This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json) Hash identifier: IGI0HYtXahyM2ffaz9H61Ixngn7sdx33FOfth3qJ9h8= Subject key identifier: AD:BD:0B:3A:E2:C8:62:7C:F9:EF:8D:2A:9C:E1:E7:7E:13:FA:CF:4B Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Certificate serial: 019B3C101096DDFAC23B40860D6A82A8BA67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 14:00:44 +0000 Manifest this update: Sat 20 Dec 2025 14:00:44 +0000 Manifest next update: Sun 21 Dec 2025 14:00:44 +0000 Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=) 2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=) 3: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (hash: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=) 4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: fbP0xL4C+N50xYKaYPujkwiruyT0vz1GjNEafDt4OOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:10:96:dd:fa:c2:3b:40:86:0d:6a:82:a8:ba:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Validity Not Before: Dec 20 14:00:44 2025 GMT Not After : Dec 21 14:00:44 2025 GMT Subject: CN=adbd0b3ae2c8627cf9ef8d2a9ce1e77e13facf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:64:2f:18:bd:f5:bc:16:9b:6c:ce:07:68: ad:38:b0:cb:c9:e2:53:82:bf:f5:fa:1f:e0:f1:e7: 79:dc:ed:cc:d7:03:1b:d1:b9:dc:5e:8e:9d:ec:37: f7:2d:ef:3e:73:93:be:82:1d:43:bb:9d:72:38:bc: ee:33:8b:e4:00:49:a0:64:c0:d4:f5:80:09:96:c8: bb:be:f2:9f:ce:de:cd:c7:1a:8b:fb:1d:b0:b2:f8: b3:27:89:8c:d5:d8:2c:50:64:0e:8b:7e:3a:95:28: 36:6c:54:86:52:43:46:29:30:eb:2b:09:75:dd:64: c5:63:22:7a:73:f8:74:eb:fb:44:48:15:58:55:63: 32:48:7c:e4:e3:d0:53:27:a6:12:f7:53:fe:4d:e4: ee:89:f8:1b:11:58:70:40:3d:6d:39:25:80:2a:b0: fd:f2:66:a2:22:26:e2:e4:2d:e1:d2:0f:5d:03:e9: 32:35:2d:b2:54:67:be:fd:2a:ba:0f:85:cc:61:9e: 59:0a:fb:a9:13:59:8d:db:7f:36:76:93:a6:93:51: 79:0c:14:d8:c6:3d:0b:09:85:c2:69:48:38:5f:5d: b1:7d:3f:a0:83:bd:b2:59:3d:e9:6c:21:50:aa:ba: ed:37:7a:86:ba:c4:a9:28:76:cd:2a:94:5a:40:b7: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BD:0B:3A:E2:C8:62:7C:F9:EF:8D:2A:9C:E1:E7:7E:13:FA:CF:4B X509v3 Authority Key Identifier: keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:78:37:5f:b1:f2:fe:ce:ad:58:e9:3e:8b:9e:b1:98:91:82: 85:67:b5:70:7a:73:82:84:a1:21:a5:fc:b6:5f:2e:2d:62:75: ee:a4:b5:45:e2:d4:af:d8:e0:90:d2:52:f2:3d:a8:54:40:f9: 6b:09:d1:a7:6f:8c:a3:ea:9e:3c:60:1f:ac:f5:8d:ce:1c:42: 02:6b:a7:a0:60:1e:7c:fe:28:b6:42:ae:09:dd:17:a9:38:d8: 28:41:7c:87:39:0a:7d:bf:27:6a:83:d2:1e:c6:a0:76:7b:5d: 32:3e:29:67:51:32:c0:d6:44:32:67:fd:68:cc:67:1e:c4:44: 8b:d1:ed:91:2a:07:f3:bc:82:88:4b:df:8a:09:c5:42:ad:ad: 59:f9:2e:09:1c:72:30:36:2f:d4:21:f1:62:e8:23:30:72:4b: d2:dc:f2:e6:8c:ae:54:5b:3f:55:94:52:e3:c2:33:fe:3b:84: 95:7e:96:3d:e9:9f:99:c5:df:e1:81:4c:84:89:ac:a5:74:a3: 8f:01:ac:3b:db:0c:59:fa:5e:4e:61:40:1d:56:de:bf:f8:93: ec:04:fa:13:8d:0d:99:0d:86:4d:8f:74:54:ef:ea:68:26:26: d2:9a:ac:95:37:f7:d1:26:ab:2f:77:f0:6b:89:13:ab:58:ba: bd:35:76:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBCW3frCO0CGDWqCqLpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk OTRmNjEwHhcNMjUxMjIwMTQwMDQ0WhcNMjUxMjIxMTQwMDQ0WjAzMTEwLwYDVQQD EyhhZGJkMGIzYWUyYzg2MjdjZjllZjhkMmE5Y2UxZTc3ZTEzZmFjZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfhkLxi99bwWm2zOB2itOLDLyeJT gr/1+h/g8ed53O3M1wMb0bncXo6d7Df3Le8+c5O+gh1Du51yOLzuM4vkAEmgZMDU 9YAJlsi7vvKfzt7NxxqL+x2wsvizJ4mM1dgsUGQOi346lSg2bFSGUkNGKTDrKwl1 3WTFYyJ6c/h06/tESBVYVWMySHzk49BTJ6YS91P+TeTuifgbEVhwQD1tOSWAKrD9 8maiIibi5C3h0g9dA+kyNS2yVGe+/Sq6D4XMYZ5ZCvupE1mN2382dpOmk1F5DBTY xj0LCYXCaUg4X12xfT+gg72yWT3pbCFQqrrtN3qGusSpKHbNKpRaQLfAPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK29CzriyGJ8+e+NKpzh534T+s9LMB8GA1UdIwQY MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt ZWY0YjY1OWVmZjhkLzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATng3X7Hy /s6tWOk+i56xmJGChWe1cHpzgoShIaX8tl8uLWJ17qS1ReLUr9jgkNJS8j2oVED5 awnRp2+Mo+qePGAfrPWNzhxCAmunoGAefP4otkKuCd0XqTjYKEF8hzkKfb8naoPS HsagdntdMj4pZ1EywNZEMmf9aMxnHsREi9HtkSoH87yCiEvfignFQq2tWfkuCRxy MDYv1CHxYugjMHJL0tzy5oyuVFs/VZRS48Iz/juElX6WPemfmcXf4YFMhImspXSj jwGsO9sMWfpeTmFAHVbev/iT7AT6E40NmQ2GTY90VO/qaCYm0pqslTf30SarL3fw a4kTq1i6vTV2pQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:41:28 2025 by rpki-client