This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json) Hash identifier: PU6L+ZxpdhOw4fZiuCTxh3we/GYgR3wLewUqcX6PoNU= Subject key identifier: 25:5B:BA:5A:9F:B1:60:B4:EA:3B:DE:7C:37:87:30:B2:A6:95:61:32 Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01 Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01 Certificate serial: 019AF12DF461683BD1FA58EDA1C48367D27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=) 2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: 3li41FNps0gZaESW/7Xx3ED1fUElU4OYdjD34sLwlYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f4:61:68:3b:d1:fa:58:ed:a1:c4:83:67:d2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=255bba5a9fb160b4ea3bde7c378730b2a6956132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:a8:aa:f4:69:64:9f:e8:69:30:b0:4e:3f: f9:87:fa:f3:04:98:dd:d3:69:a8:db:c7:db:a8:c4: 4f:f1:79:86:a0:3f:a1:0f:c7:e1:26:9e:b4:f9:50: 89:2b:60:35:15:23:0b:15:bb:37:5d:69:a4:ae:2a: 10:48:04:a9:7e:a0:83:e6:b5:79:f1:5f:e2:1f:8b: 61:d5:79:30:4a:07:cf:a9:10:c7:10:6c:8e:7e:df: 97:6c:17:be:c3:6b:3b:58:cd:43:21:c3:1b:1a:a6: a2:b5:4c:b5:1a:d1:f8:24:a6:d3:46:70:ea:fb:e1: d8:a0:a7:db:68:4e:a3:ed:bf:27:bf:66:59:a6:60: ce:e4:60:d5:32:28:ce:de:73:73:af:3b:2e:0b:99: 7f:7c:2a:09:7d:5b:16:e7:00:6f:93:00:2a:74:e2: 05:51:33:d8:4a:48:60:1e:7f:dc:50:34:26:ca:0d: f3:30:89:1c:26:92:e5:df:d2:ab:3a:24:7f:fd:90: 03:e5:97:f4:be:4d:4e:9f:1a:ed:42:c8:d0:d6:de: f8:5b:7c:c3:e9:ae:c9:98:50:21:f6:de:eb:92:59: fc:dc:06:9d:c9:bb:32:75:81:47:e6:c7:cd:a5:9f: 40:cb:77:af:c6:52:a7:82:fc:a5:3c:1b:7a:6b:66: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:BA:5A:9F:B1:60:B4:EA:3B:DE:7C:37:87:30:B2:A6:95:61:32 X509v3 Authority Key Identifier: keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ae:55:2a:d9:87:90:4a:4a:60:7c:45:75:e3:aa:56:d8:3e: 6b:6a:64:a3:3e:07:2a:a4:fc:6d:83:30:42:aa:d6:d5:6b:39: cc:3b:5e:c6:93:ef:4a:1d:cd:49:65:7a:30:f4:09:bf:ba:c2: 61:a1:e1:2d:18:0a:54:a8:92:91:a8:fb:bf:25:93:83:39:90: e5:26:58:44:c2:e7:b0:77:ef:2e:82:3d:ad:cc:f4:da:79:a3: 4e:4a:39:30:4f:25:1b:6d:ce:a8:00:54:6f:c7:ae:b5:76:af: 92:97:60:2b:8b:24:51:90:e2:f6:00:32:b3:2e:50:1e:39:2f: e2:11:e7:6f:8c:46:a5:c5:f9:b5:12:d8:62:4b:af:3e:61:e7: 9c:8a:b4:50:b7:f2:ac:94:18:7a:b7:f5:35:90:a7:34:8c:25: 65:a8:3d:d3:a8:10:5c:dd:83:00:98:40:a0:cb:85:ba:4e:7b: 7e:64:a5:73:3d:5d:7a:e3:42:c1:22:62:d6:2a:ed:b2:57:17: c0:4e:ce:49:3f:62:d7:f2:fe:1d:84:68:a3:a9:fb:6f:b3:36: b2:8f:bc:c1:bd:ee:63:fe:c7:4b:58:05:41:c4:55:ba:31:ec: b2:7d:19:eb:0a:b8:40:85:b2:59:d9:71:41:09:83:73:03:73: 9c:94:de:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfRhaDvR+ljtocSDZ9J/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDk3NThiOGM4YzM3MzU4M2MwNTc1MTY2ZDYyMzQzNjAw YzdmMDEwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EygyNTViYmE1YTlmYjE2MGI0ZWEzYmRlN2MzNzg3MzBiMmE2OTU2MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKeoqvRpZJ/oaTCwTj/5h/rzBJjd 02mo28fbqMRP8XmGoD+hD8fhJp60+VCJK2A1FSMLFbs3XWmkrioQSASpfqCD5rV5 8V/iH4th1XkwSgfPqRDHEGyOft+XbBe+w2s7WM1DIcMbGqaitUy1GtH4JKbTRnDq ++HYoKfbaE6j7b8nv2ZZpmDO5GDVMijO3nNzrzsuC5l/fCoJfVsW5wBvkwAqdOIF UTPYSkhgHn/cUDQmyg3zMIkcJpLl39KrOiR//ZAD5Zf0vk1OnxrtQsjQ1t74W3zD 6a7JmFAh9t7rkln83AadybsydYFH5sfNpZ9Ay3evxlKngvylPBt6a2a/JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVbulqfsWC06jvefDeHMLKmlWEyMB8GA1UdIwQY MBaAFGbZdYuMjDc1g8BXUWbWI0NgDH8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWIt ZWU4ODMxOTI0YjMyLzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWItZWU4ODMxOTI0YjMy LzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK5VKtmH kEpKYHxFdeOqVtg+a2pkoz4HKqT8bYMwQqrW1Ws5zDtexpPvSh3NSWV6MPQJv7rC YaHhLRgKVKiSkaj7vyWTgzmQ5SZYRMLnsHfvLoI9rcz02nmjTko5ME8lG23OqABU b8eutXavkpdgK4skUZDi9gAysy5QHjkv4hHnb4xGpcX5tRLYYkuvPmHnnIq0ULfy rJQYerf1NZCnNIwlZag906gQXN2DAJhAoMuFuk57fmSlcz1deuNCwSJi1irtslcX wE7OST9i1/L+HYRoo6n7b7M2so+8wb3uY/7HS1gFQcRVujHssn0Z6wq4QIWyWdlx QQmDcwNznJTekQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:25 2025 by rpki-client