This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json) Hash identifier: L/+4Iy6E68WjU5HqibQgeF3Uhf8URPKeD9GPeuwUui0= Subject key identifier: AC:D5:73:FA:06:F8:30:15:C5:19:DD:6A:B3:E7:31:0C:C4:69:CB:29 Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c Certificate serial: 019B32D75799962D40347159E0259EB190EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft Manifest number: 1469 Signing time: Thu 18 Dec 2025 19:02:11 +0000 Manifest this update: Thu 18 Dec 2025 19:02:11 +0000 Manifest next update: Fri 19 Dec 2025 19:02:11 +0000 Files and hashes: 1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: n2XQ8D3md7wtEWRRItjmPMGj5ilopPR/PEknuddnwWM=) 2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:57:99:96:2d:40:34:71:59:e0:25:9e:b1:90:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c Validity Not Before: Dec 18 19:02:11 2025 GMT Not After : Dec 19 19:02:11 2025 GMT Subject: CN=acd573fa06f83015c519dd6ab3e7310cc469cb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:91:18:e2:1a:22:78:0e:01:f6:ae:b8:6c: e5:35:56:6a:e9:50:c7:dd:f4:13:58:b3:c0:a9:ec: 0c:86:31:97:c3:be:e2:ab:05:f4:27:69:1a:19:ac: b5:89:68:fd:58:19:39:7b:4d:7f:f9:b1:7f:a9:ed: 5b:94:25:06:d8:5e:01:54:45:84:04:df:df:19:ac: f1:66:b3:a4:2e:b9:d3:95:ce:b0:64:1e:c9:64:35: a8:4b:f6:24:3b:f7:f3:64:db:03:53:90:fa:21:dc: 53:2e:a5:13:92:db:52:11:da:b5:ba:35:39:88:db: ce:9f:9f:dd:45:08:ee:6d:1d:b9:2e:7d:49:4c:43: f1:24:0d:40:bc:5a:22:b4:5a:02:0d:60:2a:3e:dc: 0e:de:02:e8:e1:55:9b:04:e1:ff:90:29:b2:16:35: 9d:ab:d0:f4:a6:af:07:cc:87:71:0c:1a:10:57:c7: b7:0c:e1:8d:f6:90:26:df:c4:73:9c:b9:66:bf:9d: fa:32:fa:7c:f2:be:22:d0:a6:f9:8d:55:57:e4:d6: 63:15:51:9d:26:13:61:7c:9e:1c:1a:9c:92:e7:bd: b5:53:f2:f3:0d:37:10:be:63:a3:9e:40:89:22:c1: 0b:fb:be:03:83:bb:13:5a:55:c5:1f:f6:8d:36:45: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D5:73:FA:06:F8:30:15:C5:19:DD:6A:B3:E7:31:0C:C4:69:CB:29 X509v3 Authority Key Identifier: keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:21:92:1b:d6:15:15:d3:6f:0a:a7:33:5c:23:5a:a4:01: f4:61:3b:25:83:ee:56:22:7a:3f:18:70:08:12:58:30:ee:9c: 72:89:8b:10:b0:18:f8:e2:a3:0b:cd:eb:82:4a:6d:c0:83:2f: 03:95:0b:f5:04:a4:29:de:d4:ad:ac:e4:6d:65:c9:29:b4:e4: 56:c0:15:ac:e6:4d:49:1b:e1:10:ce:2f:a3:f5:66:30:80:74: 57:1d:c8:1e:e1:90:a9:e1:62:75:ea:8a:07:11:b8:9b:03:be: 3f:80:96:32:f0:bd:5e:b4:b4:8b:f5:fc:de:e1:06:2a:7e:25: e7:69:9b:d4:2d:a1:65:f8:dd:8a:03:58:9b:4b:28:cd:58:2c: 1e:6a:12:3d:7e:4e:49:86:1e:05:77:0b:06:3b:3a:00:24:8e: de:d4:c5:ed:33:8e:2b:12:d7:82:41:13:8c:df:28:6d:86:9a: cd:66:99:29:cd:4b:3f:c5:ea:31:03:e6:64:c4:8a:4b:53:12: 52:0b:c4:a9:f6:f3:bd:f2:48:c1:89:77:b3:ea:c6:8f:25:ac: 28:07:08:a3:e6:0e:95:92:00:6e:69:05:bd:3a:48:37:76:d3: 1c:1d:3f:b9:a5:59:71:35:c6:ba:3b:2d:5b:f1:25:0e:db:a8: ae:c4:6a:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy11eZli1ANHFZ4CWesZDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MDNlZDRjNzg0NTQyNTAxMTZmMTA1ZWI2OTYxZGMyOWUx ZGJjNmMwHhcNMjUxMjE4MTkwMjExWhcNMjUxMjE5MTkwMjExWjAzMTEwLwYDVQQD EyhhY2Q1NzNmYTA2ZjgzMDE1YzUxOWRkNmFiM2U3MzEwY2M0NjljYjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuuRGOIaIngOAfauuGzlNVZq6VDH 3fQTWLPAqewMhjGXw77iqwX0J2kaGay1iWj9WBk5e01/+bF/qe1blCUG2F4BVEWE BN/fGazxZrOkLrnTlc6wZB7JZDWoS/YkO/fzZNsDU5D6IdxTLqUTkttSEdq1ujU5 iNvOn5/dRQjubR25Ln1JTEPxJA1AvFoitFoCDWAqPtwO3gLo4VWbBOH/kCmyFjWd q9D0pq8HzIdxDBoQV8e3DOGN9pAm38RznLlmv536Mvp88r4i0Kb5jVVX5NZjFVGd JhNhfJ4cGpyS5721U/LzDTcQvmOjnkCJIsEL+74Dg7sTWlXFH/aNNkUWyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzVc/oG+DAVxRndarPnMQzEacspMB8GA1UdIwQY MBaAFGYD7Ux4RUJQEW8QXraWHcKeHbxsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEt ZDI3NjNjMDA3NzUyLzEvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEtZDI3NjNjMDA3NzUy LzEvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYwhkhvW FRXTbwqnM1wjWqQB9GE7JYPuViJ6PxhwCBJYMO6ccomLELAY+OKjC83rgkptwIMv A5UL9QSkKd7UrazkbWXJKbTkVsAVrOZNSRvhEM4vo/VmMIB0Vx3IHuGQqeFideqK BxG4mwO+P4CWMvC9XrS0i/X83uEGKn4l52mb1C2hZfjdigNYm0sozVgsHmoSPX5O SYYeBXcLBjs6ACSO3tTF7TOOKxLXgkETjN8obYaazWaZKc1LP8XqMQPmZMSKS1MS UgvEqfbzvfJIwYl3s+rGjyWsKAcIo+YOlZIAbmkFvTpIN3bTHB0/uaVZcTXGujst W/ElDtuorsRqxg== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:24 2025 by rpki-client