This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json) Hash identifier: IDA1cwaDONBjQd7MtUudvw2unhDnx3Qs/SRjeD+rDVI= Subject key identifier: 04:82:4E:BE:C6:F1:42:C3:53:85:21:55:64:1F:D2:F0:ED:EB:3F:38 Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115 Certificate serial: 019B3CB554B64805E9D209519E1A83475665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft Manifest number: 7D Signing time: Sat 20 Dec 2025 17:01:15 +0000 Manifest this update: Sat 20 Dec 2025 17:01:15 +0000 Manifest next update: Sun 21 Dec 2025 17:01:15 +0000 Files and hashes: 1: OLvsEOQQIpUl25Z4TEko9zb_n1I.roa (hash: 9j+j+7ArFD39gc7KW/0hA5lUAQk8VzJXss8aItVgswk=) 2: wzrBDa0AzHvMhlCKlCEAeNzTg1U.roa (hash: ibXC3aTl9szVtSiZ1VZTQMiaCOEz+/1+6+Jjm/P2hTA=) 3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: mKJx3hBfuTtbV5u2wpKI45ojHaZze+6sLMmppREGJR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:54:b6:48:05:e9:d2:09:51:9e:1a:83:47:56:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115 Validity Not Before: Dec 20 17:01:15 2025 GMT Not After : Dec 21 17:01:15 2025 GMT Subject: CN=04824ebec6f142c353852155641fd2f0edeb3f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:a5:dc:6f:cf:bc:c1:22:09:f0:fd:30:33: a1:7e:79:64:20:96:4f:90:6c:3c:65:f3:be:5b:bd: 79:98:37:47:f6:96:7b:0a:8f:67:05:3d:b8:7a:e4: e1:05:60:55:d8:3d:9c:59:95:c0:65:52:2d:da:38: 32:d5:01:6e:1f:96:1e:1f:a1:05:0f:64:db:d3:1e: 30:99:a9:66:d2:a8:cc:50:88:0a:1f:56:33:10:52: b3:0f:03:bb:a0:46:56:e3:2c:fb:d7:4b:26:f8:89: 5b:9d:71:c0:fd:f6:f7:cc:9d:3a:5c:cd:f1:cc:be: 86:fd:ea:34:0f:bf:7f:0e:eb:bb:d0:b8:4e:1a:24: 92:da:37:f1:c4:df:64:80:26:d1:26:c7:75:f6:27: 9d:4b:82:f2:98:8b:5f:a5:79:88:24:3a:d2:45:ab: 53:38:0b:52:0e:fe:df:2a:65:b5:59:90:f8:0f:90: 79:12:f0:87:e9:50:cf:0e:bb:04:0c:da:09:33:3e: bb:de:78:b2:7f:73:fe:d7:be:ca:e9:fa:6a:9f:58: ec:13:14:4d:41:b1:82:ff:78:0d:02:4c:19:1c:c6: 24:96:9d:c6:c0:3e:db:22:88:53:09:d9:f4:4a:ab: 42:c4:00:df:5c:e4:eb:5a:90:4b:35:62:d3:19:67: fb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:82:4E:BE:C6:F1:42:C3:53:85:21:55:64:1F:D2:F0:ED:EB:3F:38 X509v3 Authority Key Identifier: keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:de:a0:7b:7e:49:e6:8b:04:1a:5d:62:36:e4:66:bf:d9:8d: b9:30:8f:b7:40:43:d5:e4:d5:e5:d6:b6:fc:0c:de:f1:48:47: 17:1c:3c:fb:8f:ab:67:4e:9e:11:18:fe:ef:ff:f9:e6:15:42: c7:57:20:c1:c0:66:aa:9e:e2:53:24:dc:41:c9:ba:16:03:6b: 51:83:6e:e4:95:0b:f5:25:fd:2f:66:0d:8a:b7:0a:aa:ba:9e: 45:61:c5:70:86:92:08:5a:e2:df:f9:08:7c:9f:84:04:b7:7a: b5:2e:33:55:1c:f4:e5:de:33:b2:f9:cd:b6:c9:ca:cc:78:b2: 30:3e:f0:e4:cd:d6:43:73:78:0d:06:3d:2c:53:f4:da:ec:94: aa:ab:2a:e5:01:6d:04:83:e5:c1:cc:3a:e5:91:29:98:fc:f7: 6f:68:f0:a7:5f:f4:33:0d:a0:5b:60:74:d6:e6:5f:7b:ba:f4: c9:5a:02:c4:ee:32:ee:a3:fb:d2:30:97:e5:c4:60:5a:ea:05: ea:07:28:ca:4f:74:41:21:5b:a0:23:4e:79:ac:bc:1d:04:72: 29:46:b1:56:f3:a6:14:c3:8a:f3:32:93:40:f6:d6:0a:f5:ee: d7:5c:ff:fc:e1:56:98:0c:42:27:f1:31:af:2b:f7:8c:81:7f: d6:be:09:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVS2SAXp0glRnhqDR1ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZGQwZDcxNWU5N2ZiOTFmNzhkMDdmZTEwNjk2ZGE2MDE2 MDUxMTUwHhcNMjUxMjIwMTcwMTE1WhcNMjUxMjIxMTcwMTE1WjAzMTEwLwYDVQQD EygwNDgyNGViZWM2ZjE0MmMzNTM4NTIxNTU2NDFmZDJmMGVkZWIzZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqil3G/PvMEiCfD9MDOhfnlkIJZP kGw8ZfO+W715mDdH9pZ7Co9nBT24euThBWBV2D2cWZXAZVIt2jgy1QFuH5YeH6EF D2Tb0x4wmalm0qjMUIgKH1YzEFKzDwO7oEZW4yz710sm+IlbnXHA/fb3zJ06XM3x zL6G/eo0D79/Duu70LhOGiSS2jfxxN9kgCbRJsd19iedS4LymItfpXmIJDrSRatT OAtSDv7fKmW1WZD4D5B5EvCH6VDPDrsEDNoJMz673niyf3P+177K6fpqn1jsExRN QbGC/3gNAkwZHMYklp3GwD7bIohTCdn0SqtCxADfXOTrWpBLNWLTGWf71wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASCTr7G8ULDU4UhVWQf0vDt6z84MB8GA1UdIwQY MBaAFM7dDXFel/uR940H/hBpbaYBYFEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMt YWFmMzIxNzFlYWExLzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMtYWFmMzIxNzFlYWEx LzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht6ge35J 5osEGl1iNuRmv9mNuTCPt0BD1eTV5da2/Aze8UhHFxw8+4+rZ06eERj+7//55hVC x1cgwcBmqp7iUyTcQcm6FgNrUYNu5JUL9SX9L2YNircKqrqeRWHFcIaSCFri3/kI fJ+EBLd6tS4zVRz05d4zsvnNtsnKzHiyMD7w5M3WQ3N4DQY9LFP02uyUqqsq5QFt BIPlwcw65ZEpmPz3b2jwp1/0Mw2gW2B01uZfe7r0yVoCxO4y7qP70jCX5cRgWuoF 6gcoyk90QSFboCNOeay8HQRyKUaxVvOmFMOK8zKTQPbWCvXu11z//OFWmAxCJ/Ex ryv3jIF/1r4JKw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:38:06 2025 by rpki-client