This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json) Hash identifier: RTjYAtNT81R8EJtcwLFjIllS12k3tIK67EHT77l4AW0= Subject key identifier: 7B:8B:9F:85:84:B4:BD:67:52:4C:CC:75:BC:A5:C0:FF:1B:5C:CF:50 Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Certificate serial: 019B342000238FEE6E494EA13726E53E79F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 01:01:10 +0000 Manifest this update: Fri 19 Dec 2025 01:01:10 +0000 Manifest next update: Sat 20 Dec 2025 01:01:10 +0000 Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=) 2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: 69381mbOulgsttjZYE3BZmZKGfOSMP+SFItznYx91A0=) 3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:00:23:8f:ee:6e:49:4e:a1:37:26:e5:3e:79:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Validity Not Before: Dec 19 01:01:10 2025 GMT Not After : Dec 20 01:01:10 2025 GMT Subject: CN=7b8b9f8584b4bd67524ccc75bca5c0ff1b5ccf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:20:87:e2:43:a2:6b:83:48:f6:c2:ec:e0: f1:b0:91:3c:11:99:d8:4b:9f:fe:71:88:bb:7d:fd: b0:79:30:bd:be:53:6e:79:e3:14:d8:a2:bb:52:5f: ed:17:c4:57:25:9d:91:da:52:d7:c2:c3:92:80:38: c3:9b:19:d2:1b:3f:e3:cc:6b:46:28:a9:75:b4:ac: 7d:f3:ab:ea:ab:ae:e4:f5:fb:5b:18:18:e9:a8:2d: 91:2f:93:df:2e:46:ad:3f:8f:1a:bb:f0:98:c7:0d: cc:fe:27:c5:26:23:34:f8:b3:7a:20:8c:63:f5:cc: ce:ad:2b:55:2c:e4:77:b3:39:52:8c:67:f5:db:43: d7:f3:d4:47:06:cd:8f:6c:b3:81:21:da:59:5f:06: 5e:d9:4a:a0:58:55:2d:b4:7e:e5:7e:a4:d0:6e:95: b8:44:22:80:a4:41:5a:68:1f:b5:91:80:93:de:db: 45:36:e1:ad:88:0c:27:3c:2c:d9:0f:4c:bd:50:12: 4c:07:e0:55:33:a7:2f:d7:cc:36:1a:e3:48:e4:58: b1:ee:84:78:b3:dc:c6:36:ed:0d:4d:0c:1b:10:bb: ef:cd:5c:b0:57:bf:5e:bc:f5:3c:09:bb:70:52:5f: 71:e4:3b:4b:83:fc:f6:f8:ac:04:c3:ec:d1:b4:16: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8B:9F:85:84:B4:BD:67:52:4C:CC:75:BC:A5:C0:FF:1B:5C:CF:50 X509v3 Authority Key Identifier: keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:21:15:14:11:9e:34:38:38:53:97:49:cf:d9:53:dc:d6: f6:e8:45:91:ec:39:0d:db:23:b6:87:13:f2:8b:f9:da:7a:88: 15:b3:e0:a0:9a:a0:af:57:a8:20:a3:e8:ce:7e:4e:bc:6b:08: 64:9c:51:9e:df:f0:fd:8d:bd:34:0c:be:fb:6a:b5:b0:32:9e: 09:97:6d:ae:13:40:6b:11:d7:c9:84:e0:8f:2a:32:83:cc:b6: 46:35:1b:a7:1d:f0:fd:9e:1a:d7:e1:44:df:ae:9e:69:e7:5c: 65:cf:9f:f9:9c:03:7f:c1:40:92:63:5d:c1:09:d0:b7:6a:95: 00:70:ff:37:97:f5:fe:76:c4:51:ee:a6:be:19:86:40:43:dc: 63:4f:07:c4:b5:96:8d:5f:c1:eb:11:5f:50:8a:09:24:50:61: 35:0d:7e:fd:95:4b:e3:bb:1a:fc:fc:85:88:45:a9:d5:b2:2e: 85:cd:c9:95:98:98:9e:c4:1b:86:27:ee:a3:bd:51:c8:e1:0d: ca:fc:17:e7:c9:0b:42:1a:ee:3e:55:ac:29:21:1e:30:09:57: 7d:10:a9:78:3b:9d:58:bf:a3:ba:2a:db:5c:8f:73:9f:d1:49: f8:fd:ab:ba:2c:b9:29:78:2e:0b:d9:3d:16:74:2c:92:6e:a0: 37:f1:44:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IAAjj+5uSU6hNyblPnn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw YTM0YjIwHhcNMjUxMjE5MDEwMTEwWhcNMjUxMjIwMDEwMTEwWjAzMTEwLwYDVQQD Eyg3YjhiOWY4NTg0YjRiZDY3NTI0Y2NjNzViY2E1YzBmZjFiNWNjZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBggh+JDomuDSPbC7ODxsJE8EZnY S5/+cYi7ff2weTC9vlNueeMU2KK7Ul/tF8RXJZ2R2lLXwsOSgDjDmxnSGz/jzGtG KKl1tKx986vqq67k9ftbGBjpqC2RL5PfLkatP48au/CYxw3M/ifFJiM0+LN6IIxj 9czOrStVLOR3szlSjGf120PX89RHBs2PbLOBIdpZXwZe2UqgWFUttH7lfqTQbpW4 RCKApEFaaB+1kYCT3ttFNuGtiAwnPCzZD0y9UBJMB+BVM6cv18w2GuNI5Fix7oR4 s9zGNu0NTQwbELvvzVywV79evPU8CbtwUl9x5DtLg/z2+KwEw+zRtBaIDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuLn4WEtL1nUkzMdbylwP8bXM9QMB8GA1UdIwQY MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDEhFRQR njQ4OFOXSc/ZU9zW9uhFkew5DdsjtocT8ov52nqIFbPgoJqgr1eoIKPozn5OvGsI ZJxRnt/w/Y29NAy++2q1sDKeCZdtrhNAaxHXyYTgjyoyg8y2RjUbpx3w/Z4a1+FE 366eaedcZc+f+ZwDf8FAkmNdwQnQt2qVAHD/N5f1/nbEUe6mvhmGQEPcY08HxLWW jV/B6xFfUIoJJFBhNQ1+/ZVL47sa/PyFiEWp1bIuhc3JlZiYnsQbhifuo71RyOEN yvwX58kLQhruPlWsKSEeMAlXfRCpeDudWL+juirbXI9zn9FJ+P2ruiy5KXguC9k9 FnQskm6gN/FE6Q== -----END CERTIFICATE-----Generated at Fri Dec 19 02:33:30 2025 by rpki-client