This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json) Hash identifier: UhHEklxIo49RhpH6YroTD1TAWpZ2dDjkjBtfctltGUI= Subject key identifier: D1:11:DC:29:08:15:01:84:59:F1:15:12:DE:7C:73:E7:8F:13:E7:43 Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Certificate serial: 019B484B756BD9D5EB1C16E5F376BBBF3819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft Manifest number: 0DDB Signing time: Mon 22 Dec 2025 23:01:03 +0000 Manifest this update: Mon 22 Dec 2025 23:01:03 +0000 Manifest next update: Tue 23 Dec 2025 23:01:03 +0000 Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=) 2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: az3moUKGpKcprHr1adnmKZ4QG5wjg0KbYMdjcMyu4sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:75:6b:d9:d5:eb:1c:16:e5:f3:76:bb:bf:38:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Validity Not Before: Dec 22 23:01:03 2025 GMT Not After : Dec 23 23:01:03 2025 GMT Subject: CN=d111dc290815018459f11512de7c73e78f13e743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:25:e8:cf:62:22:82:9f:c8:54:a6:72:fb: ef:33:da:c5:12:87:28:a3:41:36:7a:f3:1a:a6:f0: 14:ee:dd:64:e3:38:cd:bf:47:1b:c7:f3:04:bd:22: d9:8a:28:66:65:46:9b:00:c5:10:7d:2a:b7:df:d7: 41:0c:58:7c:70:43:47:2e:ef:40:e3:86:35:d4:f6: 01:97:8e:8f:e0:79:b2:a3:00:34:44:97:c2:3b:43: ab:27:2a:cb:96:4b:c7:8f:63:ae:f0:6e:d8:b8:4b: ad:e4:f2:0e:e1:e8:bc:73:c0:62:55:0d:cf:65:e3: 3d:83:1a:f7:ec:ba:1e:df:11:74:7a:94:59:bf:32: 5f:d9:27:52:5a:e0:10:dd:33:91:f9:da:8c:dd:6a: fc:66:dd:1c:ed:f3:7d:6a:52:ed:54:82:5e:36:3e: 44:2d:b3:0e:ac:0e:8c:73:4d:05:a0:62:34:32:b6: 08:57:a8:6d:a5:ed:25:d9:e9:b1:0c:fd:db:69:d0: c9:05:93:03:67:11:04:e4:66:f4:4e:1b:60:a0:27: e3:e7:ec:32:83:21:bb:fe:ae:9e:36:84:14:a9:d0: ee:2c:d6:70:28:a7:74:38:e3:0c:04:e1:bf:35:a0: 1e:ba:c3:b6:89:39:fa:f0:75:91:2b:8e:cb:96:b0: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:11:DC:29:08:15:01:84:59:F1:15:12:DE:7C:73:E7:8F:13:E7:43 X509v3 Authority Key Identifier: keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f5:cc:6b:97:0a:4b:b6:6c:e7:2a:a3:60:a3:c9:84:10:a6: c9:0a:76:88:98:68:39:74:df:85:c8:ca:87:de:57:a5:c2:0e: a7:2e:66:dc:b5:e6:c1:04:37:d6:8e:c0:af:de:23:7a:4f:d9: 3f:0a:63:87:5c:75:5c:a8:81:b4:5e:2e:59:b7:5e:97:50:05: fb:2c:a9:81:8b:0d:d1:db:62:e7:e6:f2:76:62:6b:93:e4:cd: f4:bb:5f:60:48:32:b7:9b:1e:7e:d6:9c:93:f9:7d:79:2a:96: c0:54:e5:f9:35:8f:fc:01:cb:d7:0b:21:bb:f2:5e:3c:01:87: e8:4c:5f:c0:c6:b2:51:e8:33:82:4d:96:99:9d:65:09:61:9e: 14:68:e8:5e:49:44:c3:ae:26:57:fc:3b:3e:60:7f:0d:c3:c5: 8f:59:63:ac:75:86:d9:f9:75:63:05:7e:cf:0b:52:f8:38:2d: 18:81:49:a6:a0:f2:bf:1e:e2:06:40:fb:82:d1:ce:6d:8a:ca: b6:c2:32:b4:0c:43:b8:eb:64:fb:bf:71:6d:34:7c:bb:73:47: e3:46:f2:62:83:b7:af:0b:c1:2d:0c:c4:0c:1a:7a:c3:51:03: 94:fc:7f:e3:0e:a6:a5:a3:b3:9b:1d:91:05:7f:d5:59:dd:c5: 3a:81:e0:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS3Vr2dXrHBbl83a7vzgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDFmOGZiNmFkZDI3MmI0NmM0MDZiMTg4NWM5MzI5NWIx ZjRiOGMwHhcNMjUxMjIyMjMwMTAzWhcNMjUxMjIzMjMwMTAzWjAzMTEwLwYDVQQD EyhkMTExZGMyOTA4MTUwMTg0NTlmMTE1MTJkZTdjNzNlNzhmMTNlNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+El6M9iIoKfyFSmcvvvM9rFEoco o0E2evMapvAU7t1k4zjNv0cbx/MEvSLZiihmZUabAMUQfSq339dBDFh8cENHLu9A 44Y11PYBl46P4HmyowA0RJfCO0OrJyrLlkvHj2Ou8G7YuEut5PIO4ei8c8BiVQ3P ZeM9gxr37Loe3xF0epRZvzJf2SdSWuAQ3TOR+dqM3Wr8Zt0c7fN9alLtVIJeNj5E LbMOrA6Mc00FoGI0MrYIV6htpe0l2emxDP3badDJBZMDZxEE5Gb0ThtgoCfj5+wy gyG7/q6eNoQUqdDuLNZwKKd0OOMMBOG/NaAeusO2iTn68HWRK47LlrC0RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNER3CkIFQGEWfEVEt58c+ePE+dDMB8GA1UdIwQY MBaAFGbR+Ptq3ScrRsQGsYhckylbH0uMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDkt YTU5ZDEzNTBkZWVjLzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDktYTU5ZDEzNTBkZWVj LzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvXMa5cK S7Zs5yqjYKPJhBCmyQp2iJhoOXTfhcjKh95XpcIOpy5m3LXmwQQ31o7Ar94jek/Z Pwpjh1x1XKiBtF4uWbdel1AF+yypgYsN0dti5+bydmJrk+TN9LtfYEgyt5seftac k/l9eSqWwFTl+TWP/AHL1wshu/JePAGH6ExfwMayUegzgk2WmZ1lCWGeFGjoXklE w64mV/w7PmB/DcPFj1ljrHWG2fl1YwV+zwtS+DgtGIFJpqDyvx7iBkD7gtHObYrK tsIytAxDuOtk+79xbTR8u3NH40byYoO3rwvBLQzEDBp6w1EDlPx/4w6mpaOzmx2R BX/VWd3FOoHgQw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:45 2025 by rpki-client