This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json) Hash identifier: 3hWLkIgH20vx7Org198XKBRnszMg/NtXR2q7d2Y9tdA= Subject key identifier: 33:DF:5B:62:EB:B5:0D:60:30:91:D1:25:7B:B8:F0:9D:58:B6:76:16 Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4 Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4 Certificate serial: 019B4513C1C65B46BFA6536116900E9062A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 08:01:21 +0000 Manifest this update: Mon 22 Dec 2025 08:01:21 +0000 Manifest next update: Tue 23 Dec 2025 08:01:21 +0000 Files and hashes: 1: NJmmW764rdnW_zIUswA3g-8-n2M.roa (hash: uNbv9sZggt1kjUfoR4Ji7KAa4WT9RRySZVjN33ZdWTA=) 2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: K/5YK3w/MumsDULPHAl0N275cr1yUunz8AeJo4tJvxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:c1:c6:5b:46:bf:a6:53:61:16:90:0e:90:62:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4 Validity Not Before: Dec 22 08:01:21 2025 GMT Not After : Dec 23 08:01:21 2025 GMT Subject: CN=33df5b62ebb50d603091d1257bb8f09d58b67616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:d8:7d:81:db:3c:44:9e:d7:0b:ee:93:76: d9:18:d8:11:11:b6:92:bf:4f:9c:2f:49:7e:e3:96: 97:4e:ed:20:1d:46:11:b5:e7:be:0a:6e:11:b1:64: 83:2c:53:e3:92:b3:85:c2:a0:b8:e2:20:0d:76:a7: 87:37:b4:4e:8a:89:f7:18:6f:53:80:f3:2f:da:7c: 54:8e:b9:ee:fe:92:a5:1a:6d:a8:08:46:25:40:04: a9:7a:21:68:04:80:1d:71:de:97:78:dd:0f:b6:bf: af:2b:64:88:e4:24:03:80:83:9d:0f:96:ec:85:62: a5:db:7c:dd:48:3a:59:fc:8a:39:75:d8:d0:55:8c: a1:30:01:8d:bc:68:fe:c9:ad:94:50:ed:d3:a4:1d: a3:5a:32:f9:59:ec:76:78:2b:12:4b:b9:56:6f:88: 0f:35:ed:c9:db:32:5e:14:14:3b:2a:5e:32:7c:ae: 87:97:f8:78:b6:d9:f9:03:d9:73:41:5b:78:2c:43: f1:19:e5:e0:a0:c4:cd:39:ac:ba:5e:4f:40:d6:64: c2:23:2a:fd:a5:4e:b3:1e:ef:75:45:5f:e5:61:04: 3b:91:b4:20:1c:ee:b6:aa:30:46:9a:d6:e3:08:e0: ed:5d:2c:fd:e7:ef:c3:c2:82:d4:e5:17:0e:70:e6: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DF:5B:62:EB:B5:0D:60:30:91:D1:25:7B:B8:F0:9D:58:B6:76:16 X509v3 Authority Key Identifier: keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d9:4b:88:4f:02:f9:3b:f2:64:07:ca:40:9c:99:31:1d:14: 6e:fa:a5:35:4e:57:f8:5d:a2:bf:fe:ba:7f:75:b7:f7:54:a9: 4b:2f:75:60:29:c2:76:17:b5:26:1c:ea:f6:3a:16:fe:8b:7a: e2:b3:5f:2a:21:89:57:03:77:ea:fc:b7:c9:66:00:60:74:ef: e0:40:02:4f:51:f9:f1:7a:1a:f9:4b:b5:18:21:1c:c3:ec:9d: 51:f7:f4:cf:16:83:75:46:33:a3:d5:b0:0c:e0:0d:b2:68:05: ee:03:70:01:56:42:a5:09:28:dc:83:d8:5f:42:0d:fd:f2:4b: 83:2d:95:b8:a9:3b:da:85:5e:97:ad:40:72:32:db:dd:0e:e5: ef:5a:8d:ac:50:c4:0c:65:af:84:25:38:34:30:89:f3:21:c9: 2f:cb:31:d3:88:28:94:c5:eb:40:7c:6f:fc:16:78:f9:fd:f5: bb:d4:ce:1a:eb:b2:78:d5:3a:27:93:1e:5f:2b:9e:3f:c4:bd: 5d:bb:23:40:ab:c7:34:52:d8:09:98:0c:23:1f:0d:49:8d:3e: e0:6d:ce:01:ba:34:06:c1:7b:ed:d8:a4:6d:e8:7c:02:8e:a6: d6:84:52:61:0e:e1:73:8e:89:ae:af:a5:03:90:42:e0:0f:e8: 39:bf:f0:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE8HGW0a/plNhFpAOkGKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQxMGVhNjg2N2VmNjNmOTU5YmFkNmIyMWI2OTFjYWRm Zjg3ZDQwHhcNMjUxMjIyMDgwMTIxWhcNMjUxMjIzMDgwMTIxWjAzMTEwLwYDVQQD EygzM2RmNWI2MmViYjUwZDYwMzA5MWQxMjU3YmI4ZjA5ZDU4YjY3NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+zYfYHbPESe1wvuk3bZGNgREbaS v0+cL0l+45aXTu0gHUYRtee+Cm4RsWSDLFPjkrOFwqC44iANdqeHN7ROion3GG9T gPMv2nxUjrnu/pKlGm2oCEYlQASpeiFoBIAdcd6XeN0Ptr+vK2SI5CQDgIOdD5bs hWKl23zdSDpZ/Io5ddjQVYyhMAGNvGj+ya2UUO3TpB2jWjL5Wex2eCsSS7lWb4gP Ne3J2zJeFBQ7Kl4yfK6Hl/h4ttn5A9lzQVt4LEPxGeXgoMTNOay6Xk9A1mTCIyr9 pU6zHu91RV/lYQQ7kbQgHO62qjBGmtbjCODtXSz95+/DwoLU5RcOcOZDlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPfW2LrtQ1gMJHRJXu48J1YtnYWMB8GA1UdIwQY MBaAFM7UEOpoZ+9j+Vm61rIbaRyt/4fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQt NzY1MjU4NDFkYzI4LzEvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQtNzY1MjU4NDFkYzI4 LzEvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNlLiE8C +TvyZAfKQJyZMR0UbvqlNU5X+F2iv/66f3W391SpSy91YCnCdhe1Jhzq9joW/ot6 4rNfKiGJVwN36vy3yWYAYHTv4EACT1H58Xoa+Uu1GCEcw+ydUff0zxaDdUYzo9Ww DOANsmgF7gNwAVZCpQko3IPYX0IN/fJLgy2VuKk72oVel61AcjLb3Q7l71qNrFDE DGWvhCU4NDCJ8yHJL8sx04golMXrQHxv/BZ4+f31u9TOGuuyeNU6J5MeXyueP8S9 XbsjQKvHNFLYCZgMIx8NSY0+4G3OAbo0BsF77dikbeh8Ao6m1oRSYQ7hc46Jrq+l A5BC4A/oOb/wSw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:23 2025 by rpki-client