This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft File: ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft (raw, json) Hash identifier: 7hl02ZS5GeYa1F2PNr+t82MSVjfqtHCGdHIvsxbHoNQ= Subject key identifier: 27:DA:4B:53:58:82:42:4D:01:E5:D6:B0:9C:AB:9F:61:8F:07:E7:39 Authority key identifier: 66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4 Certificate issuer: /CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4 Certificate serial: 019B5A1AEACA69166BB7BA07038B355BE40B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft Manifest number: 8A Signing time: Fri 26 Dec 2025 10:01:12 +0000 Manifest this update: Fri 26 Dec 2025 10:01:12 +0000 Manifest next update: Sat 27 Dec 2025 10:01:12 +0000 Files and hashes: 1: MjDiSya5rSIxCbP2JLylYPClbHU.roa (hash: sVwKHPoYwVN9YVNb0RadzlN6+FZIECFGTzUXxcescyI=) 2: ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl (hash: 31F5eP/38AhIRHRODpdz5Qb7qfCaS7hvkcyHzyVpUv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ea:ca:69:16:6b:b7:ba:07:03:8b:35:5b:e4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4 Validity Not Before: Dec 26 10:01:12 2025 GMT Not After : Dec 27 10:01:12 2025 GMT Subject: CN=27da4b535882424d01e5d6b09cab9f618f07e739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:d9:2f:f7:db:00:73:30:78:ca:9f:14:73: 03:82:24:7f:03:c8:85:26:4d:d2:b6:23:4d:6e:e7: 71:61:f6:52:b7:60:bf:19:e3:49:07:a1:85:5c:0f: ba:14:75:b2:91:f8:cf:f9:96:2f:4c:c8:1c:f4:dc: dd:b8:e0:fb:42:ea:73:c0:a4:ca:6b:f8:85:64:27: ae:33:ca:b3:0e:25:89:08:15:38:28:a4:d6:55:9f: 6a:1d:07:05:a8:99:00:00:dc:86:a2:a4:0d:ed:c5: 6a:be:23:ea:1b:d5:e1:ff:82:79:31:16:b8:bb:e6: b2:e9:d0:be:5b:70:f2:c4:5f:8b:86:04:5a:08:c2: 7a:6d:af:aa:21:1b:42:5f:99:65:1b:e3:1a:10:55: bd:57:b7:c5:2e:1f:2a:a9:fd:08:d0:e1:e0:7c:96: 31:e5:48:e2:bd:7c:f0:fe:cd:22:fd:f6:27:e6:50: e9:fc:9f:cc:0d:5e:e5:37:28:0d:2e:3f:3e:a0:03: 27:fc:f5:7b:af:c1:5c:a1:9d:28:b5:57:54:32:4f: 63:ff:e3:1e:f9:80:be:7c:51:40:f1:ba:2b:c9:87: f8:ea:0e:7f:c4:a3:ba:af:18:ea:aa:2f:e2:64:88: 26:c9:4c:38:aa:eb:4b:d6:5c:39:a4:8a:b5:5a:4e: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:4B:53:58:82:42:4D:01:E5:D6:B0:9C:AB:9F:61:8F:07:E7:39 X509v3 Authority Key Identifier: keyid:66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f7:17:a1:15:91:5d:91:62:94:b1:16:90:6b:3c:24:9c:f5: c6:5d:6a:0c:1b:19:7f:03:95:51:33:82:39:fe:81:07:fd:80: 58:3d:b9:6b:69:01:a5:60:5d:23:aa:65:c2:d6:08:93:32:3a: 7c:f3:ec:3a:d2:d3:27:f2:a9:0d:80:dc:82:f1:b3:e4:dc:f7: 5b:fe:5a:a9:7a:dd:00:ad:c6:6a:4d:14:5a:0c:a9:9a:12:7e: 26:2b:8c:7c:fc:f0:89:7c:ba:af:da:db:54:c4:ec:79:fa:13: 7c:8d:0d:22:72:80:d8:d0:42:6d:d5:35:1f:b7:7f:16:ef:f2: b3:1e:21:09:c6:4f:3a:4a:4f:47:e6:61:4d:f3:ca:52:e1:04: ec:b3:b1:16:8c:66:c0:33:43:f3:f6:a5:80:e9:d3:79:77:e9: 2e:85:9a:f1:07:38:0f:a2:ff:10:39:b7:04:78:e7:20:eb:e4: ae:bf:1b:25:f7:77:a4:a0:a5:d2:66:e2:98:5c:9d:a4:5e:38: f3:96:bc:dd:be:21:10:92:3e:09:e2:da:c5:e8:71:ea:17:ee: 94:40:30:2d:49:69:28:ad:77:b4:08:98:5f:8a:dc:b9:e4:fe: d8:05:bf:a7:20:7a:26:41:57:c7:61:d1:c8:ee:79:4f:e9:80: 41:5b:de:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGurKaRZrt7oHA4s1W+QLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTJmZTkzNGVkMWRlZjc1ZjA2MzZhZTdjZjAxOThjODFk MzQ4YjQwHhcNMjUxMjI2MTAwMTEyWhcNMjUxMjI3MTAwMTEyWjAzMTEwLwYDVQQD EygyN2RhNGI1MzU4ODI0MjRkMDFlNWQ2YjA5Y2FiOWY2MThmMDdlNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq3ZL/fbAHMweMqfFHMDgiR/A8iF Jk3StiNNbudxYfZSt2C/GeNJB6GFXA+6FHWykfjP+ZYvTMgc9NzduOD7QupzwKTK a/iFZCeuM8qzDiWJCBU4KKTWVZ9qHQcFqJkAANyGoqQN7cVqviPqG9Xh/4J5MRa4 u+ay6dC+W3DyxF+LhgRaCMJ6ba+qIRtCX5llG+MaEFW9V7fFLh8qqf0I0OHgfJYx 5UjivXzw/s0i/fYn5lDp/J/MDV7lNygNLj8+oAMn/PV7r8FcoZ0otVdUMk9j/+Me +YC+fFFA8boryYf46g5/xKO6rxjqqi/iZIgmyUw4qutL1lw5pIq1Wk7KHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfaS1NYgkJNAeXWsJyrn2GPB+c5MB8GA1UdIwQY MBaAFGai/pNO0d73XwY2rnzwGYyB00i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYt NGVkZjE5YjM1ZWNhLzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYtNGVkZjE5YjM1ZWNh LzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfcXoRWR XZFilLEWkGs8JJz1xl1qDBsZfwOVUTOCOf6BB/2AWD25a2kBpWBdI6plwtYIkzI6 fPPsOtLTJ/KpDYDcgvGz5Nz3W/5aqXrdAK3Gak0UWgypmhJ+JiuMfPzwiXy6r9rb VMTsefoTfI0NInKA2NBCbdU1H7d/Fu/ysx4hCcZPOkpPR+ZhTfPKUuEE7LOxFoxm wDND8/algOnTeXfpLoWa8Qc4D6L/EDm3BHjnIOvkrr8bJfd3pKCl0mbimFydpF44 85a83b4hEJI+CeLaxehx6hfulEAwLUlpKK13tAiYX4rcueT+2AW/pyB6JkFXx2HR yO55T+mAQVvePw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:46 2025 by rpki-client