This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json) Hash identifier: 0h14TwDrFZC0chZSJVHyy1p1Fdms7EjqxZ2VycGKqkk= Subject key identifier: 8C:83:1E:F8:EF:CD:97:0F:63:47:66:1D:C7:B9:92:6C:AD:FA:B1:12 Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a Certificate serial: 019AF5783067D82436564F7B7A55CFB91D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 21:01:25 +0000 Manifest this update: Sat 06 Dec 2025 21:01:25 +0000 Manifest next update: Sun 07 Dec 2025 21:01:25 +0000 Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: QKq90/OjiIBqR3mi0QOI8RCmxUha7tSNyuE51uSAirA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:30:67:d8:24:36:56:4f:7b:7a:55:cf:b9:1d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a Validity Not Before: Dec 6 21:01:25 2025 GMT Not After : Dec 7 21:01:25 2025 GMT Subject: CN=8c831ef8efcd970f6347661dc7b9926cadfab112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:49:07:df:8b:2c:f5:04:7e:69:3c:68:5b: 4a:c8:ea:f3:5c:c5:a6:84:1f:9f:d0:9e:88:4b:95: cc:c1:20:85:1f:76:14:62:a3:b4:c8:9b:3b:23:2e: 1d:32:8d:99:b8:8f:11:bb:7e:c9:84:7d:89:50:63: 83:ab:c9:2f:b9:5b:bd:6a:29:bd:b2:50:4e:55:4c: ae:5a:c2:ca:b3:5f:eb:a3:fa:ee:85:d0:81:7c:53: 49:17:61:4b:12:c5:0c:2d:7f:1c:86:b6:5c:ba:ed: 52:66:78:a5:78:3d:74:7d:d2:fd:b4:08:c8:ff:27: cf:85:f4:36:23:bf:f2:7a:b4:e9:90:83:ce:b7:9f: 43:bd:f4:22:78:1a:9e:ab:42:2b:c7:43:60:05:8e: a9:fa:78:25:81:bf:46:16:ab:c0:5d:e2:d7:f1:fa: 80:e2:c7:76:60:8b:14:5c:8e:6b:5e:eb:22:5e:f4: 8f:f3:81:36:77:af:35:27:27:7b:22:d8:db:52:f1: f4:c6:ee:cf:b6:ad:c5:0d:88:27:44:1f:3b:5e:e8: 7e:99:d1:26:bf:8a:7f:64:7a:81:51:d6:a7:35:db: f6:74:f8:0a:d0:ed:b6:db:45:49:de:3c:c2:aa:da: 84:42:7f:59:cc:9a:04:ea:f0:82:81:00:52:63:8b: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:83:1E:F8:EF:CD:97:0F:63:47:66:1D:C7:B9:92:6C:AD:FA:B1:12 X509v3 Authority Key Identifier: keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a0:4a:8d:61:ff:dc:1e:54:7d:81:b5:bb:46:0f:96:fd:cb: e9:b9:86:00:8d:2e:f2:5f:64:ff:66:de:7c:4c:fc:86:ec:a2: ab:f4:fd:41:7b:7c:3b:3a:ba:f9:df:86:07:97:83:45:d6:b1: 20:b6:13:cc:17:04:a7:f3:aa:10:3c:08:d9:9d:7a:3f:fe:b5: 4b:58:00:74:ee:33:e6:e8:8a:c2:10:aa:74:69:20:6e:8d:cb: f7:f5:62:28:cd:a5:c7:a4:4b:c5:8a:63:43:09:85:30:43:18: cc:e2:f3:cf:d2:d4:e9:dd:7b:19:c1:64:2a:af:ea:6b:1a:81: 78:f0:ec:50:cf:1d:71:46:99:0c:cd:5c:3a:a8:15:b0:d8:c3: da:3b:e4:49:a8:86:79:d6:38:c0:07:d7:c8:b2:ce:07:7f:6d: 16:e1:2b:06:c9:34:89:d7:da:23:a9:f4:c9:4b:6d:c6:23:36: 36:02:fc:96:be:be:eb:93:f9:5f:c1:83:ad:39:3b:38:8f:63: 9f:8e:5e:7d:86:eb:53:39:10:98:81:07:8e:69:09:69:02:31: cb:90:0a:80:85:e3:32:56:04:45:77:64:b7:34:16:ff:7e:fe: 61:4f:6b:40:72:c7:72:68:de:96:8b:79:7f:5e:f8:91:8a:92: fb:69:23:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eDBn2CQ2Vk97elXPuR1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDYyZGJiOWVmODdhMmM2YjFhODc1ZTUyYWYxMzI4ODQ2 OTcyNWEwHhcNMjUxMjA2MjEwMTI1WhcNMjUxMjA3MjEwMTI1WjAzMTEwLwYDVQQD Eyg4YzgzMWVmOGVmY2Q5NzBmNjM0NzY2MWRjN2I5OTI2Y2FkZmFiMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyRJB9+LLPUEfmk8aFtKyOrzXMWm hB+f0J6IS5XMwSCFH3YUYqO0yJs7Iy4dMo2ZuI8Ru37JhH2JUGODq8kvuVu9aim9 slBOVUyuWsLKs1/ro/ruhdCBfFNJF2FLEsUMLX8chrZcuu1SZnileD10fdL9tAjI /yfPhfQ2I7/yerTpkIPOt59DvfQieBqeq0Irx0NgBY6p+nglgb9GFqvAXeLX8fqA 4sd2YIsUXI5rXusiXvSP84E2d681Jyd7ItjbUvH0xu7Ptq3FDYgnRB87Xuh+mdEm v4p/ZHqBUdanNdv2dPgK0O2220VJ3jzCqtqEQn9ZzJoE6vCCgQBSY4s95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyDHvjvzZcPY0dmHce5kmyt+rESMB8GA1UdIwQY MBaAFGbWLbue+HosaxqHXlKvEyiEaXJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2It OWY0MWNhY2U1MGFhLzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2ItOWY0MWNhY2U1MGFh LzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKBKjWH/ 3B5UfYG1u0YPlv3L6bmGAI0u8l9k/2befEz8huyiq/T9QXt8Ozq6+d+GB5eDRdax ILYTzBcEp/OqEDwI2Z16P/61S1gAdO4z5uiKwhCqdGkgbo3L9/ViKM2lx6RLxYpj QwmFMEMYzOLzz9LU6d17GcFkKq/qaxqBePDsUM8dcUaZDM1cOqgVsNjD2jvkSaiG edY4wAfXyLLOB39tFuErBsk0idfaI6n0yUttxiM2NgL8lr6+65P5X8GDrTk7OI9j n45efYbrUzkQmIEHjmkJaQIxy5AKgIXjMlYERXdktzQW/37+YU9rQHLHcmjelot5 f174kYqS+2kjcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:05 2025 by rpki-client