This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json) Hash identifier: RSXTGuy2Jb8wLRhISgWJeUA5d8KQjULjsTjEsE012EM= Subject key identifier: 70:64:91:B5:44:C9:3E:48:C3:A7:83:2E:4D:5B:62:6B:CC:67:E3:6B Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Certificate serial: 019AF3523DDDAF9DC5DB41201F268F1C3FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 11:00:44 +0000 Manifest this update: Sat 06 Dec 2025 11:00:44 +0000 Manifest next update: Sun 07 Dec 2025 11:00:44 +0000 Files and hashes: 1: 1-uxvgJ33Ep83LKDPOWyK_TQkRjs.roa (hash: DSKQp+AywW/AiTaKMnd/V3/aO8KTX7yy5Li9SZt44DU=) 2: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=) 3: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=) 4: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=) 5: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: vIm3VNoEX23MI5xGXLCc83bRxzC4XndpUtaFLDbCYK8=) 6: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=) 7: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=) 8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=) 9: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:3d:dd:af:9d:c5:db:41:20:1f:26:8f:1c:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Validity Not Before: Dec 6 11:00:44 2025 GMT Not After : Dec 7 11:00:44 2025 GMT Subject: CN=706491b544c93e48c3a7832e4d5b626bcc67e36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:90:a8:3b:cb:7b:c6:d3:44:33:31:05:07: d0:ec:14:65:70:1b:b9:3b:97:51:98:f1:fb:f0:cc: 01:4b:bf:48:4d:d3:4b:47:f9:62:63:b9:c8:98:63: 22:b6:02:34:8c:c0:6a:99:3f:05:1d:c8:9b:ba:ff: 17:95:22:53:43:91:1a:93:39:73:ac:51:d9:74:aa: 0f:06:91:25:9e:81:98:82:c0:5c:f1:3c:4d:34:2b: 29:08:d0:83:7a:c9:1a:16:08:41:14:be:17:1a:64: 1d:b4:b5:fd:9e:f5:0a:4e:a7:92:50:81:01:f6:ec: 77:8b:4f:76:74:8d:e7:53:4b:1a:44:0c:01:2e:cf: 61:63:98:63:83:78:1d:c6:c9:f7:d0:30:56:9d:ca: 12:1f:17:c8:bc:a2:2b:8b:9b:b2:d5:89:09:6b:9d: 84:af:e6:a6:6d:32:9d:0a:2d:87:98:bf:19:db:bc: 33:a6:d3:0f:c2:22:6b:69:6f:07:84:34:78:8e:49: 1a:c7:37:10:b2:01:ac:f6:af:be:26:03:38:4b:23: 01:e0:9f:a6:4e:f3:dc:bd:b2:ca:14:72:57:34:36: 26:e8:7e:22:0e:dd:92:bb:1b:0b:ea:12:8c:c1:ee: 09:64:b1:bf:62:f6:db:54:b4:e7:fe:1e:15:3e:73: 48:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:64:91:B5:44:C9:3E:48:C3:A7:83:2E:4D:5B:62:6B:CC:67:E3:6B X509v3 Authority Key Identifier: keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ae:20:95:85:a5:10:87:87:f8:7a:1c:d3:88:2c:06:54:8c: 92:a7:49:a8:39:df:4d:34:ad:71:7b:83:83:e7:4b:5e:9e:b8: 2d:78:91:41:bc:a1:d4:fb:df:cf:c5:ee:54:07:60:c5:65:17: d5:63:8a:44:8f:8a:64:20:35:48:00:70:e1:98:33:bd:63:a7: e1:84:81:fc:25:60:a6:15:7a:d4:b6:6e:58:54:ab:0b:a6:de: 13:2e:b7:a2:9c:f0:48:f6:d9:f9:47:34:9b:2c:85:ec:69:8d: 03:fe:97:88:90:8f:7d:65:0e:14:39:d9:d8:02:8e:a2:e6:2c: 2f:e2:d7:80:0a:eb:0c:2b:d4:17:00:18:2b:d5:d1:02:63:f9: b7:43:c2:bc:a1:2c:4f:54:b2:5b:6b:31:49:83:0d:d4:53:f4: 9b:01:24:04:a8:bb:06:da:34:13:9b:ff:3c:71:e2:53:5e:68: c7:0e:5b:27:42:02:92:8f:fe:84:2e:f4:70:67:7c:75:52:e0: 7b:30:02:6f:18:b0:c7:57:60:d4:bb:29:e9:1e:d4:50:3b:65: b0:09:50:4a:76:ea:23:61:c2:68:0a:ff:3b:b9:13:2e:ee:a8: dc:ee:3a:62:79:19:81:ba:f9:4d:90:de:f4:22:6c:7c:45:ae: 57:fa:1b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUj3dr53F20EgHyaPHD/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw NjIxMGUwHhcNMjUxMjA2MTEwMDQ0WhcNMjUxMjA3MTEwMDQ0WjAzMTEwLwYDVQQD Eyg3MDY0OTFiNTQ0YzkzZTQ4YzNhNzgzMmU0ZDViNjI2YmNjNjdlMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdqQqDvLe8bTRDMxBQfQ7BRlcBu5 O5dRmPH78MwBS79ITdNLR/liY7nImGMitgI0jMBqmT8FHcibuv8XlSJTQ5Eakzlz rFHZdKoPBpElnoGYgsBc8TxNNCspCNCDeskaFghBFL4XGmQdtLX9nvUKTqeSUIEB 9ux3i092dI3nU0saRAwBLs9hY5hjg3gdxsn30DBWncoSHxfIvKIri5uy1YkJa52E r+ambTKdCi2HmL8Z27wzptMPwiJraW8HhDR4jkkaxzcQsgGs9q++JgM4SyMB4J+m TvPcvbLKFHJXNDYm6H4iDt2SuxsL6hKMwe4JZLG/YvbbVLTn/h4VPnNIaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBkkbVEyT5Iw6eDLk1bYmvMZ+NrMB8GA1UdIwQY MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt NDA0Nzk4NzA5NzZlLzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa4glYWl EIeH+Hoc04gsBlSMkqdJqDnfTTStcXuDg+dLXp64LXiRQbyh1Pvfz8XuVAdgxWUX 1WOKRI+KZCA1SABw4ZgzvWOn4YSB/CVgphV61LZuWFSrC6beEy63opzwSPbZ+Uc0 myyF7GmNA/6XiJCPfWUOFDnZ2AKOouYsL+LXgArrDCvUFwAYK9XRAmP5t0PCvKEs T1SyW2sxSYMN1FP0mwEkBKi7Bto0E5v/PHHiU15oxw5bJ0ICko/+hC70cGd8dVLg ezACbxiwx1dg1Lsp6R7UUDtlsAlQSnbqI2HCaAr/O7kTLu6o3O46YnkZgbr5TZDe 9CJsfEWuV/obHg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:39 2025 by rpki-client