This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json) Hash identifier: 3wjWO5+GAlcny3WFXy4IUUwQggq3MTrPZEadYd0DvZc= Subject key identifier: 92:95:6E:98:72:13:F2:F3:CE:39:9E:B2:D2:01:13:61:D0:F0:66:62 Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Certificate serial: 019B3BA231B37131EFA4633A1F6DAB243213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft Manifest number: 1060 Signing time: Sat 20 Dec 2025 12:00:43 +0000 Manifest this update: Sat 20 Dec 2025 12:00:43 +0000 Manifest next update: Sun 21 Dec 2025 12:00:43 +0000 Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: xmP0D14N/e71sQl9iBiqB2oD+JXJd2Z+NR2wOzMZGSA=) 2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:31:b3:71:31:ef:a4:63:3a:1f:6d:ab:24:32:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Validity Not Before: Dec 20 12:00:43 2025 GMT Not After : Dec 21 12:00:43 2025 GMT Subject: CN=92956e987213f2f3ce399eb2d2011361d0f06662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:7d:e0:97:ab:e1:08:f9:76:3e:8a:3e:35: b3:0d:d5:78:a0:cc:00:8f:93:85:18:9f:2c:8b:fe: f1:76:98:ed:28:c3:23:eb:8c:f8:a8:99:e5:af:31: 50:0d:67:3e:07:97:67:fd:2d:75:b9:b0:ab:94:4a: 60:56:fc:3d:e2:51:57:f1:b6:13:28:89:6a:4a:74: 8c:2c:75:25:41:31:71:2c:a5:6b:d5:5d:c0:ce:d0: 27:9c:8d:37:41:c6:6f:45:fa:63:44:52:d8:3f:c8: 19:e2:e6:57:7d:28:3c:b8:52:3f:7f:46:bd:e9:00: 84:0d:48:73:45:fa:66:51:9d:15:2a:db:82:f6:06: 25:09:88:28:50:81:35:ad:43:ef:11:38:b3:8b:25: df:ab:22:bb:2f:1d:4f:76:ae:35:4e:7a:ce:c8:ae: d9:67:86:5a:98:60:76:80:66:11:e2:31:77:1e:bd: b6:b9:b8:c4:52:6f:fa:7c:31:f2:e4:4a:52:e4:b1: 44:b1:ba:9a:4d:94:90:72:b2:81:45:62:89:74:58: 3b:5e:b0:68:0a:f4:60:62:c8:ef:f0:55:e5:38:6f: aa:b2:d4:f3:7b:6c:a4:51:e9:4c:b0:cc:0d:35:b9: 23:8c:e4:3b:a0:b9:3e:3b:8e:40:0b:63:30:8c:3f: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:95:6E:98:72:13:F2:F3:CE:39:9E:B2:D2:01:13:61:D0:F0:66:62 X509v3 Authority Key Identifier: keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:2b:0b:fd:69:42:6e:f5:6d:40:07:1f:a4:a3:f7:44:57: d4:c5:a2:aa:8a:b5:8f:4c:67:ea:3b:a2:32:a1:8b:ed:b0:16: d1:b3:97:e0:84:52:1a:24:1b:d2:28:93:7c:11:77:fc:17:5f: 1d:c4:34:1c:ee:c6:a3:1e:e0:e2:a9:db:99:db:1b:37:f0:b6: 67:df:45:d1:19:2b:d3:c4:67:c8:ab:cb:9a:1c:ef:c0:45:5a: a5:b5:e8:1a:03:40:0b:ff:5e:7b:24:33:98:de:b5:07:1b:64: 9b:08:a3:64:06:fa:f1:41:75:ff:5a:96:05:f7:1a:e2:b9:a4: 91:09:0f:4e:f1:7a:d9:5f:c6:5e:a8:d4:ab:80:9f:20:c9:6c: 86:81:e2:22:f5:95:ec:0d:39:29:c9:c9:e7:a9:06:a3:79:ec: 55:ae:fd:55:35:f3:41:1f:7d:b4:1d:77:33:6c:39:05:f0:ea: 45:8d:3b:36:a8:2a:c5:04:79:e0:13:36:7c:97:ea:be:34:13: 22:e9:dc:db:18:db:20:e0:d0:2b:98:6b:63:94:93:e3:ca:ad: af:26:db:00:2d:7b:5c:12:2e:bb:01:ad:a9:a5:8c:b1:7b:a8: 98:a3:bf:65:29:f5:23:61:29:44:0c:01:95:6e:4c:03:1a:ff: da:c0:c8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojGzcTHvpGM6H22rJDITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmI3NzI3ZDY0YTUxOGM3Y2Q0ODVlNDgyM2VlNzhhOWUy OTEwMDgwHhcNMjUxMjIwMTIwMDQzWhcNMjUxMjIxMTIwMDQzWjAzMTEwLwYDVQQD Eyg5Mjk1NmU5ODcyMTNmMmYzY2UzOTllYjJkMjAxMTM2MWQwZjA2NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXV94Jer4Qj5dj6KPjWzDdV4oMwA j5OFGJ8si/7xdpjtKMMj64z4qJnlrzFQDWc+B5dn/S11ubCrlEpgVvw94lFX8bYT KIlqSnSMLHUlQTFxLKVr1V3AztAnnI03QcZvRfpjRFLYP8gZ4uZXfSg8uFI/f0a9 6QCEDUhzRfpmUZ0VKtuC9gYlCYgoUIE1rUPvETiziyXfqyK7Lx1Pdq41TnrOyK7Z Z4ZamGB2gGYR4jF3Hr22ubjEUm/6fDHy5EpS5LFEsbqaTZSQcrKBRWKJdFg7XrBo CvRgYsjv8FXlOG+qstTze2ykUelMsMwNNbkjjOQ7oLk+O45AC2MwjD9CtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKVbphyE/LzzjmestIBE2HQ8GZiMB8GA1UdIwQY MBaAFGb7dyfWSlGMfNSF5II+54qeKRAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4Mzkt N2MzYmRkYzI5NzhhLzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4MzktN2MzYmRkYzI5Nzhh LzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB4rC/1p Qm71bUAHH6Sj90RX1MWiqoq1j0xn6juiMqGL7bAW0bOX4IRSGiQb0iiTfBF3/Bdf HcQ0HO7Gox7g4qnbmdsbN/C2Z99F0Rkr08RnyKvLmhzvwEVapbXoGgNAC/9eeyQz mN61BxtkmwijZAb68UF1/1qWBfca4rmkkQkPTvF62V/GXqjUq4CfIMlshoHiIvWV 7A05KcnJ56kGo3nsVa79VTXzQR99tB13M2w5BfDqRY07NqgqxQR54BM2fJfqvjQT Iunc2xjbIODQK5hrY5ST48qtrybbAC17XBIuuwGtqaWMsXuomKO/ZSn1I2EpRAwB lW5MAxr/2sDIDA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:25:09 2025 by rpki-client