This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json) Hash identifier: XaAUxbEBaj8+c/Vd3KoHP0KNQeZ0wp5/AclWz4xp7Dk= Subject key identifier: CA:15:52:11:5D:06:D3:90:6F:34:49:2B:CD:C3:9A:3A:EB:26:A3:63 Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Certificate serial: 019AF240259A6F6934ED2D97235929530E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft Manifest number: 103A Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: edFbGjP2cyk+9Txz6BTr6v+G2XpdiOOBE90k5unu9KY=) 2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:25:9a:6f:69:34:ed:2d:97:23:59:29:53:0e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=ca1552115d06d3906f34492bcdc39a3aeb26a363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:7b:1f:53:31:fe:c0:d9:33:41:98:1e:63: 23:eb:73:54:aa:0b:45:4c:09:08:e8:26:bd:bc:cb: 63:93:33:9b:54:98:de:f7:bd:3f:02:6e:5b:fd:7b: 1e:30:0c:84:fc:cc:23:07:0d:c0:12:fa:15:56:42: a4:7a:c9:2e:0a:ba:42:49:de:cd:87:54:73:24:f2: d9:a5:fb:82:a6:38:55:bc:72:7e:b4:23:9a:3c:42: 43:67:88:ae:a8:cc:bd:d5:48:5b:ad:e9:27:6d:f8: 65:79:66:06:c8:08:9f:e4:44:ca:7e:89:b3:76:4c: 23:d4:76:8a:d2:24:6e:f6:1d:33:b6:78:aa:8e:cf: 52:99:2a:48:e1:5e:00:93:51:86:a2:21:41:fa:bc: 44:10:28:ca:8a:d2:ff:0b:ce:0f:81:c2:f6:6b:f1: d8:c4:c0:1d:ed:f9:83:cb:82:a4:cd:24:20:f5:5d: 3b:f1:83:37:8a:d0:a7:d1:c9:d2:56:13:4a:cc:4b: 55:e5:b9:d0:96:12:f0:b2:64:db:2f:94:2b:0d:91: 0b:18:78:75:22:f2:10:e6:da:51:9f:8e:dd:35:89: 96:ec:9e:c4:e0:fb:3e:a5:3e:96:79:db:08:e1:6f: 4a:7f:fc:4d:22:84:c8:ea:3a:c6:c8:60:10:17:51: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:15:52:11:5D:06:D3:90:6F:34:49:2B:CD:C3:9A:3A:EB:26:A3:63 X509v3 Authority Key Identifier: keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:87:eb:b5:06:95:d7:20:c6:88:4f:33:28:22:f2:ea:85:e1: ca:68:c5:ed:1d:c7:21:4c:4f:7c:e9:b4:a7:0b:62:49:da:d3: e3:6b:3b:b1:b2:32:f7:c6:32:87:c2:50:b9:63:4f:16:42:65: db:31:8f:fc:64:ca:20:68:df:a0:e7:ba:42:07:47:03:96:13: 09:df:6b:f4:22:ab:19:b0:6e:e5:21:f5:66:1a:88:46:35:6d: a0:13:d0:6d:00:bd:62:53:d5:ce:2d:6a:89:91:c1:ac:b1:ae: 69:43:cc:43:21:b0:80:60:27:f2:22:66:d5:eb:49:17:9c:3f: 04:1b:54:9c:db:eb:da:eb:ac:8c:94:53:f0:ef:e0:0f:36:2f: bb:cb:4a:88:e9:d2:33:80:b0:7e:36:58:7f:13:d2:d1:54:cb: 93:fc:dc:98:4c:ec:fe:7e:d0:0b:e9:fa:e6:85:85:6a:c9:74: f7:14:21:b9:9a:44:65:1b:e8:87:21:67:9c:3f:3a:f4:bf:31: 1b:53:de:12:0b:20:b2:16:b1:87:33:e3:a2:22:7b:c3:ac:83: f3:4d:44:a1:aa:63:5c:e6:50:6d:54:9a:e5:2e:e1:69:b2:2e: 3a:81:c5:95:7a:41:66:9c:b1:20:ba:e7:be:81:94:79:10:43: 16:62:8b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCWab2k07S2XI1kpUw4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmI3NzI3ZDY0YTUxOGM3Y2Q0ODVlNDgyM2VlNzhhOWUy OTEwMDgwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD EyhjYTE1NTIxMTVkMDZkMzkwNmYzNDQ5MmJjZGMzOWEzYWViMjZhMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w97H1Mx/sDZM0GYHmMj63NUqgtF TAkI6Ca9vMtjkzObVJje970/Am5b/XseMAyE/MwjBw3AEvoVVkKkeskuCrpCSd7N h1RzJPLZpfuCpjhVvHJ+tCOaPEJDZ4iuqMy91UhbreknbfhleWYGyAif5ETKfomz dkwj1HaK0iRu9h0ztniqjs9SmSpI4V4Ak1GGoiFB+rxEECjKitL/C84PgcL2a/HY xMAd7fmDy4KkzSQg9V078YM3itCn0cnSVhNKzEtV5bnQlhLwsmTbL5QrDZELGHh1 IvIQ5tpRn47dNYmW7J7E4Ps+pT6WedsI4W9Kf/xNIoTI6jrGyGAQF1GJZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoVUhFdBtOQbzRJK83DmjrrJqNjMB8GA1UdIwQY MBaAFGb7dyfWSlGMfNSF5II+54qeKRAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4Mzkt N2MzYmRkYzI5NzhhLzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4MzktN2MzYmRkYzI5Nzhh LzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMofrtQaV 1yDGiE8zKCLy6oXhymjF7R3HIUxPfOm0pwtiSdrT42s7sbIy98Yyh8JQuWNPFkJl 2zGP/GTKIGjfoOe6QgdHA5YTCd9r9CKrGbBu5SH1ZhqIRjVtoBPQbQC9YlPVzi1q iZHBrLGuaUPMQyGwgGAn8iJm1etJF5w/BBtUnNvr2uusjJRT8O/gDzYvu8tKiOnS M4CwfjZYfxPS0VTLk/zcmEzs/n7QC+n65oWFasl09xQhuZpEZRvohyFnnD869L8x G1PeEgsgshaxhzPjoiJ7w6yD801EoapjXOZQbVSa5S7habIuOoHFlXpBZpyxILrn voGUeRBDFmKLQA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:33 2025 by rpki-client