This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json) Hash identifier: IHfIB09jJQw//D10LrxZukp8DHfVE80VXL1WVDQLBeY= Subject key identifier: B6:80:19:AD:64:C5:95:B3:4D:CC:A6:A2:78:61:20:C4:44:B1:8B:AC Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99 Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99 Certificate serial: 019B3F114E8C1083B921A88C2935F99252D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft Manifest number: C4 Signing time: Sun 21 Dec 2025 04:00:57 +0000 Manifest this update: Sun 21 Dec 2025 04:00:57 +0000 Manifest next update: Mon 22 Dec 2025 04:00:57 +0000 Files and hashes: 1: 7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa (hash: 07a2Z1bP4ZM4lvBNnIbYpGRZq/i+QW1+w8DIMuAxBRM=) 2: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: U1fsRLLLMP459+o3Cep0FCj+2p1qyvRwNF+5de6Wdww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:4e:8c:10:83:b9:21:a8:8c:29:35:f9:92:52:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99 Validity Not Before: Dec 21 04:00:57 2025 GMT Not After : Dec 22 04:00:57 2025 GMT Subject: CN=b68019ad64c595b34dcca6a2786120c444b18bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:13:f5:c7:6a:bc:84:1d:12:cf:2d:97:b9: 50:0e:34:f2:84:03:b9:09:d0:7b:fa:e4:29:2a:16: 16:47:0d:2d:ff:75:45:7c:32:7f:47:04:2b:62:ee: d0:b1:ca:9e:b8:a3:d2:5a:ea:9a:00:db:e1:5b:4b: 47:89:9f:b1:c1:93:b4:66:71:25:42:47:8e:28:f0: f6:4a:93:16:66:de:59:00:0b:c0:ce:99:8a:73:42: 6a:6d:c7:ae:c6:7b:67:71:1f:80:01:c5:4a:82:87: 83:6c:81:24:05:16:20:ac:cc:4a:25:11:bc:83:d5: fb:ff:c3:16:5f:cb:bf:31:5b:35:52:fb:1e:91:c6: b4:00:7c:99:b0:c9:ec:bf:4e:da:ea:00:9d:1b:bd: 52:07:39:04:13:ba:e6:35:4b:47:fd:73:59:dc:12: 9b:bd:94:92:dd:bf:a9:8d:49:38:8a:c9:bb:75:fa: 35:25:2a:a2:dc:da:a8:b9:49:a3:e7:36:76:d5:36: 9b:23:46:69:a5:b5:75:4a:d9:c7:d1:24:17:1f:4b: 9e:ec:cc:21:26:17:ee:c6:df:0d:16:86:59:4c:c4: b7:e3:f4:9f:8c:ee:6b:17:69:51:8b:9b:4f:c1:ba: b5:d5:88:5f:72:fc:77:a7:ba:7f:16:3e:62:d9:c9: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:80:19:AD:64:C5:95:B3:4D:CC:A6:A2:78:61:20:C4:44:B1:8B:AC X509v3 Authority Key Identifier: keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8f:91:54:14:d1:6b:a6:08:2a:87:10:24:ee:cb:7e:12:50: db:d9:9d:7b:bb:71:2c:81:0b:d2:23:e2:86:b0:6b:0d:a7:2d: e4:8f:55:3d:e0:e0:b4:de:c1:f8:47:05:47:61:18:49:b0:dc: d3:76:f0:22:01:07:bd:38:26:24:37:42:10:99:03:d0:2a:f2: 37:cb:1f:e2:26:fe:f3:58:21:c0:b3:fd:22:83:54:32:d3:cf: 07:d2:e8:e9:f8:fe:09:0d:2e:2f:17:82:19:22:91:83:80:20: 14:fe:a9:5a:24:cc:22:b6:88:53:c6:2a:b3:32:c1:87:01:6d: 6f:f6:a6:52:f8:8c:b7:99:01:96:9e:27:00:77:e1:d1:1d:1b: 4f:4d:b4:3b:98:7d:e8:09:16:de:f9:0d:56:1b:15:d3:89:3b: e4:bf:2c:47:20:18:2d:d2:9d:75:19:c7:9c:c1:06:7e:47:33: a6:6f:b1:34:bc:84:5d:a9:da:33:34:a5:dd:d4:c7:21:f8:f1: a7:a6:a3:bc:a9:21:6f:06:6c:b4:f2:d1:fd:26:f6:46:ae:71: 81:7d:89:21:82:f7:b3:90:e5:16:f8:d3:7a:38:bf:e3:75:30: 1b:e0:69:9c:ef:14:5d:27:1a:bf:30:85:bf:36:cd:47:74:2c: 50:49:c9:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EU6MEIO5IaiMKTX5klLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDEyMzNmMTEyYTRhMzQzNTU3NWEzYTIxOWRjY2MwMjEw NjhkOTkwHhcNMjUxMjIxMDQwMDU3WhcNMjUxMjIyMDQwMDU3WjAzMTEwLwYDVQQD EyhiNjgwMTlhZDY0YzU5NWIzNGRjY2E2YTI3ODYxMjBjNDQ0YjE4YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NgT9cdqvIQdEs8tl7lQDjTyhAO5 CdB7+uQpKhYWRw0t/3VFfDJ/RwQrYu7QscqeuKPSWuqaANvhW0tHiZ+xwZO0ZnEl QkeOKPD2SpMWZt5ZAAvAzpmKc0JqbceuxntncR+AAcVKgoeDbIEkBRYgrMxKJRG8 g9X7/8MWX8u/MVs1Uvsekca0AHyZsMnsv07a6gCdG71SBzkEE7rmNUtH/XNZ3BKb vZSS3b+pjUk4ism7dfo1JSqi3NqouUmj5zZ21TabI0ZppbV1StnH0SQXH0ue7Mwh Jhfuxt8NFoZZTMS34/SfjO5rF2lRi5tPwbq11Yhfcvx3p7p/Fj5i2cltowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaAGa1kxZWzTcymonhhIMREsYusMB8GA1UdIwQY MBaAFGbRIz8RKko0NVdaOiGdzMAhBo2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgt ZmU0Y2QyNzEyMzA2LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgtZmU0Y2QyNzEyMzA2 LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI+RVBTR a6YIKocQJO7LfhJQ29mde7txLIEL0iPihrBrDact5I9VPeDgtN7B+EcFR2EYSbDc 03bwIgEHvTgmJDdCEJkD0CryN8sf4ib+81ghwLP9IoNUMtPPB9Lo6fj+CQ0uLxeC GSKRg4AgFP6pWiTMIraIU8YqszLBhwFtb/amUviMt5kBlp4nAHfh0R0bT020O5h9 6AkW3vkNVhsV04k75L8sRyAYLdKddRnHnMEGfkczpm+xNLyEXanaMzSl3dTHIfjx p6ajvKkhbwZstPLR/Sb2Rq5xgX2JIYL3s5DlFvjTeji/43UwG+BpnO8UXScavzCF vzbNR3QsUEnJpg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:14:09 2025 by rpki-client