This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json) Hash identifier: mUeN1MB1A2lgYmg/O8Lt31PYIqgJZRvTmZPL5VJgbfY= Subject key identifier: 81:F9:C6:B0:C4:B0:A1:CA:71:90:05:BC:91:2A:15:E0:94:9C:73:58 Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Certificate serial: 019B6FFD8890C9B70EBE566FF00E6D949566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 16:00:45 +0000 Manifest this update: Tue 30 Dec 2025 16:00:45 +0000 Manifest next update: Wed 31 Dec 2025 16:00:45 +0000 Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=) 2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: RIc8zIySjYHz99yxWD26dX9ux3QQ9PCW30rsvrkbZ00=) 3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:88:90:c9:b7:0e:be:56:6f:f0:0e:6d:94:95:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Validity Not Before: Dec 30 16:00:45 2025 GMT Not After : Dec 31 16:00:45 2025 GMT Subject: CN=81f9c6b0c4b0a1ca719005bc912a15e0949c7358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:05:55:71:ef:6a:13:ed:4e:0a:c5:d1:b0: 16:57:52:98:ee:4f:d3:d2:7c:4a:96:eb:6b:a1:c8: 01:8f:6e:f1:b4:35:c4:59:3f:ae:17:26:1e:74:09: c8:a6:4c:b0:34:bb:4c:3b:a2:a0:a3:9e:e4:b7:db: 7b:cf:db:b7:ab:da:a7:24:95:35:84:3a:2a:73:ca: 53:eb:04:74:46:4e:0f:fa:b2:6e:ad:2f:7e:e8:0b: ba:a2:ec:b0:23:ad:4f:f4:9a:e3:ff:b0:9c:1b:05: 99:53:c8:3d:38:63:30:9e:98:bb:1f:ce:a3:36:b7: 7b:2a:f7:eb:28:5a:67:58:59:fd:83:2c:96:5c:80: e9:ce:7d:9e:46:fa:92:78:e3:72:f2:a6:5d:3c:89: d7:3f:6a:1a:4f:f9:9c:c0:82:34:a0:bb:71:93:da: 27:01:f4:17:2a:17:ab:2b:12:9e:f0:91:a6:bf:43: 83:62:6e:2d:a4:58:d4:2a:5f:67:98:48:b0:7c:c0: 00:e4:b4:dd:2d:f2:6b:27:72:7e:5a:d1:e4:d7:a7: bd:eb:cd:b6:93:c8:32:f1:e3:d7:5b:72:ed:d5:be: 8b:7a:e9:5f:5d:20:5e:5d:4f:cb:a5:40:9a:1b:65: 53:ac:6a:75:e7:ea:95:74:91:bf:cc:73:76:11:dd: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:C6:B0:C4:B0:A1:CA:71:90:05:BC:91:2A:15:E0:94:9C:73:58 X509v3 Authority Key Identifier: keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:07:e6:5b:60:d8:82:1b:6a:7b:06:e6:a6:72:0a:92:fe:81: 62:4b:18:89:90:dd:cb:29:af:9b:b3:66:5f:ef:e2:ca:cf:00: de:d6:1b:4c:56:04:aa:40:a1:a4:68:2d:dd:1a:37:a5:39:0f: fb:18:73:dd:d7:04:09:a8:4f:a7:c1:95:72:cf:1e:88:31:9a: f7:dc:06:7a:8d:bf:3d:ad:a4:40:2d:af:2d:a6:5c:e2:57:48: 51:d9:00:2a:c6:eb:d8:db:12:a1:a1:91:75:c7:b2:ed:d3:3f: 98:08:69:5d:b6:6b:d9:7e:41:a2:3c:cc:d9:20:8e:6a:4f:aa: 91:42:23:f6:25:27:d6:cd:32:b1:61:09:a3:03:8f:63:1a:56: d8:7a:3c:5d:c1:66:ab:a4:9f:21:6d:1e:51:71:be:e0:09:31: 93:4f:9b:4b:d1:4c:de:08:97:f8:fe:a5:aa:3a:9c:24:55:89: a9:48:76:62:63:01:b2:9b:63:ba:07:6d:9f:a5:f5:3d:d7:86: 16:1a:d5:b7:5f:d1:68:78:04:17:a9:9a:1d:6c:12:38:2c:44: b7:4a:19:ac:bc:c2:fe:87:58:ca:75:1f:7a:d7:36:33:79:bc: fd:ed:d5:7c:05:89:13:64:23:68:0a:54:e5:a5:cb:33:bb:e1: c9:b4:02:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/YiQybcOvlZv8A5tlJVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw YTM0YjIwHhcNMjUxMjMwMTYwMDQ1WhcNMjUxMjMxMTYwMDQ1WjAzMTEwLwYDVQQD Eyg4MWY5YzZiMGM0YjBhMWNhNzE5MDA1YmM5MTJhMTVlMDk0OWM3MzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KkFVXHvahPtTgrF0bAWV1KY7k/T 0nxKlutrocgBj27xtDXEWT+uFyYedAnIpkywNLtMO6Kgo57kt9t7z9u3q9qnJJU1 hDoqc8pT6wR0Rk4P+rJurS9+6Au6ouywI61P9Jrj/7CcGwWZU8g9OGMwnpi7H86j Nrd7KvfrKFpnWFn9gyyWXIDpzn2eRvqSeONy8qZdPInXP2oaT/mcwII0oLtxk9on AfQXKherKxKe8JGmv0ODYm4tpFjUKl9nmEiwfMAA5LTdLfJrJ3J+WtHk16e96822 k8gy8ePXW3Lt1b6LeulfXSBeXU/LpUCaG2VTrGp15+qVdJG/zHN2Ed352wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIH5xrDEsKHKcZAFvJEqFeCUnHNYMB8GA1UdIwQY MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQfmW2DY ghtqewbmpnIKkv6BYksYiZDdyymvm7NmX+/iys8A3tYbTFYEqkChpGgt3Ro3pTkP +xhz3dcECahPp8GVcs8eiDGa99wGeo2/Pa2kQC2vLaZc4ldIUdkAKsbr2NsSoaGR dcey7dM/mAhpXbZr2X5BojzM2SCOak+qkUIj9iUn1s0ysWEJowOPYxpW2Ho8XcFm q6SfIW0eUXG+4Akxk0+bS9FM3giX+P6lqjqcJFWJqUh2YmMBsptjugdtn6X1PdeG FhrVt1/RaHgEF6maHWwSOCxEt0oZrLzC/odYynUfetc2M3m8/e3VfAWJE2QjaApU 5aXLM7vhybQC7g== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:53 2025 by rpki-client