This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json) Hash identifier: wdwv8eotIKQ5DVFMcYoT/H2e0KE2zopDmbG52I153Lg= Subject key identifier: 35:B6:EE:FD:9E:6E:91:1B:34:2E:36:83:A9:F0:FE:E7:58:CA:0D:6F Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Certificate serial: 019B6CFCACFE82CD3DF83C8C9AEE03E9AD98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft Manifest number: 0B8A Signing time: Tue 30 Dec 2025 02:00:56 +0000 Manifest this update: Tue 30 Dec 2025 02:00:56 +0000 Manifest next update: Wed 31 Dec 2025 02:00:56 +0000 Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: nH7Z8pDmKKioIoxriFZhoz0qecmTIgVoaX4oskq/3MM=) 2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:ac:fe:82:cd:3d:f8:3c:8c:9a:ee:03:e9:ad:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Validity Not Before: Dec 30 02:00:56 2025 GMT Not After : Dec 31 02:00:56 2025 GMT Subject: CN=35b6eefd9e6e911b342e3683a9f0fee758ca0d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:97:f2:5c:58:63:33:84:ef:04:d9:87:e0: e9:00:0c:9f:f1:8a:e7:81:13:0a:14:31:c2:b1:cf: 20:40:ed:4b:f4:a2:a0:da:f1:d3:3e:af:15:fc:86: 98:16:ef:ba:02:e6:97:2b:4e:48:23:39:83:0f:91: c3:c2:1b:c8:08:6a:53:7a:54:d4:e1:04:b6:f0:d5: 33:ff:2a:35:76:66:4c:2b:0f:49:14:07:7d:91:32: d6:0f:c5:8d:71:b9:bf:ce:ab:8b:f1:8a:31:91:68: 22:f9:b6:28:8d:32:4e:39:21:f0:92:f0:d9:eb:70: bf:8f:f0:72:8f:6b:ed:61:aa:ca:21:9c:6d:ae:5b: 38:29:5a:7d:c8:f9:41:31:38:17:4e:61:c7:f7:a8: 90:e5:d2:14:38:16:18:39:06:8a:02:3a:f2:a8:af: a9:4d:05:b7:2c:45:a9:ce:18:2b:66:f8:f3:38:04: aa:43:4a:10:e9:97:a3:06:b2:35:8a:80:08:57:66: 80:f6:be:5a:3a:62:86:f2:b4:d9:51:bf:27:e7:e4: 54:d8:be:73:69:e0:df:90:ed:55:58:91:de:f8:47: 62:00:d6:d9:84:0b:22:57:37:dd:58:b1:95:3e:97: 7d:45:87:76:52:d4:21:4b:01:10:d7:36:4c:f9:22: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B6:EE:FD:9E:6E:91:1B:34:2E:36:83:A9:F0:FE:E7:58:CA:0D:6F X509v3 Authority Key Identifier: keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:67:11:d1:21:e8:67:00:85:f3:27:19:c0:66:a5:7a:ac:47: 58:25:6b:d1:d6:81:7a:3f:ea:5b:94:cd:16:fc:2e:8a:57:dd: 35:c0:77:e5:40:ef:f8:72:55:2c:96:d5:8c:2e:56:52:c7:2f: c2:9a:89:b6:0c:4d:4c:96:c9:c8:bc:85:ed:96:03:b0:6c:0c: 37:3a:15:ec:2c:0b:5a:77:55:74:d2:2e:52:cf:75:f3:94:94: 1e:99:b7:9b:3a:14:8c:88:2a:0d:e8:d9:fb:7d:fe:4d:8a:35: 40:30:0c:74:e1:63:eb:e4:91:9f:2f:25:6e:03:8a:45:cb:b4: 54:6b:45:37:41:11:68:5d:10:aa:9e:e8:b5:74:54:27:a2:ba: 25:ce:60:ff:86:85:63:90:88:14:8b:e5:75:43:87:eb:7d:f8: be:94:61:49:31:f6:ef:3f:22:dc:00:06:2b:8a:ac:5f:73:25: 52:3f:04:ee:05:0b:68:89:2c:f1:49:95:57:90:6b:54:61:f7: dc:bf:68:67:58:a7:4c:c0:3a:6c:4d:23:95:92:f8:7c:18:bd: 86:2f:50:b3:74:46:e4:e3:ea:69:10:d9:84:52:0a:7d:e9:0d: 1b:5d:3a:06:cc:32:0d:a7:bc:cc:ca:a7:43:2d:63:dd:b7:9e: 7e:e3:b7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/Kz+gs09+DyMmu4D6a2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy NTIxYzcwHhcNMjUxMjMwMDIwMDU2WhcNMjUxMjMxMDIwMDU2WjAzMTEwLwYDVQQD EygzNWI2ZWVmZDllNmU5MTFiMzQyZTM2ODNhOWYwZmVlNzU4Y2EwZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoGX8lxYYzOE7wTZh+DpAAyf8Yrn gRMKFDHCsc8gQO1L9KKg2vHTPq8V/IaYFu+6AuaXK05IIzmDD5HDwhvICGpTelTU 4QS28NUz/yo1dmZMKw9JFAd9kTLWD8WNcbm/zquL8YoxkWgi+bYojTJOOSHwkvDZ 63C/j/Byj2vtYarKIZxtrls4KVp9yPlBMTgXTmHH96iQ5dIUOBYYOQaKAjryqK+p TQW3LEWpzhgrZvjzOASqQ0oQ6ZejBrI1ioAIV2aA9r5aOmKG8rTZUb8n5+RU2L5z aeDfkO1VWJHe+EdiANbZhAsiVzfdWLGVPpd9RYd2UtQhSwEQ1zZM+SJUqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW27v2ebpEbNC42g6nw/udYyg1vMB8GA1UdIwQY MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGcR0SHo ZwCF8ycZwGaleqxHWCVr0daBej/qW5TNFvwuilfdNcB35UDv+HJVLJbVjC5WUscv wpqJtgxNTJbJyLyF7ZYDsGwMNzoV7CwLWndVdNIuUs9185SUHpm3mzoUjIgqDejZ +33+TYo1QDAMdOFj6+SRny8lbgOKRcu0VGtFN0ERaF0Qqp7otXRUJ6K6Jc5g/4aF Y5CIFIvldUOH6334vpRhSTH27z8i3AAGK4qsX3MlUj8E7gULaIks8UmVV5BrVGH3 3L9oZ1inTMA6bE0jlZL4fBi9hi9Qs3RG5OPqaRDZhFIKfekNG106BswyDae8zMqn Qy1j3beefuO3wQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:13 2025 by rpki-client