This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json) Hash identifier: aT/aDEJI0OZPrtnFQPJwugyEQSWAnwOfdubo1W4NLK8= Subject key identifier: AD:C2:3B:51:E8:55:58:60:D0:1A:F6:FE:7E:1E:33:07:69:ED:01:08 Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Certificate serial: 019AF23FDDC58738DF7B42E5AA16B62236A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=) 2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: L4gI2ziMWXCMtmEJgSModkVa5kqXwbGt5L9ntfy1/wc=) 3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dd:c5:87:38:df:7b:42:e5:aa:16:b6:22:36:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=adc23b51e8555860d01af6fe7e1e330769ed0108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:26:a4:16:6e:af:48:07:cd:45:6f:12:d5: 29:38:20:af:fb:7d:24:de:c2:57:e0:ec:be:30:58: ea:62:68:2a:d9:b9:65:fa:5c:10:5c:44:46:bc:62: 69:59:2f:55:9b:40:57:7c:15:77:90:4a:04:67:8d: 57:c3:53:8e:a6:95:69:ad:a6:9d:4d:64:e4:96:05: 9b:e7:e4:ab:b1:5b:bb:f7:a7:14:51:ed:6b:8c:91: 03:23:00:66:80:23:b1:1e:48:85:63:c4:71:25:7f: 4e:9f:ee:a3:ed:07:bf:cd:16:5d:28:21:08:18:a7: a8:49:b4:cf:eb:bf:10:ea:11:8b:5e:8f:b2:e2:9f: 85:fc:f2:70:ac:a9:1d:ff:51:1d:b0:d8:8c:00:2b: 52:8c:6c:c4:e3:03:0f:d5:80:da:64:fe:c2:c3:2d: 1c:92:ef:6a:e7:37:68:e0:96:c6:6c:5c:7e:f7:b3: 3d:4f:15:d4:e0:7d:15:12:b8:2f:1b:f2:60:a7:24: 1f:6c:c2:1d:99:61:63:90:82:5e:e4:2e:50:15:da: a2:ff:d0:97:e0:13:a4:79:b6:f4:b6:5e:58:50:53: d4:34:4c:2e:32:4c:12:4d:7d:eb:e2:78:0a:d6:1b: 6c:8f:d2:61:06:f3:f1:85:5e:7a:70:27:09:6e:bf: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C2:3B:51:E8:55:58:60:D0:1A:F6:FE:7E:1E:33:07:69:ED:01:08 X509v3 Authority Key Identifier: keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a7:1f:be:ee:3e:c3:69:54:71:dc:40:34:4d:ec:27:16:23: 09:aa:3d:b1:c7:79:4e:a9:3b:ef:55:2a:00:ad:65:0e:74:73: 2f:c1:bc:35:ab:1d:f8:07:bf:28:c9:54:0f:7a:cd:4c:af:c0: db:8f:d3:31:1a:89:8e:a7:70:38:33:f3:aa:3d:7b:63:bc:6a: 97:a7:bb:ed:ad:97:63:a9:22:42:df:de:78:07:df:d2:14:d3: 72:b5:33:f6:bb:e8:a8:be:9e:2b:1f:f3:39:26:2c:ba:31:d1: 31:3a:37:a2:6d:07:4d:a1:d1:af:0d:26:b7:82:50:9e:b7:c6: ff:c6:eb:33:c3:3b:36:5d:89:9e:50:64:f0:e0:ac:58:f7:25: e9:a8:f1:57:f9:33:6f:87:96:9a:7c:6d:cd:6e:05:2c:87:80: bb:ed:2b:93:5b:b8:97:fe:93:90:01:b5:21:b4:fe:47:71:69: 3f:4c:94:8b:31:aa:3b:75:36:7c:ca:b2:f8:ef:87:01:7a:b8: 1d:a7:e9:89:1a:25:23:a2:2e:0d:69:c8:bb:39:16:90:2e:85: 9b:01:91:82:eb:a6:d9:be:e9:c0:35:f1:8f:78:aa:6f:97:80: 15:39:bf:d4:d8:83:42:d6:2e:16:b4:18:0e:36:3e:68:36:d3: 9e:72:67:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP93Fhzjfe0Llqha2IjaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw MDg3ZDQwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EyhhZGMyM2I1MWU4NTU1ODYwZDAxYWY2ZmU3ZTFlMzMwNzY5ZWQwMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIEmpBZur0gHzUVvEtUpOCCv+30k 3sJX4Oy+MFjqYmgq2bll+lwQXERGvGJpWS9Vm0BXfBV3kEoEZ41Xw1OOppVpraad TWTklgWb5+SrsVu796cUUe1rjJEDIwBmgCOxHkiFY8RxJX9On+6j7Qe/zRZdKCEI GKeoSbTP678Q6hGLXo+y4p+F/PJwrKkd/1EdsNiMACtSjGzE4wMP1YDaZP7Cwy0c ku9q5zdo4JbGbFx+97M9TxXU4H0VErgvG/JgpyQfbMIdmWFjkIJe5C5QFdqi/9CX 4BOkebb0tl5YUFPUNEwuMkwSTX3r4ngK1htsj9JhBvPxhV56cCcJbr/ntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3CO1HoVVhg0Br2/n4eMwdp7QEIMB8GA1UdIwQY MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6cfvu4+ w2lUcdxANE3sJxYjCao9scd5Tqk771UqAK1lDnRzL8G8Nasd+Ae/KMlUD3rNTK/A 24/TMRqJjqdwODPzqj17Y7xql6e77a2XY6kiQt/eeAff0hTTcrUz9rvoqL6eKx/z OSYsujHRMTo3om0HTaHRrw0mt4JQnrfG/8brM8M7Nl2JnlBk8OCsWPcl6ajxV/kz b4eWmnxtzW4FLIeAu+0rk1u4l/6TkAG1IbT+R3FpP0yUizGqO3U2fMqy+O+HAXq4 HafpiRolI6IuDWnIuzkWkC6FmwGRguum2b7pwDXxj3iqb5eAFTm/1NiDQtYuFrQY DjY+aDbTnnJnQw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:28:13 2025 by rpki-client