This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json) Hash identifier: GZhohueTimMMKef2VRDvRngPoB53uzqTKV0CP2J2tj8= Subject key identifier: EA:70:66:1B:C9:4D:91:04:71:58:68:08:37:47:03:4B:89:AC:33:3D Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def Certificate serial: 019AF50A6293E4C419C4F5F8CF601B714BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft Manifest number: 07ED Signing time: Sat 06 Dec 2025 19:01:29 +0000 Manifest this update: Sat 06 Dec 2025 19:01:29 +0000 Manifest next update: Sun 07 Dec 2025 19:01:29 +0000 Files and hashes: 1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: hS0I7J4j/gM5XglBgEk6zZr0HG/B7muoLYpjaan37pU=) 2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:62:93:e4:c4:19:c4:f5:f8:cf:60:1b:71:4b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def Validity Not Before: Dec 6 19:01:29 2025 GMT Not After : Dec 7 19:01:29 2025 GMT Subject: CN=ea70661bc94d9104715868083747034b89ac333d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:02:89:b5:32:75:7b:27:00:49:36:01:96: cd:8e:88:08:23:f5:11:d1:79:21:5a:3f:cd:e1:dc: 8d:35:a8:4e:8f:c1:ac:60:7e:a4:b1:b0:6e:9f:8d: 7e:e8:2c:1b:f8:9e:be:78:70:1e:b4:6a:bd:01:e5: e7:e6:e6:92:e0:b5:f6:55:7d:d3:26:c4:be:9c:80: e6:7c:89:80:9b:9d:a9:46:00:3d:e8:6f:7d:e4:4d: 15:3a:7c:09:3d:eb:45:49:e2:17:01:2d:20:90:04: 3e:e6:40:a4:b1:55:8b:03:ef:f6:f8:10:de:23:a9: a4:eb:11:84:c6:2e:a7:b6:22:00:f6:24:55:78:8e: 35:b2:54:9a:15:df:12:e5:a4:dc:c9:a9:55:ce:59: d6:39:56:c2:f4:25:c7:fb:35:df:e4:ea:b9:39:70: 43:4c:ff:04:65:0b:87:27:4e:49:b4:4e:fa:75:61: 6f:04:a2:30:1d:7a:c2:77:f8:31:96:86:fc:ad:0e: 33:e1:a1:11:e6:4b:21:8c:17:b2:6e:e9:57:cc:23: bf:ad:43:33:3e:61:a2:02:00:14:a9:d1:65:48:a9: f2:b8:17:f1:ae:42:d6:f2:af:dd:59:3f:75:79:59: a6:34:b2:e2:bc:27:97:6d:3c:e0:f1:72:3b:c1:68: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:70:66:1B:C9:4D:91:04:71:58:68:08:37:47:03:4B:89:AC:33:3D X509v3 Authority Key Identifier: keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:10:f4:56:f4:01:9a:fa:76:98:67:0d:31:71:2c:f5:fd:be: 76:bd:f6:10:ad:98:0f:f3:a5:da:de:92:b7:a9:af:97:4d:e4: b7:0d:a6:1d:8d:8e:06:c1:db:d6:68:fe:03:3c:d6:63:80:1a: 82:15:95:aa:33:67:f0:71:e1:01:16:12:06:b8:62:61:7c:c8: a6:c2:ad:28:28:38:16:40:e1:a7:3a:29:17:40:96:21:cd:31: df:7b:28:82:d8:1e:14:d9:1c:91:54:3c:e2:4a:58:dc:5a:29: b5:0b:57:52:e9:14:82:0a:17:fc:45:93:f2:a6:7e:9d:1f:cf: 3b:e2:83:62:f1:28:a2:2d:21:a4:ee:d2:fb:a7:23:51:10:40: 59:17:25:44:34:7f:48:ae:af:0c:79:69:54:86:30:19:3c:7b: 1f:3a:9a:13:97:61:1e:b8:30:47:51:25:f7:3c:89:83:82:58: 8a:bd:d1:3b:2d:07:c5:04:59:3e:63:c9:72:c0:e7:0c:52:f8: 27:b7:1c:e4:b3:49:24:5e:65:58:3a:bf:5e:63:c9:84:36:ec: 35:db:c8:e3:58:14:de:09:6d:b2:ec:aa:f2:ba:3a:86:2e:8b: f0:74:c9:82:92:c9:ec:47:20:4d:6a:4c:4e:85:ba:1f:a4:5a: 16:be:e9:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmKT5MQZxPX4z2AbcUvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGFjOGE4ZjMxNGVlODc5YTZhYTg0M2I2N2VhNDdhYjFl NzVkZWYwHhcNMjUxMjA2MTkwMTI5WhcNMjUxMjA3MTkwMTI5WjAzMTEwLwYDVQQD EyhlYTcwNjYxYmM5NGQ5MTA0NzE1ODY4MDgzNzQ3MDM0Yjg5YWMzMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm0CibUydXsnAEk2AZbNjogII/UR 0XkhWj/N4dyNNahOj8GsYH6ksbBun41+6Cwb+J6+eHAetGq9AeXn5uaS4LX2VX3T JsS+nIDmfImAm52pRgA96G995E0VOnwJPetFSeIXAS0gkAQ+5kCksVWLA+/2+BDe I6mk6xGExi6ntiIA9iRVeI41slSaFd8S5aTcyalVzlnWOVbC9CXH+zXf5Oq5OXBD TP8EZQuHJ05JtE76dWFvBKIwHXrCd/gxlob8rQ4z4aER5kshjBeybulXzCO/rUMz PmGiAgAUqdFlSKnyuBfxrkLW8q/dWT91eVmmNLLivCeXbTzg8XI7wWhZXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpwZhvJTZEEcVhoCDdHA0uJrDM9MB8GA1UdIwQY MBaAFGbayKjzFO6HmmqoQ7Z+pHqx513vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUt YzliZGNlOWMxYTQ5LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUtYzliZGNlOWMxYTQ5 LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxD0VvQB mvp2mGcNMXEs9f2+dr32EK2YD/Ol2t6St6mvl03ktw2mHY2OBsHb1mj+AzzWY4Aa ghWVqjNn8HHhARYSBrhiYXzIpsKtKCg4FkDhpzopF0CWIc0x33sogtgeFNkckVQ8 4kpY3FoptQtXUukUggoX/EWT8qZ+nR/PO+KDYvEooi0hpO7S+6cjURBAWRclRDR/ SK6vDHlpVIYwGTx7HzqaE5dhHrgwR1El9zyJg4JYir3ROy0HxQRZPmPJcsDnDFL4 J7cc5LNJJF5lWDq/XmPJhDbsNdvI41gU3gltsuyq8ro6hi6L8HTJgpLJ7EcgTWpM ToW6H6RaFr7plA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:48 2025 by rpki-client