This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json) Hash identifier: s139UO88N8xS7ni4LnIkM5tg+ioeOUSlwg8DppJiahY= Subject key identifier: 99:30:42:09:1D:9E:04:DF:F5:C6:A7:B4:1C:84:47:35:49:96:E3:C6 Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019B3DFE68001A0C178814F903CC76E3563F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 23:00:41 +0000 Manifest this update: Sat 20 Dec 2025 23:00:41 +0000 Manifest next update: Sun 21 Dec 2025 23:00:41 +0000 Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=) 2: KkO5XrYOSDYmyU1GDLsiWPHQeqs.roa (hash: Hj7QzIpBoHLwEb/zGFK9zyG2I+wY870ZVTkhagEh2v4=) 3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: nQLwS0XDHV7vKwPP6s4tcPsat7mXSOI0dnXxwFql+e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:68:00:1a:0c:17:88:14:f9:03:cc:76:e3:56:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Dec 20 23:00:41 2025 GMT Not After : Dec 21 23:00:41 2025 GMT Subject: CN=993042091d9e04dff5c6a7b41c8447354996e3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:1d:59:68:4e:98:01:70:83:bb:f9:6d:fd: 6b:72:4f:07:a8:b5:91:07:b5:b8:35:66:74:41:88: 35:06:ce:7f:27:e1:a1:6e:99:11:35:6e:de:7b:38: 23:7a:54:62:81:73:de:cb:f2:e4:c0:a4:56:b9:0f: 39:a2:9c:ab:4a:aa:d3:b2:06:ec:36:8a:e5:b2:95: eb:41:3b:7b:f3:e4:20:57:17:41:ba:18:35:02:c2: 2a:57:fa:01:48:93:6f:9b:0a:e3:18:43:11:45:3f: 3c:26:64:2b:ee:1e:da:41:b2:97:f6:da:73:00:3a: 51:90:fa:9f:02:b7:0d:55:7c:3a:71:17:73:bb:e0: 57:d0:de:60:55:85:60:92:70:1b:98:25:6c:e3:fb: 46:f6:fa:2e:0d:66:34:2f:09:e4:65:03:e1:03:0a: e6:ef:08:57:93:86:be:fa:22:00:4d:85:8e:3c:2d: cb:ab:87:93:a8:75:0c:af:25:4c:29:12:42:08:6c: 2f:af:c3:7f:0d:1e:63:54:3f:5b:00:e4:c2:8d:36: 4e:86:30:47:87:9f:78:5c:dd:f2:f4:50:00:73:6c: 0b:61:78:fd:d5:1b:26:69:c7:f1:5d:ae:c0:1b:c1: 0f:67:72:8f:b6:39:5a:b2:2b:7e:4e:3a:8d:ef:0a: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:30:42:09:1D:9E:04:DF:F5:C6:A7:B4:1C:84:47:35:49:96:E3:C6 X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b8:32:eb:ee:34:48:54:16:8a:82:01:77:4f:99:03:1b:25: f7:fc:32:d6:2a:c6:3c:e2:d3:7f:68:46:d0:f1:1e:2a:2f:86: 02:1a:75:9c:cc:b8:b1:9a:43:ba:ea:64:e3:c1:6d:c1:25:bf: df:ad:c1:b6:2b:d0:88:65:83:0e:82:b2:c8:2b:55:00:6d:e7: f9:1e:6c:ed:c0:a7:27:94:8c:46:c6:de:dd:f9:d7:04:71:1a: f2:73:65:e9:fd:50:a8:8b:cb:10:54:28:c8:73:00:9f:85:f8: a6:5d:39:85:24:52:fa:34:0a:cb:18:f3:d8:4d:6c:d6:8a:a1: 50:b1:de:3c:15:8d:5b:f0:37:a6:73:8a:de:48:61:40:f0:0a: f8:4c:d8:53:a1:ac:30:0d:ee:8e:8c:3b:ba:eb:7f:75:3e:e0: 9b:63:57:c2:ad:81:84:b7:ce:20:fd:17:51:4e:6b:54:b5:ee: 31:58:37:bc:cb:48:2b:75:38:87:a1:64:27:ee:ff:0f:6f:83: 68:87:78:70:fa:30:be:12:33:9f:46:95:23:f6:c0:aa:e6:08: 73:d7:06:34:f0:62:28:21:30:84:ee:5a:b1:42:f8:89:d8:d3: 6c:62:14:8d:51:6d:94:c8:10:ee:3f:82:df:b1:79:ff:8e:6e: 0a:73:53:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/mgAGgwXiBT5A8x241Y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjUxMjIwMjMwMDQxWhcNMjUxMjIxMjMwMDQxWjAzMTEwLwYDVQQD Eyg5OTMwNDIwOTFkOWUwNGRmZjVjNmE3YjQxYzg0NDczNTQ5OTZlM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVcdWWhOmAFwg7v5bf1rck8HqLWR B7W4NWZ0QYg1Bs5/J+GhbpkRNW7eezgjelRigXPey/LkwKRWuQ85opyrSqrTsgbs NorlspXrQTt78+QgVxdBuhg1AsIqV/oBSJNvmwrjGEMRRT88JmQr7h7aQbKX9tpz ADpRkPqfArcNVXw6cRdzu+BX0N5gVYVgknAbmCVs4/tG9vouDWY0LwnkZQPhAwrm 7whXk4a++iIATYWOPC3Lq4eTqHUMryVMKRJCCGwvr8N/DR5jVD9bAOTCjTZOhjBH h594XN3y9FAAc2wLYXj91RsmacfxXa7AG8EPZ3KPtjlasit+TjqN7wrKAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkwQgkdngTf9cantByERzVJluPGMB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbgy6+40 SFQWioIBd0+ZAxsl9/wy1irGPOLTf2hG0PEeKi+GAhp1nMy4sZpDuupk48FtwSW/ 363BtivQiGWDDoKyyCtVAG3n+R5s7cCnJ5SMRsbe3fnXBHEa8nNl6f1QqIvLEFQo yHMAn4X4pl05hSRS+jQKyxjz2E1s1oqhULHePBWNW/A3pnOK3khhQPAK+EzYU6Gs MA3ujow7uut/dT7gm2NXwq2BhLfOIP0XUU5rVLXuMVg3vMtIK3U4h6FkJ+7/D2+D aId4cPowvhIzn0aVI/bAquYIc9cGNPBiKCEwhO5asUL4idjTbGIUjVFtlMgQ7j+C 37F5/45uCnNTAg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:12 2025 by rpki-client