This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json) Hash identifier: WHvKbgnBH/tSVmJc2ERxPCwIQsSivGtN+2Jd8QuysN8= Subject key identifier: 8B:7A:71:C7:DA:CD:48:A9:0C:C5:A8:29:79:DD:05:48:72:14:5E:85 Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a Certificate serial: 019B4DA87A9828944CCAE7B7272AFADBB52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft Manifest number: 0AA9 Signing time: Wed 24 Dec 2025 00:00:45 +0000 Manifest this update: Wed 24 Dec 2025 00:00:45 +0000 Manifest next update: Thu 25 Dec 2025 00:00:45 +0000 Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: /N7pDgt2GXRxltIibt+30UjgkNqTTBDpw0C8GD+6GFo=) 2: kKgi-TtCN3ONXzc5dOLgjXmeD4Y.roa (hash: ThrWPeEKYfxXyDvqo92XPXVjCuwCt73viQ6BGTVTHKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:a8:7a:98:28:94:4c:ca:e7:b7:27:2a:fa:db:b5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a Validity Not Before: Dec 24 00:00:45 2025 GMT Not After : Dec 25 00:00:45 2025 GMT Subject: CN=8b7a71c7dacd48a90cc5a82979dd054872145e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:5d:2d:7c:3e:c7:16:85:3f:44:82:2a:e0: b2:4e:79:93:02:74:18:b0:92:bf:8c:ad:a6:33:c7: 66:bf:1b:d4:0b:e3:10:85:d9:55:27:04:d6:d0:1b: 95:3c:d9:cc:0b:09:ee:6c:c4:9c:dd:08:83:68:c9: 09:83:f3:0a:70:cc:47:36:12:48:0d:fb:3a:b6:ad: 95:43:bb:67:b0:3f:de:3f:b2:e6:da:c7:5f:34:3f: 84:9e:8c:b8:da:17:76:eb:2b:b4:11:02:ee:1b:a1: 0a:81:38:28:b2:c3:48:ea:0b:a9:c2:20:08:02:9e: 8b:2f:8e:f5:ef:85:ea:3f:02:20:c0:74:7c:64:6b: b8:89:d5:30:fb:f3:a1:47:8d:c0:eb:35:5f:bf:2b: bd:5f:8e:d5:96:58:61:ee:b4:e9:d8:49:8a:b7:aa: da:8a:24:fd:f6:18:b5:e3:f8:b3:f7:73:0d:19:9a: 22:de:30:58:ed:ef:7b:c0:e6:b0:d8:2f:f7:d3:d3: f8:36:0e:7b:ba:85:fa:82:30:06:77:0f:79:d2:9d: 28:ff:fd:dc:37:ef:29:f4:06:fb:6c:04:b0:53:fb: 5c:d6:59:1b:8d:3e:f9:8b:5b:58:2d:6a:3e:62:fd: 3e:82:27:31:b8:e3:a1:12:19:57:9b:59:0e:57:26: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:71:C7:DA:CD:48:A9:0C:C5:A8:29:79:DD:05:48:72:14:5E:85 X509v3 Authority Key Identifier: keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a4:e3:f4:75:58:f9:a7:81:1e:8c:9c:20:75:3d:5d:a8:a9: 91:b6:50:d8:d5:20:c3:db:0e:34:5e:63:25:b3:99:09:21:3c: 5d:61:6e:89:a5:31:a4:95:22:e1:81:a2:42:d2:ea:8b:6c:58: 27:70:3a:ad:28:e7:89:45:7a:b2:83:e8:f8:27:e8:9a:9d:97: 33:79:ee:7d:01:3b:8c:2c:ed:6a:a4:c3:d8:d9:3e:19:d8:c7: 8f:47:9f:d5:cc:2c:5c:da:31:4a:b9:59:19:d7:68:c5:69:32: d1:cd:dc:29:28:ec:ac:c3:37:d2:59:c0:ae:ad:08:1f:95:24: 39:41:a9:05:e1:54:de:9d:e5:50:0f:85:7c:a1:6d:4c:42:9e: fb:1c:0f:1d:8b:d4:b2:b0:a3:d9:b6:74:10:0c:a8:4a:b9:4d: dc:35:3b:45:25:4b:08:07:15:32:7b:8f:f1:cd:f2:39:1f:7c: 78:30:03:a6:95:27:e1:a0:86:ba:9a:2e:0a:5c:61:e9:57:e2: fd:14:7f:44:86:25:00:75:27:11:a0:a2:d5:1e:f8:71:e8:61: d7:d2:d8:14:c9:c7:8a:ad:0b:1b:17:05:c3:74:ce:33:27:65: 22:43:a6:48:6d:7d:9b:51:d1:46:3b:b0:a5:49:41:24:2b:21: e1:ed:b5:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNqHqYKJRMyue3Jyr627UtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTFkMWEwMTc4MDJlNWM1N2RhNTk3ODU0NGZjNTM3NDAz ZGE3M2EwHhcNMjUxMjI0MDAwMDQ1WhcNMjUxMjI1MDAwMDQ1WjAzMTEwLwYDVQQD Eyg4YjdhNzFjN2RhY2Q0OGE5MGNjNWE4Mjk3OWRkMDU0ODcyMTQ1ZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6xdLXw+xxaFP0SCKuCyTnmTAnQY sJK/jK2mM8dmvxvUC+MQhdlVJwTW0BuVPNnMCwnubMSc3QiDaMkJg/MKcMxHNhJI Dfs6tq2VQ7tnsD/eP7Lm2sdfND+Enoy42hd26yu0EQLuG6EKgTgossNI6gupwiAI Ap6LL47174XqPwIgwHR8ZGu4idUw+/OhR43A6zVfvyu9X47Vllhh7rTp2EmKt6ra iiT99hi14/iz93MNGZoi3jBY7e97wOaw2C/309P4Ng57uoX6gjAGdw950p0o//3c N+8p9Ab7bASwU/tc1lkbjT75i1tYLWo+Yv0+gicxuOOhEhlXm1kOVyanOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt6ccfazUipDMWoKXndBUhyFF6FMB8GA1UdIwQY MBaAFGah0aAXgC5cV9pZeFRPxTdAPac6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGIt MTlmMmExZDE2MDMzLzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGItMTlmMmExZDE2MDMz LzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqTj9HVY +aeBHoycIHU9XaipkbZQ2NUgw9sONF5jJbOZCSE8XWFuiaUxpJUi4YGiQtLqi2xY J3A6rSjniUV6soPo+Cfomp2XM3nufQE7jCztaqTD2Nk+GdjHj0ef1cwsXNoxSrlZ GddoxWky0c3cKSjsrMM30lnArq0IH5UkOUGpBeFU3p3lUA+FfKFtTEKe+xwPHYvU srCj2bZ0EAyoSrlN3DU7RSVLCAcVMnuP8c3yOR98eDADppUn4aCGupouClxh6Vfi /RR/RIYlAHUnEaCi1R74cehh19LYFMnHiq0LGxcFw3TOMydlIkOmSG19m1HRRjuw pUlBJCsh4e21ZQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:01:37 2025 by rpki-client