This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json) Hash identifier: Gdj3WBFaRs62kgwFMRLUDzpAdAwgLcbPyGo7/loBFS8= Subject key identifier: A3:E9:25:D5:88:33:85:8F:DE:AA:05:42:7E:C6:1B:14:6B:E3:FD:1C Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019B0FA562835AFB222686D08DB380CBF274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 23:00:55 +0000 Manifest this update: Thu 11 Dec 2025 23:00:55 +0000 Manifest next update: Fri 12 Dec 2025 23:00:55 +0000 Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=) 2: KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa (hash: Hj7QzIpBoHLwEb/zGFK9zyG2I+wY870ZVTkhagEh2v4=) 3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: YTQgiNH+h26CtAv3ZNH+dUbN953aAkR2kwbuEwn4Ngw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:62:83:5a:fb:22:26:86:d0:8d:b3:80:cb:f2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Dec 11 23:00:55 2025 GMT Not After : Dec 12 23:00:55 2025 GMT Subject: CN=a3e925d58833858fdeaa05427ec61b146be3fd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:f5:de:e6:da:ab:e0:ef:3d:53:e6:e6:de: 20:ff:c7:f4:da:8c:03:98:94:bc:59:94:99:52:38: ab:69:fd:dd:d0:7e:b2:e0:d6:5e:52:fa:f3:62:35: 2f:37:19:2a:f1:dc:08:cc:a2:49:95:1a:13:94:a7: c4:39:de:8b:54:55:f8:01:79:6d:17:d2:09:5d:8c: 4f:72:2d:28:51:3d:f5:ee:a4:24:cb:4d:7f:3d:cb: eb:7f:ea:83:4e:0b:d4:32:67:ec:41:28:e0:67:2c: a9:81:b4:af:d4:ad:57:0f:c0:e5:e2:54:de:5d:7c: d8:a8:2e:9d:70:17:b5:4e:81:07:2c:ef:4a:15:62: 35:71:a2:34:ae:f3:bf:f3:52:df:5a:8d:86:2c:4b: 1a:fb:06:9f:47:43:2e:47:00:81:7b:79:7b:ba:98: 16:28:af:26:6d:1a:61:a0:42:50:1d:4e:2e:4f:70: 96:40:f2:86:27:83:6d:1a:f4:2a:fa:c5:fd:63:58: b5:cf:9b:9a:8d:a9:cd:08:18:0f:7d:91:4b:99:d5: 54:05:b9:26:97:e1:3c:64:a8:6f:02:c2:2f:a8:f0: 54:a5:a5:57:46:38:d9:0b:dd:94:05:af:f0:2c:fd: 95:1b:2b:7c:f4:21:53:0c:c5:d7:f2:85:f8:6b:f4: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E9:25:D5:88:33:85:8F:DE:AA:05:42:7E:C6:1B:14:6B:E3:FD:1C X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:bb:85:4f:e8:8f:98:b7:e6:08:c3:08:dc:29:24:39:5b:ee: 9e:ee:58:5c:36:4f:e6:1c:08:10:20:68:2e:95:d2:2d:e8:c6: 2a:0f:c5:df:7f:97:10:40:4e:1d:76:11:b2:51:d9:79:5b:50: c2:72:f3:1f:45:cb:71:5f:d9:3f:79:4f:ba:20:ac:ca:df:71: 7a:e9:99:c6:70:7b:58:19:5d:aa:b9:2c:06:c5:a8:c5:10:5d: 36:93:77:cb:8a:d0:41:da:66:e8:ee:a4:71:84:f7:46:97:7f: 77:f6:59:1e:b0:18:d4:dd:d1:95:6b:07:3d:93:7f:ee:3d:ff: ea:26:ff:02:52:07:74:01:52:89:3b:ad:69:1c:65:04:67:2b: 84:70:99:18:dd:53:6f:fa:68:b8:57:18:d5:8a:d8:b6:1f:52: a8:2b:b3:75:b3:31:f6:d6:4e:62:58:c2:5c:5a:87:0f:36:84: fe:5d:47:7d:59:30:ed:93:0f:00:7d:87:ed:e6:00:76:7f:20: fe:9c:74:60:06:da:85:ff:f8:62:2c:e7:a8:8c:db:24:1c:ca: ce:6e:5f:ae:71:3b:f5:3e:15:f2:b8:98:e0:bd:16:67:89:f6: ef:6e:7b:29:fc:06:4c:98:98:73:57:a7:62:77:31:9f:6c:8b: 21:a7:29:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpWKDWvsiJobQjbOAy/J0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjUxMjExMjMwMDU1WhcNMjUxMjEyMjMwMDU1WjAzMTEwLwYDVQQD EyhhM2U5MjVkNTg4MzM4NThmZGVhYTA1NDI3ZWM2MWIxNDZiZTNmZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM313ubaq+DvPVPm5t4g/8f02owD mJS8WZSZUjiraf3d0H6y4NZeUvrzYjUvNxkq8dwIzKJJlRoTlKfEOd6LVFX4AXlt F9IJXYxPci0oUT317qQky01/Pcvrf+qDTgvUMmfsQSjgZyypgbSv1K1XD8Dl4lTe XXzYqC6dcBe1ToEHLO9KFWI1caI0rvO/81LfWo2GLEsa+wafR0MuRwCBe3l7upgW KK8mbRphoEJQHU4uT3CWQPKGJ4NtGvQq+sX9Y1i1z5uajanNCBgPfZFLmdVUBbkm l+E8ZKhvAsIvqPBUpaVXRjjZC92UBa/wLP2VGyt89CFTDMXX8oX4a/QzNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPpJdWIM4WP3qoFQn7GGxRr4/0cMB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1buFT+iP mLfmCMMI3CkkOVvunu5YXDZP5hwIECBoLpXSLejGKg/F33+XEEBOHXYRslHZeVtQ wnLzH0XLcV/ZP3lPuiCsyt9xeumZxnB7WBldqrksBsWoxRBdNpN3y4rQQdpm6O6k cYT3Rpd/d/ZZHrAY1N3RlWsHPZN/7j3/6ib/AlIHdAFSiTutaRxlBGcrhHCZGN1T b/pouFcY1YrYth9SqCuzdbMx9tZOYljCXFqHDzaE/l1HfVkw7ZMPAH2H7eYAdn8g /px0YAbahf/4YiznqIzbJBzKzm5frnE79T4V8riY4L0WZ4n27257KfwGTJiYc1en Yncxn2yLIacpwg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:40:09 2025 by rpki-client