This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json) Hash identifier: cQfe87kSwiLu+QHup3JtMz3fAMhuIKvklFVPXoZdnr4= Subject key identifier: 73:8D:B4:36:2A:95:46:EE:5A:58:A2:89:F1:C0:16:9E:08:6C:63:71 Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Certificate serial: 019B62422EE17D9790FC8FC73311DCE276DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft Manifest number: 0AAE Signing time: Sun 28 Dec 2025 00:01:03 +0000 Manifest this update: Sun 28 Dec 2025 00:01:03 +0000 Manifest next update: Mon 29 Dec 2025 00:01:03 +0000 Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=) 2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=) 3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: 5UlVlrThVVimFbJ9FZ8G402OHtTma5pfogikL9kh6t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:2e:e1:7d:97:90:fc:8f:c7:33:11:dc:e2:76:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Validity Not Before: Dec 28 00:01:03 2025 GMT Not After : Dec 29 00:01:03 2025 GMT Subject: CN=738db4362a9546ee5a58a289f1c0169e086c6371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:2c:f9:85:f3:e1:46:91:7d:20:33:cf:4d: 84:4c:a1:21:a5:17:d3:09:86:83:12:12:79:ec:41: b8:d4:d1:58:4f:51:45:f0:66:04:7e:59:83:41:86: 41:21:ce:1f:f6:13:e5:fe:ea:e4:3d:a5:10:4e:be: 85:99:13:10:94:cb:57:fe:68:c2:01:cd:de:c0:18: 76:7d:96:47:74:a8:ec:28:ba:8e:02:e1:05:14:d0: 38:d0:83:a5:aa:b1:ea:4e:21:16:c5:89:71:19:66: cf:21:8c:d7:6e:fc:f0:64:dc:a4:00:7d:71:52:8c: 05:6c:0a:02:5a:43:88:f5:0c:d2:4f:e8:9a:db:e7: 67:c9:39:51:92:61:42:41:f9:04:d8:11:ea:bb:dd: a4:2f:96:75:c5:55:ad:cc:7f:2f:3c:61:5d:13:33: b6:c0:e3:6c:a8:49:49:80:4b:19:83:69:d0:40:e2: be:b9:9d:ea:d3:31:41:2c:25:c1:70:f0:f3:ec:f2: a1:c7:f2:38:25:b4:40:02:d9:4a:13:9d:8a:b5:0f: ba:39:08:a6:50:d9:eb:d0:99:b9:61:89:ce:4a:4d: 24:38:63:22:5e:97:3d:d9:71:ee:fa:1e:3b:2f:18: c3:ee:3d:f0:18:4c:5b:51:72:b8:c2:7a:ee:cf:58: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:B4:36:2A:95:46:EE:5A:58:A2:89:F1:C0:16:9E:08:6C:63:71 X509v3 Authority Key Identifier: keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0b:b1:1f:79:35:42:3f:7a:23:f2:61:1d:3d:d7:13:bc:20: 46:d0:ee:55:2a:47:8b:78:c6:a0:96:7f:35:82:6c:60:6e:92: 75:84:9f:c9:7c:56:3e:04:f3:bc:9b:78:fa:be:9b:43:13:7e: f2:16:2e:c7:91:91:a7:05:a8:68:6f:2e:1b:a4:d3:be:20:9d: 01:9e:97:2b:34:8c:2b:f7:ad:15:5e:16:a3:10:25:cb:10:46: c8:27:83:18:48:04:37:3f:ad:11:3b:97:4f:c0:ef:fd:36:83: a6:04:f2:e3:19:5f:26:46:e6:69:92:45:19:55:54:e8:b1:50: 18:6e:8a:83:fa:78:68:c8:12:40:43:b0:a0:6c:ab:bb:b3:2b: d2:4c:db:3d:4e:16:3d:a7:59:64:1a:5e:2d:ff:21:9f:39:c2: e0:f7:dd:83:61:b8:33:18:67:b2:df:bd:2c:28:75:48:e6:76: 44:cf:d2:75:64:21:a1:99:a1:0a:9f:ce:ce:30:f9:d4:5a:b7: 71:79:4b:1c:9a:17:28:6d:bf:34:f2:aa:bd:f7:3a:1e:e5:ec: bf:a7:68:5e:69:48:37:fe:ad:b0:2b:2e:50:d1:ee:a7:c3:63: 63:eb:ca:9d:97:5f:53:28:73:33:68:6b:99:5d:d8:4a:98:7a: 70:37:98:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQi7hfZeQ/I/HMxHc4nbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey ZTUxYTYwHhcNMjUxMjI4MDAwMTAzWhcNMjUxMjI5MDAwMTAzWjAzMTEwLwYDVQQD Eyg3MzhkYjQzNjJhOTU0NmVlNWE1OGEyODlmMWMwMTY5ZTA4NmM2MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGMs+YXz4UaRfSAzz02ETKEhpRfT CYaDEhJ57EG41NFYT1FF8GYEflmDQYZBIc4f9hPl/urkPaUQTr6FmRMQlMtX/mjC Ac3ewBh2fZZHdKjsKLqOAuEFFNA40IOlqrHqTiEWxYlxGWbPIYzXbvzwZNykAH1x UowFbAoCWkOI9QzST+ia2+dnyTlRkmFCQfkE2BHqu92kL5Z1xVWtzH8vPGFdEzO2 wONsqElJgEsZg2nQQOK+uZ3q0zFBLCXBcPDz7PKhx/I4JbRAAtlKE52KtQ+6OQim UNnr0Jm5YYnOSk0kOGMiXpc92XHu+h47LxjD7j3wGExbUXK4wnruz1ib+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHONtDYqlUbuWliiifHAFp4IbGNxMB8GA1UdIwQY MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt MzQ1YjJhYjBkYjE4LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4 LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAuxH3k1 Qj96I/JhHT3XE7wgRtDuVSpHi3jGoJZ/NYJsYG6SdYSfyXxWPgTzvJt4+r6bQxN+ 8hYux5GRpwWoaG8uG6TTviCdAZ6XKzSMK/etFV4WoxAlyxBGyCeDGEgENz+tETuX T8Dv/TaDpgTy4xlfJkbmaZJFGVVU6LFQGG6Kg/p4aMgSQEOwoGyru7Mr0kzbPU4W PadZZBpeLf8hnznC4Pfdg2G4Mxhnst+9LCh1SOZ2RM/SdWQhoZmhCp/OzjD51Fq3 cXlLHJoXKG2/NPKqvfc6HuXsv6doXmlIN/6tsCsuUNHup8NjY+vKnZdfUyhzM2hr mV3YSph6cDeYjw== -----END CERTIFICATE-----Generated at Sun Dec 28 07:31:28 2025 by rpki-client