This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft File: ZtM30zC6RO_P71VTVRMqaixpeDw.mft (raw, json) Hash identifier: 1zvuQm3oMQt3wG3dZXZO+tR1YYGRSsSWxPArQJ72LYU= Subject key identifier: FD:9A:BC:5C:9C:6A:0F:82:CE:F6:F6:CB:E9:E2:7D:6B:21:00:14:AE Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C Certificate issuer: /CN=66d337d330ba44efcfef555355132a6a2c69783c Certificate serial: 019B3E3580FA7E23C3DFFB437A8D690BFBB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft Manifest number: 1655 Signing time: Sun 21 Dec 2025 00:00:52 +0000 Manifest this update: Sun 21 Dec 2025 00:00:52 +0000 Manifest next update: Mon 22 Dec 2025 00:00:52 +0000 Files and hashes: 1: 1V6f1oV4KdVfTtXD9C3yVDxLM0g.roa (hash: QjrhXSoTLzzQB8pNCdz/57KujYqXNHGX03aljVkY0I8=) 2: LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa (hash: 0/1RbhG27PyHjDZyoP4IqnfgSwWfnZZl+ijORLw+Ejw=) 3: ZtM30zC6RO_P71VTVRMqaixpeDw.crl (hash: DimnsqHeX5mn4ukB4gX0iHPzOOgmEaXI3dG/CC3LKYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:80:fa:7e:23:c3:df:fb:43:7a:8d:69:0b:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c Validity Not Before: Dec 21 00:00:52 2025 GMT Not After : Dec 22 00:00:52 2025 GMT Subject: CN=fd9abc5c9c6a0f82cef6f6cbe9e27d6b210014ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:59:78:aa:17:b8:4b:44:6d:0b:e8:71:f6: 6a:24:62:85:2b:0b:13:94:24:f7:a8:11:31:82:14: a9:3b:f9:b3:7f:fa:af:44:d4:6f:dc:1f:01:e0:3c: e2:08:d0:e1:9a:28:0f:67:26:7b:2f:dd:13:1e:1f: e4:c1:29:55:24:a2:98:7c:b9:36:30:3a:12:a5:7d: 50:bf:96:ab:bd:13:11:a7:ad:d9:05:5c:f7:80:8d: 4b:b8:14:79:f3:af:bb:1f:b4:8f:0a:d0:09:49:6b: 33:ff:48:f3:f1:3b:1b:10:9c:52:ca:c2:cb:70:62: 46:d0:25:2b:7b:4e:18:8b:99:b1:83:0d:66:62:86: 7d:bb:ca:0c:89:f6:db:91:13:aa:dd:59:a6:2e:b7: 9b:98:48:42:04:bb:52:c2:bc:dc:a6:a0:55:b3:3b: 19:62:29:6c:c1:b1:ed:6f:da:7a:15:1b:24:02:22: 4f:e5:d1:5c:e9:f5:34:be:fe:70:73:8d:86:4f:0c: 6b:c5:bd:3d:bd:7e:8a:7c:1b:db:ef:8f:4d:4d:f1: 5d:9f:aa:71:9b:06:68:50:03:c2:87:db:19:e4:f2: 1b:8e:c4:de:b3:01:63:f0:e1:20:da:50:dc:34:e7: 6b:8e:62:bf:1d:cf:e0:69:cc:ec:75:f6:4f:85:28: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9A:BC:5C:9C:6A:0F:82:CE:F6:F6:CB:E9:E2:7D:6B:21:00:14:AE X509v3 Authority Key Identifier: keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:26:25:6d:9e:4d:04:e5:5b:20:8e:26:48:4c:9a:cc:da:c5: 42:78:37:3a:e4:f3:1d:ce:ed:25:86:70:dd:9c:c6:11:44:cf: 94:e4:bf:99:05:01:8b:dc:28:33:bd:0b:59:34:38:a3:75:98: bd:65:01:18:79:b2:98:a4:fb:f7:03:aa:4a:44:f3:1e:95:77: c4:65:ac:95:ba:bc:2d:c3:2f:49:4b:28:f8:10:d4:49:c8:70: 3a:9c:a8:16:8b:23:8c:b5:95:97:73:75:3a:0e:8d:2d:5c:0d: 60:ec:97:1a:7d:40:af:e0:bd:1c:e4:e6:7a:5b:a3:dc:4d:66: 1c:f8:74:e3:0d:d3:c2:7d:5a:0d:7d:9b:2f:65:0a:ae:8c:2d: 48:0a:a8:91:dc:f2:87:59:3b:de:5c:82:bd:87:a8:3b:e5:44: 3a:4c:bb:aa:cd:a5:24:4a:98:04:5d:03:e2:d4:e3:81:4d:30: e6:83:4a:cb:5b:7a:c2:03:35:e3:d0:96:4f:cf:c4:4d:c8:60: d8:bd:ed:67:d9:7a:91:ff:5a:0a:17:b2:06:82:41:61:61:ff: be:85:01:95:02:48:a2:84:fa:f4:f7:67:1a:a4:9d:7d:13:d1: 5e:de:8f:7d:06:35:59:ec:9e:45:d3:ba:2c:6c:31:41:ac:e2: 4d:bd:44:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NYD6fiPD3/tDeo1pC/u4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDMzN2QzMzBiYTQ0ZWZjZmVmNTU1MzU1MTMyYTZhMmM2 OTc4M2MwHhcNMjUxMjIxMDAwMDUyWhcNMjUxMjIyMDAwMDUyWjAzMTEwLwYDVQQD EyhmZDlhYmM1YzljNmEwZjgyY2VmNmY2Y2JlOWUyN2Q2YjIxMDAxNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlolZeKoXuEtEbQvocfZqJGKFKwsT lCT3qBExghSpO/mzf/qvRNRv3B8B4DziCNDhmigPZyZ7L90THh/kwSlVJKKYfLk2 MDoSpX1Qv5arvRMRp63ZBVz3gI1LuBR586+7H7SPCtAJSWsz/0jz8TsbEJxSysLL cGJG0CUre04Yi5mxgw1mYoZ9u8oMifbbkROq3VmmLrebmEhCBLtSwrzcpqBVszsZ YilswbHtb9p6FRskAiJP5dFc6fU0vv5wc42GTwxrxb09vX6KfBvb749NTfFdn6px mwZoUAPCh9sZ5PIbjsTeswFj8OEg2lDcNOdrjmK/Hc/gaczsdfZPhShJnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2avFycag+Czvb2y+nifWshABSuMB8GA1UdIwQY MBaAFGbTN9MwukTvz+9VU1UTKmosaXg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYt OGY1ZmM5MjEyNWRiLzEvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYtOGY1ZmM5MjEyNWRi LzEvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSYlbZ5N BOVbII4mSEyazNrFQng3OuTzHc7tJYZw3ZzGEUTPlOS/mQUBi9woM70LWTQ4o3WY vWUBGHmymKT79wOqSkTzHpV3xGWslbq8LcMvSUso+BDUSchwOpyoFosjjLWVl3N1 Og6NLVwNYOyXGn1Ar+C9HOTmeluj3E1mHPh04w3Twn1aDX2bL2UKrowtSAqokdzy h1k73lyCvYeoO+VEOky7qs2lJEqYBF0D4tTjgU0w5oNKy1t6wgM149CWT8/ETchg 2L3tZ9l6kf9aCheyBoJBYWH/voUBlQJIooT69PdnGqSdfRPRXt6PfQY1WeyeRdO6 LGwxQaziTb1ETw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:35 2025 by rpki-client