This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json) Hash identifier: 9T+yZB2GOhGRwLs+pTTCj88Uht+641LT2KmQMHgsly8= Subject key identifier: E3:6C:B7:65:C4:38:99:C9:13:F7:E4:6E:BE:51:99:BC:C3:84:B5:B9 Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525 Certificate serial: 019AF0515CA119DB17A1CAA7E0009F4229A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft Manifest number: 14A9 Signing time: Fri 05 Dec 2025 21:00:55 +0000 Manifest this update: Fri 05 Dec 2025 21:00:55 +0000 Manifest next update: Sat 06 Dec 2025 21:00:55 +0000 Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=) 2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: met8mDPfKEe2olo+oZmNdz/jUYAfoYoKipEsADF8fsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:5c:a1:19:db:17:a1:ca:a7:e0:00:9f:42:29:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525 Validity Not Before: Dec 5 21:00:55 2025 GMT Not After : Dec 6 21:00:55 2025 GMT Subject: CN=e36cb765c43899c913f7e46ebe5199bcc384b5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:60:c3:7e:84:6f:a5:fa:ae:c5:e9:87:a0: 7c:24:dd:37:d8:a0:02:f3:c7:b9:41:57:95:9c:d3: 95:38:9c:34:c1:b4:5c:df:f1:d6:c6:fa:8f:7d:51: b0:98:78:da:d6:7f:2d:11:71:af:3e:ec:3d:1d:eb: 91:42:5d:67:c4:84:15:f6:88:56:12:99:0c:4a:f0: 7e:5f:a7:a0:c1:79:e1:e9:df:f5:69:74:96:05:33: cc:11:2a:0e:88:ad:ab:43:c7:b2:2e:10:47:b7:cd: 45:26:6d:07:06:6d:8a:8a:90:e8:e9:73:56:33:f9: 07:e7:31:73:b2:3d:8e:38:b4:33:42:a8:ae:08:c3: 08:b7:98:df:1f:0a:d7:b5:30:1e:25:2b:76:b9:be: d7:4b:6b:07:c7:aa:b8:9c:0b:a7:1a:be:89:fb:c0: 36:3d:a9:cf:6c:ae:75:da:9d:33:e7:87:0e:17:18: a7:f1:ea:4d:31:fa:75:91:ec:b5:35:94:0c:ac:88: b7:c2:f1:77:40:04:66:9a:32:57:7d:f3:db:78:3c: 5d:1b:4b:6a:ab:20:e2:97:0d:cc:d1:7d:52:96:d2: e3:45:6b:33:ac:f4:e2:0f:09:09:34:10:54:08:d1: bb:ee:11:d6:b0:92:b0:47:18:11:7f:89:29:52:54: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6C:B7:65:C4:38:99:C9:13:F7:E4:6E:BE:51:99:BC:C3:84:B5:B9 X509v3 Authority Key Identifier: keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:50:00:24:dd:26:74:7a:67:a8:5e:cb:eb:35:a6:65:52:6c: 49:0b:74:2d:b8:73:27:87:41:14:bc:f9:ba:2a:41:70:fb:95: a5:cd:1f:fa:de:f1:c4:26:38:87:3f:25:2c:04:89:cd:15:07: 4c:ec:1c:f3:a4:69:f5:9c:a4:cb:5f:e5:c7:b4:c6:2a:68:91: 77:58:9f:cc:28:41:62:46:f9:1d:6c:30:6c:00:9e:6c:85:e0: 02:a2:ee:64:ff:bf:56:29:be:14:d0:ef:f3:0b:e0:a9:59:bb: 34:3f:4f:46:54:61:ed:71:50:ca:45:63:38:ca:13:87:42:f3: d8:a8:7b:3b:a5:47:eb:79:12:ad:11:49:4b:91:ad:3f:8e:c1: bf:77:a7:a2:82:bf:3d:f7:26:1d:2e:30:d5:80:2e:ff:39:1e: 3f:c5:09:f6:b1:03:62:72:4a:88:62:7e:9f:a9:0b:52:2f:e9: b0:09:86:5f:14:fc:b1:ea:7b:fb:06:50:3f:9c:7c:33:fe:37: 77:03:29:dd:26:3c:53:0c:80:bf:a1:4d:a0:50:ff:58:ea:92: 89:04:e9:94:57:3f:18:5d:2e:36:a1:b9:91:79:07:26:63:bf: a4:21:74:97:5a:1d:80:9a:cb:51:7d:f7:e2:bc:68:67:93:2d: fd:58:3d:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUVyhGdsXocqn4ACfQimlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1 MTc1MjUwHhcNMjUxMjA1MjEwMDU1WhcNMjUxMjA2MjEwMDU1WjAzMTEwLwYDVQQD EyhlMzZjYjc2NWM0Mzg5OWM5MTNmN2U0NmViZTUxOTliY2MzODRiNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZpgw36Eb6X6rsXph6B8JN032KAC 88e5QVeVnNOVOJw0wbRc3/HWxvqPfVGwmHja1n8tEXGvPuw9HeuRQl1nxIQV9ohW EpkMSvB+X6egwXnh6d/1aXSWBTPMESoOiK2rQ8eyLhBHt81FJm0HBm2KipDo6XNW M/kH5zFzsj2OOLQzQqiuCMMIt5jfHwrXtTAeJSt2ub7XS2sHx6q4nAunGr6J+8A2 PanPbK512p0z54cOFxin8epNMfp1key1NZQMrIi3wvF3QARmmjJXffPbeDxdG0tq qyDilw3M0X1SltLjRWszrPTiDwkJNBBUCNG77hHWsJKwRxgRf4kpUlQPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONst2XEOJnJE/fkbr5RmbzDhLW5MB8GA1UdIwQY MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4 LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4lAAJN0m dHpnqF7L6zWmZVJsSQt0LbhzJ4dBFLz5uipBcPuVpc0f+t7xxCY4hz8lLASJzRUH TOwc86Rp9Zyky1/lx7TGKmiRd1ifzChBYkb5HWwwbACebIXgAqLuZP+/Vim+FNDv 8wvgqVm7ND9PRlRh7XFQykVjOMoTh0Lz2Kh7O6VH63kSrRFJS5GtP47Bv3enooK/ PfcmHS4w1YAu/zkeP8UJ9rEDYnJKiGJ+n6kLUi/psAmGXxT8sep7+wZQP5x8M/43 dwMp3SY8UwyAv6FNoFD/WOqSiQTplFc/GF0uNqG5kXkHJmO/pCF0l1odgJrLUX33 4rxoZ5Mt/Vg9gg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:08 2025 by rpki-client