This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json) Hash identifier: vet6V69vS19Sr2l6Qn9Sp3alb1cvfQip9ZTXxN8Rj0c= Subject key identifier: 0E:0A:5C:88:7C:1E:C6:6D:12:9D:AF:71:05:05:67:C8:77:03:E4:B7 Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b Certificate serial: 019B31C43AA811870F8A7096872F039222B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft Manifest number: 178A Signing time: Thu 18 Dec 2025 14:01:42 +0000 Manifest this update: Thu 18 Dec 2025 14:01:42 +0000 Manifest next update: Fri 19 Dec 2025 14:01:42 +0000 Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: 0dN2LsEUL6U2rwLNtB0GCWfSO2jc5JxJGeKB2eClsTE=) 2: qyP6ZOFyUvmIxsAwvIR1crurzkA.roa (hash: ATCZOmbWRgy8PLsqpH1t1OGoSYpKTwjDGworctuzaMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:3a:a8:11:87:0f:8a:70:96:87:2f:03:92:22:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b Validity Not Before: Dec 18 14:01:42 2025 GMT Not After : Dec 19 14:01:42 2025 GMT Subject: CN=0e0a5c887c1ec66d129daf71050567c87703e4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:f6:dc:61:46:1f:ad:43:b7:40:16:ae:74: 1b:9f:92:d3:dd:1f:54:9f:c0:5a:43:36:5c:0c:9b: b3:86:21:f1:0a:4d:d7:fe:33:c4:64:65:ab:0a:94: 4f:95:66:c3:7d:9b:c7:22:d6:aa:5a:78:f4:5b:d0: b9:28:79:8b:a1:60:7e:42:61:4a:64:af:40:00:32: 19:16:4a:c7:3f:03:e2:53:30:b2:81:46:bc:aa:cc: 94:fc:34:fe:87:fa:70:38:cf:34:a1:1e:ee:57:56: 51:44:99:7e:c2:19:b2:ef:9b:80:89:59:1d:5d:ce: c5:f3:08:e4:9b:d5:f4:92:db:83:eb:c7:3b:90:a7: 25:19:37:b2:02:7b:29:00:71:6a:d2:b3:17:db:17: 62:f4:62:58:25:c2:0b:e2:2e:32:5d:7f:1c:87:12: 7a:a7:7e:90:1e:50:6c:2c:a1:ff:45:46:00:1e:5c: 3b:de:6a:dd:0b:65:33:eb:eb:7b:aa:83:7f:5c:88: 8d:63:3e:ba:e4:22:f4:8f:30:d1:01:b8:8e:c6:70: fd:29:d9:fc:43:c3:84:7b:76:5b:9e:60:54:98:c0: 50:36:6f:a6:6a:15:4b:16:67:6e:d1:e5:15:57:3a: be:22:b6:8e:8e:20:d0:82:79:9b:35:da:5f:a8:4e: 6a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0A:5C:88:7C:1E:C6:6D:12:9D:AF:71:05:05:67:C8:77:03:E4:B7 X509v3 Authority Key Identifier: keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:da:2b:a4:7e:a4:63:d9:28:7b:ef:67:5d:c0:7e:3b:3b:f8: 8e:f7:dd:ee:d3:d2:fc:24:2f:83:ce:3d:cd:74:42:35:cf:9e: 84:81:bd:12:8a:6d:20:68:df:6b:dc:01:07:7f:de:38:1c:f0: f1:88:72:7a:47:d0:5a:22:59:f2:47:7e:72:88:1f:60:c2:d9: 1e:56:db:05:85:9a:21:c7:7a:3f:af:03:9a:2c:24:ed:7f:b9: 63:bb:07:d1:5f:20:0c:7a:3a:1f:bf:4c:80:08:e3:16:b5:cf: 27:8d:a5:87:48:00:0e:23:cc:44:73:b9:e7:85:42:f3:ce:e8: c9:ed:1f:6c:48:6c:ef:84:69:fe:7b:7a:15:0f:f2:39:f8:a7: 4f:70:56:91:44:55:e7:74:b4:8b:ab:39:90:2c:80:91:9c:8f: 78:c0:08:b9:51:5e:4d:96:08:69:50:61:43:33:64:96:b9:4a: dc:a6:06:94:19:4a:0f:41:f0:41:bc:10:4a:7c:df:95:5f:7b: 7a:b8:b9:b7:35:52:9e:88:33:06:58:3b:5c:47:e0:26:75:c3: 72:ae:6f:ac:11:0d:d1:92:8f:61:31:3c:85:d4:1e:c5:05:f2: 81:5d:3e:d5:4b:3a:ec:a8:1f:23:16:be:1d:e0:ce:27:f9:3a: d5:1f:35:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxDqoEYcPinCWhy8DkiKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh OWI4OGIwHhcNMjUxMjE4MTQwMTQyWhcNMjUxMjE5MTQwMTQyWjAzMTEwLwYDVQQD EygwZTBhNWM4ODdjMWVjNjZkMTI5ZGFmNzEwNTA1NjdjODc3MDNlNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLP23GFGH61Dt0AWrnQbn5LT3R9U n8BaQzZcDJuzhiHxCk3X/jPEZGWrCpRPlWbDfZvHItaqWnj0W9C5KHmLoWB+QmFK ZK9AADIZFkrHPwPiUzCygUa8qsyU/DT+h/pwOM80oR7uV1ZRRJl+whmy75uAiVkd Xc7F8wjkm9X0ktuD68c7kKclGTeyAnspAHFq0rMX2xdi9GJYJcIL4i4yXX8chxJ6 p36QHlBsLKH/RUYAHlw73mrdC2Uz6+t7qoN/XIiNYz665CL0jzDRAbiOxnD9Kdn8 Q8OEe3ZbnmBUmMBQNm+mahVLFmdu0eUVVzq+IraOjiDQgnmbNdpfqE5qewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4KXIh8HsZtEp2vcQUFZ8h3A+S3MB8GA1UdIwQY MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt MmI4MDM4MjgzMDE3LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3 LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtorpH6k Y9koe+9nXcB+Ozv4jvfd7tPS/CQvg849zXRCNc+ehIG9EoptIGjfa9wBB3/eOBzw 8YhyekfQWiJZ8kd+cogfYMLZHlbbBYWaIcd6P68Dmiwk7X+5Y7sH0V8gDHo6H79M gAjjFrXPJ42lh0gADiPMRHO554VC887oye0fbEhs74Rp/nt6FQ/yOfinT3BWkURV 53S0i6s5kCyAkZyPeMAIuVFeTZYIaVBhQzNklrlK3KYGlBlKD0HwQbwQSnzflV97 eri5tzVSnogzBlg7XEfgJnXDcq5vrBEN0ZKPYTE8hdQexQXygV0+1Us67KgfIxa+ HeDOJ/k61R81og== -----END CERTIFICATE-----Generated at Thu Dec 18 23:31:32 2025 by rpki-client