoflCfhe R/Dx2WWwtdFYSBt8ame1BzBhOkOrU0vgzNRhdUE7pQa4PuK69KaYtqYicX38GDwC 4OKvYHme1j1KMw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:11 2025 by rpki-client