This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json) Hash identifier: Z3lbLaWm4OYPDXC4ZXmi9RENORSL3ps/0DRkNGoHXcM= Subject key identifier: 3F:6A:36:80:98:CC:1E:24:5C:FA:24:A7:A1:3B:01:3A:ED:E7:86:59 Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70 Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870 Certificate serial: 019B18DFA114C525869A63399DA51614E9B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft Manifest number: 1547 Signing time: Sat 13 Dec 2025 18:01:07 +0000 Manifest this update: Sat 13 Dec 2025 18:01:07 +0000 Manifest next update: Sun 14 Dec 2025 18:01:07 +0000 Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: 0kk1TqMYIMYoXukqePhzbgM5Ha5qV+t3y+NeDwT+m6Q=) 2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:a1:14:c5:25:86:9a:63:39:9d:a5:16:14:e9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870 Validity Not Before: Dec 13 18:01:07 2025 GMT Not After : Dec 14 18:01:07 2025 GMT Subject: CN=3f6a368098cc1e245cfa24a7a13b013aede78659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:b3:09:40:32:cf:2a:d8:11:f8:95:c2:3b: 44:34:ac:37:5a:bb:89:f5:38:bc:80:9b:5e:45:5c: 10:e1:f1:e0:04:ee:d1:6e:4f:47:9b:18:ea:f5:4c: b7:08:b6:81:9e:3e:67:05:2d:3c:30:69:a5:71:bd: f6:c9:c6:f6:c7:2d:b2:99:31:21:20:60:e0:23:23: 22:c6:12:eb:9a:4f:40:d0:9b:52:5c:7f:54:87:4f: 3b:22:ef:cb:b1:bb:df:e7:fb:8f:5a:86:7c:89:91: f8:bc:9a:6a:fb:ee:67:1e:a2:92:fa:87:a0:08:08: 0b:4a:fc:5a:db:a8:8d:73:2c:93:5c:b2:25:e4:9c: e2:61:ac:66:bc:84:1f:4a:8c:56:09:b2:c8:9c:0d: f9:f0:d0:01:ab:ec:a1:55:a2:83:2a:a3:b1:1f:82: 8c:fc:5b:47:d9:cc:58:7e:cb:24:8c:a2:a5:d6:a3: 4d:65:70:5b:06:af:3e:71:3c:36:d9:c3:9b:81:e2: a9:16:33:2e:d5:af:0a:b5:aa:b4:aa:71:61:46:af: c1:06:b4:89:6b:5d:29:13:7d:06:19:a8:8f:37:1d: 6d:38:79:bf:c9:cf:43:04:18:c3:41:0e:a7:b3:3d: 65:d9:52:bb:c6:df:bd:37:41:18:7e:05:40:c6:db: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6A:36:80:98:CC:1E:24:5C:FA:24:A7:A1:3B:01:3A:ED:E7:86:59 X509v3 Authority Key Identifier: keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:11:3b:47:81:58:e2:1f:6a:90:7a:af:95:05:6e:22:a7:85: 7f:d7:83:d7:60:33:e1:c1:de:bc:81:67:a7:fc:bf:54:b0:31: 9c:a4:7c:eb:a4:f3:ff:c1:5e:9a:ba:df:c2:cd:6a:09:63:14: 8b:b3:97:68:86:01:6a:d8:eb:e7:42:b6:a0:ff:a8:80:df:0e: f7:87:7e:64:cd:66:b5:24:e6:b9:49:f4:0b:a2:86:70:68:28: 40:0f:8e:9e:bc:5c:54:1a:22:17:81:3e:e6:48:48:4a:f2:85: d5:3d:4f:0e:59:2c:cc:62:85:80:09:06:09:f7:12:0b:2b:a8: 51:df:d5:71:97:55:90:5a:a9:69:d5:48:23:06:12:32:89:19: c9:94:e0:5a:b8:09:0a:39:83:5a:69:b7:b5:8c:7d:e2:ab:6a: 5e:a6:6d:08:0c:d7:5f:cc:a6:76:1a:40:0a:f9:4d:16:49:4e: f7:1e:0d:c2:79:c2:8d:9d:45:87:f9:a5:8d:1f:a3:ee:7d:d2: b6:2d:cd:9f:08:14:5d:e8:ed:fb:af:45:65:35:12:64:55:88: 42:c1:52:d7:79:72:95:0a:37:24:80:12:9c:3b:aa:9d:2a:57: 67:31:0a:71:46:72:c4:75:b8:81:b7:1b:d5:44:e0:30:fb:7b: a8:93:8e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY36EUxSWGmmM5naUWFOmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjY2YTQxYmNhNjg3YjI3NThjZmM3YmIxYzVmNGIzNDY5 ZWQ4NzAwHhcNMjUxMjEzMTgwMTA3WhcNMjUxMjE0MTgwMTA3WjAzMTEwLwYDVQQD EygzZjZhMzY4MDk4Y2MxZTI0NWNmYTI0YTdhMTNiMDEzYWVkZTc4NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypuzCUAyzyrYEfiVwjtENKw3WruJ 9Ti8gJteRVwQ4fHgBO7Rbk9Hmxjq9Uy3CLaBnj5nBS08MGmlcb32ycb2xy2ymTEh IGDgIyMixhLrmk9A0JtSXH9Uh087Iu/Lsbvf5/uPWoZ8iZH4vJpq++5nHqKS+oeg CAgLSvxa26iNcyyTXLIl5JziYaxmvIQfSoxWCbLInA358NABq+yhVaKDKqOxH4KM /FtH2cxYfsskjKKl1qNNZXBbBq8+cTw22cObgeKpFjMu1a8Ktaq0qnFhRq/BBrSJ a10pE30GGaiPNx1tOHm/yc9DBBjDQQ6nsz1l2VK7xt+9N0EYfgVAxttlyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9qNoCYzB4kXPokp6E7ATrt54ZZMB8GA1UdIwQY MBaAFNf2akG8poeydYz8e7HF9LNGnthwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jOWUwMmMtYWQ1MS00MzE0LTkwZmMt NGE3Y2M3NWUzZTZmLzEvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9jOWUwMmMtYWQ1MS00MzE0LTkwZmMtNGE3Y2M3NWUzZTZm LzEvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRE7R4FY 4h9qkHqvlQVuIqeFf9eD12Az4cHevIFnp/y/VLAxnKR866Tz/8Femrrfws1qCWMU i7OXaIYBatjr50K2oP+ogN8O94d+ZM1mtSTmuUn0C6KGcGgoQA+OnrxcVBoiF4E+ 5khISvKF1T1PDlkszGKFgAkGCfcSCyuoUd/VcZdVkFqpadVIIwYSMokZyZTgWrgJ CjmDWmm3tYx94qtqXqZtCAzXX8ymdhpACvlNFklO9x4NwnnCjZ1Fh/mljR+j7n3S ti3NnwgUXejt+69FZTUSZFWIQsFS13lylQo3JIASnDuqnSpXZzEKcUZyxHW4gbcb 1UTgMPt7qJOOnQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:51:36 2025 by rpki-client