This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json) Hash identifier: IqQJbaFHPzD9avUp5fjsdcuQcFJjXYWqZHfkwbKQsHk= Subject key identifier: 0C:C5:ED:37:3B:01:ED:85:C5:2F:FA:01:80:FE:6E:AC:86:99:14:E0 Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019B533CA7A0F9432451AD22A1845CA735E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 02:00:42 +0000 Manifest this update: Thu 25 Dec 2025 02:00:42 +0000 Manifest next update: Fri 26 Dec 2025 02:00:42 +0000 Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=) 2: KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa (hash: Hj7QzIpBoHLwEb/zGFK9zyG2I+wY870ZVTkhagEh2v4=) 3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: fsJfwDQ2WrnQcu2fu44s39zJUTDNGDt2Tjbpe0F1ofU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:a7:a0:f9:43:24:51:ad:22:a1:84:5c:a7:35:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Dec 25 02:00:42 2025 GMT Not After : Dec 26 02:00:42 2025 GMT Subject: CN=0cc5ed373b01ed85c52ffa0180fe6eac869914e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:89:46:14:fe:c3:da:2f:ac:76:8c:1f:d9: ab:01:1f:88:c6:6e:14:30:a6:63:67:fc:13:5f:6f: 4c:87:90:a7:37:70:98:7e:c6:b3:00:61:b6:d8:60: a6:21:8c:84:c3:fc:80:6b:8f:76:ff:a4:03:9c:fc: a9:e2:18:23:ea:7d:65:ea:6c:fb:fd:32:f9:0f:fd: 44:e7:5e:24:8c:f8:1c:31:bd:33:1d:d7:1d:cc:0e: 0f:93:09:3f:9e:30:12:e4:0f:4c:f4:d9:63:d4:8c: 0a:84:fc:72:e9:ac:71:c7:fd:aa:15:b9:08:22:8c: 53:32:26:60:92:cf:26:63:fc:1e:c8:bb:18:bc:41: 10:41:5d:a4:f1:02:33:51:aa:40:fc:84:bd:26:ff: 00:9b:d4:52:0a:d2:4f:6c:c5:29:fb:0c:c1:47:b8: 78:23:e4:c6:c0:7f:69:35:8b:fa:ac:95:d4:07:15: 3d:4e:68:d6:f6:c4:a0:7e:08:15:14:cb:70:cc:51: 02:da:55:c9:15:ea:0e:a1:29:fb:92:30:e2:f6:29: cb:3a:16:0e:5a:b9:d0:c4:45:9c:d5:b5:2c:87:f6: 51:08:0a:19:c6:74:01:ff:e9:3d:d0:8d:a9:f6:67: 1d:a7:55:90:1f:8a:35:13:f1:bb:f0:bb:24:5b:d0: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C5:ED:37:3B:01:ED:85:C5:2F:FA:01:80:FE:6E:AC:86:99:14:E0 X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:40:6d:67:9d:c5:93:c3:8d:ed:cb:eb:e9:83:14:e2:0b:77: 5e:7c:0e:71:cc:ed:2b:79:f8:f9:b2:a3:b5:a6:81:63:db:42: d5:b3:cf:b1:ef:c2:81:04:16:1e:3d:c6:53:e8:09:77:43:4e: a4:09:b1:95:2a:ca:91:14:7e:de:ec:d6:74:f0:5c:71:7c:ef: 85:90:fc:86:1b:ca:8a:d2:b8:66:ce:31:af:a6:16:93:7a:c8: d8:ab:d6:2c:45:71:64:4f:c0:2d:b5:57:7e:80:6e:0a:0e:9f: b4:f5:29:d8:c8:9f:f6:2d:65:1a:83:6a:9b:e2:42:b3:b0:eb: 92:1a:a0:d5:dd:6b:d6:c6:ae:f2:f7:6d:8b:c5:b9:7f:00:e7: 50:bb:e2:eb:b5:90:64:3f:ab:3e:d4:c4:78:6e:d9:16:88:b4: 93:68:9f:e0:c0:ee:99:2a:23:8a:13:ab:0f:a1:e1:2e:a4:31: 7a:a6:1f:55:5e:f6:12:3c:10:fe:5b:1f:e4:9c:6f:5b:79:e8: 58:3d:9f:0c:26:95:a9:d5:ce:22:a5:83:f2:99:7a:c9:a9:33: 05:12:32:10:9c:f8:54:38:28:42:c3:a9:1e:ed:04:4f:55:d6: f1:3e:88:7c:20:6c:0d:49:2a:4d:3e:a5:0e:71:3e:b2:12:c4: 46:86:21:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPKeg+UMkUa0ioYRcpzXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjUxMjI1MDIwMDQyWhcNMjUxMjI2MDIwMDQyWjAzMTEwLwYDVQQD EygwY2M1ZWQzNzNiMDFlZDg1YzUyZmZhMDE4MGZlNmVhYzg2OTkxNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW6JRhT+w9ovrHaMH9mrAR+Ixm4U MKZjZ/wTX29Mh5CnN3CYfsazAGG22GCmIYyEw/yAa492/6QDnPyp4hgj6n1l6mz7 /TL5D/1E514kjPgcMb0zHdcdzA4Pkwk/njAS5A9M9Nlj1IwKhPxy6axxx/2qFbkI IoxTMiZgks8mY/weyLsYvEEQQV2k8QIzUapA/IS9Jv8Am9RSCtJPbMUp+wzBR7h4 I+TGwH9pNYv6rJXUBxU9TmjW9sSgfggVFMtwzFEC2lXJFeoOoSn7kjDi9inLOhYO WrnQxEWc1bUsh/ZRCAoZxnQB/+k90I2p9mcdp1WQH4o1E/G78LskW9CPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzF7Tc7Ae2FxS/6AYD+bqyGmRTgMB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEBtZ53F k8ON7cvr6YMU4gt3XnwOccztK3n4+bKjtaaBY9tC1bPPse/CgQQWHj3GU+gJd0NO pAmxlSrKkRR+3uzWdPBccXzvhZD8hhvKitK4Zs4xr6YWk3rI2KvWLEVxZE/ALbVX foBuCg6ftPUp2Mif9i1lGoNqm+JCs7Drkhqg1d1r1sau8vdti8W5fwDnULvi67WQ ZD+rPtTEeG7ZFoi0k2if4MDumSojihOrD6HhLqQxeqYfVV72EjwQ/lsf5JxvW3no WD2fDCaVqdXOIqWD8pl6yakzBRIyEJz4VDgoQsOpHu0ET1XW8T6IfCBsDUkqTT6l DnE+shLERoYhJw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:38:06 2025 by rpki-client