This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json) Hash identifier: XowEpQ+grkVVdGQj/L/WMnrz0RLHXxrdjv97+mgbc2w= Subject key identifier: 23:B1:1D:FD:B4:10:D3:D8:50:C9:23:41:DF:05:98:C7:AE:34:BD:73 Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae Certificate serial: 019B6E0F73EBC60FC29192EFC7DEA31596D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft Manifest number: 0E31 Signing time: Tue 30 Dec 2025 07:01:04 +0000 Manifest this update: Tue 30 Dec 2025 07:01:04 +0000 Manifest next update: Wed 31 Dec 2025 07:01:04 +0000 Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=) 2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: HfxQGUDhjlUVeECRQHByiGWBQOM08AP3+smSVZvmUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:73:eb:c6:0f:c2:91:92:ef:c7:de:a3:15:96:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae Validity Not Before: Dec 30 07:01:04 2025 GMT Not After : Dec 31 07:01:04 2025 GMT Subject: CN=23b11dfdb410d3d850c92341df0598c7ae34bd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:06:3c:21:35:81:69:dc:4d:a0:1f:51:0c: a5:0a:6c:07:d0:e3:23:9b:20:96:60:7b:4b:b2:68: 55:34:d5:24:4e:f9:e7:dc:90:3e:e8:b9:e5:c3:ff: 78:58:0b:d5:a2:9c:42:de:1c:06:b4:6a:8f:35:07: b6:02:da:25:e2:71:42:9e:95:5d:2e:0b:57:3b:c3: 37:58:e5:49:bf:97:30:db:d1:4c:d0:ac:6f:df:a3: b7:5a:26:94:42:ed:47:79:63:6b:77:a6:73:df:59: 32:d4:ef:fa:66:aa:22:26:5b:8f:5a:d7:e0:7c:c1: 2e:60:ba:e1:60:fd:18:4f:0b:79:24:08:a0:1f:0d: db:fe:13:e3:08:fb:cd:5c:b9:fd:5d:6a:82:92:82: 67:ad:9f:cf:93:90:ba:97:9c:80:19:c4:2c:bf:34: 6b:40:fe:b0:c7:c0:e3:ce:ac:39:f9:6e:36:23:34: 3a:86:97:9f:44:e7:5f:b3:78:41:85:49:09:cd:d0: 1a:81:af:b0:c0:c1:2c:28:59:44:61:e2:81:d0:f8: 83:08:2a:8c:12:c4:e9:b9:c4:1e:38:60:20:69:4f: 41:2a:fd:a7:39:42:d7:ec:be:f1:13:ae:a7:bf:08: 02:a6:4a:00:55:c8:f1:84:48:33:43:cd:3a:a1:cc: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B1:1D:FD:B4:10:D3:D8:50:C9:23:41:DF:05:98:C7:AE:34:BD:73 X509v3 Authority Key Identifier: keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9e:e3:0e:e7:33:9e:90:4a:78:00:c7:bb:90:aa:a0:7a:54: 32:7c:20:65:f3:a2:d5:65:c3:2b:4b:be:21:92:86:bc:10:06: 2e:df:8b:65:f0:0e:d4:ec:4f:7c:a9:44:18:a1:3c:c0:dc:26: 33:7b:e5:ac:5b:8f:68:8b:37:1d:d7:02:f1:cc:7a:14:13:5e: 2b:ea:5c:9f:62:48:de:8c:59:c1:3a:86:7f:6c:d1:32:01:8d: 91:a4:ab:aa:f1:b3:8e:21:7e:59:3b:a2:b1:28:19:43:68:2d: 90:95:11:88:7e:42:68:b4:8c:a4:58:71:01:4c:42:13:ce:98: 0e:23:af:29:8e:cf:3f:9c:70:98:d7:26:19:5e:5b:c5:ef:01: 76:57:3c:99:77:8d:db:43:3b:12:a1:95:f0:c1:01:48:1b:9f: cd:69:0f:6f:29:cc:57:e4:d0:f9:9b:63:78:90:b5:8c:ea:12: ec:2d:0a:81:4f:23:b4:08:9d:22:62:78:52:b3:56:07:9b:0b: 3b:4b:43:12:cf:bc:68:36:a0:05:be:6f:32:cd:b3:bb:99:af: 69:d0:44:84:1a:15:e3:fa:8b:ba:13:18:1b:a8:79:41:3d:58: 04:82:e6:ed:e7:8b:6a:90:2f:18:27:c9:c4:de:58:aa:99:c6: 9f:bb:2d:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD3Prxg/CkZLvx96jFZbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDYwMjM4ZDA2NjhkNDVhMDQxNjE4YWM1ZGY3NjdmNTlh MGM0YWUwHhcNMjUxMjMwMDcwMTA0WhcNMjUxMjMxMDcwMTA0WjAzMTEwLwYDVQQD EygyM2IxMWRmZGI0MTBkM2Q4NTBjOTIzNDFkZjA1OThjN2FlMzRiZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3soGPCE1gWncTaAfUQylCmwH0OMj myCWYHtLsmhVNNUkTvnn3JA+6Lnlw/94WAvVopxC3hwGtGqPNQe2Atol4nFCnpVd LgtXO8M3WOVJv5cw29FM0Kxv36O3WiaUQu1HeWNrd6Zz31ky1O/6ZqoiJluPWtfg fMEuYLrhYP0YTwt5JAigHw3b/hPjCPvNXLn9XWqCkoJnrZ/Pk5C6l5yAGcQsvzRr QP6wx8Djzqw5+W42IzQ6hpefROdfs3hBhUkJzdAaga+wwMEsKFlEYeKB0PiDCCqM EsTpucQeOGAgaU9BKv2nOULX7L7xE66nvwgCpkoAVcjxhEgzQ806ocxEJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOxHf20ENPYUMkjQd8FmMeuNL1zMB8GA1UdIwQY MBaAFM0GAjjQZo1FoEFhisXfdn9ZoMSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYt N2ZiNmVhODk2MzdmLzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83NjIwMDYtZjE1OC00ZTVhLWI5NTYtN2ZiNmVhODk2Mzdm LzEvelFZQ09OQm1qVVdnUVdHS3hkOTJmMW1neEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ7jDucz npBKeADHu5CqoHpUMnwgZfOi1WXDK0u+IZKGvBAGLt+LZfAO1OxPfKlEGKE8wNwm M3vlrFuPaIs3HdcC8cx6FBNeK+pcn2JI3oxZwTqGf2zRMgGNkaSrqvGzjiF+WTui sSgZQ2gtkJURiH5CaLSMpFhxAUxCE86YDiOvKY7PP5xwmNcmGV5bxe8Bdlc8mXeN 20M7EqGV8MEBSBufzWkPbynMV+TQ+ZtjeJC1jOoS7C0KgU8jtAidImJ4UrNWB5sL O0tDEs+8aDagBb5vMs2zu5mvadBEhBoV4/qLuhMYG6h5QT1YBILm7eeLapAvGCfJ xN5YqpnGn7stUQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:30:44 2025 by rpki-client