This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json) Hash identifier: GkGW0HH6ndqMbkrQc7BdpSb9ii2e3DAKUBgxH+Anpyk= Subject key identifier: E9:2A:B5:D5:7E:B2:F9:1D:4F:3D:C6:1F:CC:E1:86:B5:69:C2:0C:B5 Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Certificate serial: 019B4EBB2941DA9D7BD027A07F455A78BBFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft Manifest number: 0E8F Signing time: Wed 24 Dec 2025 05:00:47 +0000 Manifest this update: Wed 24 Dec 2025 05:00:47 +0000 Manifest next update: Thu 25 Dec 2025 05:00:47 +0000 Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=) 2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: +2TiX42k9YD88y4L6wzb2ABgz3zvvUyFmdQrMPrJGZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:29:41:da:9d:7b:d0:27:a0:7f:45:5a:78:bb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Validity Not Before: Dec 24 05:00:47 2025 GMT Not After : Dec 25 05:00:47 2025 GMT Subject: CN=e92ab5d57eb2f91d4f3dc61fcce186b569c20cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:3c:04:14:1c:35:5d:93:32:a0:e7:7b:d3: be:62:d0:d0:5d:7e:e1:96:ef:89:68:10:82:30:3c: be:7d:7d:f6:69:8e:04:ff:2b:fc:0a:22:9b:90:65: 1c:3a:64:a3:bb:af:19:2b:75:64:37:95:12:5e:a8: 72:ea:1a:82:3d:6b:b8:5f:17:70:5b:b6:ad:17:65: 25:39:2f:5d:a1:5e:ba:6a:8f:b3:93:92:e4:56:c1: 1d:06:7e:a0:fc:b8:f8:6b:1a:57:67:ed:0f:1a:b7: bc:1a:55:6f:fc:7e:ce:0d:ad:8c:5e:b9:48:40:f8: c6:f2:8d:07:a8:c6:12:a9:41:47:34:2c:46:fa:45: b6:4d:9a:e8:cd:f6:bd:66:c4:8e:4c:92:b4:5e:5c: a7:0d:da:1c:68:90:b5:aa:3b:40:29:23:2f:cf:42: cf:2f:32:ae:0b:5a:78:1e:d1:42:b2:03:65:f4:58: 69:25:b2:75:6e:16:dc:37:ad:81:f2:af:f9:e8:bc: c6:37:92:7f:ca:e3:91:53:dc:8d:71:a1:43:f4:51: c5:e0:d5:5c:1a:fe:d2:be:d5:a7:9c:3a:cd:a2:b3: 7b:96:9d:a4:f2:75:dc:64:d3:cf:42:e3:97:f9:86: e7:f7:1d:2b:aa:7b:4e:81:6d:92:9f:e2:cc:4f:91: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:B5:D5:7E:B2:F9:1D:4F:3D:C6:1F:CC:E1:86:B5:69:C2:0C:B5 X509v3 Authority Key Identifier: keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3e:0e:98:76:d7:c8:ad:63:b5:50:be:f4:44:a0:5b:94:83: 62:4e:5a:3d:4e:f3:65:e8:0f:54:64:15:34:01:71:05:10:d1: 9c:b9:05:d4:bf:87:5d:c2:a5:81:14:9f:67:0d:ab:d2:b6:1f: 04:d2:2c:ea:59:cd:1c:a2:4a:bf:ac:c1:91:6b:8a:52:94:e7: be:29:07:3b:7e:3d:20:d9:ca:56:21:1d:1c:e3:bc:06:22:df: df:e3:12:b3:9c:15:a5:cb:c6:19:cc:9d:e6:f2:2b:4a:f1:89: ce:86:c5:fb:ad:60:0a:36:f7:07:ab:72:70:36:7f:6f:32:f8: 9e:5f:d7:ef:00:a5:fc:a6:9d:6b:ab:74:a3:f7:94:7a:cc:f8: 55:7b:61:65:95:a9:58:16:d4:14:07:08:30:4d:89:d6:7c:74: 2a:b7:db:f3:38:8e:07:9d:df:d6:cc:c6:33:e3:24:f9:34:6c: 38:79:cc:5c:33:62:26:e5:05:f6:90:46:fa:42:3a:85:c1:71: 56:1b:27:1e:69:bc:42:6c:06:4f:3e:18:39:7b:93:79:b8:ce: 30:d1:40:b4:ed:cf:39:bd:d3:e0:ba:e7:8f:3c:bd:a0:1a:90: 09:85:fe:bf:4f:ab:98:5e:fb:94:a7:41:5b:40:d6:7a:b2:3b: 41:15:14:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuylB2p170Cegf0VaeLv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0 Y2IxNzEwHhcNMjUxMjI0MDUwMDQ3WhcNMjUxMjI1MDUwMDQ3WjAzMTEwLwYDVQQD EyhlOTJhYjVkNTdlYjJmOTFkNGYzZGM2MWZjY2UxODZiNTY5YzIwY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjE8BBQcNV2TMqDne9O+YtDQXX7h lu+JaBCCMDy+fX32aY4E/yv8CiKbkGUcOmSju68ZK3VkN5USXqhy6hqCPWu4Xxdw W7atF2UlOS9doV66ao+zk5LkVsEdBn6g/Lj4axpXZ+0PGre8GlVv/H7ODa2MXrlI QPjG8o0HqMYSqUFHNCxG+kW2TZrozfa9ZsSOTJK0XlynDdocaJC1qjtAKSMvz0LP LzKuC1p4HtFCsgNl9FhpJbJ1bhbcN62B8q/56LzGN5J/yuORU9yNcaFD9FHF4NVc Gv7SvtWnnDrNorN7lp2k8nXcZNPPQuOX+Ybn9x0rqntOgW2Sn+LMT5E+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkqtdV+svkdTz3GH8zhhrVpwgy1MB8GA1UdIwQY MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD4OmHbX yK1jtVC+9ESgW5SDYk5aPU7zZegPVGQVNAFxBRDRnLkF1L+HXcKlgRSfZw2r0rYf BNIs6lnNHKJKv6zBkWuKUpTnvikHO349INnKViEdHOO8BiLf3+MSs5wVpcvGGcyd 5vIrSvGJzobF+61gCjb3B6tycDZ/bzL4nl/X7wCl/Kada6t0o/eUesz4VXthZZWp WBbUFAcIME2J1nx0Krfb8ziOB53f1szGM+Mk+TRsOHnMXDNiJuUF9pBG+kI6hcFx VhsnHmm8QmwGTz4YOXuTebjOMNFAtO3POb3T4Lrnjzy9oBqQCYX+v0+rmF77lKdB W0DWerI7QRUU0A== -----END CERTIFICATE-----Generated at Wed Dec 24 09:17:20 2025 by rpki-client