This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json) Hash identifier: 81igdNCGpSZBAIwu1GW2/OOrUVv4fxRyoEOEtL3wO7A= Subject key identifier: A2:98:4D:31:D2:9C:A7:30:27:01:C3:1B:24:F9:D6:FB:9C:59:35:A0 Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec Certificate serial: 019B4627493693A13B18826632E056F1E140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft Manifest number: 0F8A Signing time: Mon 22 Dec 2025 13:02:18 +0000 Manifest this update: Mon 22 Dec 2025 13:02:18 +0000 Manifest next update: Tue 23 Dec 2025 13:02:18 +0000 Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: IQ4mkvubyPBbUPeXUeqkyRXYXaty8wFOZe/V4EaR6dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:49:36:93:a1:3b:18:82:66:32:e0:56:f1:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec Validity Not Before: Dec 22 13:02:18 2025 GMT Not After : Dec 23 13:02:18 2025 GMT Subject: CN=a2984d31d29ca7302701c31b24f9d6fb9c5935a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:e5:4e:f7:db:df:a5:f6:62:7b:bd:42:37: f9:d9:ab:49:cb:1e:f7:22:53:fc:26:7c:72:6a:06: 95:35:ac:21:17:cd:e4:41:f6:d4:06:37:0c:9c:17: dc:ed:e0:5a:dc:a5:67:42:0d:ee:d0:67:c0:50:ac: 41:03:32:bf:91:90:f0:af:b3:86:27:a5:2c:fd:bd: ce:47:ef:69:39:55:db:e3:02:c0:ab:d8:96:25:a4: 75:a2:fd:f7:dd:aa:0a:a0:71:71:f4:26:67:f9:d2: 67:f9:a6:f9:38:56:b1:b5:44:5e:e2:82:b1:38:90: 60:a8:b7:87:74:37:af:6c:8e:20:3d:f4:07:1c:50: 10:eb:e2:f3:6b:c1:3f:99:9f:b4:bc:69:6d:27:e2: c4:05:c7:90:a6:bf:28:d4:3b:dc:91:10:f9:33:bf: 2d:5d:ba:57:ad:c8:0a:f3:f9:a6:3e:ca:13:2b:8e: 82:16:e2:9b:cb:37:6c:1a:e6:9f:ab:61:f7:cc:5b: ee:b7:37:db:94:17:d2:41:97:19:72:04:04:e8:42: b3:98:dc:64:73:27:ff:2b:e8:e3:b6:af:13:be:7f: ea:f4:d7:2c:68:c4:9f:68:73:a0:08:75:d6:1c:7c: ff:09:e1:d4:4c:c5:7e:77:7c:7c:63:5b:9f:11:15: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:4D:31:D2:9C:A7:30:27:01:C3:1B:24:F9:D6:FB:9C:59:35:A0 X509v3 Authority Key Identifier: keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d9:8e:4d:05:39:96:db:d6:35:e0:e3:f9:fc:08:f0:2d:17: de:a4:92:27:03:9f:2d:cc:9b:98:54:9d:7b:0f:2b:cd:65:23: 11:f8:f1:d6:fc:8d:39:a0:de:bd:08:33:0f:ba:a3:42:c2:95: 95:17:41:dc:2a:04:be:12:37:0d:ae:eb:b1:95:c0:ce:f2:bf: bc:eb:b8:d8:06:38:e3:5b:14:d7:57:9e:61:d1:cc:1a:65:d2: ab:f6:01:a7:86:bf:8c:b9:74:c1:10:4a:69:3c:7a:3b:40:c7: 63:e0:c6:d4:22:75:bb:2a:57:93:9e:a9:84:27:68:8a:a3:ef: 8c:4e:1c:57:6e:92:8d:99:a1:67:f9:1f:fe:55:b1:fd:87:3f: 0e:6b:d5:a1:0a:54:70:f2:e4:9c:e0:cf:f7:d5:52:ad:84:96: 8e:00:5b:f2:63:54:0b:12:23:6d:1d:11:2e:27:85:53:01:19: b4:84:4a:1c:6e:94:25:95:8c:1b:1b:d6:20:cc:f7:67:9d:70: 1b:d8:23:2e:5f:97:58:08:31:b7:4a:9a:97:ee:89:ba:8a:1a: 25:cd:0b:84:07:57:7e:fc:ca:92:27:dd:77:6a:d0:b2:60:9f: 8d:de:38:40:4c:30:60:93:24:2d:0f:9e:0b:df:56:b6:54:84: bf:43:ce:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ0k2k6E7GIJmMuBW8eFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTNlZGRmMTg3YWM2YzFhODRmODg5NGQ2M2FiYjYwNTk2 Mjc5ZWMwHhcNMjUxMjIyMTMwMjE4WhcNMjUxMjIzMTMwMjE4WjAzMTEwLwYDVQQD EyhhMjk4NGQzMWQyOWNhNzMwMjcwMWMzMWIyNGY5ZDZmYjljNTkzNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhHlTvfb36X2Ynu9Qjf52atJyx73 IlP8JnxyagaVNawhF83kQfbUBjcMnBfc7eBa3KVnQg3u0GfAUKxBAzK/kZDwr7OG J6Us/b3OR+9pOVXb4wLAq9iWJaR1ov333aoKoHFx9CZn+dJn+ab5OFaxtURe4oKx OJBgqLeHdDevbI4gPfQHHFAQ6+Lza8E/mZ+0vGltJ+LEBceQpr8o1DvckRD5M78t XbpXrcgK8/mmPsoTK46CFuKbyzdsGuafq2H3zFvutzfblBfSQZcZcgQE6EKzmNxk cyf/K+jjtq8Tvn/q9NcsaMSfaHOgCHXWHHz/CeHUTMV+d3x8Y1ufERVvCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKYTTHSnKcwJwHDGyT51vucWTWgMB8GA1UdIwQY MBaAFM6j7d8YesbBqE+IlNY6u2BZYnnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEt MTMzNTk5MTU0YmUxLzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEtMTMzNTk5MTU0YmUx LzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9mOTQU5 ltvWNeDj+fwI8C0X3qSSJwOfLcybmFSdew8rzWUjEfjx1vyNOaDevQgzD7qjQsKV lRdB3CoEvhI3Da7rsZXAzvK/vOu42AY441sU11eeYdHMGmXSq/YBp4a/jLl0wRBK aTx6O0DHY+DG1CJ1uypXk56phCdoiqPvjE4cV26SjZmhZ/kf/lWx/Yc/DmvVoQpU cPLknODP99VSrYSWjgBb8mNUCxIjbR0RLieFUwEZtIRKHG6UJZWMGxvWIMz3Z51w G9gjLl+XWAgxt0qal+6JuooaJc0LhAdXfvzKkifdd2rQsmCfjd44QEwwYJMkLQ+e C99WtlSEv0POrg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:28:03 2025 by rpki-client