This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json) Hash identifier: HTctc3HeHcmAol2kihwVStwyKx0zCU10lSDt00qkgGE= Subject key identifier: 08:02:1B:1D:64:D6:5E:A9:4C:56:0B:0E:4E:85:35:BD:A1:16:45:36 Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Certificate serial: 019AF208E91CC86403BA2F4042CC95F4DCD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft Manifest number: 0E5F Signing time: Sat 06 Dec 2025 05:01:01 +0000 Manifest this update: Sat 06 Dec 2025 05:01:01 +0000 Manifest next update: Sun 07 Dec 2025 05:01:01 +0000 Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=) 2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: 9g+pj1Fp+rB9ZwHRxRKLt/xlhpGSBU9de8KXeSBPSZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e9:1c:c8:64:03:ba:2f:40:42:cc:95:f4:dc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Validity Not Before: Dec 6 05:01:01 2025 GMT Not After : Dec 7 05:01:01 2025 GMT Subject: CN=08021b1d64d65ea94c560b0e4e8535bda1164536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8c:74:75:a2:a9:28:e1:2c:17:95:97:d1:43: e1:1c:38:c5:d5:5b:f6:04:1b:15:99:8d:8b:3b:78: 4e:d2:76:64:ba:3d:52:17:e6:27:0e:a9:7b:69:d7: 24:f6:28:69:4c:20:93:7f:b3:53:4c:b4:e4:f8:50: 69:a5:90:e7:d7:ee:89:0f:32:bc:fd:9c:8f:32:09: 4c:a9:7f:27:18:fa:16:40:69:f0:28:e5:49:9f:12: 91:b7:48:6a:3e:5e:0d:4b:33:9c:1a:bf:05:94:e2: e6:80:69:93:84:01:13:83:2b:ed:ee:e6:b2:62:28: bc:18:3c:6c:5b:4a:ee:28:40:24:87:f7:36:b1:c8: 55:e8:17:ef:c3:df:e6:e2:b5:45:cc:09:1b:b3:e0: e6:de:05:9c:58:9a:b8:b2:f3:21:28:98:bd:27:98: eb:48:53:2c:5d:4f:ff:71:18:90:74:df:f0:ac:6e: 55:98:7b:95:51:6f:4a:9f:12:1e:66:a4:7d:8e:36: 4b:b6:fe:74:67:d1:53:fa:e2:e8:2a:20:79:51:99: 32:3a:96:12:35:cc:74:85:de:44:c6:db:00:ef:6b: 9c:bd:a2:fa:6e:fd:01:52:57:1d:07:f9:04:92:b1: 0f:f2:64:e9:6d:db:38:01:4d:98:c2:80:a0:b7:36: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:02:1B:1D:64:D6:5E:A9:4C:56:0B:0E:4E:85:35:BD:A1:16:45:36 X509v3 Authority Key Identifier: keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:36:66:eb:90:8a:2a:19:9f:39:22:d9:4f:e4:66:b7:0f:07: b9:a7:72:c0:90:ea:8d:a1:73:ca:9d:9f:48:a8:5e:ea:e9:5f: 1b:bb:6b:fa:cc:8f:c8:a1:06:82:6b:02:6b:1f:f5:44:c9:3e: 31:0d:c0:26:f6:6b:f4:54:f9:91:40:17:19:f3:02:56:ee:d1: 3e:e6:6f:74:01:fb:6d:4b:58:d8:1a:09:a6:13:52:b9:bc:ec: 5f:e4:1a:47:0b:97:09:ca:e4:76:f7:69:3d:03:d6:36:c7:ad: d0:b5:07:07:52:22:de:fd:b8:1f:4a:70:97:ed:ed:94:85:ef: 29:b8:b6:8c:ea:5f:2c:0a:be:9a:a0:a1:84:5d:44:fd:24:13: 7d:1e:40:f1:b4:09:b7:6e:cf:0e:09:ce:6c:79:b7:f9:98:99: ca:b8:e8:ba:f7:5a:f8:58:0a:03:99:4b:db:44:b5:30:c0:22: fc:6a:5a:85:c3:25:08:0d:8d:fa:91:99:c1:3e:2b:ed:df:25: 1c:b1:60:00:27:72:ae:a9:aa:82:ef:2a:f2:0f:ca:89:47:83: 69:fe:e1:46:ea:5b:26:19:b1:ba:b4:0b:b7:c2:4b:97:d9:23: b0:0b:be:9e:af:8d:c5:31:61:5d:ab:c0:3a:9d:5d:ca:3b:3a: 51:46:26:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOkcyGQDui9AQsyV9NzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0 Y2IxNzEwHhcNMjUxMjA2MDUwMTAxWhcNMjUxMjA3MDUwMTAxWjAzMTEwLwYDVQQD EygwODAyMWIxZDY0ZDY1ZWE5NGM1NjBiMGU0ZTg1MzViZGExMTY0NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIx0daKpKOEsF5WX0UPhHDjF1Vv2 BBsVmY2LO3hO0nZkuj1SF+YnDql7adck9ihpTCCTf7NTTLTk+FBppZDn1+6JDzK8 /ZyPMglMqX8nGPoWQGnwKOVJnxKRt0hqPl4NSzOcGr8FlOLmgGmThAETgyvt7uay Yii8GDxsW0ruKEAkh/c2schV6Bfvw9/m4rVFzAkbs+Dm3gWcWJq4svMhKJi9J5jr SFMsXU//cRiQdN/wrG5VmHuVUW9KnxIeZqR9jjZLtv50Z9FT+uLoKiB5UZkyOpYS Ncx0hd5ExtsA72ucvaL6bv0BUlcdB/kEkrEP8mTpbds4AU2YwoCgtza1+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgCGx1k1l6pTFYLDk6FNb2hFkU2MB8GA1UdIwQY MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTZm65CK KhmfOSLZT+Rmtw8HuadywJDqjaFzyp2fSKhe6ulfG7tr+syPyKEGgmsCax/1RMk+ MQ3AJvZr9FT5kUAXGfMCVu7RPuZvdAH7bUtY2BoJphNSubzsX+QaRwuXCcrkdvdp PQPWNset0LUHB1Ii3v24H0pwl+3tlIXvKbi2jOpfLAq+mqChhF1E/SQTfR5A8bQJ t27PDgnObHm3+ZiZyrjouvda+FgKA5lL20S1MMAi/GpahcMlCA2N+pGZwT4r7d8l HLFgACdyrqmqgu8q8g/KiUeDaf7hRupbJhmxurQLt8JLl9kjsAu+nq+NxTFhXavA Op1dyjs6UUYmdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:01 2025 by rpki-client