This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json) Hash identifier: I+5UP5H2yqfXXdfOH5JYd3kh8MSCDB4/ijETa+783AQ= Subject key identifier: 22:8F:D2:06:34:02:97:2E:FB:07:D8:15:11:27:F0:FF:D9:9A:43:65 Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b Certificate serial: 019B0C3679BA2468582CEDC2C402E0B03847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft Manifest number: 15BF Signing time: Thu 11 Dec 2025 07:00:55 +0000 Manifest this update: Thu 11 Dec 2025 07:00:55 +0000 Manifest next update: Fri 12 Dec 2025 07:00:55 +0000 Files and hashes: 1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=) 2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: +ctynH1ZYxQLQncK3bKOLsiBoy4lPrF9JcsdicjR4hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:36:79:ba:24:68:58:2c:ed:c2:c4:02:e0:b0:38:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b Validity Not Before: Dec 11 07:00:55 2025 GMT Not After : Dec 12 07:00:55 2025 GMT Subject: CN=228fd2063402972efb07d8151127f0ffd99a4365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:1a:01:73:95:b2:64:3d:f2:a4:0f:de:c4: 7e:ff:e3:8a:80:9c:e2:03:9c:a8:fa:59:4b:a5:9b: 03:74:be:74:84:38:ef:de:2f:bd:a0:fe:21:80:df: b0:1a:b4:d3:87:37:d2:6f:c2:68:fb:7c:19:8e:21: ac:d2:70:62:ee:06:41:a5:f0:89:c3:29:b6:1d:63: 80:49:1a:0e:85:96:8b:b5:63:6d:d4:0e:45:e5:a9: a3:92:b0:de:13:11:02:50:c6:0e:7a:82:40:63:72: b6:e1:7a:93:a1:72:16:32:7b:c9:9f:d8:32:55:64: 96:e4:4f:93:c8:38:e9:35:d0:27:05:a2:05:3b:d1: 54:db:e6:51:0c:a7:de:4b:60:da:a9:54:1d:f8:88: a6:e2:37:61:42:c5:47:04:99:1d:0a:25:e3:cd:f6: e2:26:68:76:f5:8a:d3:bc:39:cb:d9:41:02:c1:13: 92:a2:62:d2:cf:dd:1e:f6:83:a5:9a:25:b1:89:0b: 82:13:6f:93:d4:b9:ad:43:31:e0:94:a0:17:78:ff: e5:43:6d:b2:47:ec:df:55:d5:b1:08:29:95:15:bd: ea:c1:90:a3:e5:0b:57:e1:32:f5:e7:89:06:3b:c4: 1b:2d:d2:75:9f:4c:d0:ba:8f:df:11:36:15:6a:56: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:D2:06:34:02:97:2E:FB:07:D8:15:11:27:F0:FF:D9:9A:43:65 X509v3 Authority Key Identifier: keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e0:70:c9:2c:f4:8e:33:ff:f7:27:18:75:70:fd:dc:f4:a5: 9a:8e:86:f9:d5:9c:95:79:cf:e4:35:83:3b:d4:9c:19:84:d4: be:4f:23:dd:bc:cf:18:61:a6:83:26:2a:57:49:9b:04:f8:42: 0d:d4:3b:70:91:e1:a3:4d:eb:ab:aa:77:a4:c7:88:e7:66:07: 2d:c3:05:59:45:f3:f2:c1:a7:25:ac:22:2b:8a:ba:d2:43:16: b6:44:d2:92:3c:82:52:2f:84:ff:a6:77:c4:7b:bf:a5:85:08: 5e:d2:2e:3e:f3:08:45:02:6c:c2:c9:cd:43:1f:46:a5:08:88: 52:2e:1a:91:f1:bd:a3:3b:5c:c4:aa:ea:6f:14:7b:ee:26:ea: cd:f9:c1:5f:52:8b:08:4b:eb:1b:53:5d:e6:67:37:dc:eb:70: dd:57:14:2d:b0:b1:bc:03:12:48:90:47:39:37:53:09:38:ae: ee:52:0a:16:08:9f:92:66:e5:42:27:f5:b0:b4:bd:60:ae:e3: ca:08:3c:5f:47:b9:ee:6e:fd:01:55:bb:03:38:b8:73:69:94: 7d:18:cf:4f:0f:05:4d:14:68:13:00:5b:70:92:d8:e6:44:b9: cd:3a:01:34:7e:b7:aa:46:23:eb:b2:cb:c6:97:e5:58:a5:c6: 6f:8e:86:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMNnm6JGhYLO3CxALgsDhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MjU5ZGVhM2U5Y2FlNmU4MTk1ODhjNWM5MTNmMDJkNDQx MDM5OGIwHhcNMjUxMjExMDcwMDU1WhcNMjUxMjEyMDcwMDU1WjAzMTEwLwYDVQQD EygyMjhmZDIwNjM0MDI5NzJlZmIwN2Q4MTUxMTI3ZjBmZmQ5OWE0MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoswaAXOVsmQ98qQP3sR+/+OKgJzi A5yo+llLpZsDdL50hDjv3i+9oP4hgN+wGrTThzfSb8Jo+3wZjiGs0nBi7gZBpfCJ wym2HWOASRoOhZaLtWNt1A5F5amjkrDeExECUMYOeoJAY3K24XqToXIWMnvJn9gy VWSW5E+TyDjpNdAnBaIFO9FU2+ZRDKfeS2DaqVQd+Iim4jdhQsVHBJkdCiXjzfbi Jmh29YrTvDnL2UECwROSomLSz90e9oOlmiWxiQuCE2+T1LmtQzHglKAXeP/lQ22y R+zfVdWxCCmVFb3qwZCj5QtX4TL154kGO8QbLdJ1n0zQuo/fETYValbaCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKP0gY0Apcu+wfYFREn8P/ZmkNlMB8GA1UdIwQY MBaAFGYlneo+nK5ugZWIxckT8C1EEDmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQt Y2JiZTMyNDJjMmJkLzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQtY2JiZTMyNDJjMmJk LzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOBwySz0 jjP/9ycYdXD93PSlmo6G+dWclXnP5DWDO9ScGYTUvk8j3bzPGGGmgyYqV0mbBPhC DdQ7cJHho03rq6p3pMeI52YHLcMFWUXz8sGnJawiK4q60kMWtkTSkjyCUi+E/6Z3 xHu/pYUIXtIuPvMIRQJswsnNQx9GpQiIUi4akfG9oztcxKrqbxR77ibqzfnBX1KL CEvrG1Nd5mc33Otw3VcULbCxvAMSSJBHOTdTCTiu7lIKFgifkmblQif1sLS9YK7j ygg8X0e57m79AVW7Azi4c2mUfRjPTw8FTRRoEwBbcJLY5kS5zToBNH63qkYj67LL xpflWKXGb46GnQ== -----END CERTIFICATE-----Generated at Thu Dec 11 15:58:27 2025 by rpki-client