This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft File: ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft (raw, json) Hash identifier: yVGkQcX3tz3Z/BOa+xAtfQseejWhtTdwGs5Vqg3z3l4= Subject key identifier: 60:9C:9F:D4:B9:78:B9:11:FA:5D:05:DE:73:B4:DE:B7:E0:D2:9F:0A Authority key identifier: 66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4 Certificate issuer: /CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4 Certificate serial: 019B4AA7DAC8609A62A58802975CA553803D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft Manifest number: 82 Signing time: Tue 23 Dec 2025 10:01:13 +0000 Manifest this update: Tue 23 Dec 2025 10:01:13 +0000 Manifest next update: Wed 24 Dec 2025 10:01:13 +0000 Files and hashes: 1: MjDiSya5rSIxCbP2JLylYPClbHU.roa (hash: sVwKHPoYwVN9YVNb0RadzlN6+FZIECFGTzUXxcescyI=) 2: ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl (hash: fEJQe3ii4l/WyZvjZUy+XhxJyZJVf1Vskg+9D5MGqaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:da:c8:60:9a:62:a5:88:02:97:5c:a5:53:80:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4 Validity Not Before: Dec 23 10:01:13 2025 GMT Not After : Dec 24 10:01:13 2025 GMT Subject: CN=609c9fd4b978b911fa5d05de73b4deb7e0d29f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4f:f5:14:37:df:ea:ca:c7:98:8d:8d:18:6f: 79:db:e5:0d:5e:e4:f4:3f:cd:d6:c8:33:5c:70:92: b6:77:a5:c9:62:32:38:3b:7f:4c:33:4c:2a:10:ba: 7b:42:1f:71:40:27:ad:23:b9:7c:24:28:86:f4:fc: db:2b:25:a6:dc:8b:ee:a1:4c:82:33:2e:ce:46:3e: ff:74:81:58:07:23:60:b7:5b:cd:44:74:c9:4d:57: 37:37:1a:17:52:49:20:b2:7d:47:31:be:13:56:36: f0:dc:69:87:5e:e9:3f:34:77:24:d7:cc:37:4a:ff: 8d:67:d6:d2:96:0e:06:39:06:63:81:51:3c:cf:6b: 46:34:05:ab:7a:f0:ee:4f:78:83:ca:c1:ab:e1:ec: a2:a6:2e:22:12:d7:1e:0b:5a:d6:e5:08:fa:eb:27: 88:77:0b:b3:1c:ea:f6:f5:ae:f0:23:14:ff:86:2a: d5:48:72:98:a2:c4:62:27:12:eb:df:89:ea:8f:f8: 60:fb:a5:ab:ac:76:c0:68:27:c7:48:13:8b:27:75: e4:52:38:ba:7e:49:e8:6a:d7:cf:69:7f:c4:02:ad: e9:db:55:cb:63:6e:14:b1:d1:88:25:a4:a5:32:71: 7a:49:cf:fc:b3:03:67:e6:5f:a4:b5:f7:2a:13:c4: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9C:9F:D4:B9:78:B9:11:FA:5D:05:DE:73:B4:DE:B7:E0:D2:9F:0A X509v3 Authority Key Identifier: keyid:66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4f:81:99:3e:ed:85:c7:a9:74:f6:a7:6b:ea:69:0d:de:0a: e7:76:65:f8:de:b9:dc:78:bf:a2:26:f2:d6:73:66:fd:e0:91: f2:f8:50:84:4b:09:5b:ef:11:52:0e:9f:27:9e:6a:ac:2c:12: 9f:27:63:5c:29:8a:27:ae:ae:47:85:1f:c1:9d:18:ea:82:4f: b5:39:aa:ea:3b:78:06:79:5c:ca:05:d0:94:c4:6f:f7:8a:c1: c2:ad:7a:e3:78:8d:f0:2e:fd:18:6c:62:dc:92:de:61:c5:e6: 09:ac:75:12:80:51:c3:e5:47:93:06:67:09:2a:98:9f:7c:1a: 7a:4e:d2:01:5d:0a:c1:21:6f:8d:0f:c0:ff:a7:7f:bc:0d:c2: f4:a3:34:2a:49:e5:78:83:c8:6f:df:1e:0c:fc:8d:40:d5:12: 6d:26:49:19:0b:7b:d4:3c:56:6d:3f:fc:3c:c7:2f:4c:36:68: 80:71:e5:cd:9a:68:fd:c3:b0:26:6d:6e:ee:62:f3:86:8e:44: ac:65:23:77:87:70:09:5c:22:51:1a:85:fa:7d:3d:e4:8e:a4: c3:08:e1:93:2e:89:85:4f:45:9e:9b:96:18:b7:3e:ad:52:ad: de:85:47:d3:08:e2:4d:32:5f:11:e0:52:a4:23:05:c8:06:ab: 7b:30:16:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp9rIYJpipYgCl1ylU4A9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTJmZTkzNGVkMWRlZjc1ZjA2MzZhZTdjZjAxOThjODFk MzQ4YjQwHhcNMjUxMjIzMTAwMTEzWhcNMjUxMjI0MTAwMTEzWjAzMTEwLwYDVQQD Eyg2MDljOWZkNGI5NzhiOTExZmE1ZDA1ZGU3M2I0ZGViN2UwZDI5ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8U/1FDff6srHmI2NGG952+UNXuT0 P83WyDNccJK2d6XJYjI4O39MM0wqELp7Qh9xQCetI7l8JCiG9PzbKyWm3IvuoUyC My7ORj7/dIFYByNgt1vNRHTJTVc3NxoXUkkgsn1HMb4TVjbw3GmHXuk/NHck18w3 Sv+NZ9bSlg4GOQZjgVE8z2tGNAWrevDuT3iDysGr4eyipi4iEtceC1rW5Qj66yeI dwuzHOr29a7wIxT/hirVSHKYosRiJxLr34nqj/hg+6WrrHbAaCfHSBOLJ3XkUji6 fknoatfPaX/EAq3p21XLY24UsdGIJaSlMnF6Sc/8swNn5l+ktfcqE8SiyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCcn9S5eLkR+l0F3nO03rfg0p8KMB8GA1UdIwQY MBaAFGai/pNO0d73XwY2rnzwGYyB00i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYt NGVkZjE5YjM1ZWNhLzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYtNGVkZjE5YjM1ZWNh LzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXE+BmT7t hcepdPana+ppDd4K53Zl+N653Hi/oiby1nNm/eCR8vhQhEsJW+8RUg6fJ55qrCwS nydjXCmKJ66uR4UfwZ0Y6oJPtTmq6jt4BnlcygXQlMRv94rBwq1643iN8C79GGxi 3JLeYcXmCax1EoBRw+VHkwZnCSqYn3waek7SAV0KwSFvjQ/A/6d/vA3C9KM0Kknl eIPIb98eDPyNQNUSbSZJGQt71DxWbT/8PMcvTDZogHHlzZpo/cOwJm1u7mLzho5E rGUjd4dwCVwiURqF+n095I6kwwjhky6JhU9FnpuWGLc+rVKt3oVH0wjiTTJfEeBS pCMFyAarezAWug== -----END CERTIFICATE-----Generated at Tue Dec 23 14:20:17 2025 by rpki-client