This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json) Hash identifier: +cPekIYpm0lvEWWLYpwqHB12eajrNanVBLFjuIxXvFc= Subject key identifier: 4D:2D:C2:91:34:26:BB:AA:00:00:BF:55:F4:4F:49:47:D9:1F:54:E7 Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Certificate serial: 019B736C4DC4B7F0792219382DFA6F81C198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft Manifest number: 0EA2 Signing time: Wed 31 Dec 2025 08:00:36 +0000 Manifest this update: Wed 31 Dec 2025 08:00:36 +0000 Manifest next update: Thu 01 Jan 2026 08:00:36 +0000 Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=) 2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: 0BP8A2qEMU5JLdzgNqC/TY2I7f6O6g+Fz97lCUwNZE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:4d:c4:b7:f0:79:22:19:38:2d:fa:6f:81:c1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Validity Not Before: Dec 31 08:00:36 2025 GMT Not After : Jan 1 08:00:36 2026 GMT Subject: CN=4d2dc2913426bbaa0000bf55f44f4947d91f54e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:d9:f0:f7:7a:d6:fa:bb:57:c8:89:e5:ea: e1:60:d0:86:89:5c:08:a5:c0:45:3b:70:43:e5:ea: 7d:9b:56:e8:69:2e:24:25:4d:3f:80:8b:48:52:1c: 1e:38:8f:12:eb:59:d9:13:d3:23:1f:72:e6:5f:94: d2:51:eb:92:55:7c:6d:26:fb:b0:70:8c:5c:9a:43: 33:22:50:3a:af:6e:0d:11:91:92:71:c3:04:2d:ea: 86:c7:74:cd:1c:88:39:01:89:af:17:0d:9e:3f:f1: c6:0c:e3:6c:05:64:4a:c6:3f:a4:55:3c:f6:f6:17: 00:49:50:2f:c6:73:6f:1f:03:06:3e:23:43:db:62: 5e:ed:d3:d5:a1:3f:1d:77:fa:cb:0e:00:86:51:ce: 24:e2:92:f9:68:d3:ab:d4:7a:19:ff:e2:6b:07:2c: a2:45:cb:6e:80:81:cc:f4:b5:d0:a3:42:0e:69:be: 48:3a:a2:ef:11:a1:a0:c4:8f:b7:3e:5d:c4:65:6d: 97:bb:59:44:21:8d:ed:d1:dd:b8:5e:aa:c6:f8:3e: b9:9a:aa:12:7a:b9:43:00:3c:89:7e:1a:0a:0e:06: 1a:41:d4:78:e5:5b:87:2b:d9:8f:0f:b3:82:4b:2f: ec:a8:6b:d8:de:18:55:44:02:04:b1:8d:3c:7e:fd: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2D:C2:91:34:26:BB:AA:00:00:BF:55:F4:4F:49:47:D9:1F:54:E7 X509v3 Authority Key Identifier: keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:57:ed:b6:71:2f:b3:91:00:38:c4:e6:28:37:9e:ff:60:eb: e0:97:f9:74:ac:bc:9b:3d:73:cc:20:f1:ed:9d:92:b4:6d:a7: 11:8c:2e:a3:f7:86:ee:8d:cd:59:a7:68:de:62:2e:31:ab:a6: a8:b8:9a:20:99:f9:34:1a:d9:9b:34:15:4e:c8:a8:d0:f6:29: 1e:24:12:7a:88:ac:b6:59:e3:b4:4f:6b:e6:d3:cb:9d:ce:e2: ab:8d:60:6c:4f:a1:a5:48:75:a7:fc:9d:9b:d6:b1:5c:76:72: 04:03:ae:1d:69:8f:43:41:53:0d:56:5a:89:7d:17:1e:42:74: e0:99:99:48:15:68:04:c6:66:9a:cf:3b:bb:42:aa:db:ed:8a: ba:d0:af:ba:df:eb:a5:be:b6:8d:80:2b:3f:07:05:b9:76:63: 3b:4b:0a:5d:84:db:ed:4b:f2:b2:81:f5:5e:7e:6a:53:11:81: 70:af:e9:f3:0d:ec:30:2b:e2:42:11:b5:8d:8b:b2:6b:ea:00: 4d:39:9f:1b:85:f1:bf:39:da:f4:bc:00:7c:17:2c:f1:c4:14: a2:1b:d0:d4:a0:53:dd:7b:91:3a:6f:6d:e1:d2:e7:28:08:f7: 34:f4:a0:3f:10:ad:04:1f:28:18:0e:50:35:1a:bb:66:58:07: 82:3a:00:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbE3Et/B5Ihk4LfpvgcGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0 Y2IxNzEwHhcNMjUxMjMxMDgwMDM2WhcNMjYwMTAxMDgwMDM2WjAzMTEwLwYDVQQD Eyg0ZDJkYzI5MTM0MjZiYmFhMDAwMGJmNTVmNDRmNDk0N2Q5MWY1NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12vZ8Pd61vq7V8iJ5erhYNCGiVwI pcBFO3BD5ep9m1boaS4kJU0/gItIUhweOI8S61nZE9MjH3LmX5TSUeuSVXxtJvuw cIxcmkMzIlA6r24NEZGSccMELeqGx3TNHIg5AYmvFw2eP/HGDONsBWRKxj+kVTz2 9hcASVAvxnNvHwMGPiND22Je7dPVoT8dd/rLDgCGUc4k4pL5aNOr1HoZ/+JrByyi RctugIHM9LXQo0IOab5IOqLvEaGgxI+3Pl3EZW2Xu1lEIY3t0d24XqrG+D65mqoS erlDADyJfhoKDgYaQdR45VuHK9mPD7OCSy/sqGvY3hhVRAIEsY08fv2kjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0twpE0JruqAAC/VfRPSUfZH1TnMB8GA1UdIwQY MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFfttnEv s5EAOMTmKDee/2Dr4Jf5dKy8mz1zzCDx7Z2StG2nEYwuo/eG7o3NWado3mIuMaum qLiaIJn5NBrZmzQVTsio0PYpHiQSeoistlnjtE9r5tPLnc7iq41gbE+hpUh1p/yd m9axXHZyBAOuHWmPQ0FTDVZaiX0XHkJ04JmZSBVoBMZmms87u0Kq2+2KutCvut/r pb62jYArPwcFuXZjO0sKXYTb7UvysoH1Xn5qUxGBcK/p8w3sMCviQhG1jYuya+oA TTmfG4Xxvzna9LwAfBcs8cQUohvQ1KBT3XuROm9t4dLnKAj3NPSgPxCtBB8oGA5Q NRq7ZlgHgjoADQ== -----END CERTIFICATE-----Generated at Wed Dec 31 10:27:41 2025 by rpki-client