This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json) Hash identifier: n0M5h+g24YPkhzYc2zpUOEBDfb7gg/CO8TN66zVuj94= Subject key identifier: 21:50:CD:20:36:B5:ED:AF:54:18:A6:19:5F:A9:BD:F6:C1:61:3C:5B Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525 Certificate serial: 019B4D04229D1B60E5FB5DD06480BBAC671F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft Manifest number: 14D9 Signing time: Tue 23 Dec 2025 21:01:15 +0000 Manifest this update: Tue 23 Dec 2025 21:01:15 +0000 Manifest next update: Wed 24 Dec 2025 21:01:15 +0000 Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=) 2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: QxsfFz3TYCMShIBoExOzgMzgdb7ofrei0+q7U1u5hgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:22:9d:1b:60:e5:fb:5d:d0:64:80:bb:ac:67:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525 Validity Not Before: Dec 23 21:01:15 2025 GMT Not After : Dec 24 21:01:15 2025 GMT Subject: CN=2150cd2036b5edaf5418a6195fa9bdf6c1613c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:b1:09:36:95:1c:2c:ad:37:38:4a:6f:6c: 8a:66:95:6e:02:b8:91:15:b3:e4:1b:f7:78:a5:8c: 1a:3a:66:0a:69:04:10:5f:a8:3f:66:14:6d:28:ca: f1:38:f1:c5:aa:38:da:b4:e2:9a:d8:c3:d6:da:c2: c8:b7:96:f7:16:4d:e6:4a:30:28:3b:c2:06:1d:38: a0:2e:29:ab:f1:48:d9:66:3e:b0:0f:36:66:e4:18: e1:70:f8:84:e4:20:0f:6d:a3:0d:2d:7f:45:6a:e6: 21:b5:05:3f:8b:a7:aa:a1:ca:d0:8e:74:d4:70:99: 76:5f:1e:94:25:6b:66:30:c8:47:5f:8d:ab:66:17: f2:f1:ab:31:77:5b:0f:55:2c:a4:ca:7f:00:dc:9f: b2:72:30:38:24:bc:52:52:56:06:80:09:09:22:42: c8:07:bd:08:33:10:69:58:0c:61:ee:73:17:7d:4d: 9e:c1:da:cd:d1:61:88:d1:0a:c6:ca:80:12:2c:33: 6c:18:1a:b2:f9:e8:4b:b7:77:f6:8a:fd:23:7b:94: fd:8b:f5:fd:fb:4b:6d:ab:01:be:ea:34:51:58:c0: d1:a4:27:a5:00:66:aa:36:6c:9e:c2:fe:da:6b:bc: 6d:32:2c:e5:eb:e5:b3:58:90:b5:b9:32:d2:d9:5e: 39:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:50:CD:20:36:B5:ED:AF:54:18:A6:19:5F:A9:BD:F6:C1:61:3C:5B X509v3 Authority Key Identifier: keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:de:e3:26:46:32:bb:72:b4:52:f2:28:90:12:22:7d:44:73: 32:f8:e0:58:d0:84:34:a3:50:8a:b1:80:93:97:29:1a:d9:60: f5:bf:b4:91:7e:5f:dc:57:64:82:82:50:b7:48:4b:27:11:21: 98:3f:d4:58:04:19:42:6d:79:ad:25:92:00:3f:7d:ec:0b:be: a7:b1:59:93:2d:71:38:27:ab:bc:50:f2:65:5d:69:4d:c9:22: 78:31:e4:41:70:b9:7a:71:b0:74:be:d5:a2:ab:62:1c:9d:b1: 89:24:b0:c6:4d:12:15:0c:d2:13:70:44:7c:95:2c:ec:63:3b: 90:b3:fe:4c:4b:83:92:0b:a9:76:05:5f:27:e2:50:37:65:8e: 3e:6a:89:38:3a:d1:f9:c3:c0:dc:cf:c2:62:ab:04:33:b0:1a: 6c:56:59:f1:d5:de:bf:76:5e:f6:0b:9b:06:5d:08:d3:4e:34: d6:d4:1a:fb:20:a4:37:09:39:c2:43:0f:57:17:1a:39:cd:1c: 8e:76:86:59:6d:39:4d:d8:9d:24:4d:0b:f8:2a:ef:57:75:f4: 42:26:63:dc:63:dc:55:f6:c2:55:4a:17:ca:74:87:fd:15:f5: e5:22:e7:20:79:8a:69:1b:70:4a:d5:87:68:d0:ff:55:e0:6d: 08:ac:44:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBCKdG2Dl+13QZIC7rGcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1 MTc1MjUwHhcNMjUxMjIzMjEwMTE1WhcNMjUxMjI0MjEwMTE1WjAzMTEwLwYDVQQD EygyMTUwY2QyMDM2YjVlZGFmNTQxOGE2MTk1ZmE5YmRmNmMxNjEzYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00SxCTaVHCytNzhKb2yKZpVuAriR FbPkG/d4pYwaOmYKaQQQX6g/ZhRtKMrxOPHFqjjatOKa2MPW2sLIt5b3Fk3mSjAo O8IGHTigLimr8UjZZj6wDzZm5BjhcPiE5CAPbaMNLX9FauYhtQU/i6eqocrQjnTU cJl2Xx6UJWtmMMhHX42rZhfy8asxd1sPVSykyn8A3J+ycjA4JLxSUlYGgAkJIkLI B70IMxBpWAxh7nMXfU2ewdrN0WGI0QrGyoASLDNsGBqy+ehLt3f2iv0je5T9i/X9 +0ttqwG+6jRRWMDRpCelAGaqNmyewv7aa7xtMizl6+WzWJC1uTLS2V454QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFQzSA2te2vVBimGV+pvfbBYTxbMB8GA1UdIwQY MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4 LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAod7jJkYy u3K0UvIokBIifURzMvjgWNCENKNQirGAk5cpGtlg9b+0kX5f3FdkgoJQt0hLJxEh mD/UWAQZQm15rSWSAD997Au+p7FZky1xOCervFDyZV1pTckieDHkQXC5enGwdL7V oqtiHJ2xiSSwxk0SFQzSE3BEfJUs7GM7kLP+TEuDkgupdgVfJ+JQN2WOPmqJODrR +cPA3M/CYqsEM7AabFZZ8dXev3Ze9gubBl0I00401tQa+yCkNwk5wkMPVxcaOc0c jnaGWW05TdidJE0L+CrvV3X0QiZj3GPcVfbCVUoXynSH/RX15SLnIHmKaRtwStWH aND/VeBtCKxEyg== -----END CERTIFICATE-----Generated at Wed Dec 24 00:12:14 2025 by rpki-client