This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json) Hash identifier: 1G4j+4nSb66GWTIgkWtClcsYnNDMsITleAIUP11Yegc= Subject key identifier: C2:39:53:67:CA:DC:7F:E5:A6:2D:E9:0A:E5:36:74:9B:BB:CC:26:35 Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def Certificate serial: 019B1D982D6A9AC45F0F298898F9672C6BD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft Manifest number: 0802 Signing time: Sun 14 Dec 2025 16:01:10 +0000 Manifest this update: Sun 14 Dec 2025 16:01:10 +0000 Manifest next update: Mon 15 Dec 2025 16:01:10 +0000 Files and hashes: 1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: hbhoa6Z9ACUWLGTrK2zA1GJA22rDRKymiO49toWa4w0=) 2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:2d:6a:9a:c4:5f:0f:29:88:98:f9:67:2c:6b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def Validity Not Before: Dec 14 16:01:10 2025 GMT Not After : Dec 15 16:01:10 2025 GMT Subject: CN=c2395367cadc7fe5a62de90ae536749bbbcc2635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:a3:1e:72:f7:0b:dc:9c:fc:26:86:79:1d: 1a:62:38:bb:83:24:a0:38:15:e3:3d:d8:2f:7b:d2: f4:eb:62:55:f2:31:19:c6:6e:cf:47:ae:51:86:f2: 53:33:06:81:ae:03:7f:8f:f4:97:0f:2e:8d:1b:82: 1c:8c:27:82:ec:d1:c2:eb:93:7c:c3:7b:9c:b7:e3: 49:f5:67:db:13:7e:26:da:82:41:c0:4a:1e:aa:45: 79:60:52:44:59:24:31:a4:cf:03:27:fb:48:0c:4a: c8:2e:1b:f0:9b:ba:03:95:17:c9:fc:1e:04:a8:30: 05:84:e8:c9:94:2d:57:11:36:f3:9d:4f:65:35:f3: 7e:69:07:a6:4b:e7:e2:a5:2d:5e:09:72:63:09:0e: a2:32:44:06:f2:f0:11:72:a4:6e:f7:e4:82:4d:97: 00:8f:b7:44:a2:1a:36:a8:90:a2:5c:43:f0:73:67: 09:68:59:7f:f6:69:e7:dd:75:ae:eb:a6:af:0c:06: b5:05:a1:86:98:65:8a:2c:86:48:ee:3e:37:8d:35: 8a:a5:70:b1:65:5e:cd:56:a6:23:1b:6c:37:a7:c9: 4c:9c:b8:27:3e:3e:cb:f9:fe:cc:4d:aa:4a:cf:d0: 14:21:0b:dd:b1:fa:8f:7a:d7:4e:c2:1d:d7:bf:e6: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:39:53:67:CA:DC:7F:E5:A6:2D:E9:0A:E5:36:74:9B:BB:CC:26:35 X509v3 Authority Key Identifier: keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:4c:91:1d:f7:41:61:c4:7c:02:9b:66:35:01:3f:54:a7: bd:d4:cf:1a:c9:1c:48:2d:4f:b4:ff:4b:14:61:7e:d1:91:9a: ad:c4:f0:1e:31:d8:62:5f:c6:03:6b:8e:99:ec:38:4b:18:ef: 79:17:c1:ea:99:e4:e1:5e:1e:a1:d6:cf:b8:94:4d:e8:7b:94: 90:90:9b:28:a9:89:08:c4:8a:dd:10:ef:b1:d5:78:b9:2e:06: 19:64:72:e5:1f:f4:b4:30:83:10:cd:da:c5:b5:e8:fd:81:d9: 45:94:33:f0:2a:0f:9e:80:fa:4c:5f:88:f8:04:04:5f:1a:ed: b6:9f:66:c5:00:6a:79:32:30:33:97:a9:ce:63:4a:ff:5e:fd: 58:24:f1:1a:b6:ad:0f:23:7e:82:16:d5:33:91:d1:ae:07:39: c4:02:d9:eb:c5:be:f1:0b:e7:f8:6a:f1:04:7e:66:bc:58:eb: 8b:e1:45:bf:34:88:cb:32:a8:9b:c5:22:74:7f:a9:c9:34:b4: 45:4b:f2:d4:9b:74:d5:2c:a7:2b:b2:d8:60:d0:b9:82:64:07: 00:2e:3e:0c:c3:06:c7:83:95:ad:34:97:f5:7c:cf:a5:0f:fb: e6:f8:c5:f3:f7:0d:23:1c:e2:da:c1:8b:20:4f:73:83:68:29: a3:1e:44:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmC1qmsRfDymImPlnLGvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGFjOGE4ZjMxNGVlODc5YTZhYTg0M2I2N2VhNDdhYjFl NzVkZWYwHhcNMjUxMjE0MTYwMTEwWhcNMjUxMjE1MTYwMTEwWjAzMTEwLwYDVQQD EyhjMjM5NTM2N2NhZGM3ZmU1YTYyZGU5MGFlNTM2NzQ5YmJiY2MyNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGjHnL3C9yc/CaGeR0aYji7gySg OBXjPdgve9L062JV8jEZxm7PR65RhvJTMwaBrgN/j/SXDy6NG4IcjCeC7NHC65N8 w3uct+NJ9WfbE34m2oJBwEoeqkV5YFJEWSQxpM8DJ/tIDErILhvwm7oDlRfJ/B4E qDAFhOjJlC1XETbznU9lNfN+aQemS+fipS1eCXJjCQ6iMkQG8vARcqRu9+SCTZcA j7dEoho2qJCiXEPwc2cJaFl/9mnn3XWu66avDAa1BaGGmGWKLIZI7j43jTWKpXCx ZV7NVqYjG2w3p8lMnLgnPj7L+f7MTapKz9AUIQvdsfqPetdOwh3Xv+a3GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI5U2fK3H/lpi3pCuU2dJu7zCY1MB8GA1UdIwQY MBaAFGbayKjzFO6HmmqoQ7Z+pHqx513vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUt YzliZGNlOWMxYTQ5LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUtYzliZGNlOWMxYTQ5 LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/5MkR33 QWHEfAKbZjUBP1SnvdTPGskcSC1PtP9LFGF+0ZGarcTwHjHYYl/GA2uOmew4Sxjv eRfB6pnk4V4eodbPuJRN6HuUkJCbKKmJCMSK3RDvsdV4uS4GGWRy5R/0tDCDEM3a xbXo/YHZRZQz8CoPnoD6TF+I+AQEXxrttp9mxQBqeTIwM5epzmNK/179WCTxGrat DyN+ghbVM5HRrgc5xALZ68W+8Qvn+GrxBH5mvFjri+FFvzSIyzKom8UidH+pyTS0 RUvy1Jt01SynK7LYYNC5gmQHAC4+DMMGx4OVrTSX9XzPpQ/75vjF8/cNIxzi2sGL IE9zg2gpox5E7Q== -----END CERTIFICATE-----Generated at Sun Dec 14 22:00:27 2025 by rpki-client