This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json) Hash identifier: uh7hpqL+pYsdhlUAhZjFaDm7JZOaSKp67aNwE4Bw3zc= Subject key identifier: A9:F4:CF:BB:39:28:A4:5F:CB:FA:DC:1A:A2:BE:4A:C7:25:53:E4:87 Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Certificate serial: 019AF3521F501C73AFE4BE3042FFB9A16769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 11:00:36 +0000 Manifest this update: Sat 06 Dec 2025 11:00:36 +0000 Manifest next update: Sun 07 Dec 2025 11:00:36 +0000 Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=) 2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=) 3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: nTvufJhtB5pfMlSN41ekmdg6n3PAJsMEOxFHt+k+kr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1f:50:1c:73:af:e4:be:30:42:ff:b9:a1:67:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Validity Not Before: Dec 6 11:00:36 2025 GMT Not After : Dec 7 11:00:36 2025 GMT Subject: CN=a9f4cfbb3928a45fcbfadc1aa2be4ac72553e487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:15:ec:6b:dc:26:d2:cd:90:66:5f:f1:c8: 7d:3f:55:f4:3b:ed:3e:45:c3:5c:0c:ed:c2:2a:2c: 22:aa:8b:8d:21:32:51:e8:39:99:a3:46:f0:12:c9: 69:11:52:05:dd:1a:34:57:20:9e:39:97:f1:b7:1c: ae:71:eb:6c:b3:7e:7b:b9:aa:90:71:18:35:67:f0: 1d:50:7f:da:83:58:6f:65:3b:22:67:d5:56:20:4d: 72:29:b0:cc:25:43:d1:99:f9:44:fd:27:5a:46:e8: 89:28:9c:1a:ca:e2:b2:ff:8f:a9:8a:4a:9e:18:0a: 33:d5:c8:4a:ab:c9:5d:56:d3:20:28:5c:3b:d4:37: 94:51:a5:b6:a6:05:d7:d1:b8:b0:57:d7:5a:35:72: 8a:9c:3e:fb:ee:61:a6:d0:3d:a1:44:8d:97:fa:6d: 8e:07:0b:91:5f:08:3a:1d:b3:f8:56:01:15:be:ef: 60:de:f5:7a:a3:10:e7:79:f6:e6:ab:96:e1:af:a0: 4f:c4:81:25:e5:83:38:1d:7a:65:77:1d:e2:5e:44: 81:94:5b:32:96:80:31:cd:b3:08:53:89:fd:c5:22: b0:03:91:97:f4:56:d6:7c:a1:c4:65:eb:31:5d:0a: 2e:37:d9:80:c9:53:2e:02:46:16:b9:b3:24:95:9b: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:CF:BB:39:28:A4:5F:CB:FA:DC:1A:A2:BE:4A:C7:25:53:E4:87 X509v3 Authority Key Identifier: keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:eb:f8:48:a8:8c:a4:6c:d4:e8:f1:0d:e3:a1:8f:1d:95:87: 96:61:e3:7f:54:90:d3:b8:2b:73:c8:12:41:02:f6:6f:96:2c: f4:4f:5d:e6:e0:2c:52:b8:1c:ce:44:ea:84:47:fc:3d:3c:af: ac:47:49:5a:22:e9:5d:85:7a:ae:fc:43:4e:e5:fb:79:43:ba: fa:88:f4:92:3a:b7:72:f5:18:25:e7:f0:b1:02:63:1b:c1:5e: e0:a5:08:78:ec:0f:67:42:54:7f:33:d6:82:bd:5d:50:26:ac: 8b:0d:98:db:10:ca:da:52:95:dc:85:ef:91:ba:68:fc:f2:13: 60:c2:fd:c6:1a:ab:55:2a:f8:65:02:6a:ef:b4:f5:eb:8f:b7: 74:e2:3c:fd:e5:b5:e7:7e:53:85:89:45:26:0e:5c:cf:6a:59: c0:02:82:1b:4e:43:9f:48:5e:7f:c7:76:0d:6a:d8:4d:eb:fe: a6:01:d2:79:82:76:93:68:44:16:8a:79:e1:4b:b3:b2:95:f3: ad:06:02:39:35:6a:af:34:42:d1:be:66:5d:e2:bf:86:b5:d9: cd:30:b5:63:27:a0:8a:16:1a:38:1f:ab:cd:8f:68:44:83:23: 7b:be:83:2e:5b:b9:c8:f7:1a:4e:04:22:a4:86:06:a8:d3:a2: fe:81:1f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUh9QHHOv5L4wQv+5oWdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk ZDQ5NTQwHhcNMjUxMjA2MTEwMDM2WhcNMjUxMjA3MTEwMDM2WjAzMTEwLwYDVQQD EyhhOWY0Y2ZiYjM5MjhhNDVmY2JmYWRjMWFhMmJlNGFjNzI1NTNlNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscV7GvcJtLNkGZf8ch9P1X0O+0+ RcNcDO3CKiwiqouNITJR6DmZo0bwEslpEVIF3Ro0VyCeOZfxtxyucetss357uaqQ cRg1Z/AdUH/ag1hvZTsiZ9VWIE1yKbDMJUPRmflE/SdaRuiJKJwayuKy/4+pikqe GAoz1chKq8ldVtMgKFw71DeUUaW2pgXX0biwV9daNXKKnD777mGm0D2hRI2X+m2O BwuRXwg6HbP4VgEVvu9g3vV6oxDnefbmq5bhr6BPxIEl5YM4HXpldx3iXkSBlFsy loAxzbMIU4n9xSKwA5GX9FbWfKHEZesxXQouN9mAyVMuAkYWubMklZuEHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKn0z7s5KKRfy/rcGqK+SsclU+SHMB8GA1UdIwQY MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3 LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOv4SKiM pGzU6PEN46GPHZWHlmHjf1SQ07grc8gSQQL2b5Ys9E9d5uAsUrgczkTqhEf8PTyv rEdJWiLpXYV6rvxDTuX7eUO6+oj0kjq3cvUYJefwsQJjG8Fe4KUIeOwPZ0JUfzPW gr1dUCasiw2Y2xDK2lKV3IXvkbpo/PITYML9xhqrVSr4ZQJq77T164+3dOI8/eW1 535ThYlFJg5cz2pZwAKCG05Dn0hef8d2DWrYTev+pgHSeYJ2k2hEFop54UuzspXz rQYCOTVqrzRC0b5mXeK/hrXZzTC1YyegihYaOB+rzY9oRIMje76DLlu5yPcaTgQi pIYGqNOi/oEfBw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:46 2025 by rpki-client