This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json) Hash identifier: h5XhHTuMh64TPKnydMW5dhcG8DxZi//gcd4AZcFFKOw= Subject key identifier: 2D:BF:F7:A5:6E:22:4A:64:8B:C2:AF:A6:D2:CC:F1:0C:1B:B8:89:16 Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Certificate serial: 019B22F59D584F594BE206D2A632AC9A8C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft Manifest number: 102C Signing time: Mon 15 Dec 2025 17:01:20 +0000 Manifest this update: Mon 15 Dec 2025 17:01:20 +0000 Manifest next update: Tue 16 Dec 2025 17:01:20 +0000 Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=) 2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: QJ8vKIeVxLO6und4cFPkv7HDk9qUtZO4mySGIS0vUIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:9d:58:4f:59:4b:e2:06:d2:a6:32:ac:9a:8c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Validity Not Before: Dec 15 17:01:20 2025 GMT Not After : Dec 16 17:01:20 2025 GMT Subject: CN=2dbff7a56e224a648bc2afa6d2ccf10c1bb88916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:ce:19:a3:51:18:aa:d2:f4:51:d6:a2:38: 1c:7e:4f:5c:8e:ca:3a:d1:77:51:ab:6d:38:d2:63: df:88:53:3a:7c:35:b2:41:81:e7:6f:bf:01:07:fb: ed:49:aa:61:b2:5e:7a:dc:d2:49:98:33:8f:50:69: fe:c1:d3:07:eb:98:7c:20:53:ba:8d:70:d6:c0:44: 91:ad:59:34:4b:12:92:9f:30:dd:e0:3d:a0:b8:52: 6c:55:af:5d:1e:ec:57:50:c7:92:de:26:87:5f:b3: ba:bc:ec:ee:02:d1:3e:6b:76:2d:ae:f2:de:8c:50: 6f:4a:c0:3f:a9:7c:9b:2e:2f:75:27:d7:09:23:f1: da:c3:30:28:4b:43:b9:f0:3c:a1:51:80:7c:65:e4: d4:45:a8:a0:df:e8:0f:7f:f3:c3:b5:d8:1b:f5:93: 95:b9:cd:aa:c4:5a:ac:aa:cb:22:69:ba:6b:f0:df: fb:c1:ef:d5:25:07:fb:16:b8:24:2e:8a:46:d3:6c: fd:5d:85:1c:05:01:c1:24:62:80:af:12:82:a4:da: 1c:93:27:7a:67:4c:cb:75:26:2f:9b:21:0a:7c:28: 82:91:26:80:5f:a2:63:00:b8:f7:33:42:37:16:a6: 17:fb:37:f1:8f:70:73:cc:6b:6e:3a:e5:da:2a:0d: ad:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:F7:A5:6E:22:4A:64:8B:C2:AF:A6:D2:CC:F1:0C:1B:B8:89:16 X509v3 Authority Key Identifier: keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c9:cf:f9:e7:26:96:07:ff:d8:d5:48:2c:b3:8a:15:2d:68: 4c:b7:73:c7:63:6e:cf:1e:27:83:84:59:2e:86:73:67:17:69: 50:c1:e7:16:e3:64:c0:98:e7:c8:99:87:b7:b4:84:57:e2:9a: 39:07:23:70:06:48:93:13:f6:34:80:d9:1a:21:e7:7f:0e:db: 59:42:d1:9c:80:1d:8d:db:a9:7f:b7:65:2e:7b:c3:92:53:70: bc:b4:54:12:0c:bb:7d:ed:4c:96:71:07:ad:52:32:b3:d5:8f: 28:04:e3:c3:33:d7:61:09:c9:ce:a0:1f:39:d6:6e:5c:f2:7e: 6c:60:96:b7:ab:c4:13:2a:fd:64:bd:61:7d:ae:49:13:d8:d6: 63:96:29:a6:b1:c2:d2:0d:3e:9e:d4:c8:b5:a8:2d:28:99:ec: 00:c9:b5:79:fd:25:81:2f:f8:ac:c0:95:c5:e4:33:d6:eb:ef: c6:c4:89:37:be:18:9f:2c:fe:47:de:70:6e:76:54:c3:dc:42: 3f:0d:74:71:60:a8:a9:be:c9:4c:10:ea:f0:84:0a:81:f8:75: 37:59:4b:73:9f:e3:01:73:7b:a5:1a:9d:e6:0e:4e:2f:63:17: ce:66:87:f4:1f:58:72:9b:0d:2c:1b:a3:37:bf:5d:49:e9:85: bf:27:c7:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Z1YT1lL4gbSpjKsmowtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi YjQ1YTQwHhcNMjUxMjE1MTcwMTIwWhcNMjUxMjE2MTcwMTIwWjAzMTEwLwYDVQQD EygyZGJmZjdhNTZlMjI0YTY0OGJjMmFmYTZkMmNjZjEwYzFiYjg4OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8/OGaNRGKrS9FHWojgcfk9cjso6 0XdRq2040mPfiFM6fDWyQYHnb78BB/vtSaphsl563NJJmDOPUGn+wdMH65h8IFO6 jXDWwESRrVk0SxKSnzDd4D2guFJsVa9dHuxXUMeS3iaHX7O6vOzuAtE+a3YtrvLe jFBvSsA/qXybLi91J9cJI/HawzAoS0O58DyhUYB8ZeTURaig3+gPf/PDtdgb9ZOV uc2qxFqsqssiabpr8N/7we/VJQf7FrgkLopG02z9XYUcBQHBJGKArxKCpNockyd6 Z0zLdSYvmyEKfCiCkSaAX6JjALj3M0I3FqYX+zfxj3BzzGtuOuXaKg2teQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2/96VuIkpki8KvptLM8QwbuIkWMB8GA1UdIwQY MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt N2UxODRiMDcwYmJkLzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8nP+ecm lgf/2NVILLOKFS1oTLdzx2Nuzx4ng4RZLoZzZxdpUMHnFuNkwJjnyJmHt7SEV+Ka OQcjcAZIkxP2NIDZGiHnfw7bWULRnIAdjdupf7dlLnvDklNwvLRUEgy7fe1MlnEH rVIys9WPKATjwzPXYQnJzqAfOdZuXPJ+bGCWt6vEEyr9ZL1hfa5JE9jWY5YpprHC 0g0+ntTItagtKJnsAMm1ef0lgS/4rMCVxeQz1uvvxsSJN74Ynyz+R95wbnZUw9xC Pw10cWCoqb7JTBDq8IQKgfh1N1lLc5/jAXN7pRqd5g5OL2MXzmaH9B9YcpsNLBuj N79dSemFvyfHyA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:44:49 2025 by rpki-client