This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json) Hash identifier: 3jwvQvSbH8aeG4SfdPmYv8VJ1NcBuHdeXhLu2SbzdtI= Subject key identifier: 6E:16:C1:B8:13:C1:B0:7D:5E:C9:85:51:F3:2E:3F:6E:0B:15:8D:57 Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Certificate serial: 019B661F013C6E9C4C1D40ED405C7FD9FAEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft Manifest number: 17A0 Signing time: Sun 28 Dec 2025 18:01:06 +0000 Manifest this update: Sun 28 Dec 2025 18:01:06 +0000 Manifest next update: Mon 29 Dec 2025 18:01:06 +0000 Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=) 2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: dDkprYlGtpai5q4McT3gwkupMYPP8g+1GHmcvGHWMYU=) 3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1f:01:3c:6e:9c:4c:1d:40:ed:40:5c:7f:d9:fa:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Validity Not Before: Dec 28 18:01:06 2025 GMT Not After : Dec 29 18:01:06 2025 GMT Subject: CN=6e16c1b813c1b07d5ec98551f32e3f6e0b158d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:df:dc:9e:5a:c2:5a:82:80:91:63:19:82: b9:d3:2e:38:0f:b2:0c:ae:ad:5e:96:ec:b6:13:be: c4:bc:db:4d:1f:8c:ad:55:9c:63:36:a6:65:0f:30: 81:b0:4a:92:ed:bf:70:d4:5e:b0:af:ad:ae:f3:ef: b5:c1:fb:35:bf:15:d5:f0:63:59:0f:7d:8e:b9:b6: bd:de:ec:8d:f2:30:e7:31:14:a2:ef:5d:af:82:c6: 3d:5a:0d:bd:8a:fb:32:4b:5c:fb:5d:df:fa:cd:48: a3:01:b4:29:ff:3d:ec:7f:33:df:86:1f:22:47:4d: 1f:1a:be:c6:03:ca:6f:58:84:6a:57:22:05:f5:5e: f8:f1:aa:66:fb:c4:75:46:dd:e4:15:ab:8a:38:8d: 66:2a:ee:eb:4a:33:b8:64:cf:a1:2e:26:61:52:60: fc:d8:18:13:e0:84:2d:e9:88:66:71:ba:e8:1d:6c: 16:79:3c:2b:9d:7b:54:b8:b1:3a:0e:f5:30:ed:b4: 4b:4f:d8:c0:0f:2a:11:75:80:f5:a2:89:66:b6:37: 11:2a:ef:d6:1c:6c:d3:3d:32:14:16:d7:ca:e0:45: 9c:11:fb:3a:60:99:b8:c9:c1:b7:90:8e:b1:7e:cf: 3a:10:5e:d0:d8:a0:0d:c6:2f:54:72:a5:b6:4a:e7: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:16:C1:B8:13:C1:B0:7D:5E:C9:85:51:F3:2E:3F:6E:0B:15:8D:57 X509v3 Authority Key Identifier: keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bc:13:e4:68:ba:cf:e8:68:59:58:a0:c5:4e:65:c7:10:06: 94:68:a1:b3:26:fa:a9:32:c1:71:bd:5d:79:e4:07:17:0c:d0: 29:53:e6:54:c5:8e:17:bf:71:de:fa:11:7b:a4:4b:ec:c0:25: ec:d8:91:a3:92:a5:ac:f0:9e:38:6a:5e:5e:1a:42:5e:a2:22: 3c:48:d9:eb:01:40:be:b3:ec:af:d9:d3:85:6b:46:51:73:13: 64:5b:8f:73:8a:ea:80:15:bb:63:d4:86:96:94:4c:6d:cb:06: ae:5c:11:1f:16:32:ff:8c:a6:0f:1a:b6:df:f2:4a:3a:4b:ff: 85:38:aa:53:a3:e4:0b:5c:79:19:bf:4c:34:a1:04:83:a0:43: 64:51:f2:6c:5d:5c:c7:c2:96:ea:8b:5f:4e:2b:1f:00:b3:f4: 40:db:0b:4e:bf:7f:ad:c3:46:c1:0a:6b:c4:41:eb:c4:4b:a0: 16:17:d9:21:b5:2b:62:d6:31:79:a1:bd:76:79:4e:01:da:2c: 9e:73:43:10:bd:3c:f3:52:c1:8e:19:18:91:c4:f5:d1:2c:52: 72:33:2f:a2:94:dd:e9:f7:cf:08:d5:a0:ef:6e:6a:da:2d:0b: 9c:12:20:e7:c6:93:aa:0a:3d:c1:37:12:0e:62:d1:8a:9b:26: a2:c2:4b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHwE8bpxMHUDtQFx/2frrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw MDg3ZDQwHhcNMjUxMjI4MTgwMTA2WhcNMjUxMjI5MTgwMTA2WjAzMTEwLwYDVQQD Eyg2ZTE2YzFiODEzYzFiMDdkNWVjOTg1NTFmMzJlM2Y2ZTBiMTU4ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ff3J5awlqCgJFjGYK50y44D7IM rq1eluy2E77EvNtNH4ytVZxjNqZlDzCBsEqS7b9w1F6wr62u8++1wfs1vxXV8GNZ D32Ouba93uyN8jDnMRSi712vgsY9Wg29ivsyS1z7Xd/6zUijAbQp/z3sfzPfhh8i R00fGr7GA8pvWIRqVyIF9V748apm+8R1Rt3kFauKOI1mKu7rSjO4ZM+hLiZhUmD8 2BgT4IQt6YhmcbroHWwWeTwrnXtUuLE6DvUw7bRLT9jADyoRdYD1oolmtjcRKu/W HGzTPTIUFtfK4EWcEfs6YJm4ycG3kI6xfs86EF7Q2KANxi9UcqW2Suc1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4WwbgTwbB9XsmFUfMuP24LFY1XMB8GA1UdIwQY MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrwT5Gi6 z+hoWVigxU5lxxAGlGihsyb6qTLBcb1deeQHFwzQKVPmVMWOF79x3voRe6RL7MAl 7NiRo5KlrPCeOGpeXhpCXqIiPEjZ6wFAvrPsr9nThWtGUXMTZFuPc4rqgBW7Y9SG lpRMbcsGrlwRHxYy/4ymDxq23/JKOkv/hTiqU6PkC1x5Gb9MNKEEg6BDZFHybF1c x8KW6otfTisfALP0QNsLTr9/rcNGwQprxEHrxEugFhfZIbUrYtYxeaG9dnlOAdos nnNDEL0881LBjhkYkcT10SxScjMvopTd6ffPCNWg725q2i0LnBIg58aTqgo9wTcS DmLRipsmosJLfw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:05 2025 by rpki-client