This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json) Hash identifier: Zmv5r8bMytsuhOcOJDgHX4orDhHVL0iC6w6YMRyhJyA= Subject key identifier: 0B:1C:35:17:B4:50:C0:6C:35:F8:74:D5:8B:C5:D4:23:0D:30:04:41 Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Certificate serial: 019B38A1640C9A7F15CECB7E5A6E9A17F21E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 22:00:59 +0000 Manifest this update: Fri 19 Dec 2025 22:00:59 +0000 Manifest next update: Sat 20 Dec 2025 22:00:59 +0000 Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=) 2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: DDjOZXQundEN8vxc4f7cd4WtdBE6ueUiXgvGoxolOas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:64:0c:9a:7f:15:ce:cb:7e:5a:6e:9a:17:f2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05 Validity Not Before: Dec 19 22:00:59 2025 GMT Not After : Dec 20 22:00:59 2025 GMT Subject: CN=0b1c3517b450c06c35f874d58bc5d4230d300441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:ab:26:e0:e9:de:ea:8c:f5:0e:10:80:55: 7f:fd:22:ed:0a:8d:31:2f:8e:55:59:51:b9:dd:0f: 15:11:03:02:a9:ce:64:c7:fb:4e:d4:cf:10:1a:15: 6e:24:cc:f2:7a:ea:e8:b3:76:62:19:25:56:16:c4: a3:9f:b9:ea:ef:94:54:a0:b3:50:2b:79:48:61:b4: b9:21:08:07:c1:1a:3c:9b:76:fc:31:f4:42:8f:0b: 4e:90:5e:f1:ac:11:8b:b9:78:55:45:c6:2b:81:cf: b2:bf:81:d1:42:9f:31:70:0d:e4:ef:17:e5:a5:0b: 01:7f:0a:cd:aa:1a:c7:5e:59:cc:84:90:c8:74:62: 9c:42:23:39:cd:aa:dc:f2:ef:50:b9:cd:bb:9e:4a: 60:f8:2d:65:50:03:58:01:8b:c7:d4:4d:43:e5:7a: be:fd:77:15:2c:ba:19:86:08:2f:9a:d3:c7:bd:97: 88:22:8a:af:a9:78:b7:a1:66:fd:37:ef:68:4d:82: 0b:ba:8c:00:54:21:b0:8b:8a:02:bf:7a:d5:a7:41: 17:81:2e:7a:91:a2:6b:f5:6c:b8:99:b8:77:61:00: ef:39:df:0e:7d:dc:64:4f:4e:ed:91:1d:c3:ae:04: e9:40:85:a4:6c:6f:bc:1e:f9:ec:a3:21:c7:05:40: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1C:35:17:B4:50:C0:6C:35:F8:74:D5:8B:C5:D4:23:0D:30:04:41 X509v3 Authority Key Identifier: keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ca:c8:de:fd:26:b1:ce:29:0c:86:5f:a2:98:9b:9f:1b:7e: 4c:ef:c8:a4:6c:6e:1d:cc:70:86:d7:73:07:ef:8a:e0:00:53: 70:00:92:b2:4d:38:4f:1a:a2:e2:90:d2:ea:08:8b:3c:96:ae: b9:7a:2b:91:e9:43:56:42:f8:b2:16:47:93:f0:1d:92:0c:0e: 6c:67:96:bd:e1:86:69:ff:7d:5b:04:92:f4:65:c3:f6:07:81: 0a:58:90:e6:db:f5:d8:2f:6c:4a:20:f9:95:b6:2b:80:33:7b: e3:8e:ae:a8:fc:89:01:b9:37:89:74:d8:2f:8a:f3:fc:c0:c4: a2:22:6a:45:8a:44:53:67:3d:29:83:5b:dc:39:4c:92:5b:30: 64:64:a8:cc:16:7e:0b:cb:96:1b:25:ab:9a:2f:25:f8:f2:42: 43:3d:ad:75:29:ba:77:9c:dc:62:95:1f:3d:17:3a:52:eb:35: 4c:83:ba:d1:c0:e5:a6:80:b2:01:b4:f5:05:45:a1:ce:65:4f: 28:0e:68:45:96:9a:42:8b:cd:7d:55:67:b1:32:dd:00:da:77: 21:ee:5b:da:cf:76:d1:56:ed:87:7d:e1:62:af:80:ac:fe:10: 28:ee:eb:37:66:f8:62:7e:e7:46:85:ce:a9:b9:5f:2c:85:e3: 40:8d:a4:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oWQMmn8Vzst+Wm6aF/IeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk OWJlMDUwHhcNMjUxMjE5MjIwMDU5WhcNMjUxMjIwMjIwMDU5WjAzMTEwLwYDVQQD EygwYjFjMzUxN2I0NTBjMDZjMzVmODc0ZDU4YmM1ZDQyMzBkMzAwNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoSrJuDp3uqM9Q4QgFV//SLtCo0x L45VWVG53Q8VEQMCqc5kx/tO1M8QGhVuJMzyeuros3ZiGSVWFsSjn7nq75RUoLNQ K3lIYbS5IQgHwRo8m3b8MfRCjwtOkF7xrBGLuXhVRcYrgc+yv4HRQp8xcA3k7xfl pQsBfwrNqhrHXlnMhJDIdGKcQiM5zarc8u9Quc27nkpg+C1lUANYAYvH1E1D5Xq+ /XcVLLoZhggvmtPHvZeIIoqvqXi3oWb9N+9oTYILuowAVCGwi4oCv3rVp0EXgS56 kaJr9Wy4mbh3YQDvOd8OfdxkT07tkR3DrgTpQIWkbG+8HvnsoyHHBUCErwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAscNRe0UMBsNfh01YvF1CMNMARBMB8GA1UdIwQY MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2 LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8rI3v0m sc4pDIZfopibnxt+TO/IpGxuHcxwhtdzB++K4ABTcACSsk04Txqi4pDS6giLPJau uXorkelDVkL4shZHk/AdkgwObGeWveGGaf99WwSS9GXD9geBCliQ5tv12C9sSiD5 lbYrgDN7446uqPyJAbk3iXTYL4rz/MDEoiJqRYpEU2c9KYNb3DlMklswZGSozBZ+ C8uWGyWrmi8l+PJCQz2tdSm6d5zcYpUfPRc6Uus1TIO60cDlpoCyAbT1BUWhzmVP KA5oRZaaQovNfVVnsTLdANp3Ie5b2s920Vbth33hYq+ArP4QKO7rN2b4Yn7nRoXO qblfLIXjQI2kkw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:12:52 2025 by rpki-client