This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json) Hash identifier: n6iKDxnYbfPG12qz1SwUFVufvp4R20d+4aYUZWkejDI= Subject key identifier: 4B:82:D6:C2:56:82:56:8A:7E:4B:33:DF:EF:73:85:62:3E:0F:39:48 Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Certificate serial: 019B4ADE979658D5470436A2A19FAF7AFAB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft Manifest number: 0E8D Signing time: Tue 23 Dec 2025 11:01:00 +0000 Manifest this update: Tue 23 Dec 2025 11:01:00 +0000 Manifest next update: Wed 24 Dec 2025 11:01:00 +0000 Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=) 2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: X73vmb119N7ayotHqOP3BIvs3x6J5tfRCoF/4mC3CX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:97:96:58:d5:47:04:36:a2:a1:9f:af:7a:fa:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Validity Not Before: Dec 23 11:01:00 2025 GMT Not After : Dec 24 11:01:00 2025 GMT Subject: CN=4b82d6c25682568a7e4b33dfef7385623e0f3948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:a8:20:5d:ac:eb:55:b9:cc:5b:6f:15:51: 37:8b:10:d7:0a:43:4b:49:3f:04:0b:e0:21:5c:15: 83:ec:41:9f:4b:8f:58:fd:91:e2:f5:06:f9:84:c5: b8:a0:fe:0e:ae:4a:c2:25:8b:83:1a:65:0d:0a:8b: 98:0a:f1:cb:07:0c:87:c7:dd:dd:9c:13:04:ed:65: e9:7e:a8:c8:d0:02:00:14:37:1b:a0:e7:f2:1b:55: cc:ab:a9:4b:a6:45:c3:3e:a9:4f:fa:da:13:a6:4d: d0:b5:4c:55:b2:dd:84:da:38:b5:1c:ae:43:4c:ba: cd:3b:cf:75:11:7f:95:52:1d:78:c9:53:23:75:cd: 66:90:cb:a2:a0:e9:34:57:72:f3:15:4c:55:5f:0a: 6a:34:02:97:ba:b5:b2:bd:11:6a:b6:30:a8:8e:e9: 7f:e3:32:37:9f:2c:2d:e1:cf:ee:73:47:2e:aa:74: 4d:2f:57:25:1d:6e:34:e6:3e:c6:59:5a:d7:1a:96: 8c:63:37:cf:11:4e:67:af:4e:8f:10:6c:31:0d:d0: 53:97:71:97:0a:11:4e:df:2a:43:33:72:8b:d7:40: 2a:da:51:7f:65:fb:61:e8:cf:bc:fc:18:85:35:12: 3a:66:27:71:c5:29:bf:25:df:b7:54:9e:b5:74:aa: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:82:D6:C2:56:82:56:8A:7E:4B:33:DF:EF:73:85:62:3E:0F:39:48 X509v3 Authority Key Identifier: keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:38:58:94:e5:ca:93:87:65:bb:4d:34:c2:b4:13:27:67:ea: 17:1c:b9:6c:e8:3b:76:b9:5e:a1:a1:5d:2e:d2:ef:41:f4:28: cc:4b:91:41:68:91:02:e0:60:dd:49:9a:b9:00:55:56:dc:c9: d7:9f:8a:63:bf:d7:36:68:41:91:a1:fa:f4:cc:b7:00:79:29: a6:9a:c1:e1:27:f1:8b:0a:c0:5e:26:e8:3a:09:b0:56:ac:32: 9e:b0:c0:19:26:02:4e:55:33:36:ae:8f:f2:a6:c4:37:50:2e: 20:7a:99:a6:f8:61:0a:0c:e5:5c:b4:5a:69:b4:f6:e5:74:10: f2:d5:0b:a8:b5:f3:43:8c:5e:14:3b:0b:59:4a:5b:a4:93:f0: 84:93:2f:69:3b:e0:c6:3a:dc:07:b0:21:90:2a:b7:d9:15:b3: 3c:fc:5d:34:00:6a:c2:be:f9:da:4e:e4:ed:b9:69:85:7b:d1: 3c:66:0c:fa:a2:cd:46:ba:3a:66:a0:74:40:1c:dd:c1:36:b7: 06:8a:dd:b5:a7:a1:f2:ee:81:c1:db:b7:cb:c1:00:03:3d:22: 30:2a:3e:08:08:96:cd:12:91:bc:5f:8e:aa:b5:a4:c3:56:0c: b4:a6:98:02:8c:7a:6c:16:72:e1:38:a8:2e:1c:33:31:1f:6a: 36:bb:f8:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3peWWNVHBDaioZ+vevqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0 Y2IxNzEwHhcNMjUxMjIzMTEwMTAwWhcNMjUxMjI0MTEwMTAwWjAzMTEwLwYDVQQD Eyg0YjgyZDZjMjU2ODI1NjhhN2U0YjMzZGZlZjczODU2MjNlMGYzOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig6oIF2s61W5zFtvFVE3ixDXCkNL ST8EC+AhXBWD7EGfS49Y/ZHi9Qb5hMW4oP4OrkrCJYuDGmUNCouYCvHLBwyHx93d nBME7WXpfqjI0AIAFDcboOfyG1XMq6lLpkXDPqlP+toTpk3QtUxVst2E2ji1HK5D TLrNO891EX+VUh14yVMjdc1mkMuioOk0V3LzFUxVXwpqNAKXurWyvRFqtjCojul/ 4zI3nywt4c/uc0cuqnRNL1clHW405j7GWVrXGpaMYzfPEU5nr06PEGwxDdBTl3GX ChFO3ypDM3KL10Aq2lF/Zfth6M+8/BiFNRI6ZidxxSm/Jd+3VJ61dKpQ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuC1sJWglaKfksz3+9zhWI+DzlIMB8GA1UdIwQY MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzhYlOXK k4dlu000wrQTJ2fqFxy5bOg7drleoaFdLtLvQfQozEuRQWiRAuBg3UmauQBVVtzJ 15+KY7/XNmhBkaH69My3AHkppprB4SfxiwrAXiboOgmwVqwynrDAGSYCTlUzNq6P 8qbEN1AuIHqZpvhhCgzlXLRaabT25XQQ8tULqLXzQ4xeFDsLWUpbpJPwhJMvaTvg xjrcB7AhkCq32RWzPPxdNABqwr752k7k7blphXvRPGYM+qLNRro6ZqB0QBzdwTa3 Bordtaeh8u6Bwdu3y8EAAz0iMCo+CAiWzRKRvF+OqrWkw1YMtKaYAox6bBZy4Tio LhwzMR9qNrv4Ug== -----END CERTIFICATE-----Generated at Tue Dec 23 18:03:42 2025 by rpki-client