This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json) Hash identifier: fsVN6dkAOw8vC1M97JY8rCdNXmsJejD0+iOZlxZl33E= Subject key identifier: 47:8D:F1:D3:2D:2B:E5:C0:94:97:3B:46:C5:5C:38:6F:3D:1B:03:77 Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Certificate serial: 019B62790D923D57F75B1A5E4F032165ED2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft Manifest number: 17A0 Signing time: Sun 28 Dec 2025 01:00:59 +0000 Manifest this update: Sun 28 Dec 2025 01:00:59 +0000 Manifest next update: Mon 29 Dec 2025 01:00:59 +0000 Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=) 2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: XiShOOpWLDJL89EV+I6Bjpek9GP52bUlqccUcKyqzi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:0d:92:3d:57:f7:5b:1a:5e:4f:03:21:65:ed:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Validity Not Before: Dec 28 01:00:59 2025 GMT Not After : Dec 29 01:00:59 2025 GMT Subject: CN=478df1d32d2be5c094973b46c55c386f3d1b0377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:61:eb:3a:a2:fe:6d:8b:a3:15:dd:91:77: 10:00:1a:15:30:c1:70:e9:90:52:d8:6f:e5:d8:31: 60:18:19:e9:69:17:4c:89:59:7c:11:62:c4:bc:54: fe:f5:78:56:70:36:48:da:fb:ee:73:95:c8:16:6e: b1:2a:d3:d4:23:94:c7:99:5c:20:a2:5b:41:94:dc: 3e:60:73:98:46:93:e1:8c:31:69:8d:8b:75:81:7b: 65:38:04:cf:e0:ab:f6:f5:9f:cb:a7:4f:da:89:04: ac:1a:77:1d:b4:e6:d7:64:12:6d:8a:ac:28:90:2c: 0e:c6:2a:47:27:e3:a2:f9:c2:48:99:c1:15:4a:e1: 2c:8a:fc:2a:a5:bb:4e:4f:37:cd:29:a3:1c:b7:f7: 24:98:3e:21:36:34:25:69:55:35:3a:fb:d5:21:0f: 5d:7f:6d:5b:83:d2:b8:fa:47:c7:01:c9:0d:9c:ae: bc:4c:00:19:61:3f:54:57:fe:b0:c0:a6:1d:02:7d: 7c:05:28:98:c0:57:c2:20:01:1c:13:78:d3:5e:ff: 3d:49:fb:42:bf:56:2a:d2:8c:72:a6:36:30:a0:11: 72:62:b0:74:22:33:36:92:a4:3b:c1:72:3b:31:60: ba:a7:7f:3c:d9:b3:60:74:b1:af:c7:17:b3:4b:85: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8D:F1:D3:2D:2B:E5:C0:94:97:3B:46:C5:5C:38:6F:3D:1B:03:77 X509v3 Authority Key Identifier: keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8d:ca:b3:10:38:90:2c:97:de:78:d4:19:06:a3:e4:9e:9c: 36:0d:bc:64:ad:8f:b0:17:dd:e3:63:14:6d:96:79:e4:56:0f: 3e:51:c6:a7:fc:db:d8:3c:c1:d0:e3:ec:ba:15:8c:ce:74:13: 17:e1:0b:c2:89:e1:e3:99:61:8c:2b:74:70:bb:6b:6d:c9:bc: 76:86:88:cf:80:e5:12:0a:d1:51:81:96:9a:5c:17:e6:83:7f: b8:bc:f2:4b:0a:c6:1c:de:1c:61:19:cf:29:26:40:5b:c6:22: 97:e5:52:56:c4:69:bb:ec:7d:b3:08:4b:10:5c:10:7f:2e:51: 90:24:77:3c:7b:24:a7:2a:18:c3:bd:2f:8d:d2:34:d2:43:cb: 3a:c4:2c:33:8e:80:ef:81:db:75:cb:f5:a9:d4:0b:a7:90:7f: 5c:e5:cd:62:0c:7f:36:07:55:1e:30:fe:09:54:8a:68:dd:3c: 79:ec:9f:2e:99:20:8e:33:dc:6d:d3:85:31:88:2f:2c:f1:a8: 6d:85:7a:57:de:fe:e3:0f:3e:9f:15:3e:04:5f:03:0b:75:9f: 12:23:a9:b0:82:5c:47:c7:f9:11:6a:03:c5:ba:fa:8f:1c:19: 8c:f7:2e:b2:fd:b8:bb:02:ab:0a:e1:7e:8e:86:10:39:d8:4f: c1:ad:d7:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieQ2SPVf3WxpeTwMhZe0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0 ZGY4MDYwHhcNMjUxMjI4MDEwMDU5WhcNMjUxMjI5MDEwMDU5WjAzMTEwLwYDVQQD Eyg0NzhkZjFkMzJkMmJlNWMwOTQ5NzNiNDZjNTVjMzg2ZjNkMWIwMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CZh6zqi/m2LoxXdkXcQABoVMMFw 6ZBS2G/l2DFgGBnpaRdMiVl8EWLEvFT+9XhWcDZI2vvuc5XIFm6xKtPUI5THmVwg oltBlNw+YHOYRpPhjDFpjYt1gXtlOATP4Kv29Z/Lp0/aiQSsGncdtObXZBJtiqwo kCwOxipHJ+Oi+cJImcEVSuEsivwqpbtOTzfNKaMct/ckmD4hNjQlaVU1OvvVIQ9d f21bg9K4+kfHAckNnK68TAAZYT9UV/6wwKYdAn18BSiYwFfCIAEcE3jTXv89SftC v1Yq0oxypjYwoBFyYrB0IjM2kqQ7wXI7MWC6p3882bNgdLGvxxezS4UfJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeN8dMtK+XAlJc7RsVcOG89GwN3MB8GA1UdIwQY MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo3KsxA4 kCyX3njUGQaj5J6cNg28ZK2PsBfd42MUbZZ55FYPPlHGp/zb2DzB0OPsuhWMznQT F+ELwonh45lhjCt0cLtrbcm8doaIz4DlEgrRUYGWmlwX5oN/uLzySwrGHN4cYRnP KSZAW8Yil+VSVsRpu+x9swhLEFwQfy5RkCR3PHskpyoYw70vjdI00kPLOsQsM46A 74Hbdcv1qdQLp5B/XOXNYgx/NgdVHjD+CVSKaN08eeyfLpkgjjPcbdOFMYgvLPGo bYV6V97+4w8+nxU+BF8DC3WfEiOpsIJcR8f5EWoDxbr6jxwZjPcusv24uwKrCuF+ joYQOdhPwa3Xug== -----END CERTIFICATE-----Generated at Sun Dec 28 06:25:19 2025 by rpki-client