This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json) Hash identifier: mROoWH9WwYZszwAvbObNBzah9R2giXts9FEC35Ya1k0= Subject key identifier: 03:07:C7:79:3D:B0:B4:AB:C8:98:EB:DC:48:D8:E7:03:85:79:69:93 Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b Certificate serial: 019B43C977F7C32D77A851DA3F50977280D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft Manifest number: 0291 Signing time: Mon 22 Dec 2025 02:00:35 +0000 Manifest this update: Mon 22 Dec 2025 02:00:35 +0000 Manifest next update: Tue 23 Dec 2025 02:00:35 +0000 Files and hashes: 1: yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa (hash: CLpNYZZ3o+zwOI76Lm9XQZQEHlIeProjGVosiuqFQCw=) 2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: ycG2N8CYGCSXtkXIbVZL5MbZPG9oIFqMeowIc3bsHJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:77:f7:c3:2d:77:a8:51:da:3f:50:97:72:80:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b Validity Not Before: Dec 22 02:00:35 2025 GMT Not After : Dec 23 02:00:35 2025 GMT Subject: CN=0307c7793db0b4abc898ebdc48d8e70385796993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:7a:75:94:2e:6b:be:ce:09:c8:07:9d:29: e6:e5:4d:9a:a8:84:11:ec:21:a6:19:ea:8b:4e:b7: 11:4e:d9:6b:5b:bf:ec:cd:c6:1e:02:13:e8:fd:28: c9:43:24:a9:b8:b8:32:03:c8:dd:9c:da:ac:b8:5c: 82:50:ee:69:4c:4a:ad:f5:ba:e6:dc:b1:b5:db:1d: 69:f5:99:64:40:e9:ab:38:4d:2e:99:4f:d6:ca:5a: 79:ce:73:d5:d4:22:3b:19:b6:38:f5:85:9d:06:55: 77:d1:5f:33:68:40:5c:c5:43:a4:d1:d3:9c:f4:31: 47:ef:f1:7c:7c:b9:ee:41:47:4f:67:47:a0:ca:65: 12:c8:9a:21:da:b8:dd:47:1b:e5:9f:a0:29:aa:53: 7b:61:31:f8:79:9e:22:c9:f7:c9:fe:72:7b:07:d9: ad:1e:a4:fa:b8:43:b2:8f:bd:62:8e:1c:4d:5c:b8: 57:f7:09:35:db:63:21:a7:13:ce:1d:73:ea:4a:3e: 1e:20:f3:61:d7:fd:7f:6e:4f:90:9d:20:95:72:c4: cf:3f:63:25:8e:22:35:d2:0e:44:aa:ca:51:f6:31: d9:24:bb:08:7c:34:9f:a8:07:8f:6d:71:ca:4c:b9: 41:f7:23:66:35:44:e0:0c:8f:0c:dc:2a:f1:97:78: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:C7:79:3D:B0:B4:AB:C8:98:EB:DC:48:D8:E7:03:85:79:69:93 X509v3 Authority Key Identifier: keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:15:8e:3d:cc:05:95:cf:e5:e1:c0:ab:04:f0:16:32:83:74: cd:54:fa:15:ba:73:1f:84:9b:21:de:2d:2c:02:99:5b:6c:83: 39:ec:03:d2:ad:49:23:5f:49:15:07:0c:4a:0d:a3:64:ba:73: 80:d2:c6:ea:e0:6d:82:53:43:92:d5:8a:bf:09:63:b2:01:e9: 07:d3:43:62:ff:36:2f:c3:cc:22:12:e7:49:d2:e6:d9:b7:b5: ba:3e:79:4a:52:a5:5b:26:ff:af:9a:87:62:cd:f9:4e:91:76: 50:c5:fb:15:7f:88:c9:ce:92:ea:27:20:99:0a:44:a5:b1:cb: 5b:86:45:88:82:4a:e4:45:89:f7:24:90:23:8b:a6:15:48:9b: c7:1d:e5:3d:42:9a:54:5b:66:0b:31:df:f3:cc:66:b7:a1:b4: e8:c1:44:2a:96:1b:cb:85:e3:24:e3:94:fb:45:dd:5e:10:b8: 09:34:7b:c1:59:31:c2:d3:4e:14:8c:b5:2c:38:ae:b6:70:37: 80:3b:45:15:fc:9f:f5:9c:bd:28:39:d9:b9:f6:94:04:10:e4: 16:36:49:29:cb:06:f0:dc:56:7d:20:c5:55:9d:5b:26:56:93: 76:b2:a1:fd:85:64:78:c6:be:68:9a:e5:6f:7c:52:12:53:42: f1:fa:6b:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyXf3wy13qFHaP1CXcoDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDNkMTNkZDI2ZjAwNDRhMjgzZmM2YTExZTc1NmEyYTJi NTY5MWIwHhcNMjUxMjIyMDIwMDM1WhcNMjUxMjIzMDIwMDM1WjAzMTEwLwYDVQQD EygwMzA3Yzc3OTNkYjBiNGFiYzg5OGViZGM0OGQ4ZTcwMzg1Nzk2OTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWF6dZQua77OCcgHnSnm5U2aqIQR 7CGmGeqLTrcRTtlrW7/szcYeAhPo/SjJQySpuLgyA8jdnNqsuFyCUO5pTEqt9brm 3LG12x1p9ZlkQOmrOE0umU/Wylp5znPV1CI7GbY49YWdBlV30V8zaEBcxUOk0dOc 9DFH7/F8fLnuQUdPZ0egymUSyJoh2rjdRxvln6ApqlN7YTH4eZ4iyffJ/nJ7B9mt HqT6uEOyj71ijhxNXLhX9wk122MhpxPOHXPqSj4eIPNh1/1/bk+QnSCVcsTPP2Ml jiI10g5EqspR9jHZJLsIfDSfqAePbXHKTLlB9yNmNUTgDI8M3Crxl3h1PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMHx3k9sLSryJjr3EjY5wOFeWmTMB8GA1UdIwQY MBaAFM0D0T3SbwBEooP8ahHnVqKitWkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUt MWEzZmY1MzJiYzIwLzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUtMWEzZmY1MzJiYzIw LzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3RWOPcwF lc/l4cCrBPAWMoN0zVT6FbpzH4SbId4tLAKZW2yDOewD0q1JI19JFQcMSg2jZLpz gNLG6uBtglNDktWKvwljsgHpB9NDYv82L8PMIhLnSdLm2be1uj55SlKlWyb/r5qH Ys35TpF2UMX7FX+Iyc6S6icgmQpEpbHLW4ZFiIJK5EWJ9ySQI4umFUibxx3lPUKa VFtmCzHf88xmt6G06MFEKpYby4XjJOOU+0XdXhC4CTR7wVkxwtNOFIy1LDiutnA3 gDtFFfyf9Zy9KDnZufaUBBDkFjZJKcsG8NxWfSDFVZ1bJlaTdrKh/YVkeMa+aJrl b3xSElNC8fprcg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:26 2025 by rpki-client