This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json) Hash identifier: fXJ3ud5R9XK65VuBtNNoSZ78NldzAB79QBYNE2oAsyo= Subject key identifier: AF:2E:FB:C4:C1:CC:56:B9:4D:88:74:81:1C:9D:4D:4E:84:33:BE:21 Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Certificate serial: 019B2B53FE2F0194BD0F8869460E809D6810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft Manifest number: 1711 Signing time: Wed 17 Dec 2025 08:01:23 +0000 Manifest this update: Wed 17 Dec 2025 08:01:23 +0000 Manifest next update: Thu 18 Dec 2025 08:01:23 +0000 Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=) 2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=) 3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: SRUoHFwpz4cVElk9YD94kz+T8E8bNkz/12AQbkZ/1ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:fe:2f:01:94:bd:0f:88:69:46:0e:80:9d:68:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Validity Not Before: Dec 17 08:01:23 2025 GMT Not After : Dec 18 08:01:23 2025 GMT Subject: CN=af2efbc4c1cc56b94d8874811c9d4d4e8433be21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:77:d0:88:e8:43:6b:52:98:2a:5a:b6:6e:16: 98:99:be:7b:ea:77:af:4e:04:74:16:f2:e9:1a:d5: 4e:35:a2:b1:37:47:d8:d7:53:d8:ba:3c:31:36:13: 61:ed:cc:7a:76:66:47:d4:2d:5d:7b:11:f9:35:eb: 78:4d:6a:d9:47:d0:3a:c9:64:c6:8d:aa:ca:94:f9: 91:ac:63:37:63:c2:7f:3a:78:da:a9:11:be:ba:78: f9:8b:f1:e3:6c:0b:a6:17:8f:06:e9:07:6d:cb:e3: 4d:20:ea:ff:d9:e5:1b:2c:10:b4:31:0d:68:a2:08: 46:3b:20:ef:6f:ad:ca:38:a5:02:1c:85:27:45:9e: 69:7b:5b:40:bc:cf:a4:d6:e0:f7:4c:62:91:c5:fc: 6d:ee:c5:28:be:d6:33:5e:d0:5e:db:c2:d6:93:39: 90:d7:94:8f:30:b4:cb:31:6b:f1:c2:08:85:e6:78: 85:a9:41:29:fd:96:02:de:dc:a8:b5:28:84:8d:1a: 25:6c:58:d2:e5:3b:08:72:e1:5f:13:3c:ff:ee:90: e7:d9:ea:3c:3d:ea:27:3f:e0:37:8e:9f:5f:0e:f2: ae:5d:de:ae:60:f3:b5:d6:37:a4:de:93:bf:02:81: e0:2c:2d:b8:05:42:ee:09:1d:fe:09:b1:a5:0a:c5: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:FB:C4:C1:CC:56:B9:4D:88:74:81:1C:9D:4D:4E:84:33:BE:21 X509v3 Authority Key Identifier: keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1d:78:b6:fb:a9:e3:41:ad:a0:1c:21:a3:c7:5c:2c:17:d1: b3:a5:58:a0:40:4c:49:13:8d:47:c1:49:19:5e:76:e6:7b:28: 01:2d:15:c2:96:78:97:6e:c0:29:3d:fe:48:75:74:eb:e7:cb: f1:8d:2a:9d:dc:c7:ad:41:cf:10:da:76:41:ec:54:e4:f3:99: 6c:1c:d9:fb:65:81:97:30:f5:08:f2:ae:71:55:1d:79:21:11: bd:93:68:6c:c9:63:04:8c:9b:7c:49:1c:de:87:41:87:06:a2: 7a:d0:0b:37:75:cd:5d:a7:88:83:26:f3:d5:c1:f9:7c:b5:92: b5:f0:2a:72:81:c5:0a:17:23:bb:21:17:fe:82:f0:ac:d1:e0: cd:59:a8:bb:e7:da:f2:42:36:ac:f3:ae:96:c6:f4:9a:cd:01: 6e:30:0e:c3:d5:32:e5:03:12:83:ce:3f:ee:ed:a5:4b:00:ba: 2b:b8:54:da:2c:6d:c9:ff:fa:aa:1a:d4:e4:61:cb:8c:c3:1b: 7d:ec:85:32:77:5e:90:97:7c:41:c0:e5:55:e1:d6:80:7a:51: 60:79:ae:38:24:7b:94:33:b1:29:6a:58:be:08:f8:5e:31:7c: 1e:71:98:c9:b2:77:57:cd:1e:43:4d:3c:93:15:1e:20:57:f2: c5:b6:3e:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU/4vAZS9D4hpRg6AnWgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk ZDQ5NTQwHhcNMjUxMjE3MDgwMTIzWhcNMjUxMjE4MDgwMTIzWjAzMTEwLwYDVQQD EyhhZjJlZmJjNGMxY2M1NmI5NGQ4ODc0ODExYzlkNGQ0ZTg0MzNiZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XfQiOhDa1KYKlq2bhaYmb576nev TgR0FvLpGtVONaKxN0fY11PYujwxNhNh7cx6dmZH1C1dexH5Net4TWrZR9A6yWTG jarKlPmRrGM3Y8J/OnjaqRG+unj5i/HjbAumF48G6Qdty+NNIOr/2eUbLBC0MQ1o oghGOyDvb63KOKUCHIUnRZ5pe1tAvM+k1uD3TGKRxfxt7sUovtYzXtBe28LWkzmQ 15SPMLTLMWvxwgiF5niFqUEp/ZYC3tyotSiEjRolbFjS5TsIcuFfEzz/7pDn2eo8 PeonP+A3jp9fDvKuXd6uYPO11jek3pO/AoHgLC24BULuCR3+CbGlCsU/5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8u+8TBzFa5TYh0gRydTU6EM74hMB8GA1UdIwQY MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3 LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh14tvup 40GtoBwho8dcLBfRs6VYoEBMSRONR8FJGV525nsoAS0VwpZ4l27AKT3+SHV06+fL 8Y0qndzHrUHPENp2QexU5POZbBzZ+2WBlzD1CPKucVUdeSERvZNobMljBIybfEkc 3odBhwaietALN3XNXaeIgybz1cH5fLWStfAqcoHFChcjuyEX/oLwrNHgzVmou+fa 8kI2rPOulsb0ms0BbjAOw9Uy5QMSg84/7u2lSwC6K7hU2ixtyf/6qhrU5GHLjMMb feyFMndekJd8QcDlVeHWgHpRYHmuOCR7lDOxKWpYvgj4XjF8HnGYybJ3V80eQ008 kxUeIFfyxbY+Lw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:33 2025 by rpki-client