This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json) Hash identifier: omXq9xHkHcPoxSPvtTUR9taaevkeRRH27D4opnJoKUk= Subject key identifier: 6A:7E:8C:86:87:AE:7E:3A:33:02:4D:7C:D7:4F:13:B2:AA:6F:B2:41 Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Certificate serial: 019B34C4A6A4FDD73DD91366D20FB9B40FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 04:01:01 +0000 Manifest this update: Fri 19 Dec 2025 04:01:01 +0000 Manifest next update: Sat 20 Dec 2025 04:01:01 +0000 Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=) 2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: Ym/z5v+ZaAXt9dMqTSNOQAMOqMBDKkbl7NGTWsHEHnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:a6:a4:fd:d7:3d:d9:13:66:d2:0f:b9:b4:0f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Validity Not Before: Dec 19 04:01:01 2025 GMT Not After : Dec 20 04:01:01 2025 GMT Subject: CN=6a7e8c8687ae7e3a33024d7cd74f13b2aa6fb241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:de:54:e8:57:f0:5d:37:7e:f8:44:6a:af: 47:10:ee:e3:cf:dd:f0:12:b9:12:ec:a2:77:52:7a: cf:98:bf:84:ef:03:15:24:fe:74:db:1b:82:51:50: bb:98:81:20:17:c2:18:0d:fe:d0:9b:fd:fa:10:25: 99:7c:03:80:d1:79:bf:8d:fd:01:a8:41:2c:17:a1: b1:78:50:d2:65:34:68:16:06:24:1d:55:7b:06:b8: 85:a6:4e:d4:9c:86:1b:f2:c9:48:5d:b2:6c:7f:f1: 3c:60:96:db:e2:c7:62:6b:67:75:80:1f:93:fd:b3: 4f:1a:9b:53:19:7f:d2:0d:a5:40:23:53:c9:6f:4c: 51:ad:5f:67:10:76:62:98:56:34:bc:ff:8b:aa:1b: 81:73:5e:66:b4:ba:01:12:7c:fc:62:6d:a1:09:38: d3:cd:8e:b9:33:d5:4b:ec:43:c6:09:97:a7:0f:6d: ef:19:89:20:b6:93:cb:7d:37:84:d8:a7:6f:80:b3: 11:33:8e:c8:e5:ab:a1:22:57:12:b4:41:dd:fd:40: a1:6d:ec:78:c9:ab:00:23:09:97:72:18:20:eb:e0: 8c:62:7a:d5:34:73:f6:20:51:39:73:08:ea:a8:4d: 11:fe:69:c7:51:fa:9b:8c:eb:0c:3c:82:b7:29:88: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:8C:86:87:AE:7E:3A:33:02:4D:7C:D7:4F:13:B2:AA:6F:B2:41 X509v3 Authority Key Identifier: keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:af:6f:50:f5:65:dc:b8:12:3b:7d:49:91:34:05:3b:0b:6f: c5:b0:6a:98:c2:5e:57:5a:f3:99:2c:5b:21:30:44:7e:51:4d: 40:58:cc:43:13:81:d0:bf:3b:a8:af:86:81:89:26:3d:57:4f: 67:f9:af:0e:05:a2:34:82:d2:d1:18:63:4b:51:f1:c0:c3:5c: 9f:2b:9d:cb:cb:08:f9:d5:56:ea:bb:ee:cb:fb:b1:01:ce:76: ea:da:13:88:86:f8:96:2f:d6:d7:ba:46:82:bc:c5:cc:33:cf: 26:d9:e8:b4:9d:5e:62:ce:33:be:2c:0f:2b:ec:5c:a2:ed:4b: fc:a5:a9:db:98:db:9f:d3:85:cc:1c:53:eb:72:4a:33:6c:88: bf:d2:93:aa:09:97:e1:61:70:92:2b:64:1d:79:73:28:a5:97: 88:9d:05:6f:cf:39:27:ee:ab:69:a4:42:7b:b9:2b:6a:99:11: 98:66:16:e8:00:48:ac:8e:11:9e:31:7b:15:6c:e4:7a:86:ea: 0e:9c:00:97:02:49:31:27:19:07:77:0e:a1:59:ac:79:6b:ac: 7d:65:4c:85:e3:6f:ab:51:ab:ee:40:6f:cf:e2:f8:44:91:2b: 43:cf:1d:50:85:6e:54:9b:96:d1:38:b2:88:48:c6:3e:32:a8: 09:07:58:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xKak/dc92RNm0g+5tA/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk OWJlMDUwHhcNMjUxMjE5MDQwMTAxWhcNMjUxMjIwMDQwMTAxWjAzMTEwLwYDVQQD Eyg2YTdlOGM4Njg3YWU3ZTNhMzMwMjRkN2NkNzRmMTNiMmFhNmZiMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4/eVOhX8F03fvhEaq9HEO7jz93w ErkS7KJ3UnrPmL+E7wMVJP502xuCUVC7mIEgF8IYDf7Qm/36ECWZfAOA0Xm/jf0B qEEsF6GxeFDSZTRoFgYkHVV7BriFpk7UnIYb8slIXbJsf/E8YJbb4sdia2d1gB+T /bNPGptTGX/SDaVAI1PJb0xRrV9nEHZimFY0vP+LqhuBc15mtLoBEnz8Ym2hCTjT zY65M9VL7EPGCZenD23vGYkgtpPLfTeE2KdvgLMRM47I5auhIlcStEHd/UChbex4 yasAIwmXchgg6+CMYnrVNHP2IFE5cwjqqE0R/mnHUfqbjOsMPIK3KYiAbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp+jIaHrn46MwJNfNdPE7Kqb7JBMB8GA1UdIwQY MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2 LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAia9vUPVl 3LgSO31JkTQFOwtvxbBqmMJeV1rzmSxbITBEflFNQFjMQxOB0L87qK+GgYkmPVdP Z/mvDgWiNILS0RhjS1HxwMNcnyudy8sI+dVW6rvuy/uxAc526toTiIb4li/W17pG grzFzDPPJtnotJ1eYs4zviwPK+xcou1L/KWp25jbn9OFzBxT63JKM2yIv9KTqgmX 4WFwkitkHXlzKKWXiJ0Fb885J+6raaRCe7krapkRmGYW6ABIrI4RnjF7FWzkeobq DpwAlwJJMScZB3cOoVmseWusfWVMheNvq1Gr7kBvz+L4RJErQ88dUIVuVJuW0Tiy iEjGPjKoCQdYzw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:13:05 2025 by rpki-client