This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json) Hash identifier: fFQIxtfzb+xmWZcyG7PSN4LFUf6gvf4GZDBZS1y0Gtg= Subject key identifier: B7:87:FC:4A:F5:81:24:EC:9F:1C:B8:88:B1:B9:64:C3:08:71:EF:A4 Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a Certificate serial: 019B552AFD6E9E1A3B15CA0B2D1451F797D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft Manifest number: 1321 Signing time: Thu 25 Dec 2025 11:00:39 +0000 Manifest this update: Thu 25 Dec 2025 11:00:39 +0000 Manifest next update: Fri 26 Dec 2025 11:00:39 +0000 Files and hashes: 1: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: 7g1uU6VB6WBXcpQq2iEQ2ZN3BopsVLXcA5Cr3ceCdp8=) 2: uoOTDO3I8Ju9HNeb_RrUnxiXqMM.roa (hash: uWLf97UT0+0lxJvC3noTnvF0IVTFV5k9XbA2AIDmE6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2a:fd:6e:9e:1a:3b:15:ca:0b:2d:14:51:f7:97:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a Validity Not Before: Dec 25 11:00:39 2025 GMT Not After : Dec 26 11:00:39 2025 GMT Subject: CN=b787fc4af58124ec9f1cb888b1b964c30871efa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:3e:9e:5f:b0:f2:cb:3e:a5:af:c2:7c:28: 02:a5:53:9a:9a:48:a5:ad:66:52:04:72:a9:56:ac: 75:e6:cd:0c:6e:3e:69:67:40:1b:d0:71:57:24:3d: 69:2a:ef:3f:91:19:1c:d4:07:2c:ab:6e:de:37:d0: 76:fd:5a:4e:96:95:36:de:95:a1:84:c1:2e:23:e1: b8:83:79:97:95:88:f5:11:dd:12:7b:6f:65:fb:41: e1:59:b5:60:39:20:da:81:0e:83:a7:fc:90:0c:6a: 62:79:0a:9e:39:71:e1:49:ea:50:19:17:72:86:1a: 19:43:93:7c:5f:13:62:42:3a:92:54:b2:c3:d8:9a: 58:02:a1:69:4f:1a:f4:c9:79:b5:a9:c8:16:aa:62: 79:0a:47:95:aa:26:ca:9c:f6:5b:b9:a4:a4:81:91: a7:3b:ce:79:6a:46:ab:aa:98:4a:97:af:de:e3:29: f2:e2:a0:1e:c0:bf:80:39:d3:10:bc:df:ab:d7:0a: 6e:fd:3d:08:79:bb:f9:88:52:7c:a9:b1:eb:3c:e4: 8f:5f:03:6b:06:ca:c6:2f:da:c2:e1:7d:01:dc:c4: 63:1d:e7:59:86:f7:77:6d:24:e9:36:01:fc:da:90: d6:4d:de:e3:7a:b5:6c:5e:93:49:63:0b:46:e3:45: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:87:FC:4A:F5:81:24:EC:9F:1C:B8:88:B1:B9:64:C3:08:71:EF:A4 X509v3 Authority Key Identifier: keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5c:fe:5e:ad:d7:d6:4a:41:41:e3:f5:96:0e:ca:2c:80:96: 44:66:52:24:b7:39:82:b4:9e:99:2c:c2:b3:90:9b:62:31:2f: 1f:ea:99:25:f2:d7:7d:1a:1f:05:5a:67:d0:f2:57:77:58:aa: a6:fa:49:22:59:83:36:e6:9f:eb:eb:bc:77:78:a0:aa:0e:05: cf:52:46:d1:cb:a8:73:dc:95:ed:79:2a:4c:bd:c9:8f:8b:50: 8a:80:fe:3e:25:cb:b5:5a:f4:a5:1d:02:a9:72:57:52:f6:39: f2:58:0f:b7:85:06:76:f3:56:5b:9e:a6:e6:88:53:89:16:a8: 9c:e1:48:f0:d3:06:20:69:fe:82:a9:0f:14:5c:1d:e0:81:63: e9:01:76:de:e1:4c:6e:40:8f:77:c7:df:d6:13:ab:e1:d5:93: ba:49:05:82:54:25:56:57:33:36:0e:81:c2:da:dc:2e:2c:2b: 03:16:bf:4d:27:e4:c2:85:5b:8c:b0:a7:3f:c7:69:99:17:7f: 0f:93:73:99:6a:7b:02:3c:6a:7f:8c:aa:82:91:56:f2:e7:8d: c1:9c:5a:e0:c2:ec:5d:f3:44:f0:55:3c:0d:bb:4b:14:16:67: 34:0f:19:4b:91:9d:02:29:21:b8:f2:71:ba:4b:d8:9e:fe:5b: c6:4f:c3:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKv1unho7FcoLLRRR95fUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDVlNWNkN2QwMzc1ZGUyNTI3NDA1NDY0MTJiODhiYTVi Y2ZhN2EwHhcNMjUxMjI1MTEwMDM5WhcNMjUxMjI2MTEwMDM5WjAzMTEwLwYDVQQD EyhiNzg3ZmM0YWY1ODEyNGVjOWYxY2I4ODhiMWI5NjRjMzA4NzFlZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNE+nl+w8ss+pa/CfCgCpVOamkil rWZSBHKpVqx15s0Mbj5pZ0Ab0HFXJD1pKu8/kRkc1Acsq27eN9B2/VpOlpU23pWh hMEuI+G4g3mXlYj1Ed0Se29l+0HhWbVgOSDagQ6Dp/yQDGpieQqeOXHhSepQGRdy hhoZQ5N8XxNiQjqSVLLD2JpYAqFpTxr0yXm1qcgWqmJ5CkeVqibKnPZbuaSkgZGn O855akarqphKl6/e4yny4qAewL+AOdMQvN+r1wpu/T0Iebv5iFJ8qbHrPOSPXwNr BsrGL9rC4X0B3MRjHedZhvd3bSTpNgH82pDWTd7jerVsXpNJYwtG40UgLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeH/Er1gSTsnxy4iLG5ZMMIce+kMB8GA1UdIwQY MBaAFGbV5c19A3XeJSdAVGQSuIulvPp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDkt ODZiOTBmMTk3ZWRlLzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDktODZiOTBmMTk3ZWRl LzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVz+Xq3X 1kpBQeP1lg7KLICWRGZSJLc5grSemSzCs5CbYjEvH+qZJfLXfRofBVpn0PJXd1iq pvpJIlmDNuaf6+u8d3igqg4Fz1JG0cuoc9yV7XkqTL3Jj4tQioD+PiXLtVr0pR0C qXJXUvY58lgPt4UGdvNWW56m5ohTiRaonOFI8NMGIGn+gqkPFFwd4IFj6QF23uFM bkCPd8ff1hOr4dWTukkFglQlVlczNg6BwtrcLiwrAxa/TSfkwoVbjLCnP8dpmRd/ D5NzmWp7Ajxqf4yqgpFW8ueNwZxa4MLsXfNE8FU8DbtLFBZnNA8ZS5GdAikhuPJx ukvYnv5bxk/DNw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:40:11 2025 by rpki-client