This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: 36SKp0i+v3EVtHxUqcndxelsvnNc8OCtNzwIN8uqCzo= Subject key identifier: 1C:09:E5:BD:97:DF:79:74:F6:87:52:39:51:1C:D7:B0:D9:EC:BD:92 Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019B390FB19A02B96BBBCE7E3E417594C5EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 17D1 Signing time: Sat 20 Dec 2025 00:01:28 +0000 Manifest this update: Sat 20 Dec 2025 00:01:28 +0000 Manifest next update: Sun 21 Dec 2025 00:01:28 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (hash: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=) 6: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (hash: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: v78/qA1uj+3GwWrQCDmpRQr9jy29RtQqrFEwUFsuXso=) 8: pDp2CToPzzYDQ1WhaCtd0HG6Gtc.roa (hash: gA5JjiJRsXhS8LWEfP0H0OvEaHq8p+EbMF4HPnV2enw=) 9: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: yzSelLKPU3VJWRULncODW1JLnv4.roa (hash: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:b1:9a:02:b9:6b:bb:ce:7e:3e:41:75:94:c5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Dec 20 00:01:28 2025 GMT Not After : Dec 21 00:01:28 2025 GMT Subject: CN=1c09e5bd97df7974f6875239511cd7b0d9ecbd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:13:1a:f9:28:42:e3:6e:8d:cf:6d:bd:b8: f2:a8:12:6a:5c:4d:d9:50:53:ab:5a:89:6c:d1:7c: 36:a6:87:10:af:32:7e:65:a0:eb:bb:31:17:61:f3: 5f:1e:53:33:89:24:c3:7a:35:6f:c6:a0:92:42:e2: f8:a5:94:ea:04:d6:31:d1:f5:63:da:74:ef:8f:8c: 08:02:d8:83:c0:ac:cb:cd:19:ab:55:42:8b:45:9c: b1:24:b0:96:5c:6f:0f:68:91:32:60:8c:57:b5:13: 2c:81:6b:b7:c7:fb:fd:3f:3d:9c:37:66:66:e1:b0: ee:71:bd:6f:ae:d0:b1:07:c8:80:4c:8e:ed:f7:04: 4b:59:45:e3:9d:81:e4:a5:b1:2e:d5:d1:ff:3a:ac: 78:ad:a9:64:4b:fe:44:13:cf:b7:e6:e9:d9:87:fd: 65:c7:ae:e0:61:7e:ce:63:12:a1:b4:2c:9d:0f:bf: de:55:16:d5:69:d2:32:6d:05:ef:72:8e:62:7d:26: 09:17:ed:e1:5d:aa:c6:82:45:70:e1:a1:6e:dd:13: 96:45:a7:5b:9c:96:70:63:87:44:cf:a0:97:5b:d9: 6f:02:df:28:84:2f:ef:2a:6f:2f:56:a3:29:25:db: 1f:19:0b:3a:eb:bd:ff:e3:ed:7d:1d:f3:8e:30:91: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:E5:BD:97:DF:79:74:F6:87:52:39:51:1C:D7:B0:D9:EC:BD:92 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:02:4f:33:29:a0:5b:ac:98:58:12:4b:e2:cc:8f:b9:d5:4f: 9d:46:47:66:fb:01:01:71:3b:e5:e7:a6:f6:23:61:a7:8d:9e: fa:8d:2c:4d:6d:dc:26:5f:f7:e9:2a:cf:e0:4f:17:b8:de:28: 23:2d:a6:2f:d3:66:f5:25:cf:3c:52:59:b3:fc:9b:f2:41:77: 92:19:9b:12:41:5d:d4:4b:39:81:48:74:2d:74:2f:98:50:0b: 66:5a:a7:28:fb:db:7c:40:68:19:99:62:16:71:9f:ef:4d:5b: 19:e9:4e:c2:93:1d:fc:19:38:d0:84:54:ba:61:a0:38:62:b4: ec:c0:5f:db:33:a3:7a:ac:18:9b:12:ae:3a:d9:7f:ab:39:44: c8:b8:e3:50:de:71:85:fc:bc:e4:dc:f0:56:c8:5c:1b:b8:24: 24:7d:96:0c:f4:e6:aa:64:b4:76:a7:15:a2:3b:9e:68:8c:16: 25:24:22:6c:7e:41:55:61:82:4c:13:81:8a:39:b9:03:19:b1: a5:95:5c:e8:0f:b8:9a:d0:7e:b6:3b:9f:8b:96:4e:18:1c:34: 4c:95:ef:0c:62:cd:5a:d3:60:19:ea:b8:e8:4b:f5:59:90:74: 33:44:af:2c:57:f7:ac:63:9b:03:12:e8:e3:ec:e0:d0:be:8f: 9f:f2:70:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D7GaArlru85+PkF1lMXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUxMjIwMDAwMTI4WhcNMjUxMjIxMDAwMTI4WjAzMTEwLwYDVQQD EygxYzA5ZTViZDk3ZGY3OTc0ZjY4NzUyMzk1MTFjZDdiMGQ5ZWNiZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4wTGvkoQuNujc9tvbjyqBJqXE3Z UFOrWols0Xw2pocQrzJ+ZaDruzEXYfNfHlMziSTDejVvxqCSQuL4pZTqBNYx0fVj 2nTvj4wIAtiDwKzLzRmrVUKLRZyxJLCWXG8PaJEyYIxXtRMsgWu3x/v9Pz2cN2Zm 4bDucb1vrtCxB8iATI7t9wRLWUXjnYHkpbEu1dH/Oqx4ralkS/5EE8+35unZh/1l x67gYX7OYxKhtCydD7/eVRbVadIybQXvco5ifSYJF+3hXarGgkVw4aFu3ROWRadb nJZwY4dEz6CXW9lvAt8ohC/vKm8vVqMpJdsfGQs6673/4+19HfOOMJGlewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwJ5b2X33l09odSOVEc17DZ7L2SMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwJPMymg W6yYWBJL4syPudVPnUZHZvsBAXE75eem9iNhp42e+o0sTW3cJl/36SrP4E8XuN4o Iy2mL9Nm9SXPPFJZs/yb8kF3khmbEkFd1Es5gUh0LXQvmFALZlqnKPvbfEBoGZli FnGf701bGelOwpMd/Bk40IRUumGgOGK07MBf2zOjeqwYmxKuOtl/qzlEyLjjUN5x hfy85NzwVshcG7gkJH2WDPTmqmS0dqcVojueaIwWJSQibH5BVWGCTBOBijm5Axmx pZVc6A+4mtB+tjufi5ZOGBw0TJXvDGLNWtNgGeq46Ev1WZB0M0SvLFf3rGObAxLo 4+zg0L6Pn/JwQw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:27:37 2025 by rpki-client