This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft File: ZtM30zC6RO_P71VTVRMqaixpeDw.mft (raw, json) Hash identifier: DeaK+KPAtbIthBpWIZcLqZy6BwTPac93pqIdSAr6+qI= Subject key identifier: C3:2F:F2:AB:52:70:E4:47:68:1F:C6:F9:95:8B:03:07:E1:5F:73:F0 Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C Certificate issuer: /CN=66d337d330ba44efcfef555355132a6a2c69783c Certificate serial: 019AF0F5ECE27C7CC3BC06E85E0509726A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft Manifest number: 162D Signing time: Sat 06 Dec 2025 00:00:39 +0000 Manifest this update: Sat 06 Dec 2025 00:00:39 +0000 Manifest next update: Sun 07 Dec 2025 00:00:39 +0000 Files and hashes: 1: 1V6f1oV4KdVfTtXD9C3yVDxLM0g.roa (hash: QjrhXSoTLzzQB8pNCdz/57KujYqXNHGX03aljVkY0I8=) 2: LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa (hash: 0/1RbhG27PyHjDZyoP4IqnfgSwWfnZZl+ijORLw+Ejw=) 3: ZtM30zC6RO_P71VTVRMqaixpeDw.crl (hash: k4tVHujX0zv58/oHqzPendBXsXMGRna/zt7rLPaGsrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ec:e2:7c:7c:c3:bc:06:e8:5e:05:09:72:6a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c Validity Not Before: Dec 6 00:00:39 2025 GMT Not After : Dec 7 00:00:39 2025 GMT Subject: CN=c32ff2ab5270e447681fc6f9958b0307e15f73f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:69:0c:f6:88:b8:d2:b8:73:9d:44:4d:9c: 46:0c:ec:77:b6:ca:1a:9e:5c:27:72:fd:15:06:42: e4:dd:8c:bd:81:73:a1:27:d4:51:05:cd:3f:88:76: 61:65:ef:ea:74:16:3e:3c:f9:bb:cc:e3:e6:6a:98: 41:62:93:b8:fd:a7:60:6a:b9:8e:4c:09:c9:b9:d5: 5c:07:00:c8:48:93:30:7a:35:0a:b7:25:9e:3b:e6: 5e:af:9b:14:e3:46:55:7c:c0:6b:cb:4c:5c:02:bd: ce:e0:6b:45:82:86:bc:36:a4:22:cc:95:49:38:19: 1a:2c:96:df:64:da:b3:2c:fb:07:0c:39:aa:b1:b5: 58:f4:1f:ef:ad:5b:9d:ff:f1:ca:cf:07:19:b1:d0: bd:8e:22:f9:ee:5c:94:56:24:bd:52:e1:74:8a:df: 0e:ae:cf:c6:0e:61:f3:f4:81:cb:fc:95:40:ca:21: 09:30:2b:d1:d9:77:d8:67:17:f5:2a:61:79:16:4d: b1:0b:d5:31:37:0f:38:94:99:8f:05:9e:99:15:45: 5a:20:1d:2b:99:ca:ac:70:0a:52:90:a2:10:ec:45: 4d:75:b6:50:87:af:67:3d:bb:8a:f6:ce:08:9a:2e: 7e:22:b6:b0:98:a8:e7:62:c9:74:3a:7e:4e:44:e9: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2F:F2:AB:52:70:E4:47:68:1F:C6:F9:95:8B:03:07:E1:5F:73:F0 X509v3 Authority Key Identifier: keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:96:c1:72:21:df:77:ad:b0:a2:1e:8e:12:81:bb:16:9c: 19:d2:95:fc:d5:7f:f0:07:d0:19:35:ec:24:46:58:c4:2e:26: 28:26:fa:7e:6b:00:19:75:a9:d5:86:eb:51:b5:e6:18:69:39: c0:9c:00:fe:63:7d:09:45:e4:e9:f7:bb:e6:64:df:89:d3:1d: 4e:f3:f3:ed:f6:86:ac:a4:79:53:d7:83:3a:46:5a:9c:fa:fc: 84:1e:9e:a9:61:fc:df:9b:ec:7f:01:70:82:e8:04:3b:f9:42: 2f:ef:4b:09:6d:f7:c0:a3:00:12:50:8f:24:91:47:5d:50:6b: 0e:0d:35:ed:49:58:e6:cc:bc:db:46:7f:88:88:0a:69:37:27: 61:cf:12:b3:21:84:fb:65:57:49:c1:47:32:14:86:9b:81:43: 33:d1:29:59:02:64:bb:19:ae:94:6d:3a:75:64:28:ef:67:bf: d6:bc:49:55:e0:39:eb:c5:4a:b0:30:c0:50:c9:09:70:5d:64: 6e:82:8c:07:38:16:97:de:f2:eb:0d:5a:8d:64:07:50:ab:3a: 6b:93:0d:ad:c3:6f:33:24:16:c9:35:90:79:44:78:3f:05:41: f4:1d:62:34:57:07:a6:22:cc:52:61:3f:78:2c:7d:31:18:fc: 3e:4d:4f:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9ezifHzDvAboXgUJcmo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDMzN2QzMzBiYTQ0ZWZjZmVmNTU1MzU1MTMyYTZhMmM2 OTc4M2MwHhcNMjUxMjA2MDAwMDM5WhcNMjUxMjA3MDAwMDM5WjAzMTEwLwYDVQQD EyhjMzJmZjJhYjUyNzBlNDQ3NjgxZmM2Zjk5NThiMDMwN2UxNWY3M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTFpDPaIuNK4c51ETZxGDOx3tsoa nlwncv0VBkLk3Yy9gXOhJ9RRBc0/iHZhZe/qdBY+PPm7zOPmaphBYpO4/adgarmO TAnJudVcBwDISJMwejUKtyWeO+Zer5sU40ZVfMBry0xcAr3O4GtFgoa8NqQizJVJ OBkaLJbfZNqzLPsHDDmqsbVY9B/vrVud//HKzwcZsdC9jiL57lyUViS9UuF0it8O rs/GDmHz9IHL/JVAyiEJMCvR2XfYZxf1KmF5Fk2xC9UxNw84lJmPBZ6ZFUVaIB0r mcqscApSkKIQ7EVNdbZQh69nPbuK9s4Imi5+IrawmKjnYsl0On5OROl9EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMv8qtScORHaB/G+ZWLAwfhX3PwMB8GA1UdIwQY MBaAFGbTN9MwukTvz+9VU1UTKmosaXg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYt OGY1ZmM5MjEyNWRiLzEvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYtOGY1ZmM5MjEyNWRi LzEvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgWWwXIh 33etsKIejhKBuxacGdKV/NV/8AfQGTXsJEZYxC4mKCb6fmsAGXWp1YbrUbXmGGk5 wJwA/mN9CUXk6fe75mTfidMdTvPz7faGrKR5U9eDOkZanPr8hB6eqWH835vsfwFw gugEO/lCL+9LCW33wKMAElCPJJFHXVBrDg017UlY5sy820Z/iIgKaTcnYc8SsyGE +2VXScFHMhSGm4FDM9EpWQJkuxmulG06dWQo72e/1rxJVeA568VKsDDAUMkJcF1k boKMBzgWl97y6w1ajWQHUKs6a5MNrcNvMyQWyTWQeUR4PwVB9B1iNFcHpiLMUmE/ eCx9MRj8Pk1P9g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:58 2025 by rpki-client