This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json) Hash identifier: A5mn6UQfjdASauAo9ZDf+CDxCxXVNYwCvIk+f+pEARs= Subject key identifier: 2B:42:68:BE:55:1D:70:4F:17:0F:E4:38:A5:FF:D2:5E:14:89:41:0B Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Certificate serial: 019AF464DA812A7D29AA0322644DBA3B3FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 16:00:41 +0000 Manifest this update: Sat 06 Dec 2025 16:00:41 +0000 Manifest next update: Sun 07 Dec 2025 16:00:41 +0000 Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=) 2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: AGlMtswLUwgOUMq2+woTQoh5/BaVtqcCEhkcvAOb8DA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:da:81:2a:7d:29:aa:03:22:64:4d:ba:3b:3f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Validity Not Before: Dec 6 16:00:41 2025 GMT Not After : Dec 7 16:00:41 2025 GMT Subject: CN=2b4268be551d704f170fe438a5ffd25e1489410b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:ce:f5:24:3d:ff:22:9d:87:fe:ef:2b:98: 9f:f6:58:d7:b5:84:ba:d8:7b:30:74:41:08:39:04: 72:87:f7:ac:70:18:11:76:1e:48:5f:0c:1c:0d:38: 4d:59:ea:23:a3:18:23:c3:a0:61:e2:e1:ec:b7:88: 57:49:49:9b:5d:67:80:81:de:2b:e4:09:26:39:c4: 37:c2:32:f0:3b:af:8e:e2:f3:b6:1c:9a:b7:04:fe: 25:ae:6d:7f:d2:0a:d8:de:97:e3:27:23:16:42:e3: 67:a0:68:05:de:9a:d4:ac:ae:c4:2b:f0:96:4e:e2: 58:a3:b9:8e:db:91:d2:9e:5a:e7:34:55:88:8d:ab: 32:15:fe:88:2b:2d:f7:a1:23:d4:b9:84:32:52:73: 66:6c:64:ea:cb:db:7c:11:e3:42:c3:7b:8c:1d:95: 3c:3a:3e:60:4c:42:4d:a8:e8:9f:6b:ab:d2:0e:71: 85:a9:c4:1c:7f:8c:06:0b:43:3c:f2:e4:ec:4b:c6: 0d:9e:d0:a7:19:97:24:f8:b5:a5:e8:ec:8f:23:f2: 92:50:d0:02:7a:b7:92:e5:3a:5f:37:55:d0:0d:3f: e0:3e:e4:f8:2f:9b:a7:6c:a7:fe:8c:94:72:28:08: f1:21:9a:4f:73:53:66:38:71:7a:4b:8a:2f:43:75: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:68:BE:55:1D:70:4F:17:0F:E4:38:A5:FF:D2:5E:14:89:41:0B X509v3 Authority Key Identifier: keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f3:3c:09:b1:d8:7a:9f:10:3b:6f:37:4a:a0:8f:74:b3:3e: a0:ca:71:c1:22:a7:21:53:13:6d:ff:5b:44:a1:87:5c:72:51: 5f:57:f8:11:1a:c6:85:a9:51:21:64:81:f5:e8:4d:45:fa:81: 84:1b:0f:05:97:7a:67:21:8f:88:0e:b2:09:59:d5:97:c7:1a: ec:90:4a:2c:b3:99:a4:17:da:94:c5:00:cf:e0:8a:c9:bf:62: e8:30:aa:1c:a6:95:af:11:05:dc:94:2e:75:0d:c2:8b:ab:ad: 9b:83:4e:70:51:89:23:4d:d4:3e:4d:fe:ef:6e:bd:9a:5e:cb: 83:9d:7d:3b:95:64:fb:15:3a:6d:e3:f1:12:c4:27:f8:18:ae: ab:5c:c7:e6:ec:22:a9:5e:27:b4:5b:9f:79:d6:df:90:b7:ac: 23:62:67:f0:ec:d6:fb:5f:71:fc:1f:a1:50:71:23:43:03:47: 0c:33:7b:9f:b3:c8:f2:57:0a:bb:ac:dc:34:6b:35:48:76:50: e3:71:cf:fa:dd:81:6c:6c:98:d1:a3:6d:50:86:2f:d0:5d:c3: 92:ca:d4:e8:48:b6:46:1e:f2:3f:6d:7b:02:36:af:cd:bd:18: 19:9f:bf:c9:6d:6f:13:8a:eb:31:16:19:d1:63:96:e2:01:0d: c2:72:6d:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNqBKn0pqgMiZE26Oz/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0 ZGY4MDYwHhcNMjUxMjA2MTYwMDQxWhcNMjUxMjA3MTYwMDQxWjAzMTEwLwYDVQQD EygyYjQyNjhiZTU1MWQ3MDRmMTcwZmU0MzhhNWZmZDI1ZTE0ODk0MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyErO9SQ9/yKdh/7vK5if9ljXtYS6 2HswdEEIOQRyh/escBgRdh5IXwwcDThNWeojoxgjw6Bh4uHst4hXSUmbXWeAgd4r 5AkmOcQ3wjLwO6+O4vO2HJq3BP4lrm1/0grY3pfjJyMWQuNnoGgF3prUrK7EK/CW TuJYo7mO25HSnlrnNFWIjasyFf6IKy33oSPUuYQyUnNmbGTqy9t8EeNCw3uMHZU8 Oj5gTEJNqOifa6vSDnGFqcQcf4wGC0M88uTsS8YNntCnGZck+LWl6OyPI/KSUNAC ereS5TpfN1XQDT/gPuT4L5unbKf+jJRyKAjxIZpPc1NmOHF6S4ovQ3W80wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtCaL5VHXBPFw/kOKX/0l4UiUELMB8GA1UdIwQY MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy/M8CbHY ep8QO283SqCPdLM+oMpxwSKnIVMTbf9bRKGHXHJRX1f4ERrGhalRIWSB9ehNRfqB hBsPBZd6ZyGPiA6yCVnVl8ca7JBKLLOZpBfalMUAz+CKyb9i6DCqHKaVrxEF3JQu dQ3Ci6utm4NOcFGJI03UPk3+7269ml7Lg519O5Vk+xU6bePxEsQn+Biuq1zH5uwi qV4ntFufedbfkLesI2Jn8OzW+19x/B+hUHEjQwNHDDN7n7PI8lcKu6zcNGs1SHZQ 43HP+t2BbGyY0aNtUIYv0F3DksrU6Ei2Rh7yP217Ajavzb0YGZ+/yW1vE4rrMRYZ 0WOW4gENwnJtig== -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:36 2025 by rpki-client