This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json) Hash identifier: PDXs4fgpyPll3BuatZb58KZhIW3MegPoEdP27g6i8Fo= Subject key identifier: 0E:72:E2:CC:CA:BF:41:28:73:8A:C0:06:BE:AB:DC:23:95:0D:4D:57 Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54 Certificate issuer: /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354 Certificate serial: 019B4EBB349C7A23CA96D2434A2F9DA08921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft Manifest number: 1045 Signing time: Wed 24 Dec 2025 05:00:49 +0000 Manifest this update: Wed 24 Dec 2025 05:00:49 +0000 Manifest next update: Thu 25 Dec 2025 05:00:49 +0000 Files and hashes: 1: JUuxGv_Lm_wDAeQKgUpF0b2dN-E.roa (hash: LxGPc9DuVZu7AFf7wSLnWbscOl013tf3bR9ibnxaHEM=) 2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: wqAyi8E2uwXdKYKpHt4QuHOJk9s1TOmCzewoojAx0Jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:34:9c:7a:23:ca:96:d2:43:4a:2f:9d:a0:89:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354 Validity Not Before: Dec 24 05:00:49 2025 GMT Not After : Dec 25 05:00:49 2025 GMT Subject: CN=0e72e2cccabf4128738ac006beabdc23950d4d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:26:8a:7a:a9:22:7a:36:d6:15:12:96:15: 9b:ab:3f:36:05:33:07:1f:30:1c:c3:82:08:1c:c6: c8:22:ab:55:36:28:70:2a:7a:8e:47:df:7b:ce:95: 24:83:91:ec:2c:90:f5:c3:28:aa:7f:88:ae:68:b8: f8:ae:4e:9f:81:c8:27:d5:56:5a:e4:f5:51:0b:66: 34:5a:d6:72:ee:38:ad:c9:2e:4d:89:8a:a5:46:f3: 6b:c1:5d:94:20:b1:4d:3e:40:fa:f9:83:82:c6:ca: 1a:db:c2:a9:e4:14:64:44:69:28:1e:e1:a9:45:97: 86:56:b9:84:f8:12:cf:51:72:1b:24:f3:80:83:95: 8a:67:a5:af:4e:cb:d5:2c:b6:2b:c3:3b:1d:bf:50: 39:ff:3e:81:6d:7c:8c:76:ec:a7:c5:23:7e:94:71: eb:e6:75:48:8a:ae:d4:ef:9e:ee:85:3c:30:64:37: 42:fe:8a:f9:c3:a0:7f:c3:e7:a8:8e:09:fc:9e:11: 8b:d4:87:3b:a9:e5:97:03:3b:11:19:fe:e8:86:1a: 8b:2a:ab:fb:b6:cd:95:c3:65:95:27:cb:80:af:33: 91:de:8e:82:2b:dd:d5:34:3e:37:ec:db:df:3e:07: be:70:bb:ea:29:63:f1:69:e5:d4:4c:5b:80:c1:87: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:72:E2:CC:CA:BF:41:28:73:8A:C0:06:BE:AB:DC:23:95:0D:4D:57 X509v3 Authority Key Identifier: keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:aa:f6:34:ca:72:c1:df:e0:73:94:13:22:56:7a:85:db:42: 65:31:d9:31:6a:c9:a9:df:fc:2a:99:c3:a5:07:a0:a2:58:bd: 1b:d0:a9:92:4d:d5:81:a2:a7:fa:37:0b:f0:32:2a:13:9e:8b: 50:50:19:7b:c4:05:f5:a5:46:ac:4a:2d:9c:99:0f:76:bb:ab: 40:a7:c8:99:49:47:dc:a6:ba:a9:22:eb:18:5e:30:aa:99:fe: 5e:f2:fa:1c:f4:ea:50:7f:27:e9:c4:ed:e9:2c:75:91:ae:1b: 5f:63:aa:0c:3d:54:a9:cc:ae:36:0a:21:87:e9:36:48:a2:88: e3:16:90:47:b3:20:5a:ea:4c:64:64:8d:50:30:89:69:d6:f8: 7c:56:a8:05:39:cc:30:3f:e8:e8:24:e1:69:ad:7b:7d:ab:c3: 20:9c:97:32:b2:4d:46:aa:80:7c:4e:80:56:c4:96:81:4a:79: d4:06:3f:45:c1:0d:39:52:b5:35:3f:8e:64:ac:60:8c:c3:c0: fe:44:1e:e0:90:45:d6:d7:e6:2b:ca:df:77:c8:d7:d9:1f:9f: 71:82:a4:95:50:85:7b:af:7f:2c:f6:eb:05:24:51:16:af:18: 40:6a:53:fb:8e:ae:81:36:83:a1:8e:7c:23:90:04:10:43:9e: ba:d6:01:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuzSceiPKltJDSi+doIkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTE3OWU0ZjM1M2VhOWRjYWYwMmYzN2E3MmI3NTBlY2Zh MWMzNTQwHhcNMjUxMjI0MDUwMDQ5WhcNMjUxMjI1MDUwMDQ5WjAzMTEwLwYDVQQD EygwZTcyZTJjY2NhYmY0MTI4NzM4YWMwMDZiZWFiZGMyMzk1MGQ0ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3asminqpIno21hUSlhWbqz82BTMH HzAcw4IIHMbIIqtVNihwKnqOR997zpUkg5HsLJD1wyiqf4iuaLj4rk6fgcgn1VZa 5PVRC2Y0WtZy7jityS5NiYqlRvNrwV2UILFNPkD6+YOCxsoa28Kp5BRkRGkoHuGp RZeGVrmE+BLPUXIbJPOAg5WKZ6WvTsvVLLYrwzsdv1A5/z6BbXyMduynxSN+lHHr 5nVIiq7U757uhTwwZDdC/or5w6B/w+eojgn8nhGL1Ic7qeWXAzsRGf7ohhqLKqv7 ts2Vw2WVJ8uArzOR3o6CK93VND437NvfPge+cLvqKWPxaeXUTFuAwYfHhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5y4szKv0Eoc4rABr6r3COVDU1XMB8GA1UdIwQY MBaAFM6heeTzU+qdyvAvN6crdQ7PocNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTA1ZjAtN2FiYi00ZTFmLThjMjct MjE1Y2Q1NzBlNDA5LzEvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YTA1ZjAtN2FiYi00ZTFmLThjMjctMjE1Y2Q1NzBlNDA5 LzEvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqr2NMpy wd/gc5QTIlZ6hdtCZTHZMWrJqd/8KpnDpQegoli9G9Cpkk3VgaKn+jcL8DIqE56L UFAZe8QF9aVGrEotnJkPdrurQKfImUlH3Ka6qSLrGF4wqpn+XvL6HPTqUH8n6cTt 6Sx1ka4bX2OqDD1UqcyuNgohh+k2SKKI4xaQR7MgWupMZGSNUDCJadb4fFaoBTnM MD/o6CThaa17favDIJyXMrJNRqqAfE6AVsSWgUp51AY/RcENOVK1NT+OZKxgjMPA /kQe4JBF1tfmK8rfd8jX2R+fcYKklVCFe69/LPbrBSRRFq8YQGpT+46ugTaDoY58 I5AEEEOeutYBwA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:07 2025 by rpki-client