This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json) Hash identifier: tELn8xQFAjyVJwFEB2wCUzInuxAnHDh9vu5A8M6UeDQ= Subject key identifier: 0A:62:B7:C8:E6:DE:1A:84:82:4F:2D:A3:15:8F:A3:06:C6:A8:16:22 Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Certificate serial: 019B416D7B97F81B6C8DF5E2B402DDE9EFB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft Manifest number: 0A9D Signing time: Sun 21 Dec 2025 15:00:52 +0000 Manifest this update: Sun 21 Dec 2025 15:00:52 +0000 Manifest next update: Mon 22 Dec 2025 15:00:52 +0000 Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=) 2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=) 3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: 6AIGJUg7VaUeHKBGbsGMCmHqgXfAD94Nii8NM8jPnjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:7b:97:f8:1b:6c:8d:f5:e2:b4:02:dd:e9:ef:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Validity Not Before: Dec 21 15:00:52 2025 GMT Not After : Dec 22 15:00:52 2025 GMT Subject: CN=0a62b7c8e6de1a84824f2da3158fa306c6a81622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:34:f7:d6:dc:23:c0:53:b9:5d:05:31:6f: 15:46:d8:3a:dd:63:c6:0b:38:ba:4c:f5:18:05:91: 99:39:77:12:55:4b:46:a0:8d:85:bc:6c:59:e3:19: 50:3a:30:a1:c6:82:9e:84:c4:9d:b3:b4:1a:44:2b: 05:ff:53:4f:9f:e9:9a:56:97:3c:49:fd:2e:a0:65: 85:52:1d:7f:ee:fe:80:78:0f:45:fb:bd:e2:ed:68: 39:37:b6:49:d6:06:6c:74:fc:3e:4f:f4:87:94:4d: 4c:a3:ea:fc:78:9e:5a:49:de:98:2c:10:4f:01:9b: ed:a0:fb:74:d7:49:bc:0b:45:ca:fd:55:86:f1:ba: a0:e6:01:59:6d:68:fe:94:66:bb:b6:ba:f8:ca:f1: fb:26:94:72:f6:d9:71:fe:93:78:6f:e5:8b:17:42: 34:38:18:3b:5c:ce:ef:1c:91:09:77:40:6c:0a:b1: 97:84:74:9c:18:21:a3:a0:8f:d0:ef:a9:1a:5c:4a: 4a:0c:1e:9e:3d:0d:d2:db:72:b8:a3:bc:5d:38:a5: e8:89:5a:8d:1e:f8:c4:20:ff:58:03:aa:ff:82:e9: 8f:3a:67:4e:44:a8:67:40:dc:dc:0a:08:f4:07:45: 2b:ec:9e:56:d5:18:7d:6a:79:1f:ff:db:7e:92:56: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:62:B7:C8:E6:DE:1A:84:82:4F:2D:A3:15:8F:A3:06:C6:A8:16:22 X509v3 Authority Key Identifier: keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4d:da:af:91:31:9f:1a:3d:92:13:04:29:1d:24:17:f8:d0: e5:60:96:bc:70:50:69:f1:d9:00:b1:c2:fe:63:41:a2:79:d3: 09:ee:27:d0:d0:de:f2:3a:2f:c5:48:45:36:e7:15:ea:08:97: b9:04:fa:bc:6e:bc:a2:83:fb:3e:0f:9b:5c:95:c6:2b:90:05: 90:9a:bc:66:65:9a:8f:a9:a2:d4:6d:49:3a:4b:00:c1:08:06: 8e:37:65:40:64:e9:5d:bb:0e:4a:79:ba:b9:51:07:97:91:c1: 44:25:6c:e2:db:2b:b1:61:d0:fd:01:01:9b:04:5d:92:30:aa: ef:fd:b1:3e:a1:58:fd:f4:17:c0:f0:3b:fd:42:d0:b8:cc:c7: 3c:92:f2:0f:bd:07:71:74:a9:b5:3e:cf:f8:98:9d:29:82:c3: 12:50:02:8c:ec:a2:a4:02:a4:8b:14:c2:1b:eb:45:36:9a:f8: 4c:d8:f6:ea:1d:5b:4f:0b:e0:f1:e2:37:83:5e:61:a1:7f:36: 28:d0:cc:d4:6e:1c:71:bd:cb:cf:36:9a:a9:14:c2:a7:7a:1c: 51:a3:fd:45:f2:9f:ed:1c:72:43:43:65:aa:78:0a:5c:9c:30: 6f:c7:48:db:e4:82:d2:d6:f9:5b:35:6d:0f:e6:7c:8d:eb:3e: 69:64:0f:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbXuX+BtsjfXitALd6e+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey ZTUxYTYwHhcNMjUxMjIxMTUwMDUyWhcNMjUxMjIyMTUwMDUyWjAzMTEwLwYDVQQD EygwYTYyYjdjOGU2ZGUxYTg0ODI0ZjJkYTMxNThmYTMwNmM2YTgxNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwic099bcI8BTuV0FMW8VRtg63WPG Czi6TPUYBZGZOXcSVUtGoI2FvGxZ4xlQOjChxoKehMSds7QaRCsF/1NPn+maVpc8 Sf0uoGWFUh1/7v6AeA9F+73i7Wg5N7ZJ1gZsdPw+T/SHlE1Mo+r8eJ5aSd6YLBBP AZvtoPt010m8C0XK/VWG8bqg5gFZbWj+lGa7trr4yvH7JpRy9tlx/pN4b+WLF0I0 OBg7XM7vHJEJd0BsCrGXhHScGCGjoI/Q76kaXEpKDB6ePQ3S23K4o7xdOKXoiVqN HvjEIP9YA6r/gumPOmdORKhnQNzcCgj0B0Ur7J5W1Rh9ankf/9t+klY6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApit8jm3hqEgk8toxWPowbGqBYiMB8GA1UdIwQY MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt MzQ1YjJhYjBkYjE4LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4 LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE3ar5Ex nxo9khMEKR0kF/jQ5WCWvHBQafHZALHC/mNBonnTCe4n0NDe8jovxUhFNucV6giX uQT6vG68ooP7Pg+bXJXGK5AFkJq8ZmWaj6mi1G1JOksAwQgGjjdlQGTpXbsOSnm6 uVEHl5HBRCVs4tsrsWHQ/QEBmwRdkjCq7/2xPqFY/fQXwPA7/ULQuMzHPJLyD70H cXSptT7P+JidKYLDElACjOyipAKkixTCG+tFNpr4TNj26h1bTwvg8eI3g15hoX82 KNDM1G4ccb3LzzaaqRTCp3ocUaP9RfKf7RxyQ0NlqngKXJwwb8dI2+SC0tb5WzVt D+Z8jes+aWQPzQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:09:51 2025 by rpki-client