This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json) Hash identifier: c0sQOZ2zNOkaXaSZ5m72fgwiiVfmXLbbWQxFOjHSwPI= Subject key identifier: D6:62:10:74:EE:69:AB:C0:73:64:01:2A:99:49:6B:3D:5B:22:C6:35 Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19 Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119 Certificate serial: 019B32D61AF8BA751A2279FFBAFF2186AB5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft Manifest number: 074C Signing time: Thu 18 Dec 2025 19:00:50 +0000 Manifest this update: Thu 18 Dec 2025 19:00:50 +0000 Manifest next update: Fri 19 Dec 2025 19:00:50 +0000 Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=) 2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: ni+RYTZ6XjWsqLgHA4+v7/PDLcNP6RlWDHuyDV+hhuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:1a:f8:ba:75:1a:22:79:ff:ba:ff:21:86:ab:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119 Validity Not Before: Dec 18 19:00:50 2025 GMT Not After : Dec 19 19:00:50 2025 GMT Subject: CN=d6621074ee69abc07364012a99496b3d5b22c635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:2f:4d:3c:64:94:b9:6e:99:83:e1:18:de: f1:c1:fe:d2:31:f8:ff:86:41:ba:ac:e5:e2:fb:1c: 13:f7:71:c6:49:28:f4:b4:59:3c:68:f3:49:40:d4: c4:9e:6b:a1:0c:a2:cb:79:00:44:07:b0:31:b6:53: 72:c5:5c:a8:05:d5:8b:67:c0:ed:f2:2b:fa:f0:88: 54:c7:e7:f9:9d:8d:01:4d:06:37:dd:60:43:8e:56: 39:be:4c:76:00:9c:93:4d:1e:38:01:eb:3e:00:04: 96:0e:43:e5:5b:b4:fa:79:1a:6e:21:cb:1d:21:20: 4b:37:38:16:30:53:03:55:a3:5a:fa:43:48:e1:e1: 44:7f:d6:f1:0c:18:aa:a8:b3:82:e3:14:93:33:78: 1c:d6:fb:8c:37:82:6e:02:f2:d3:05:59:e3:23:ca: b3:bf:38:cd:42:58:0e:f4:93:36:12:f6:f6:ef:f7: 60:f4:62:ea:f4:d5:43:3d:b9:5e:af:37:11:21:a4: 64:0a:18:6a:c8:eb:75:d2:a2:02:86:33:f6:cf:8d: 24:97:ae:f1:4e:02:79:3f:1f:27:cc:78:69:a9:92: 54:b8:ff:f0:12:bc:64:51:65:a9:cc:71:30:b1:89: 87:94:0b:92:d7:aa:0a:d6:69:ba:b9:36:2f:cc:bf: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:62:10:74:EE:69:AB:C0:73:64:01:2A:99:49:6B:3D:5B:22:C6:35 X509v3 Authority Key Identifier: keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0c:56:a6:59:1f:7a:75:2a:ca:0f:b3:9d:45:cd:a0:11:5f: f5:10:92:14:f9:45:b1:b8:6b:9f:cd:37:77:e1:60:2b:9f:ae: 4b:7a:f8:a5:e6:09:0d:42:a2:62:47:50:cf:cc:61:19:7a:e0: 4a:2c:58:d9:12:de:91:00:af:66:7a:09:72:2f:1c:f0:01:0a: 7c:8f:81:97:63:6b:a0:77:ec:8f:88:53:fa:bc:97:97:06:cc: 7d:ad:b8:dd:c0:d2:b7:8a:5b:b3:59:5c:15:36:36:7d:14:05: 57:93:92:13:71:56:4c:5c:b5:65:7d:9e:52:6c:68:72:bf:18: 3e:9c:af:cf:22:2a:bc:7c:30:94:81:53:36:7a:cb:23:c8:2a: 70:38:cf:7f:98:22:80:8d:67:f8:de:66:e6:33:3a:63:44:5c: c7:1d:d8:1b:89:80:ee:61:44:d9:30:64:3a:30:1c:8e:8c:96: a7:00:59:62:d9:b7:50:00:ec:bf:23:b2:46:e7:b3:d0:ab:3f: 0e:1b:dc:46:cb:27:63:33:6b:a3:8e:bc:4f:ff:1f:91:ae:20: f8:29:88:e1:f9:5f:b5:8c:6e:71:fa:17:0a:3e:dc:72:05:cf: 3a:7c:6b:9b:b2:47:69:81:24:20:46:00:07:e7:ce:3c:18:40: 14:da:f2:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1hr4unUaInn/uv8hhqtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWE4ODcyYzJiM2Y5NzRjOTUxNjhkMjE0YmZkNTdmMGY5 ZTkxMTkwHhcNMjUxMjE4MTkwMDUwWhcNMjUxMjE5MTkwMDUwWjAzMTEwLwYDVQQD EyhkNjYyMTA3NGVlNjlhYmMwNzM2NDAxMmE5OTQ5NmIzZDViMjJjNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutkvTTxklLlumYPhGN7xwf7SMfj/ hkG6rOXi+xwT93HGSSj0tFk8aPNJQNTEnmuhDKLLeQBEB7AxtlNyxVyoBdWLZ8Dt 8iv68IhUx+f5nY0BTQY33WBDjlY5vkx2AJyTTR44Aes+AASWDkPlW7T6eRpuIcsd ISBLNzgWMFMDVaNa+kNI4eFEf9bxDBiqqLOC4xSTM3gc1vuMN4JuAvLTBVnjI8qz vzjNQlgO9JM2Evb27/dg9GLq9NVDPblerzcRIaRkChhqyOt10qIChjP2z40kl67x TgJ5Px8nzHhpqZJUuP/wErxkUWWpzHEwsYmHlAuS16oK1mm6uTYvzL+gGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZiEHTuaavAc2QBKplJaz1bIsY1MB8GA1UdIwQY MBaAFMyqiHLCs/l0yVFo0hS/1X8PnpEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQt ZTA0YzU4YTQxZjY2LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQtZTA0YzU4YTQxZjY2 LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQxWplkf enUqyg+znUXNoBFf9RCSFPlFsbhrn803d+FgK5+uS3r4peYJDUKiYkdQz8xhGXrg SixY2RLekQCvZnoJci8c8AEKfI+Bl2NroHfsj4hT+ryXlwbMfa243cDSt4pbs1lc FTY2fRQFV5OSE3FWTFy1ZX2eUmxocr8YPpyvzyIqvHwwlIFTNnrLI8gqcDjPf5gi gI1n+N5m5jM6Y0Rcxx3YG4mA7mFE2TBkOjAcjoyWpwBZYtm3UADsvyOyRuez0Ks/ DhvcRssnYzNro468T/8fka4g+CmI4flftYxucfoXCj7ccgXPOnxrm7JHaYEkIEYA B+fOPBhAFNrydg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:09 2025 by rpki-client