This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json) Hash identifier: Hysme6AUYGULRz97LXbRfppwsjCCaiSCfbovWBBcm9Q= Subject key identifier: B0:66:E9:1F:4A:8A:2F:45:CF:95:40:2D:34:AB:C9:E6:B2:F7:73:11 Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c Certificate serial: 019AF50A8F55949A94C3A30610D97B23D72A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft Manifest number: 1449 Signing time: Sat 06 Dec 2025 19:01:40 +0000 Manifest this update: Sat 06 Dec 2025 19:01:40 +0000 Manifest next update: Sun 07 Dec 2025 19:01:40 +0000 Files and hashes: 1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: 1RfbewMOQVX+vu6FrL5W4cw+LaUYXG2xx0ZVBVlUp+w=) 2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:8f:55:94:9a:94:c3:a3:06:10:d9:7b:23:d7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c Validity Not Before: Dec 6 19:01:40 2025 GMT Not After : Dec 7 19:01:40 2025 GMT Subject: CN=b066e91f4a8a2f45cf95402d34abc9e6b2f77311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:2e:f4:f9:e2:b3:e1:0d:99:bb:92:f7:00: 07:f2:d3:02:c9:51:ff:1d:3b:48:88:65:0e:b9:e3: dc:39:f6:b0:fa:48:91:39:f8:76:02:57:41:ae:ef: 99:7d:b5:b8:3b:74:7c:ad:57:9d:72:6e:70:cd:b9: 0d:be:e6:e5:c1:e0:4a:d0:52:b4:8d:c3:1f:ad:ba: 5f:f3:2a:53:73:ff:76:f9:c0:c1:ed:86:0c:bc:e9: 78:79:dd:92:96:40:b5:99:67:31:75:d4:f6:b0:ea: 6a:e8:01:f3:aa:c8:91:15:a0:86:97:cd:75:de:27: 7e:3a:b0:d2:c4:97:08:13:f4:7b:71:88:d4:15:0c: 2a:9f:3b:ff:3e:d1:d7:f7:be:97:bc:5c:c7:3f:86: d9:f9:f4:f9:2f:8b:c5:3f:62:4a:e8:4d:a8:e9:df: b4:da:0f:ee:d3:4a:4e:27:ac:44:9c:ff:eb:5c:25: 9a:ff:52:19:83:a8:e1:d8:42:21:23:43:69:2c:ab: ca:6e:3e:cb:87:f7:2f:00:64:15:dc:5b:0c:c8:19: cb:49:e2:d7:b6:a9:a6:33:9e:84:a4:48:46:14:4b: 7d:5c:0e:c0:9f:c6:16:29:65:51:9b:28:75:01:90: 4b:70:db:ca:3c:91:04:5e:53:0d:1d:84:dc:76:fd: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:E9:1F:4A:8A:2F:45:CF:95:40:2D:34:AB:C9:E6:B2:F7:73:11 X509v3 Authority Key Identifier: keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f5:68:2e:65:06:9e:4c:ea:bd:0a:32:5b:d4:32:f6:c8:68: 25:ff:f2:12:c3:ed:38:e9:93:c8:85:2c:08:b8:46:bf:a5:cd: 8b:1e:89:40:b5:6c:d5:45:3a:85:46:27:bd:ef:22:38:ba:53: ef:e4:21:db:91:b6:f2:8d:46:65:c2:95:56:26:01:64:6a:0d: 44:b6:55:53:62:ee:1c:b3:ae:fe:15:3b:ef:9b:30:9e:14:b4: 72:7a:41:74:ea:e8:a2:70:f0:80:ab:90:0c:50:dd:e4:b6:56: 3e:82:00:13:9b:7e:fe:86:2d:20:67:a2:3e:c9:c0:08:55:b3: a6:82:cc:8a:09:1a:2a:26:12:8c:fe:49:eb:d5:35:c8:d6:78: ac:74:1a:10:68:46:fa:8d:51:76:93:f9:a3:f9:80:b4:be:27: ff:af:bf:3e:5f:70:f5:fd:42:7d:e8:94:d9:50:11:78:b4:1e: c5:01:15:94:87:be:ed:90:34:99:35:44:77:b3:eb:47:7e:1d: 17:e4:17:4a:1f:c2:d6:15:cc:bc:13:55:b9:ad:2f:78:08:a1: 91:a8:44:1b:49:e3:df:eb:21:7d:b7:df:0e:fe:da:c6:98:ef: c1:c2:5f:a6:76:f4:63:5c:5a:66:9a:ea:0d:30:b2:96:43:5f: 5c:9a:b6:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Co9VlJqUw6MGENl7I9cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MDNlZDRjNzg0NTQyNTAxMTZmMTA1ZWI2OTYxZGMyOWUx ZGJjNmMwHhcNMjUxMjA2MTkwMTQwWhcNMjUxMjA3MTkwMTQwWjAzMTEwLwYDVQQD EyhiMDY2ZTkxZjRhOGEyZjQ1Y2Y5NTQwMmQzNGFiYzllNmIyZjc3MzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL8u9Pnis+ENmbuS9wAH8tMCyVH/ HTtIiGUOuePcOfaw+kiROfh2AldBru+ZfbW4O3R8rVedcm5wzbkNvublweBK0FK0 jcMfrbpf8ypTc/92+cDB7YYMvOl4ed2SlkC1mWcxddT2sOpq6AHzqsiRFaCGl811 3id+OrDSxJcIE/R7cYjUFQwqnzv/PtHX976XvFzHP4bZ+fT5L4vFP2JK6E2o6d+0 2g/u00pOJ6xEnP/rXCWa/1IZg6jh2EIhI0NpLKvKbj7Lh/cvAGQV3FsMyBnLSeLX tqmmM56EpEhGFEt9XA7An8YWKWVRmyh1AZBLcNvKPJEEXlMNHYTcdv10hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBm6R9Kii9Fz5VALTSryeay93MRMB8GA1UdIwQY MBaAFGYD7Ux4RUJQEW8QXraWHcKeHbxsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEt ZDI3NjNjMDA3NzUyLzEvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEtZDI3NjNjMDA3NzUy LzEvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefVoLmUG nkzqvQoyW9Qy9shoJf/yEsPtOOmTyIUsCLhGv6XNix6JQLVs1UU6hUYnve8iOLpT 7+Qh25G28o1GZcKVViYBZGoNRLZVU2LuHLOu/hU775swnhS0cnpBdOroonDwgKuQ DFDd5LZWPoIAE5t+/oYtIGeiPsnACFWzpoLMigkaKiYSjP5J69U1yNZ4rHQaEGhG +o1RdpP5o/mAtL4n/6+/Pl9w9f1CfeiU2VAReLQexQEVlIe+7ZA0mTVEd7PrR34d F+QXSh/C1hXMvBNVua0veAihkahEG0nj3+shfbffDv7axpjvwcJfpnb0Y1xaZprq DTCylkNfXJq2rw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:39 2025 by rpki-client