This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json) Hash identifier: xMBFPm2pToUMEd7LUqNFalJCcv/la++A5iNmKVwt5KA= Subject key identifier: 75:53:F3:9D:9F:0B:9F:B3:50:16:E2:FE:FF:08:9E:48:98:7E:92:C5 Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Certificate serial: 019AF72F09614E415604F5ECF0F362239FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft Manifest number: 0DB1 Signing time: Sun 07 Dec 2025 05:00:46 +0000 Manifest this update: Sun 07 Dec 2025 05:00:46 +0000 Manifest next update: Mon 08 Dec 2025 05:00:46 +0000 Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=) 2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: 5lazNBePqmblaeY0b67W0CfB13avYywhPM253lD48Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:09:61:4e:41:56:04:f5:ec:f0:f3:62:23:9f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Validity Not Before: Dec 7 05:00:46 2025 GMT Not After : Dec 8 05:00:46 2025 GMT Subject: CN=7553f39d9f0b9fb35016e2feff089e48987e92c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:32:17:3b:08:77:52:18:e1:b1:e1:70:b9: c5:2a:7f:5a:fb:cc:75:45:77:4f:4f:11:68:7e:13: aa:96:5a:f7:fd:4f:27:7d:8a:86:e8:76:2a:58:4a: ee:f2:52:3d:f2:2c:a6:69:23:e6:9a:f7:24:65:ee: a7:75:2c:8e:71:91:8b:dc:c4:cc:d0:c1:60:70:60: cf:7c:35:3a:84:aa:9d:39:84:ff:96:60:9a:f1:30: bc:d7:b7:05:3c:5b:f0:e6:9b:36:50:ff:39:69:2e: d9:df:f6:6e:a3:73:db:e5:23:e7:ef:a4:d3:82:e2: c5:78:cc:1f:55:57:d7:03:ee:e9:7d:04:0f:c6:cb: a7:44:72:e1:b4:16:c1:5a:b7:7d:97:5d:32:de:7d: f7:c2:ee:04:3f:77:dd:08:d5:c1:50:6a:af:0b:bb: 71:37:35:11:f7:7c:c0:13:8a:79:2e:36:e4:6b:99: 81:6f:1f:08:8e:7e:cf:bc:96:26:12:fc:d0:0c:43: 56:6a:4c:9a:fe:e4:ae:32:97:6d:a8:57:58:2f:22: 51:2c:fb:1a:82:e0:0b:d0:e6:71:4c:20:73:5d:65: 56:23:70:6c:59:2b:89:c2:49:df:44:ad:70:3e:23: 04:c6:bf:89:e1:34:b4:08:a2:42:f3:72:38:56:27: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:53:F3:9D:9F:0B:9F:B3:50:16:E2:FE:FF:08:9E:48:98:7E:92:C5 X509v3 Authority Key Identifier: keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:59:d3:f8:8f:31:df:a6:b2:75:d0:57:37:fb:8f:1b:91:88: 5e:1d:fb:b1:34:65:5e:0e:68:4a:ea:82:0e:45:bd:22:50:d5: 2d:0f:a4:ec:13:22:d3:4c:6d:96:55:0b:65:2f:26:dc:b5:e8: 85:2c:57:33:ba:65:29:fa:d4:9b:6f:c2:38:d7:52:a8:a5:9e: ba:11:09:16:54:58:a0:19:ce:43:8b:68:f9:d6:10:fd:02:57: 79:71:43:2a:2e:03:c8:53:f9:c0:79:ab:7a:84:c0:44:aa:49: 76:e4:ce:29:be:c2:ef:26:cc:05:44:fb:41:b1:5b:74:e4:31: 92:c3:d9:61:f2:53:0f:79:e1:d3:74:c8:a4:c1:1b:70:0f:8a: a6:44:ab:b6:5c:66:da:c1:61:f8:bd:fa:e2:17:4f:41:bd:1f: 86:7c:b6:72:77:45:76:46:22:4e:2a:9a:14:56:9e:a9:38:64: b0:ef:7a:a3:72:7d:ba:bd:8b:2f:db:de:9a:d3:69:48:1d:75: 2e:18:ae:88:46:01:4c:4b:7e:5c:fe:cd:de:eb:8b:7d:da:81: 1f:ef:30:bc:72:63:c3:c5:bc:fc:8e:cf:dc:b5:ae:7c:4d:42: eb:26:eb:d7:0d:76:0d:11:22:a3:90:e5:99:79:5a:09:ad:5b: 6a:04:86:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LwlhTkFWBPXs8PNiI5/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDFmOGZiNmFkZDI3MmI0NmM0MDZiMTg4NWM5MzI5NWIx ZjRiOGMwHhcNMjUxMjA3MDUwMDQ2WhcNMjUxMjA4MDUwMDQ2WjAzMTEwLwYDVQQD Eyg3NTUzZjM5ZDlmMGI5ZmIzNTAxNmUyZmVmZjA4OWU0ODk4N2U5MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyIyFzsId1IY4bHhcLnFKn9a+8x1 RXdPTxFofhOqllr3/U8nfYqG6HYqWEru8lI98iymaSPmmvckZe6ndSyOcZGL3MTM 0MFgcGDPfDU6hKqdOYT/lmCa8TC817cFPFvw5ps2UP85aS7Z3/Zuo3Pb5SPn76TT guLFeMwfVVfXA+7pfQQPxsunRHLhtBbBWrd9l10y3n33wu4EP3fdCNXBUGqvC7tx NzUR93zAE4p5Ljbka5mBbx8Ijn7PvJYmEvzQDENWakya/uSuMpdtqFdYLyJRLPsa guAL0OZxTCBzXWVWI3BsWSuJwknfRK1wPiMExr+J4TS0CKJC83I4VidqNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVT852fC5+zUBbi/v8InkiYfpLFMB8GA1UdIwQY MBaAFGbR+Ptq3ScrRsQGsYhckylbH0uMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDkt YTU5ZDEzNTBkZWVjLzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDktYTU5ZDEzNTBkZWVj LzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1nT+I8x 36ayddBXN/uPG5GIXh37sTRlXg5oSuqCDkW9IlDVLQ+k7BMi00xtllULZS8m3LXo hSxXM7plKfrUm2/CONdSqKWeuhEJFlRYoBnOQ4to+dYQ/QJXeXFDKi4DyFP5wHmr eoTARKpJduTOKb7C7ybMBUT7QbFbdOQxksPZYfJTD3nh03TIpMEbcA+KpkSrtlxm 2sFh+L364hdPQb0fhny2cndFdkYiTiqaFFaeqThksO96o3J9ur2LL9vemtNpSB11 LhiuiEYBTEt+XP7N3uuLfdqBH+8wvHJjw8W8/I7P3LWufE1C6ybr1w12DREio5Dl mXlaCa1bagSGCw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:36 2025 by rpki-client