This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json) Hash identifier: dO9g2f04ebjuVay5wWmtoy4aofldCGC8Hmwb9nDSoVQ= Subject key identifier: 52:1E:DB:8B:61:50:5E:2A:A5:35:82:CA:15:B7:BE:F6:96:C9:97:AF Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Certificate serial: 019B409202C090DC21909CCCA31D7310F55F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft Manifest number: 0B73 Signing time: Sun 21 Dec 2025 11:01:09 +0000 Manifest this update: Sun 21 Dec 2025 11:01:09 +0000 Manifest next update: Mon 22 Dec 2025 11:01:09 +0000 Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: +qu8sDG1KIXg8zTi9JrcNbgKzubtVfEXQZ/5bMTyU8M=) 2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:02:c0:90:dc:21:90:9c:cc:a3:1d:73:10:f5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Validity Not Before: Dec 21 11:01:09 2025 GMT Not After : Dec 22 11:01:09 2025 GMT Subject: CN=521edb8b61505e2aa53582ca15b7bef696c997af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:ae:53:69:ae:26:0a:82:80:39:b7:1c:3b: 30:da:af:d3:5e:f3:4e:0c:75:70:d2:3e:7a:ea:5d: 6e:88:fe:5d:e5:b6:23:f8:61:84:e0:44:05:09:8e: 1c:34:06:bc:f7:34:ae:83:bc:14:5b:af:62:df:f1: 4e:50:7b:1e:e5:de:03:a8:c1:31:a6:c7:35:3a:57: d5:50:59:b0:9d:93:64:14:b8:c9:cd:90:80:d2:cb: 3d:00:9c:64:5a:19:c0:40:26:55:c5:9f:03:c9:fe: f1:bc:7d:ed:e5:50:58:cb:39:2c:b4:4a:de:04:6c: 57:b0:7b:0e:d4:ea:2e:4c:b9:38:2d:9a:ac:3d:d2: f1:61:0f:00:fc:9f:f7:0b:f0:27:88:27:42:dc:36: 6f:54:79:17:3c:8c:91:7a:2d:72:69:11:ac:52:16: 56:24:0d:aa:53:e7:4b:d0:1b:7c:35:29:5d:89:84: 52:eb:b4:09:ea:a1:23:2c:fc:96:45:5e:2c:71:63: 6c:1a:5c:98:3c:4b:e3:46:86:7c:5e:86:a0:25:e9: de:6c:53:9e:f2:84:e3:80:48:f4:5e:72:ef:16:d1: bb:f5:b7:76:a8:51:07:fb:d9:3a:ea:34:87:5f:1d: ce:61:c3:a0:ab:c5:5f:21:bd:62:30:e8:7e:8c:2c: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:DB:8B:61:50:5E:2A:A5:35:82:CA:15:B7:BE:F6:96:C9:97:AF X509v3 Authority Key Identifier: keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d0:22:86:f2:16:d9:1a:a6:df:9c:04:87:65:d1:ef:3f:f8: ea:b9:73:70:9a:da:9f:c1:35:bd:6d:f7:b4:76:98:db:99:95: ac:01:c1:34:30:12:47:9e:49:3d:6b:cd:c7:6e:09:62:fb:a3: f9:c8:e7:82:db:cf:09:30:05:fc:ab:4b:4e:43:8e:ab:1f:41: 07:da:92:e0:85:c0:fc:d5:0f:ad:12:7c:b2:be:fb:b1:1c:7a: d0:7a:c5:39:70:02:1a:2d:61:20:a0:3d:cf:61:9e:0a:c0:f0: 5f:b3:a2:ae:c6:0b:79:e1:d3:42:20:55:1e:b3:eb:95:ca:bf: e3:77:c8:45:4b:46:c2:f7:7a:38:f2:26:34:87:08:fc:74:e3: dd:6f:cb:72:5c:62:5d:7c:a7:ee:14:47:fa:d8:e9:64:7c:27: 47:11:3a:ca:4b:c9:11:b2:41:65:c6:ca:2b:56:a2:8e:56:45: 54:22:fd:3f:35:5f:91:a4:cf:d6:25:6d:ee:fd:8e:97:f3:b2: e9:05:bd:40:d6:42:47:65:66:83:42:5c:33:ce:58:c4:6d:76: eb:d0:2a:55:b9:28:da:53:65:41:74:a9:aa:2a:4b:19:ce:83: 7e:bc:16:de:df:b7:0d:a1:02:84:45:be:4a:b8:23:e3:a1:f7: 6c:93:54:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkgLAkNwhkJzMox1zEPVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy NTIxYzcwHhcNMjUxMjIxMTEwMTA5WhcNMjUxMjIyMTEwMTA5WjAzMTEwLwYDVQQD Eyg1MjFlZGI4YjYxNTA1ZTJhYTUzNTgyY2ExNWI3YmVmNjk2Yzk5N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc6uU2muJgqCgDm3HDsw2q/TXvNO DHVw0j566l1uiP5d5bYj+GGE4EQFCY4cNAa89zSug7wUW69i3/FOUHse5d4DqMEx psc1OlfVUFmwnZNkFLjJzZCA0ss9AJxkWhnAQCZVxZ8Dyf7xvH3t5VBYyzkstEre BGxXsHsO1OouTLk4LZqsPdLxYQ8A/J/3C/AniCdC3DZvVHkXPIyRei1yaRGsUhZW JA2qU+dL0Bt8NSldiYRS67QJ6qEjLPyWRV4scWNsGlyYPEvjRoZ8XoagJenebFOe 8oTjgEj0XnLvFtG79bd2qFEH+9k66jSHXx3OYcOgq8VfIb1iMOh+jCwQdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIe24thUF4qpTWCyhW3vvaWyZevMB8GA1UdIwQY MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9AihvIW 2Rqm35wEh2XR7z/46rlzcJran8E1vW33tHaY25mVrAHBNDASR55JPWvNx24JYvuj +cjngtvPCTAF/KtLTkOOqx9BB9qS4IXA/NUPrRJ8sr77sRx60HrFOXACGi1hIKA9 z2GeCsDwX7OirsYLeeHTQiBVHrPrlcq/43fIRUtGwvd6OPImNIcI/HTj3W/Lclxi XXyn7hRH+tjpZHwnRxE6ykvJEbJBZcbKK1aijlZFVCL9PzVfkaTP1iVt7v2Ol/Oy 6QW9QNZCR2Vmg0JcM85YxG1269AqVbko2lNlQXSpqipLGc6DfrwW3t+3DaEChEW+ Srgj46H3bJNUJg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:56:35 2025 by rpki-client