This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json) Hash identifier: m2jvJsh8d9JfnIxseaQ3GmfzGPJ2OfFJLobaUzb/mEQ= Subject key identifier: BE:5B:E6:2D:C2:65:E6:DF:74:DF:22:A9:32:04:51:A6:33:F5:5C:48 Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Certificate serial: 019AF23F8371389EA95AD93B87D0C71152D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft Manifest number: 0A74 Signing time: Sat 06 Dec 2025 06:00:39 +0000 Manifest this update: Sat 06 Dec 2025 06:00:39 +0000 Manifest next update: Sun 07 Dec 2025 06:00:39 +0000 Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=) 2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=) 3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: IQCwUqQUExpnchHYe+EUBR7RxC0LSqHjQVeHxsMm3FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:83:71:38:9e:a9:5a:d9:3b:87:d0:c7:11:52:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Validity Not Before: Dec 6 06:00:39 2025 GMT Not After : Dec 7 06:00:39 2025 GMT Subject: CN=be5be62dc265e6df74df22a9320451a633f55c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:24:9e:ef:58:96:19:57:0f:40:e7:07:3a:72: 54:c5:1a:d2:ed:64:44:bf:bc:15:c4:33:ce:bc:6e: 67:66:e4:0e:99:2a:c8:b4:72:c6:f5:25:b1:64:31: 85:2d:41:74:1e:05:cf:26:c6:9a:b0:41:7d:a8:73: 15:d0:f6:27:32:63:d4:39:38:8e:2c:92:a0:e0:f5: d2:74:a2:5c:88:98:1e:d1:bd:26:f6:04:0f:26:3d: 08:1a:d2:ec:d8:7d:bf:e4:cf:45:33:81:1c:28:10: d9:6e:93:87:8c:42:85:a1:f1:bf:66:0f:53:1a:22: 8d:ff:5f:a0:ad:a9:ec:c7:30:55:6a:1f:15:01:1a: bc:3b:22:02:56:6d:b2:8a:5a:85:07:f2:12:23:7e: 1b:be:25:fa:05:17:bd:0f:96:cc:6b:c2:68:f6:5b: 07:4c:91:cc:6a:74:51:46:c7:3b:44:f1:04:3d:6f: 03:cf:c7:3e:e0:a5:7d:cb:aa:f5:e6:ab:94:8b:2f: d0:59:ac:65:21:d8:6c:a5:af:ec:62:ee:eb:80:a7: be:71:d0:45:81:3b:df:b8:a1:0c:f2:d3:50:11:ff: 1a:a7:12:16:93:69:76:a1:31:21:35:35:80:dc:54: 9c:40:d8:d5:a0:15:62:ed:df:87:c2:fd:05:9f:05: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5B:E6:2D:C2:65:E6:DF:74:DF:22:A9:32:04:51:A6:33:F5:5C:48 X509v3 Authority Key Identifier: keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8c:93:4a:29:77:86:c4:68:22:23:b3:2e:1b:4f:75:0b:b0: b8:2d:a4:17:e9:52:69:41:50:4e:6a:5b:3a:3a:e9:33:93:e5: 62:6e:6b:fd:13:6c:b9:b5:0a:3f:8a:38:dd:0e:92:88:c5:17: ca:c9:4e:06:72:4a:67:66:d6:1d:d9:ac:38:7e:f6:77:18:e4: df:c5:5d:58:1c:cd:21:30:c1:dd:8f:58:56:3a:5c:f2:99:39: ba:dd:38:70:84:e1:15:f8:5d:a3:fe:8c:03:99:89:53:b4:ce: bd:47:48:6d:d9:54:72:5d:a3:6e:7f:bc:6b:d0:1c:a6:0e:cf: 19:b3:af:35:0f:ba:42:85:00:25:3c:b3:6e:cd:22:4d:fd:a5: e1:30:0a:a0:4c:46:6d:0c:4f:0c:77:b8:9d:91:6f:85:b5:55: 49:01:aa:e5:be:b9:b4:55:df:8d:6c:e2:43:e2:d8:79:85:ff: 23:1d:e8:e9:bd:f1:34:46:f8:c1:80:67:5b:f3:85:b4:2e:08: d2:f3:cd:97:da:d9:44:92:a1:fd:1f:36:27:4e:8a:3d:14:c6: 69:59:38:c4:ed:54:6c:73:ea:36:51:09:0a:b2:cf:8e:06:7d: 5e:49:a3:4e:f4:6a:f1:be:b4:48:a8:ee:0e:2c:fb:37:2d:45: 00:d0:e2:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4NxOJ6pWtk7h9DHEVLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey ZTUxYTYwHhcNMjUxMjA2MDYwMDM5WhcNMjUxMjA3MDYwMDM5WjAzMTEwLwYDVQQD EyhiZTViZTYyZGMyNjVlNmRmNzRkZjIyYTkzMjA0NTFhNjMzZjU1YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSSe71iWGVcPQOcHOnJUxRrS7WRE v7wVxDPOvG5nZuQOmSrItHLG9SWxZDGFLUF0HgXPJsaasEF9qHMV0PYnMmPUOTiO LJKg4PXSdKJciJge0b0m9gQPJj0IGtLs2H2/5M9FM4EcKBDZbpOHjEKFofG/Zg9T GiKN/1+gransxzBVah8VARq8OyICVm2yilqFB/ISI34bviX6BRe9D5bMa8Jo9lsH TJHManRRRsc7RPEEPW8Dz8c+4KV9y6r15quUiy/QWaxlIdhspa/sYu7rgKe+cdBF gTvfuKEM8tNQEf8apxIWk2l2oTEhNTWA3FScQNjVoBVi7d+Hwv0FnwU0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5b5i3CZebfdN8iqTIEUaYz9VxIMB8GA1UdIwQY MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt MzQ1YjJhYjBkYjE4LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4 LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYyTSil3 hsRoIiOzLhtPdQuwuC2kF+lSaUFQTmpbOjrpM5PlYm5r/RNsubUKP4o43Q6SiMUX yslOBnJKZ2bWHdmsOH72dxjk38VdWBzNITDB3Y9YVjpc8pk5ut04cIThFfhdo/6M A5mJU7TOvUdIbdlUcl2jbn+8a9Acpg7PGbOvNQ+6QoUAJTyzbs0iTf2l4TAKoExG bQxPDHe4nZFvhbVVSQGq5b65tFXfjWziQ+LYeYX/Ix3o6b3xNEb4wYBnW/OFtC4I 0vPNl9rZRJKh/R82J06KPRTGaVk4xO1UbHPqNlEJCrLPjgZ9XkmjTvRq8b60SKju Diz7Ny1FANDi7A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:46 2025 by rpki-client