This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json) Hash identifier: +IfJvdVANuQwh4qDq5ZrpGD/MqGqk4lDfG/fEHNIGwM= Subject key identifier: 18:A9:5D:01:15:F1:D0:28:74:89:1F:D4:D9:67:79:A5:7B:B2:DA:49 Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115 Certificate serial: 019AF16442220119B834FDDC21115EBAB256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft Manifest number: 56 Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: OLvsEOQQIpUl25Z4TEko9zb_n1I.roa (hash: 9j+j+7ArFD39gc7KW/0hA5lUAQk8VzJXss8aItVgswk=) 2: wzrBDa0AzHvMhlCKlCEAeNzTg1U.roa (hash: ibXC3aTl9szVtSiZ1VZTQMiaCOEz+/1+6+Jjm/P2hTA=) 3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: 8UMq647FAb8D0Wz9rbIdrkGkPeTMkdlfqR+cWOWBUp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:42:22:01:19:b8:34:fd:dc:21:11:5e:ba:b2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115 Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=18a95d0115f1d02874891fd4d96779a57bb2da49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f7:a2:28:4a:84:ae:1b:08:2c:81:93:ed:4a: 0e:1a:ad:ef:0f:7a:cd:44:49:c1:5e:36:7e:87:86: 29:e4:ad:c2:ad:c9:86:d7:f3:9f:aa:51:47:22:11: 4c:e9:39:bd:bf:bf:eb:cb:bd:97:27:56:a4:f0:30: ff:84:02:cd:3a:d7:cd:49:4a:14:d7:0a:8f:23:09: 11:3c:05:03:9c:d1:ab:d4:48:d0:e0:28:29:62:73: 52:bf:a6:20:9f:b5:7f:2a:af:f8:9b:c6:64:b6:02: ed:e5:cc:93:cf:ab:0d:53:7b:2a:ea:07:35:c9:71: 55:ee:7f:1c:3a:39:89:3e:e8:07:c6:fc:c7:d8:a6: 17:bf:73:ea:78:5d:45:48:a1:c1:32:d4:cc:e5:4f: 56:53:c1:e7:65:b1:30:f7:db:a0:f6:bb:c8:8f:02: e0:68:df:9d:d5:82:54:2b:f0:32:c6:aa:63:1a:94: c4:fd:12:b2:d0:3e:45:ed:a8:de:76:dc:2c:f0:39: 02:b9:64:72:2b:8a:2e:f3:f8:56:66:0d:77:80:1c: 9e:44:4c:ed:01:fc:f6:6d:04:98:9c:ab:a3:3b:6d: 94:5b:44:f5:d8:17:db:88:a6:e6:11:b7:89:4c:5a: 71:05:43:32:6e:b4:12:80:a2:c7:cb:a7:ef:aa:77: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A9:5D:01:15:F1:D0:28:74:89:1F:D4:D9:67:79:A5:7B:B2:DA:49 X509v3 Authority Key Identifier: keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:66:df:dd:bb:01:5d:c6:59:89:bc:d0:69:7b:67:36:80:ee: d1:73:cd:6b:b6:35:c2:d3:91:4f:00:49:df:77:90:d4:b8:50: 0d:77:24:ce:18:bd:ca:cd:15:ae:7f:ce:fd:f0:8c:12:b8:bd: c7:7c:54:d6:28:86:13:3e:ed:5c:46:50:8b:55:af:4e:29:38: c6:7d:6e:1e:e9:cd:a3:b6:20:4b:ab:96:9f:4e:37:28:dc:4e: e7:3b:df:de:4e:2a:91:c6:c5:66:c0:d3:18:33:65:64:2a:72: 23:84:7d:f6:ec:dc:a2:f6:c7:6c:2c:3c:67:43:b0:b1:ec:7f: 63:cd:ff:21:7d:77:01:bb:f6:ad:46:f4:30:35:e5:35:45:84: 18:69:17:ab:10:bf:42:ce:70:7f:92:57:30:91:31:70:54:c7: ab:fa:ba:64:55:f1:ea:d6:98:7c:84:0a:7a:54:af:b7:2f:b1: d9:64:7f:e9:ca:66:06:6a:43:35:35:9d:60:09:a5:36:68:4f: 77:cc:d3:b3:de:37:97:2a:48:b1:78:86:0a:5e:2f:84:ce:42: 01:c8:d7:2a:08:70:20:5e:65:c2:3e:c8:84:35:8b:60:56:53: e2:ab:09:3c:47:b2:39:5e:f8:04:36:2e:5c:6c:18:6c:09:1f: c7:09:0f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEIiARm4NP3cIRFeurJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZGQwZDcxNWU5N2ZiOTFmNzhkMDdmZTEwNjk2ZGE2MDE2 MDUxMTUwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EygxOGE5NWQwMTE1ZjFkMDI4NzQ4OTFmZDRkOTY3NzlhNTdiYjJkYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiveiKEqErhsILIGT7UoOGq3vD3rN REnBXjZ+h4Yp5K3CrcmG1/OfqlFHIhFM6Tm9v7/ry72XJ1ak8DD/hALNOtfNSUoU 1wqPIwkRPAUDnNGr1EjQ4CgpYnNSv6Ygn7V/Kq/4m8ZktgLt5cyTz6sNU3sq6gc1 yXFV7n8cOjmJPugHxvzH2KYXv3PqeF1FSKHBMtTM5U9WU8HnZbEw99ug9rvIjwLg aN+d1YJUK/AyxqpjGpTE/RKy0D5F7ajedtws8DkCuWRyK4ou8/hWZg13gByeREzt Afz2bQSYnKujO22UW0T12BfbiKbmEbeJTFpxBUMybrQSgKLHy6fvqnctvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBipXQEV8dAodIkf1NlneaV7stpJMB8GA1UdIwQY MBaAFM7dDXFel/uR940H/hBpbaYBYFEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMt YWFmMzIxNzFlYWExLzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMtYWFmMzIxNzFlYWEx LzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Gbf3bsB XcZZibzQaXtnNoDu0XPNa7Y1wtORTwBJ33eQ1LhQDXckzhi9ys0Vrn/O/fCMEri9 x3xU1iiGEz7tXEZQi1WvTik4xn1uHunNo7YgS6uWn043KNxO5zvf3k4qkcbFZsDT GDNlZCpyI4R99uzcovbHbCw8Z0Owsex/Y83/IX13Abv2rUb0MDXlNUWEGGkXqxC/ Qs5wf5JXMJExcFTHq/q6ZFXx6taYfIQKelSvty+x2WR/6cpmBmpDNTWdYAmlNmhP d8zTs943lypIsXiGCl4vhM5CAcjXKghwIF5lwj7IhDWLYFZT4qsJPEeyOV74BDYu XGwYbAkfxwkPmg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:40 2025 by rpki-client