This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: U4KEfL2mjESfLizsSo5OSBh1A/GZMQ0FiYwIXVk/3I0= Subject key identifier: C6:4C:1D:1D:30:9E:DD:A6:11:40:DC:6B:6C:D2:9A:93:F3:BB:90:6F Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019AFF1FE30A130A116CCFA09619682820D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 17B3 Signing time: Mon 08 Dec 2025 18:01:11 +0000 Manifest this update: Mon 08 Dec 2025 18:01:11 +0000 Manifest next update: Tue 09 Dec 2025 18:01:11 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (hash: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=) 6: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (hash: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: iXd/1LcGfLl3RkUV7soGdw+LUDuMcL/Fdwxo0T+D41A=) 8: pDp2CToPzzYDQ1WhaCtd0HG6Gtc.roa (hash: gA5JjiJRsXhS8LWEfP0H0OvEaHq8p+EbMF4HPnV2enw=) 9: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: yzSelLKPU3VJWRULncODW1JLnv4.roa (hash: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 16:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:1f:e3:0a:13:0a:11:6c:cf:a0:96:19:68:28:20:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Dec 8 18:01:11 2025 GMT Not After : Dec 9 18:01:11 2025 GMT Subject: CN=c64c1d1d309edda61140dc6b6cd29a93f3bb906f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:3e:0d:86:fe:38:bd:4b:61:7a:19:70:32: 37:4b:71:d0:44:71:c4:98:c9:fc:06:06:44:95:56: 14:ee:78:2a:12:d7:ef:e4:a7:49:6b:57:4f:97:3e: 7c:bf:09:64:9c:41:40:fa:8b:3f:13:43:d8:31:b5: a9:76:40:e4:ef:5a:ab:6e:ad:b1:e9:c1:da:6e:1b: 0b:94:4b:3a:f9:c1:6e:ac:6d:a3:64:42:4c:95:03: ce:7d:73:8b:f3:07:e8:11:6a:bf:10:9b:9c:c9:a2: 2d:66:44:08:44:90:a7:a2:e8:09:f1:e1:f5:ff:79: fb:97:b4:51:04:57:cd:44:9c:e9:99:2b:9f:44:c5: 6c:c8:f8:f4:cd:2e:f3:01:e8:08:6c:a7:e6:bf:69: 80:c1:56:16:cc:a6:15:f0:0c:23:63:84:38:47:49: 45:15:da:86:af:0b:b6:03:df:dc:fb:0b:1f:8c:0b: fd:64:59:37:ae:1e:b5:f2:03:b3:56:d8:d9:11:22: 26:28:59:7a:54:fd:44:da:7d:ae:53:c6:e6:19:e9: 67:52:80:48:c3:8e:a7:36:dd:a1:d9:09:2b:05:d1: 0d:89:e8:e9:5a:e1:37:f9:8c:05:68:51:31:54:c2: cf:85:48:2b:78:70:9b:94:ba:60:1f:0e:02:08:0e: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4C:1D:1D:30:9E:DD:A6:11:40:DC:6B:6C:D2:9A:93:F3:BB:90:6F X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:97:18:13:3a:b7:4c:ce:70:3f:ce:d3:86:47:a2:db:38: 4a:01:e5:37:2b:5b:e2:3a:e8:f8:42:59:0d:45:72:3e:b9:b9: c8:09:6e:8e:f1:2e:1e:9f:99:18:a8:c3:7f:c8:3f:35:6d:28: f3:3e:a1:1f:65:bf:b1:45:fb:da:9a:e0:b3:bc:fb:71:03:c4: a2:1b:b9:f9:14:17:27:53:95:eb:38:07:68:c2:32:25:bc:9c: 77:1e:98:c5:f3:9b:73:0c:44:41:2e:49:d9:4f:28:76:b1:be: 5c:03:79:4c:05:e2:0c:d8:81:85:a5:05:22:19:14:1c:31:9d: ff:fb:2a:2f:80:d4:51:9f:7c:83:90:09:b8:61:3c:23:dc:6e: 78:9f:e3:f5:e7:3c:4a:4b:f7:3f:33:d8:ad:73:a9:ab:bd:42: 1b:53:77:26:06:af:a6:98:bb:94:f2:dc:c8:f4:d1:6a:95:ff: 9a:7b:42:d5:2b:59:de:c9:d4:b4:c4:d9:2c:31:17:8e:3a:c2: 95:a9:eb:48:33:84:82:0c:e6:d7:43:d3:51:df:15:62:8d:42: ba:f8:f5:a6:9b:ef:f1:fa:d8:28:ad:fa:40:87:f6:2a:03:76: 9c:10:28:56:96:99:ad:b4:bc:65:9b:9f:8f:19:74:09:fc:8c: 5e:f6:7d:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr/H+MKEwoRbM+glhloKCDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUxMjA4MTgwMTExWhcNMjUxMjA5MTgwMTExWjAzMTEwLwYDVQQD EyhjNjRjMWQxZDMwOWVkZGE2MTE0MGRjNmI2Y2QyOWE5M2YzYmI5MDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC4+DYb+OL1LYXoZcDI3S3HQRHHE mMn8BgZElVYU7ngqEtfv5KdJa1dPlz58vwlknEFA+os/E0PYMbWpdkDk71qrbq2x 6cHabhsLlEs6+cFurG2jZEJMlQPOfXOL8wfoEWq/EJucyaItZkQIRJCnougJ8eH1 /3n7l7RRBFfNRJzpmSufRMVsyPj0zS7zAegIbKfmv2mAwVYWzKYV8AwjY4Q4R0lF FdqGrwu2A9/c+wsfjAv9ZFk3rh618gOzVtjZESImKFl6VP1E2n2uU8bmGelnUoBI w46nNt2h2QkrBdENiejpWuE3+YwFaFExVMLPhUgreHCblLpgHw4CCA7M9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZMHR0wnt2mEUDca2zSmpPzu5BvMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp+XGBM6 t0zOcD/O04ZHots4SgHlNytb4jro+EJZDUVyPrm5yAlujvEuHp+ZGKjDf8g/NW0o 8z6hH2W/sUX72prgs7z7cQPEohu5+RQXJ1OV6zgHaMIyJbycdx6YxfObcwxEQS5J 2U8odrG+XAN5TAXiDNiBhaUFIhkUHDGd//sqL4DUUZ98g5AJuGE8I9xueJ/j9ec8 Skv3PzPYrXOpq71CG1N3Jgavppi7lPLcyPTRapX/mntC1StZ3snUtMTZLDEXjjrC lanrSDOEggzm10PTUd8VYo1Cuvj1ppvv8frYKK36QIf2KgN2nBAoVpaZrbS8ZZuf jxl0CfyMXvZ9uQ== -----END CERTIFICATE-----Generated at Tue Dec 9 01:44:02 2025 by rpki-client