This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json) Hash identifier: vAi1TmDrnlGQU/20V4LIH3ACguzs2O0emJ4v1Ddpy5g= Subject key identifier: 69:A5:E0:1F:DA:50:CE:C5:C2:E3:A0:24:A3:14:D9:00:26:F1:77:B3 Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Certificate serial: 019B33E8F71ACDBDF3EB09FF00C2C91929DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft Manifest number: 105C Signing time: Fri 19 Dec 2025 00:01:04 +0000 Manifest this update: Fri 19 Dec 2025 00:01:04 +0000 Manifest next update: Sat 20 Dec 2025 00:01:04 +0000 Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: AZB7LjCYYeHAIjuTJMYgkJ5egxpb5DDkmhFNO/saNYM=) 2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:f7:1a:cd:bd:f3:eb:09:ff:00:c2:c9:19:29:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Validity Not Before: Dec 19 00:01:04 2025 GMT Not After : Dec 20 00:01:04 2025 GMT Subject: CN=69a5e01fda50cec5c2e3a024a314d90026f177b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:10:d6:04:0a:1e:07:64:7d:f6:55:80:a1:6a: 31:8b:91:6c:3a:ba:23:72:66:33:58:95:b5:8b:c9: d9:24:c5:2d:de:53:24:c7:87:24:4c:9d:47:32:17: 2b:c7:73:e6:85:ce:22:cf:98:f7:87:eb:4f:12:2a: 90:f5:bc:65:c6:9c:6f:a3:ba:0d:b9:2e:e6:70:e6: 06:de:1c:76:17:d1:bc:e1:53:16:58:54:af:ac:05: ed:c3:31:f8:de:ef:36:12:e9:c2:e5:0a:c3:51:b8: fc:1f:eb:80:26:b4:2e:e3:ce:ff:81:0a:1e:fb:cd: 28:9e:63:cc:ed:1d:74:aa:70:1d:e3:bc:83:45:ea: 6a:c7:f7:96:c3:88:a7:38:22:73:1b:05:49:8d:c9: 84:bb:ac:60:70:84:45:1d:0c:c4:7b:2a:f7:d0:3b: 23:a8:a2:9c:44:01:08:e5:e2:d1:9a:f7:b1:95:02: 0a:28:08:ab:bb:69:8e:25:e6:9e:a6:cc:9c:c1:29: 9b:e1:d6:8a:8c:9c:c9:20:70:85:e1:8e:f8:e6:67: bb:69:01:fb:76:3c:d1:6b:84:1d:32:0f:0e:d5:3b: 75:0c:97:76:b5:81:0a:35:59:a0:61:8a:07:e6:1d: 24:37:da:7d:36:ee:0d:81:47:24:f0:4e:46:cb:10: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A5:E0:1F:DA:50:CE:C5:C2:E3:A0:24:A3:14:D9:00:26:F1:77:B3 X509v3 Authority Key Identifier: keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d6:96:b1:21:62:45:03:04:8f:94:db:a0:22:cc:1c:fd:75: 55:11:08:1e:74:73:04:a3:da:e6:77:bd:b0:51:45:a9:e7:f9: 37:b5:59:eb:27:71:07:1e:41:05:30:f7:8f:43:05:7d:55:4c: 47:3a:c6:1e:6b:bf:07:fd:45:5c:15:0e:bf:5a:61:71:1f:ef: 4e:aa:85:31:df:b0:c0:53:3a:b2:52:3e:74:b3:f0:2d:19:b8: 43:87:21:ce:17:9c:49:cb:bd:95:7b:9c:15:36:b3:b0:16:71: ae:a0:92:40:46:84:9e:d0:e0:ed:20:30:e1:d2:d1:52:de:c1: da:12:96:12:e3:72:18:09:36:17:96:c9:4b:10:63:93:5c:4a: e9:7c:55:c6:bf:4d:8c:81:51:e5:f5:1c:c3:c4:7e:9f:f4:7f: 7d:2f:d8:d8:e9:16:e2:d9:12:57:fd:17:8d:60:e6:58:59:00: 01:56:22:40:5b:63:1d:5f:f6:c2:d7:09:c8:23:a4:29:63:46: b9:81:26:09:b2:24:9b:c2:d5:30:54:22:83:f4:37:7f:66:05: c2:89:39:3d:2b:ac:b9:1b:7f:96:ac:7b:80:e2:55:a7:64:da: b9:9a:6a:99:38:79:52:8c:37:38:3d:37:33:f9:98:4c:66:b4: 0c:73:3f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Pcazb3z6wn/AMLJGSndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmI3NzI3ZDY0YTUxOGM3Y2Q0ODVlNDgyM2VlNzhhOWUy OTEwMDgwHhcNMjUxMjE5MDAwMTA0WhcNMjUxMjIwMDAwMTA0WjAzMTEwLwYDVQQD Eyg2OWE1ZTAxZmRhNTBjZWM1YzJlM2EwMjRhMzE0ZDkwMDI2ZjE3N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xDWBAoeB2R99lWAoWoxi5FsOroj cmYzWJW1i8nZJMUt3lMkx4ckTJ1HMhcrx3Pmhc4iz5j3h+tPEiqQ9bxlxpxvo7oN uS7mcOYG3hx2F9G84VMWWFSvrAXtwzH43u82EunC5QrDUbj8H+uAJrQu487/gQoe +80onmPM7R10qnAd47yDRepqx/eWw4inOCJzGwVJjcmEu6xgcIRFHQzEeyr30Dsj qKKcRAEI5eLRmvexlQIKKAiru2mOJeaepsycwSmb4daKjJzJIHCF4Y745me7aQH7 djzRa4QdMg8O1Tt1DJd2tYEKNVmgYYoH5h0kN9p9Nu4NgUck8E5GyxCu1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGml4B/aUM7FwuOgJKMU2QAm8XezMB8GA1UdIwQY MBaAFGb7dyfWSlGMfNSF5II+54qeKRAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4Mzkt N2MzYmRkYzI5NzhhLzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4MzktN2MzYmRkYzI5Nzhh LzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldaWsSFi RQMEj5TboCLMHP11VREIHnRzBKPa5ne9sFFFqef5N7VZ6ydxBx5BBTD3j0MFfVVM RzrGHmu/B/1FXBUOv1phcR/vTqqFMd+wwFM6slI+dLPwLRm4Q4chzhecScu9lXuc FTazsBZxrqCSQEaEntDg7SAw4dLRUt7B2hKWEuNyGAk2F5bJSxBjk1xK6XxVxr9N jIFR5fUcw8R+n/R/fS/Y2OkW4tkSV/0XjWDmWFkAAVYiQFtjHV/2wtcJyCOkKWNG uYEmCbIkm8LVMFQig/Q3f2YFwok5PSusuRt/lqx7gOJVp2TauZpqmTh5Uow3OD03 M/mYTGa0DHM/lw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:43:16 2025 by rpki-client