This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json) Hash identifier: CZ0tgCjxIS4Lc7X1TbZKj5GU0IFh9CYoOFbGhl/itjg= Subject key identifier: 93:60:B0:F7:AD:89:B2:38:C6:0C:D0:0B:D8:76:54:00:9F:E0:E2:ED Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99 Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99 Certificate serial: 019B5A1AA4F0DAF9A3BD5563097628D7A6C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft Manifest number: D2 Signing time: Fri 26 Dec 2025 10:00:54 +0000 Manifest this update: Fri 26 Dec 2025 10:00:54 +0000 Manifest next update: Sat 27 Dec 2025 10:00:54 +0000 Files and hashes: 1: 7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa (hash: 07a2Z1bP4ZM4lvBNnIbYpGRZq/i+QW1+w8DIMuAxBRM=) 2: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: DA6IRlDPCBO9F9Dd9qJUFiUoHh5md95Hh6BoNpB2rJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a4:f0:da:f9:a3:bd:55:63:09:76:28:d7:a6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99 Validity Not Before: Dec 26 10:00:54 2025 GMT Not After : Dec 27 10:00:54 2025 GMT Subject: CN=9360b0f7ad89b238c60cd00bd87654009fe0e2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:11:e0:61:47:e5:49:e8:9c:c2:62:bc:71: f9:43:19:47:87:d0:25:04:af:03:b4:28:c6:87:3d: c9:47:f2:3a:c7:d7:7c:53:38:c4:24:b1:dc:d3:50: 4e:ca:d3:98:2f:38:2e:fd:fe:b0:5b:0a:df:c1:05: 1b:6e:35:b7:d6:e5:fa:5e:10:3e:54:ff:b4:71:5e: 37:98:a4:06:c9:0a:70:35:06:fc:fe:9e:d6:02:87: f6:8a:9c:a3:27:60:00:0b:59:c5:aa:e2:9c:3e:fc: 3f:26:b1:71:18:73:3b:ba:a5:4f:41:6b:fb:c2:47: 24:55:69:62:f4:87:1e:15:da:e3:b6:79:6f:95:39: 45:fb:fa:34:7a:b0:ea:eb:3f:e8:5f:d8:7c:94:ba: a2:04:bf:3e:bb:17:d4:95:9d:9a:31:4c:20:e9:d5: bb:66:70:f1:1c:72:62:d6:03:50:c6:9b:95:01:53: c4:dd:61:53:30:6f:90:ef:69:54:cb:10:1f:85:4b: 57:23:60:34:55:74:ef:a7:b3:28:6e:51:26:8c:c1: c2:0b:96:17:70:ca:ab:75:f7:23:50:88:bc:bc:47: af:4c:91:5e:ed:55:0d:e5:05:35:fc:24:0b:7e:94: 0d:85:91:e0:eb:4c:9b:43:12:1c:72:11:69:6e:b8: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:B0:F7:AD:89:B2:38:C6:0C:D0:0B:D8:76:54:00:9F:E0:E2:ED X509v3 Authority Key Identifier: keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a4:b6:62:39:ee:6e:bf:7f:31:fd:b3:25:7d:08:af:87:2e: 8c:82:f6:03:f8:96:f5:5e:68:82:2c:1f:18:6d:ae:11:e9:64: fd:fd:d5:1b:1d:c8:5f:57:9e:2e:6c:ea:2a:79:22:29:be:27: 36:d2:40:64:1e:6e:2c:a9:3b:80:a2:36:3a:cd:55:85:3f:79: 3f:84:a0:1d:d0:69:b0:57:07:75:2d:00:6a:54:cc:96:35:d3: 3f:9b:d0:d4:fd:49:00:29:18:d1:42:7c:b9:d7:aa:a0:03:c5: 8d:26:25:84:ec:ae:75:94:fb:f2:73:2d:27:0e:cc:0a:94:a6: d6:01:46:e6:be:e2:2f:04:97:62:cc:93:3b:f5:9e:07:f5:37: b8:60:99:24:98:f4:ff:c9:cd:b3:93:b9:04:92:91:fb:5c:00: d8:c7:a5:07:68:f8:9c:af:79:e3:a3:8a:0b:87:33:3a:7d:7c: 2c:93:43:17:41:3f:f4:0d:e4:ed:a3:27:1d:f4:36:11:e8:7f: 02:92:ab:39:a8:37:07:e4:b7:9d:69:99:2c:7a:6d:e0:40:e9: 92:25:af:a3:39:d9:63:53:e8:dc:ea:b0:53:57:bc:1f:cb:80: 88:f4:0c:43:ea:f0:27:d9:ed:45:3e:39:fb:50:fe:d3:c6:28: 20:20:35:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqTw2vmjvVVjCXYo16bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDEyMzNmMTEyYTRhMzQzNTU3NWEzYTIxOWRjY2MwMjEw NjhkOTkwHhcNMjUxMjI2MTAwMDU0WhcNMjUxMjI3MTAwMDU0WjAzMTEwLwYDVQQD Eyg5MzYwYjBmN2FkODliMjM4YzYwY2QwMGJkODc2NTQwMDlmZTBlMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW0R4GFH5UnonMJivHH5QxlHh9Al BK8DtCjGhz3JR/I6x9d8UzjEJLHc01BOytOYLzgu/f6wWwrfwQUbbjW31uX6XhA+ VP+0cV43mKQGyQpwNQb8/p7WAof2ipyjJ2AAC1nFquKcPvw/JrFxGHM7uqVPQWv7 wkckVWli9IceFdrjtnlvlTlF+/o0erDq6z/oX9h8lLqiBL8+uxfUlZ2aMUwg6dW7 ZnDxHHJi1gNQxpuVAVPE3WFTMG+Q72lUyxAfhUtXI2A0VXTvp7MoblEmjMHCC5YX cMqrdfcjUIi8vEevTJFe7VUN5QU1/CQLfpQNhZHg60ybQxIcchFpbrjTNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNgsPetibI4xgzQC9h2VACf4OLtMB8GA1UdIwQY MBaAFGbRIz8RKko0NVdaOiGdzMAhBo2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgt ZmU0Y2QyNzEyMzA2LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgtZmU0Y2QyNzEyMzA2 LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6S2Yjnu br9/Mf2zJX0Ir4cujIL2A/iW9V5ogiwfGG2uEelk/f3VGx3IX1eeLmzqKnkiKb4n NtJAZB5uLKk7gKI2Os1VhT95P4SgHdBpsFcHdS0AalTMljXTP5vQ1P1JACkY0UJ8 udeqoAPFjSYlhOyudZT78nMtJw7MCpSm1gFG5r7iLwSXYsyTO/WeB/U3uGCZJJj0 /8nNs5O5BJKR+1wA2MelB2j4nK9546OKC4czOn18LJNDF0E/9A3k7aMnHfQ2Eeh/ ApKrOag3B+S3nWmZLHpt4EDpkiWvoznZY1Po3OqwU1e8H8uAiPQMQ+rwJ9ntRT45 +1D+08YoICA1yg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:17 2025 by rpki-client