This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json) Hash identifier: AO79WvmdWbgkqd1tVCv/8aSGPWvEZ0Q38GEJ+IWdpRE= Subject key identifier: 61:3B:E6:3A:A6:D8:EA:20:10:D4:30:95:43:1C:6D:41:88:E9:71:93 Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28 Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28 Certificate serial: 019B2B1E07D0021DABF56BA3F273D68DC071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft Manifest number: 1481 Signing time: Wed 17 Dec 2025 07:02:26 +0000 Manifest this update: Wed 17 Dec 2025 07:02:26 +0000 Manifest next update: Thu 18 Dec 2025 07:02:26 +0000 Files and hashes: 1: vHQRV0jRUXExLLAYBdY2ODpzWoo.roa (hash: 7UhAMCr3OjHllJdnfdmjdJInrKVauXU3M4e5nn0fWuA=) 2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: qpSzXs8uj9/ErbIamE7TieWKutxtHL2R7U8BYYMlZv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:07:d0:02:1d:ab:f5:6b:a3:f2:73:d6:8d:c0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28 Validity Not Before: Dec 17 07:02:26 2025 GMT Not After : Dec 18 07:02:26 2025 GMT Subject: CN=613be63aa6d8ea2010d43095431c6d4188e97193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:72:0b:a2:41:25:25:bd:dd:20:87:1e:9f: cb:ec:ac:1b:88:8e:c4:76:56:36:ae:da:f7:42:ef: 94:22:af:b5:41:2f:e4:b8:96:df:19:51:9c:3f:f4: 89:be:96:ca:3f:90:26:19:04:dd:8f:2d:26:1e:89: 5e:b8:91:5e:b8:57:55:c7:ba:f2:48:d0:f0:a3:7f: 5c:06:1b:12:b0:f3:3a:6f:dd:6e:7f:44:b4:cb:d1: e9:93:f6:fd:ed:3d:7b:cb:47:de:8b:42:c7:34:56: 90:d2:6c:6a:1d:fc:23:8b:fb:cc:eb:11:18:72:a6: a4:12:d7:97:f8:0e:97:da:8f:c2:04:19:0a:b9:1d: 06:11:10:d1:2b:ff:06:1d:1e:c6:e0:d4:28:20:18: 3e:61:1d:09:ca:bb:6b:06:e4:cf:b6:f8:27:08:08: 99:94:de:eb:1e:9a:fe:71:28:28:b1:79:13:8c:fc: c9:9c:c8:34:c8:0a:53:90:58:b6:7c:8a:34:ec:e9: 27:44:49:3e:3d:c4:df:58:64:f6:87:4f:b1:d9:35: 8f:5e:2c:69:5d:e5:dc:d9:2b:bb:7d:d9:d3:16:08: 62:d4:6d:08:c1:c0:32:2c:b6:6e:13:64:28:ec:b5: 81:55:f6:9f:21:9d:ee:45:c6:ee:02:7d:01:90:f0: b1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3B:E6:3A:A6:D8:EA:20:10:D4:30:95:43:1C:6D:41:88:E9:71:93 X509v3 Authority Key Identifier: keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5d:59:a6:1f:16:38:6d:6c:89:2b:4e:0d:d1:fe:59:42:2e: aa:33:bf:4a:64:df:5e:0d:35:31:d8:54:dc:a5:33:f7:73:92: db:12:23:c8:37:40:2d:fd:40:63:bc:0c:06:46:c7:57:f6:72: 15:b4:79:cc:ac:63:c4:46:95:26:d8:79:20:6f:8b:60:db:93: ad:ad:e2:ff:38:ce:de:49:54:bf:ee:51:03:02:ee:05:1a:a0: 2f:95:2c:c4:9b:35:f0:99:8c:e7:44:4a:5e:a9:c0:ac:b7:e5: f6:82:07:c5:d4:c6:94:02:72:a9:bf:3f:38:29:ef:84:ea:2b: a7:e4:d2:68:9c:96:99:c9:88:3b:cb:e0:9c:64:86:6b:0f:3d: 34:ea:88:7c:0e:23:0f:a7:21:ea:15:31:15:ac:b8:f5:b4:c6: 18:b9:b0:76:95:56:67:bf:6c:8d:b5:d3:4a:d2:28:95:88:f9: 0c:b4:f6:bd:04:19:b7:fb:fa:aa:87:b8:cc:01:73:90:1f:5d: e0:72:65:1d:5e:cd:d7:65:5c:ff:d3:f3:64:92:96:74:4d:8e: 42:76:da:51:13:df:95:3a:80:dc:1f:84:03:f6:89:3c:57:f5: 0e:0e:99:fe:83:c3:6f:60:96:b5:6c:f9:c7:74:a6:3c:31:81: a5:36:05:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHgfQAh2r9Wuj8nPWjcBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTQzNjkwMjMwYTQ0MGE2OGI3YThhYTk4Mjc5ZjJmNjVk ZmVlMjgwHhcNMjUxMjE3MDcwMjI2WhcNMjUxMjE4MDcwMjI2WjAzMTEwLwYDVQQD Eyg2MTNiZTYzYWE2ZDhlYTIwMTBkNDMwOTU0MzFjNmQ0MTg4ZTk3MTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLxyC6JBJSW93SCHHp/L7KwbiI7E dlY2rtr3Qu+UIq+1QS/kuJbfGVGcP/SJvpbKP5AmGQTdjy0mHoleuJFeuFdVx7ry SNDwo39cBhsSsPM6b91uf0S0y9Hpk/b97T17y0fei0LHNFaQ0mxqHfwji/vM6xEY cqakEteX+A6X2o/CBBkKuR0GERDRK/8GHR7G4NQoIBg+YR0JyrtrBuTPtvgnCAiZ lN7rHpr+cSgosXkTjPzJnMg0yApTkFi2fIo07OknREk+PcTfWGT2h0+x2TWPXixp XeXc2Su7fdnTFghi1G0IwcAyLLZuE2Qo7LWBVfafIZ3uRcbuAn0BkPCx+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE75jqm2OogENQwlUMcbUGI6XGTMB8GA1UdIwQY MBaAFM0UNpAjCkQKaLeoqpgnny9l3+4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJRMmtDTUtSQXBvdDZpcW1DZWZMMlhmN2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8wOTQ1NmUtYTcxYy00M2IzLWJkNDAt OGVlM2Q5OGNhZDViLzEvelJRMmtDTUtSQXBvdDZpcW1DZWZMMlhmN2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8wOTQ1NmUtYTcxYy00M2IzLWJkNDAtOGVlM2Q5OGNhZDVi LzEvelJRMmtDTUtSQXBvdDZpcW1DZWZMMlhmN2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV1Zph8W OG1siStODdH+WUIuqjO/SmTfXg01MdhU3KUz93OS2xIjyDdALf1AY7wMBkbHV/Zy FbR5zKxjxEaVJth5IG+LYNuTra3i/zjO3klUv+5RAwLuBRqgL5UsxJs18JmM50RK XqnArLfl9oIHxdTGlAJyqb8/OCnvhOorp+TSaJyWmcmIO8vgnGSGaw89NOqIfA4j D6ch6hUxFay49bTGGLmwdpVWZ79sjbXTStIolYj5DLT2vQQZt/v6qoe4zAFzkB9d 4HJlHV7N12Vc/9PzZJKWdE2OQnbaURPflTqA3B+EA/aJPFf1Dg6Z/oPDb2CWtWz5 x3SmPDGBpTYFLw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:14 2025 by rpki-client