This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json) Hash identifier: qnouUlSaEzTk34YSwUul+bQ+DdUktBaA9kuRbCtK3vY= Subject key identifier: 1D:9D:04:CA:88:40:1A:C1:DF:34:63:56:24:5A:4F:A6:54:AC:57:73 Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a Certificate serial: 019AF2AD3DFAB66AEE47939BD456A39CCC5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft Manifest number: 12EE Signing time: Sat 06 Dec 2025 08:00:31 +0000 Manifest this update: Sat 06 Dec 2025 08:00:31 +0000 Manifest next update: Sun 07 Dec 2025 08:00:31 +0000 Files and hashes: 1: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: Znbzo2jTAuPJncKxdl3yqX/fssfZgTSraLmCTVmOZuI=) 2: uoOTDO3I8Ju9HNeb_RrUnxiXqMM.roa (hash: uWLf97UT0+0lxJvC3noTnvF0IVTFV5k9XbA2AIDmE6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3d:fa:b6:6a:ee:47:93:9b:d4:56:a3:9c:cc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a Validity Not Before: Dec 6 08:00:31 2025 GMT Not After : Dec 7 08:00:31 2025 GMT Subject: CN=1d9d04ca88401ac1df346356245a4fa654ac5773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:b0:1f:4e:8e:e1:a8:b5:95:58:b6:a3:dc: 17:b1:7a:c5:f5:ff:28:2a:b4:b5:1a:06:ed:bc:3b: f9:02:e2:f1:7c:6e:96:ff:78:b2:9a:c1:0f:b5:08: 40:0c:36:a6:0f:7e:9c:0d:72:7e:6b:9e:e1:63:f8: ba:d2:f5:12:9f:86:ca:cc:17:a2:cc:a6:9c:6a:16: 1b:89:56:be:5b:8d:78:c6:22:9a:68:0e:d7:98:f9: 76:7c:80:0e:aa:13:20:2b:39:4a:21:2a:39:80:5d: 85:3a:b6:69:a6:cd:7a:3c:d1:d7:4d:c8:b8:1f:7e: 86:23:42:91:d1:b3:10:28:38:50:55:5c:8a:98:00: 13:18:ff:19:a8:cc:bc:ac:17:6e:36:93:e8:e7:ae: 96:a2:a4:f6:50:0f:9c:30:33:76:ac:98:14:f6:10: d7:5e:a1:43:dc:a3:02:a5:ad:9e:be:eb:93:76:d7: 1a:59:da:68:b8:7d:71:41:31:69:9c:dd:0e:28:06: a5:f1:cc:72:ef:e5:13:91:e9:fa:ef:93:2a:5f:8a: 7c:af:17:f8:a3:76:f0:c4:8e:e1:ad:41:c7:f2:53: 65:ea:56:7d:79:ca:88:7d:0f:e3:57:39:d0:67:3e: b1:82:87:73:66:3e:27:b6:69:07:ca:57:cf:d4:f6: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:04:CA:88:40:1A:C1:DF:34:63:56:24:5A:4F:A6:54:AC:57:73 X509v3 Authority Key Identifier: keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bc:36:af:a8:ac:51:27:92:6f:af:06:e0:5d:52:b6:6d:dd: dc:79:f8:9e:e2:ac:8e:d6:84:4d:67:df:fe:6f:e9:7f:ab:73: 18:e8:85:3b:1b:66:94:3a:8f:0e:1d:94:b0:19:fd:59:06:11: ef:73:2f:a9:b4:86:70:96:1c:c3:d2:b1:1c:89:0d:fe:4d:4c: 24:6c:6e:97:02:ee:9f:c8:46:7a:ab:b0:d0:bb:6e:52:df:5e: b5:a4:4e:8b:5a:b0:7a:a2:62:40:7e:b5:ed:1b:a5:0b:53:30: e4:3d:6e:f9:19:c9:51:88:b8:46:6b:cc:c7:a8:a5:bb:de:83: dc:90:aa:06:5c:15:60:78:65:d3:92:98:7c:78:a7:b3:ec:cd: 63:f9:1b:62:19:f8:01:1c:3e:a8:a6:ec:42:0e:bc:9a:ea:69: 07:8f:66:2a:11:b5:bd:94:78:a7:c2:87:50:37:c1:a4:a4:b6: 81:e1:91:3f:62:52:1c:53:e3:da:8f:23:11:88:bb:eb:d5:35: dc:4a:0a:ff:14:87:c7:f9:ae:b7:c0:7e:94:4b:98:7f:fa:73: 44:80:e0:b8:f6:78:8b:71:da:6b:f9:8c:08:ce:c6:38:9b:fa: 9e:de:39:58:82:25:35:74:8e:ba:f8:b2:92:df:4b:f6:eb:ec: 12:78:f9:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrT36tmruR5Ob1FajnMxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDVlNWNkN2QwMzc1ZGUyNTI3NDA1NDY0MTJiODhiYTVi Y2ZhN2EwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD EygxZDlkMDRjYTg4NDAxYWMxZGYzNDYzNTYyNDVhNGZhNjU0YWM1NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3iwH06O4ai1lVi2o9wXsXrF9f8o KrS1GgbtvDv5AuLxfG6W/3iymsEPtQhADDamD36cDXJ+a57hY/i60vUSn4bKzBei zKacahYbiVa+W414xiKaaA7XmPl2fIAOqhMgKzlKISo5gF2FOrZpps16PNHXTci4 H36GI0KR0bMQKDhQVVyKmAATGP8ZqMy8rBduNpPo566WoqT2UA+cMDN2rJgU9hDX XqFD3KMCpa2evuuTdtcaWdpouH1xQTFpnN0OKAal8cxy7+UTken675MqX4p8rxf4 o3bwxI7hrUHH8lNl6lZ9ecqIfQ/jVznQZz6xgodzZj4ntmkHylfP1PaHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2dBMqIQBrB3zRjViRaT6ZUrFdzMB8GA1UdIwQY MBaAFGbV5c19A3XeJSdAVGQSuIulvPp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDkt ODZiOTBmMTk3ZWRlLzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDktODZiOTBmMTk3ZWRl LzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLw2r6is USeSb68G4F1Stm3d3Hn4nuKsjtaETWff/m/pf6tzGOiFOxtmlDqPDh2UsBn9WQYR 73MvqbSGcJYcw9KxHIkN/k1MJGxulwLun8hGequw0LtuUt9etaROi1qweqJiQH61 7RulC1Mw5D1u+RnJUYi4RmvMx6ilu96D3JCqBlwVYHhl05KYfHins+zNY/kbYhn4 ARw+qKbsQg68muppB49mKhG1vZR4p8KHUDfBpKS2geGRP2JSHFPj2o8jEYi769U1 3EoK/xSHx/mut8B+lEuYf/pzRIDguPZ4i3Haa/mMCM7GOJv6nt45WIIlNXSOuviy kt9L9uvsEnj5Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:50 2025 by rpki-client