This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json) Hash identifier: Nc0hiv0Owr2sp0Xfsp4XHyNnweMaJVzBCOG7jgf4hvA= Subject key identifier: DE:02:D3:D8:C3:5F:6E:B2:53:5F:F4:B5:85:58:A0:B0:1D:6F:14:C7 Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Certificate serial: 019B10134A51C9AEE2EB2576EFB60739469D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft Manifest number: 176E Signing time: Fri 12 Dec 2025 01:00:58 +0000 Manifest this update: Fri 12 Dec 2025 01:00:58 +0000 Manifest next update: Sat 13 Dec 2025 01:00:58 +0000 Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=) 2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: DFZnvYEsqkUuOnhRrz2XY2AwUxPq0bkPAB5yxkODE2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:4a:51:c9:ae:e2:eb:25:76:ef:b6:07:39:46:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Validity Not Before: Dec 12 01:00:58 2025 GMT Not After : Dec 13 01:00:58 2025 GMT Subject: CN=de02d3d8c35f6eb2535ff4b58558a0b01d6f14c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c2:83:ba:e8:dc:9c:78:f6:dc:5c:f9:aa:1b: bb:65:e8:b7:fc:ee:a2:44:e7:fb:de:10:35:8c:85: 68:1e:b6:b4:36:16:20:24:12:a0:af:7e:8b:6b:8b: b3:e2:47:d6:eb:36:95:ff:75:5f:17:b2:c6:bd:29: a0:54:5f:e1:a7:f5:5d:0a:9c:da:0b:8a:b5:fc:5e: fc:5a:0a:83:e9:0d:c7:1e:b7:63:f4:95:36:6a:6e: 0a:ba:39:8b:b6:a6:df:2e:c5:34:3e:c2:a5:78:a2: 6a:a4:7c:e0:ef:c7:92:35:ca:4d:45:1e:f5:35:71: 1d:2c:99:43:13:44:7b:0e:42:16:1e:94:37:35:9f: 95:b7:ee:b1:42:4b:5d:95:da:c5:61:db:87:a7:b5: 15:ad:29:61:4a:83:b4:20:47:47:be:28:37:61:22: c5:d8:8b:85:6f:36:0e:b3:f9:31:a0:04:3b:be:e0: 8a:cd:e3:28:81:04:da:b7:6d:44:06:36:3a:a1:b3: bd:fc:f5:45:96:ab:46:20:7b:55:43:9e:08:98:1f: a4:51:b8:84:c2:ce:a1:1d:6c:8a:5e:f0:58:8b:ec: 37:58:bf:44:28:08:eb:7d:6a:2f:58:1c:66:56:84: a7:02:ff:96:67:68:cb:02:b1:03:f1:15:1c:e5:79: 22:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:02:D3:D8:C3:5F:6E:B2:53:5F:F4:B5:85:58:A0:B0:1D:6F:14:C7 X509v3 Authority Key Identifier: keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:01:de:13:7e:a5:e4:4e:e1:ac:d0:91:fd:cd:9c:40:a3: 52:bd:0a:34:1c:cb:f7:fb:b0:28:86:94:f1:ae:1a:25:f6:5a: 6e:61:ca:50:ce:16:49:5b:b2:c3:f9:2a:c3:12:c1:de:77:05: a7:19:4f:bf:0c:1c:b6:73:80:2f:84:4d:1b:a3:db:1d:28:d6: 8a:d5:ff:f8:61:0d:93:78:3d:8a:4c:94:45:68:f5:3c:89:11: de:79:ac:c8:67:66:7f:12:b9:5b:9a:30:0d:74:25:40:b9:01: c8:dd:37:18:38:3c:fe:b0:7e:2c:c9:d8:b5:4e:59:78:e5:68: ae:23:73:c2:14:1a:fa:07:fb:5e:68:d3:ec:06:14:f5:11:a2: 78:31:f6:80:5b:2b:cc:3b:65:60:9c:69:f8:89:8a:73:30:ad: d8:4b:e0:c3:ad:d2:4f:85:08:a7:9d:e4:75:24:0c:fa:95:4c: ca:e2:ae:12:b5:f8:c7:98:da:db:56:32:cc:c3:2c:bd:86:7e: 7a:e4:69:2f:37:32:a5:eb:0c:14:d8:78:81:02:97:9b:cf:ff: 72:3c:74:ce:5c:aa:0a:64:49:05:7e:80:d4:79:04:2c:8c:bb: 4e:06:22:b0:8e:7d:ca:2f:d2:9c:43:93:82:7e:f5:93:fd:83: 81:f3:0d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE0pRya7i6yV277YHOUadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk OWJlMDUwHhcNMjUxMjEyMDEwMDU4WhcNMjUxMjEzMDEwMDU4WjAzMTEwLwYDVQQD EyhkZTAyZDNkOGMzNWY2ZWIyNTM1ZmY0YjU4NTU4YTBiMDFkNmYxNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8KDuujcnHj23Fz5qhu7Zei3/O6i ROf73hA1jIVoHra0NhYgJBKgr36La4uz4kfW6zaV/3VfF7LGvSmgVF/hp/VdCpza C4q1/F78WgqD6Q3HHrdj9JU2am4KujmLtqbfLsU0PsKleKJqpHzg78eSNcpNRR71 NXEdLJlDE0R7DkIWHpQ3NZ+Vt+6xQktdldrFYduHp7UVrSlhSoO0IEdHvig3YSLF 2IuFbzYOs/kxoAQ7vuCKzeMogQTat21EBjY6obO9/PVFlqtGIHtVQ54ImB+kUbiE ws6hHWyKXvBYi+w3WL9EKAjrfWovWBxmVoSnAv+WZ2jLArED8RUc5XkiPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4C09jDX26yU1/0tYVYoLAdbxTHMB8GA1UdIwQY MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2 LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX8B3hN+ peRO4azQkf3NnECjUr0KNBzL9/uwKIaU8a4aJfZabmHKUM4WSVuyw/kqwxLB3ncF pxlPvwwctnOAL4RNG6PbHSjWitX/+GENk3g9ikyURWj1PIkR3nmsyGdmfxK5W5ow DXQlQLkByN03GDg8/rB+LMnYtU5ZeOVoriNzwhQa+gf7XmjT7AYU9RGieDH2gFsr zDtlYJxp+ImKczCt2Evgw63ST4UIp53kdSQM+pVMyuKuErX4x5ja21YyzMMsvYZ+ euRpLzcypesMFNh4gQKXm8//cjx0zlyqCmRJBX6A1HkELIy7TgYisI59yi/SnEOT gn71k/2DgfMNkw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:40 2025 by rpki-client