This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json) Hash identifier: CccrqWEDWcN17qgcuvGqzXO4QEC0PtOtkNlz7wLzpUA= Subject key identifier: 9C:A1:27:2D:FB:9C:3A:A9:6F:45:42:89:60:B8:0B:27:72:57:25:E1 Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Certificate serial: 019B0E5C052B1AD84F0DC68A82DCC1868C9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 17:01:10 +0000 Manifest this update: Thu 11 Dec 2025 17:01:10 +0000 Manifest next update: Fri 12 Dec 2025 17:01:10 +0000 Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=) 2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=) 3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: uh2x5AZG7OnmVosSXuO2fd/IUfECobm76sEQmfnYkHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:05:2b:1a:d8:4f:0d:c6:8a:82:dc:c1:86:8c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Validity Not Before: Dec 11 17:01:10 2025 GMT Not After : Dec 12 17:01:10 2025 GMT Subject: CN=9ca1272dfb9c3aa96f45428960b80b27725725e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:00:47:35:37:dd:bf:de:9c:1d:72:93:90: 59:09:45:29:25:a0:ce:3a:4e:75:0e:c9:0e:d4:d5: b5:b3:e9:91:82:9b:00:e2:f9:1c:c8:3d:e9:a6:4c: 87:b3:de:27:77:a9:43:64:a1:11:07:46:f9:79:d0: 81:a3:be:94:f9:57:a6:56:53:ba:b1:4e:00:c3:11: 3f:49:ae:b1:3b:e8:ca:34:f9:08:45:15:98:c4:22: 10:aa:95:8e:09:57:82:b4:e7:27:b9:d4:13:9e:90: 0b:61:ce:d4:c8:fc:b8:2f:88:a8:f0:bd:22:b5:ad: 49:c4:dd:a7:05:2a:6e:85:e1:6b:56:58:d8:22:2b: ad:12:1b:f8:7b:c3:fe:94:67:9a:0e:94:d6:18:f3: 7f:3a:ca:3e:7c:db:d0:e8:d1:6d:c4:7c:52:76:76: 4a:e1:22:2b:0f:18:02:86:40:05:3c:24:1f:33:ab: 21:40:51:96:5f:f5:3f:01:83:00:e2:cf:b5:15:3a: 54:77:04:45:70:6a:1b:59:f9:65:72:67:2f:dc:72: 4d:75:88:3a:03:48:5c:b4:85:4b:b6:35:0a:3f:2b: 22:13:40:40:c2:1e:df:e9:c3:b9:d9:7f:2c:9d:35: 9f:03:93:8b:20:99:f8:ea:c1:3f:c5:4c:07:da:d9: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A1:27:2D:FB:9C:3A:A9:6F:45:42:89:60:B8:0B:27:72:57:25:E1 X509v3 Authority Key Identifier: keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e8:d4:b3:8d:e8:a5:eb:99:50:3f:1c:37:93:75:de:93:1b: 71:4d:0f:ca:0a:fb:f4:70:13:f8:11:d5:5a:db:c4:e1:53:25: 51:be:28:64:f5:0d:5a:72:c3:11:d8:e7:6c:0e:33:3f:b3:8b: d9:0e:ae:e8:f7:c4:ff:0b:48:da:9b:27:14:40:ad:fd:f6:19: 1c:e6:97:06:96:40:46:79:8f:23:da:a5:8b:df:0f:3c:1f:e7: 50:4e:c3:be:52:53:de:57:83:15:b7:91:d5:4a:3a:89:c0:32: 4a:43:db:13:f9:6a:3b:a9:a7:c9:98:bf:13:dd:aa:03:61:89: 66:0b:9a:30:52:76:d2:2d:1e:4b:44:c8:97:e4:80:e1:4d:c1: fd:e8:55:40:87:f3:78:bd:39:66:35:d0:e4:d0:81:21:bf:65: 2f:95:06:92:81:7b:04:63:0d:61:f6:cd:2e:f1:5d:5e:d2:be: 8b:80:b3:0f:15:aa:1b:cc:aa:2f:38:01:f6:b0:5e:be:a0:81: 2a:dd:bf:3f:78:dd:eb:36:6b:0d:d7:f0:44:d4:6a:6e:e5:c3: b8:cf:56:72:ea:16:cc:20:2f:db:98:e9:59:ae:c1:d5:ab:f5: a4:0d:89:63:9a:e4:36:2d:8a:81:8a:ce:11:c8:ad:d5:3f:9f: 2b:91:28:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXAUrGthPDcaKgtzBhoyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk ZDQ5NTQwHhcNMjUxMjExMTcwMTEwWhcNMjUxMjEyMTcwMTEwWjAzMTEwLwYDVQQD Eyg5Y2ExMjcyZGZiOWMzYWE5NmY0NTQyODk2MGI4MGIyNzcyNTcyNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2kARzU33b/enB1yk5BZCUUpJaDO Ok51DskO1NW1s+mRgpsA4vkcyD3ppkyHs94nd6lDZKERB0b5edCBo76U+VemVlO6 sU4AwxE/Sa6xO+jKNPkIRRWYxCIQqpWOCVeCtOcnudQTnpALYc7UyPy4L4io8L0i ta1JxN2nBSpuheFrVljYIiutEhv4e8P+lGeaDpTWGPN/Oso+fNvQ6NFtxHxSdnZK 4SIrDxgChkAFPCQfM6shQFGWX/U/AYMA4s+1FTpUdwRFcGobWfllcmcv3HJNdYg6 A0hctIVLtjUKPysiE0BAwh7f6cO52X8snTWfA5OLIJn46sE/xUwH2tlV9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyhJy37nDqpb0VCiWC4CydyVyXhMB8GA1UdIwQY MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3 LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVujUs43o peuZUD8cN5N13pMbcU0Pygr79HAT+BHVWtvE4VMlUb4oZPUNWnLDEdjnbA4zP7OL 2Q6u6PfE/wtI2psnFECt/fYZHOaXBpZARnmPI9qli98PPB/nUE7DvlJT3leDFbeR 1Uo6icAySkPbE/lqO6mnyZi/E92qA2GJZguaMFJ20i0eS0TIl+SA4U3B/ehVQIfz eL05ZjXQ5NCBIb9lL5UGkoF7BGMNYfbNLvFdXtK+i4CzDxWqG8yqLzgB9rBevqCB Kt2/P3jd6zZrDdfwRNRqbuXDuM9WcuoWzCAv25jpWa7B1av1pA2JY5rkNi2KgYrO Ecit1T+fK5EocA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:03 2025 by rpki-client