This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json) Hash identifier: F0bIEk1vWCvHE4a7oD4fkNqeqTD2r30xfLBgJnceHUg= Subject key identifier: CB:C7:6B:8D:B0:AA:48:58:E4:F8:C4:BD:88:3A:FD:6C:E4:A4:DD:44 Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99 Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99 Certificate serial: 019AF1D1B22AEE89409B3713C0CD741F6E61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft Manifest number: 9C Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa (hash: 07a2Z1bP4ZM4lvBNnIbYpGRZq/i+QW1+w8DIMuAxBRM=) 2: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: atsZfguTyc9NHtNvSI+Cdsu92BXkfqufYMjmMpU6vL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b2:2a:ee:89:40:9b:37:13:c0:cd:74:1f:6e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=cbc76b8db0aa4858e4f8c4bd883afd6ce4a4dd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:51:e4:c7:3d:6a:5f:20:78:99:c2:b1:25: 3b:a4:f5:05:c0:81:0a:b7:80:66:64:9e:35:15:72: cd:76:b1:dd:3d:16:cf:46:7b:3b:ea:ce:a5:43:c3: 9c:27:c7:cc:83:a1:24:32:b8:b1:cc:80:61:ed:a4: e1:59:95:66:80:41:c8:03:84:59:ed:95:4f:e4:02: 9a:13:2e:0c:39:77:82:7e:a0:55:3a:06:df:b6:fa: 22:eb:8e:77:e2:80:1a:ae:11:c1:46:01:ea:98:bc: b2:a9:f2:6c:ee:a8:5f:90:89:07:2f:29:3e:0e:2c: 12:d2:0c:8d:1c:70:1b:de:52:0f:c5:04:e2:3c:ed: 0b:15:2e:59:5d:c0:93:76:01:33:7a:42:67:cf:4e: 7b:d2:55:c6:fe:94:3c:d6:26:06:e6:ba:81:ea:ed: 34:c1:40:00:5f:7e:99:85:5b:18:57:37:80:b3:b4: 47:2f:0f:cb:59:db:fa:a7:63:20:20:b7:55:70:e7: 35:02:96:18:d3:e0:8f:8b:06:4e:97:91:be:df:92: f5:a1:2b:29:d6:2b:a3:9f:7f:e9:bc:69:fb:f7:14: 1f:5d:5d:3a:2c:cb:a9:40:d6:0b:0b:a5:0f:54:12: 52:1c:46:75:8a:89:b2:fe:ec:52:89:9d:f6:b0:12: 23:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C7:6B:8D:B0:AA:48:58:E4:F8:C4:BD:88:3A:FD:6C:E4:A4:DD:44 X509v3 Authority Key Identifier: keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:64:9e:c7:ac:9b:9f:ca:77:12:2a:42:d6:39:ef:fb:13:00: df:56:b4:78:7b:94:04:81:5a:70:6d:95:49:90:90:fe:a1:1b: 90:92:df:e2:a8:19:2e:56:3e:d8:25:3a:ee:e3:88:1e:6f:8b: d5:bf:d3:f0:ba:7e:8e:7f:30:10:06:5c:b8:df:75:c7:a4:80: ff:8b:c2:59:01:b2:19:d0:0a:67:6f:67:fb:04:42:78:22:0b: d2:63:1a:ab:3e:f1:8a:8c:88:b8:c5:76:ab:53:80:68:58:50: cd:14:42:cc:ef:bb:d3:3f:65:b3:35:14:6e:4f:68:08:cb:98: 92:c7:97:0c:0a:73:d4:59:70:c8:f3:a3:06:69:5c:cd:79:76: a0:76:22:fd:b9:be:e0:09:ee:52:dc:9f:3d:45:9e:ca:c2:3c: f9:2a:24:89:68:40:25:31:42:e1:2b:b1:48:83:2c:3c:b5:bb: 9c:95:9e:7c:e5:b3:ff:42:8f:bf:51:2b:f7:e2:70:53:6d:a8: 83:2d:b5:9f:6b:e6:dd:b8:1f:b8:90:c7:22:2e:f2:b1:c5:39: 5e:a5:df:b8:a2:c1:03:f8:c0:09:46:77:a6:cd:bf:40:22:97: b7:8f:d2:05:5e:31:3c:e3:1c:50:71:ed:40:f8:63:b0:d9:20: b3:a5:7f:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bIq7olAmzcTwM10H25hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDEyMzNmMTEyYTRhMzQzNTU3NWEzYTIxOWRjY2MwMjEw NjhkOTkwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhjYmM3NmI4ZGIwYWE0ODU4ZTRmOGM0YmQ4ODNhZmQ2Y2U0YTRkZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAZR5Mc9al8geJnCsSU7pPUFwIEK t4BmZJ41FXLNdrHdPRbPRns76s6lQ8OcJ8fMg6EkMrixzIBh7aThWZVmgEHIA4RZ 7ZVP5AKaEy4MOXeCfqBVOgbftvoi64534oAarhHBRgHqmLyyqfJs7qhfkIkHLyk+ DiwS0gyNHHAb3lIPxQTiPO0LFS5ZXcCTdgEzekJnz0570lXG/pQ81iYG5rqB6u00 wUAAX36ZhVsYVzeAs7RHLw/LWdv6p2MgILdVcOc1ApYY0+CPiwZOl5G+35L1oSsp 1iujn3/pvGn79xQfXV06LMupQNYLC6UPVBJSHEZ1iomy/uxSiZ32sBIjxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvHa42wqkhY5PjEvYg6/WzkpN1EMB8GA1UdIwQY MBaAFGbRIz8RKko0NVdaOiGdzMAhBo2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgt ZmU0Y2QyNzEyMzA2LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgtZmU0Y2QyNzEyMzA2 LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmSex6yb n8p3EipC1jnv+xMA31a0eHuUBIFacG2VSZCQ/qEbkJLf4qgZLlY+2CU67uOIHm+L 1b/T8Lp+jn8wEAZcuN91x6SA/4vCWQGyGdAKZ29n+wRCeCIL0mMaqz7xioyIuMV2 q1OAaFhQzRRCzO+70z9lszUUbk9oCMuYkseXDApz1FlwyPOjBmlczXl2oHYi/bm+ 4AnuUtyfPUWeysI8+SokiWhAJTFC4SuxSIMsPLW7nJWefOWz/0KPv1Er9+JwU22o gy21n2vm3bgfuJDHIi7yscU5XqXfuKLBA/jACUZ3ps2/QCKXt4/SBV4xPOMcUHHt QPhjsNkgs6V/tA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:10 2025 by rpki-client