This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json) Hash identifier: nmh+UJOrFPlJ7NjgAbLvDSQJuUh71GwGdNC6fG0uhaA= Subject key identifier: C2:4D:A7:1A:3D:45:F3:6D:50:9C:7E:46:58:71:78:BD:AF:B5:98:E9 Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Certificate serial: 019B4091FA86CC59945064A6BDB5C148EB5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft Manifest number: 0DD7 Signing time: Sun 21 Dec 2025 11:01:07 +0000 Manifest this update: Sun 21 Dec 2025 11:01:07 +0000 Manifest next update: Mon 22 Dec 2025 11:01:07 +0000 Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=) 2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: qEAfD6w8sNlA1C72RjwY4MW9nSyqNPloHzQ/HlQCixo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:fa:86:cc:59:94:50:64:a6:bd:b5:c1:48:eb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Validity Not Before: Dec 21 11:01:07 2025 GMT Not After : Dec 22 11:01:07 2025 GMT Subject: CN=c24da71a3d45f36d509c7e46587178bdafb598e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:d1:9d:db:90:ca:e4:35:d6:3b:de:c7:33: 2c:83:26:1f:fe:a4:36:97:81:37:b1:34:c8:b1:1d: cf:9c:43:54:03:82:7a:9a:1f:3e:d8:54:38:6f:00: 77:4d:59:b4:5e:33:8d:a3:df:b5:63:88:5d:30:5a: 8b:ff:ea:99:c9:06:8f:ca:17:bb:d6:72:f3:de:24: 6b:ab:1f:64:8d:79:71:9b:ff:f3:c2:b5:98:4c:5e: da:29:5f:86:4e:e4:16:61:d1:c0:44:a8:75:cc:8a: 05:28:a9:f7:d2:26:85:8d:da:ec:93:5d:b8:a5:b0: ea:b3:e1:94:ff:22:33:53:32:6b:88:1f:b5:96:79: 1c:c2:d2:66:1f:eb:0e:22:78:cb:20:18:83:d3:20: ed:05:d4:d6:12:3d:f8:85:03:c1:0f:da:80:fd:32: 0f:99:42:3a:5e:8b:e6:66:fe:8a:4d:bd:87:0f:9b: 17:1f:41:8f:96:c3:d9:51:7d:49:87:77:ac:6e:fb: a0:f3:56:32:e4:ee:10:0a:b5:51:a7:e0:ec:5f:75: 53:68:a0:99:6b:a2:9e:b7:a7:d1:21:20:97:23:bf: 3a:03:b2:8c:e2:65:78:42:a2:5c:fb:ba:f9:06:b5: 73:a0:4f:72:45:f7:45:39:2f:0e:37:95:df:a0:97: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:A7:1A:3D:45:F3:6D:50:9C:7E:46:58:71:78:BD:AF:B5:98:E9 X509v3 Authority Key Identifier: keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f1:b6:e0:34:bd:8c:aa:35:2e:e7:0b:dd:bd:01:df:ad:09: 5c:9c:6e:f8:1b:b5:04:db:16:cf:2d:1b:df:cf:c7:8d:ec:61: 56:f0:02:25:93:b1:4b:fd:9d:6d:7b:55:05:d3:18:5b:92:5e: 06:6c:83:27:f7:6c:c9:d3:a9:37:6e:c2:5c:6f:db:09:cf:0d: f9:50:23:25:cf:88:ed:fd:69:01:f2:77:98:25:bb:27:bc:8b: 73:83:78:af:23:cd:de:63:eb:cf:d0:62:6b:50:9c:a1:55:2f: 8f:2a:17:74:92:f9:20:50:94:a2:ce:34:43:a4:32:5a:b1:f7: 12:7a:54:c2:44:9c:9f:4d:90:34:0a:27:38:52:8d:08:c5:8c: 40:7f:88:3d:02:fa:61:51:a7:41:7c:c5:df:3b:09:0b:70:bd: 3b:96:b5:8a:24:33:4f:2d:1b:18:2d:ba:90:98:14:00:7f:e9: b1:a2:59:35:77:6d:66:56:1d:88:b8:e8:07:13:e4:6f:28:75: db:19:cd:1f:1f:fe:42:cf:48:42:e5:6e:07:6e:34:07:d1:42: 53:ed:76:5c:c2:93:57:f6:84:45:19:db:c2:de:df:c8:6d:0f: 6e:65:f9:ca:16:ea:95:fe:b2:aa:9d:f8:64:91:fe:3f:ad:77: 29:92:2d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkfqGzFmUUGSmvbXBSOtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDFmOGZiNmFkZDI3MmI0NmM0MDZiMTg4NWM5MzI5NWIx ZjRiOGMwHhcNMjUxMjIxMTEwMTA3WhcNMjUxMjIyMTEwMTA3WjAzMTEwLwYDVQQD EyhjMjRkYTcxYTNkNDVmMzZkNTA5YzdlNDY1ODcxNzhiZGFmYjU5OGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZzRnduQyuQ11jvexzMsgyYf/qQ2 l4E3sTTIsR3PnENUA4J6mh8+2FQ4bwB3TVm0XjONo9+1Y4hdMFqL/+qZyQaPyhe7 1nLz3iRrqx9kjXlxm//zwrWYTF7aKV+GTuQWYdHARKh1zIoFKKn30iaFjdrsk124 pbDqs+GU/yIzUzJriB+1lnkcwtJmH+sOInjLIBiD0yDtBdTWEj34hQPBD9qA/TIP mUI6XovmZv6KTb2HD5sXH0GPlsPZUX1Jh3esbvug81Yy5O4QCrVRp+DsX3VTaKCZ a6Ket6fRISCXI786A7KM4mV4QqJc+7r5BrVzoE9yRfdFOS8ON5XfoJfH4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJNpxo9RfNtUJx+RlhxeL2vtZjpMB8GA1UdIwQY MBaAFGbR+Ptq3ScrRsQGsYhckylbH0uMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDkt YTU5ZDEzNTBkZWVjLzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDktYTU5ZDEzNTBkZWVj LzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPG24DS9 jKo1LucL3b0B360JXJxu+Bu1BNsWzy0b38/HjexhVvACJZOxS/2dbXtVBdMYW5Je BmyDJ/dsydOpN27CXG/bCc8N+VAjJc+I7f1pAfJ3mCW7J7yLc4N4ryPN3mPrz9Bi a1CcoVUvjyoXdJL5IFCUos40Q6QyWrH3EnpUwkScn02QNAonOFKNCMWMQH+IPQL6 YVGnQXzF3zsJC3C9O5a1iiQzTy0bGC26kJgUAH/psaJZNXdtZlYdiLjoBxPkbyh1 2xnNHx/+Qs9IQuVuB240B9FCU+12XMKTV/aERRnbwt7fyG0PbmX5yhbqlf6yqp34 ZJH+P613KZItIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:14 2025 by rpki-client