This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json) Hash identifier: dCP5PVfbChuDHk9fXqnwbmSx/PonIW+RyGjCec1yXB8= Subject key identifier: DA:EE:C0:0B:3D:15:90:D3:6E:D9:64:02:E6:30:8A:4A:28:B9:20:89 Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Certificate serial: 019AF0888AF1D55198EF49EA2998A1C3BDDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 22:01:11 +0000 Manifest this update: Fri 05 Dec 2025 22:01:11 +0000 Manifest next update: Sat 06 Dec 2025 22:01:11 +0000 Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=) 2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: X6YOOGAY/PUW8KbUZ9R1/AsvJqSzkzfatZ5UMX4mF3g=) 3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:8a:f1:d5:51:98:ef:49:ea:29:98:a1:c3:bd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Validity Not Before: Dec 5 22:01:11 2025 GMT Not After : Dec 6 22:01:11 2025 GMT Subject: CN=daeec00b3d1590d36ed96402e6308a4a28b92089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:01:1d:bc:e9:69:ab:37:53:a5:9e:fd:81:4e: 2c:6f:f1:b4:f3:c0:24:6c:b0:c9:5a:4a:ba:b3:10: e5:79:92:fe:da:33:41:e3:4b:1d:07:ad:b9:48:ca: cd:2d:56:a3:23:d2:3b:3e:6b:36:43:87:89:9d:1e: 61:80:ee:ec:a9:a8:bb:28:fa:42:bf:9e:18:00:7f: 2f:59:7a:a3:3b:90:c8:6b:3e:19:f8:a3:66:ef:35: e5:cc:22:67:12:24:10:58:16:27:27:0d:78:a6:4c: b9:d2:bd:f6:92:24:70:b5:28:4e:d3:f4:17:73:0a: f2:97:b2:fa:b5:c7:30:de:59:d1:78:23:45:a6:f4: e9:fd:88:c1:b3:3a:79:53:47:7b:d1:59:ce:54:57: 3f:61:8d:61:93:4a:cd:29:e3:39:9b:3e:fb:3e:56: b8:ad:f0:94:44:f7:ac:19:a8:ac:24:d6:b8:91:11: c8:55:59:5b:f7:21:0a:fc:8f:a2:8b:16:be:90:c5: 7b:b9:ca:92:e2:4b:b8:ad:dc:ae:d9:a8:63:93:20: 51:65:23:6d:79:8a:46:90:7a:f7:0f:05:41:0e:d9: 5c:a8:4c:41:f9:3f:2c:53:b0:f7:5c:51:70:64:95: a4:28:9a:df:c1:a3:01:30:42:9c:63:42:d9:9d:4a: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EE:C0:0B:3D:15:90:D3:6E:D9:64:02:E6:30:8A:4A:28:B9:20:89 X509v3 Authority Key Identifier: keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ae:7b:3e:11:04:1d:09:87:e4:bb:53:7f:49:b2:4c:bc:1c: 36:5e:4c:ca:df:60:85:60:bb:ed:65:58:6b:39:de:e4:7d:97: 8e:cb:71:48:17:12:0f:af:39:99:e1:8c:a9:bc:fe:da:9d:04: 14:94:90:d7:3d:d6:68:a0:19:ce:e4:c9:63:af:65:8e:b8:db: 34:0f:67:aa:2b:bd:49:d0:46:be:8e:83:8b:4e:62:2f:e4:b7: 39:7d:69:a3:dc:ac:d3:64:d3:48:00:8f:da:47:01:3f:07:c9: 1f:78:84:9d:5e:b3:86:c1:29:94:5f:13:cf:fb:33:4f:19:57: 26:bf:93:47:f6:9b:f6:15:c1:8f:9b:06:f5:a7:74:d9:86:fd: 18:8b:80:ad:5d:20:a3:a6:fc:cf:88:e0:e6:72:c3:c2:97:32: 68:e7:ca:d1:c4:f0:46:1d:1e:33:77:36:60:68:45:e3:ec:40: c9:65:6d:93:30:7b:ac:21:9f:3a:3e:36:b2:dd:32:75:c4:18: 0c:c1:0a:b6:27:93:21:7a:78:1f:6d:4a:38:50:fb:a9:3e:af: 81:58:a5:a3:67:2e:15:64:a0:31:3c:18:b7:2a:28:a4:91:44: 8b:02:57:df:0b:3b:47:aa:12:c8:df:e5:9c:0a:39:0a:e1:7e: 2f:b5:05:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIrx1VGY70nqKZihw73aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw YTM0YjIwHhcNMjUxMjA1MjIwMTExWhcNMjUxMjA2MjIwMTExWjAzMTEwLwYDVQQD EyhkYWVlYzAwYjNkMTU5MGQzNmVkOTY0MDJlNjMwOGE0YTI4YjkyMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QEdvOlpqzdTpZ79gU4sb/G088Ak bLDJWkq6sxDleZL+2jNB40sdB625SMrNLVajI9I7Pms2Q4eJnR5hgO7sqai7KPpC v54YAH8vWXqjO5DIaz4Z+KNm7zXlzCJnEiQQWBYnJw14pky50r32kiRwtShO0/QX cwryl7L6tccw3lnReCNFpvTp/YjBszp5U0d70VnOVFc/YY1hk0rNKeM5mz77Pla4 rfCURPesGaisJNa4kRHIVVlb9yEK/I+iixa+kMV7ucqS4ku4rdyu2ahjkyBRZSNt eYpGkHr3DwVBDtlcqExB+T8sU7D3XFFwZJWkKJrfwaMBMEKcY0LZnUoLLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNruwAs9FZDTbtlkAuYwikoouSCJMB8GA1UdIwQY MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa57PhEE HQmH5LtTf0myTLwcNl5Myt9ghWC77WVYazne5H2XjstxSBcSD685meGMqbz+2p0E FJSQ1z3WaKAZzuTJY69ljrjbNA9nqiu9SdBGvo6Di05iL+S3OX1po9ys02TTSACP 2kcBPwfJH3iEnV6zhsEplF8Tz/szTxlXJr+TR/ab9hXBj5sG9ad02Yb9GIuArV0g o6b8z4jg5nLDwpcyaOfK0cTwRh0eM3c2YGhF4+xAyWVtkzB7rCGfOj42st0ydcQY DMEKtieTIXp4H21KOFD7qT6vgVilo2cuFWSgMTwYtyoopJFEiwJX3ws7R6oSyN/l nAo5CuF+L7UFfg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:05 2025 by rpki-client