This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json) Hash identifier: qtLlxtaiIybS5PAS4wjWFraUNR8VgsledOerCVm9lcI= Subject key identifier: 6A:48:5C:47:39:94:88:EC:05:BD:A6:CC:3C:BF:3B:7E:08:36:94:E2 Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Certificate serial: 019AF0BF6D74A4BC24D11CE9EF1D3BC22A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=) 2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=) 3: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (hash: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=) 4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: HgJ5/VZnllC2cT1yaZEiX8Tzv3szQwmvWZl+Qj5nH4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6d:74:a4:bc:24:d1:1c:e9:ef:1d:3b:c2:2a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=6a485c47399488ec05bda6cc3cbf3b7e083694e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:e2:73:f6:e2:c7:69:49:da:d7:ad:a8:b0: 0b:e4:8c:25:09:19:ea:84:69:75:e7:cb:6b:9e:fe: 26:69:35:a9:31:c4:cf:2a:a9:83:c1:88:02:1a:a4: 23:63:52:fb:25:b8:05:d5:72:1c:34:7f:5f:a2:11: ef:bb:9c:b1:6f:25:8e:a9:65:d7:ce:27:37:43:3c: 9d:c5:28:17:fc:cd:28:c7:9a:6a:de:8d:fd:7c:8a: 76:79:a0:c7:48:2a:80:69:90:b7:89:17:d0:a0:9a: 4e:6a:6e:27:6f:b1:65:64:95:1f:b5:60:6b:ab:6c: 4a:a7:73:f5:bd:24:ad:d6:ee:4b:98:58:bd:3d:fc: a9:15:4c:7e:ee:23:3d:d0:72:8e:d2:28:ca:6b:14: 85:39:31:9f:0e:fb:e5:47:2a:61:9e:b5:f6:02:da: 01:33:a2:f0:05:e0:9c:a3:88:14:e0:cd:b3:b3:d9: f2:d8:f8:3f:32:ae:48:57:4d:3f:59:8b:5e:b4:4d: 29:97:cc:2f:eb:0d:df:10:70:b8:39:e5:ef:f8:22: 6d:00:a5:2e:f0:a6:ab:bc:81:46:d7:60:fb:04:69: 18:b5:15:b3:2d:ce:6e:0b:48:a2:89:e5:35:93:df: bc:1c:fe:c9:f0:d9:be:37:cb:f0:78:14:b3:7b:39: d1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:48:5C:47:39:94:88:EC:05:BD:A6:CC:3C:BF:3B:7E:08:36:94:E2 X509v3 Authority Key Identifier: keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f0:1f:b9:b2:09:67:eb:53:ed:8e:57:f1:bc:61:15:38:53: 70:8c:b8:c1:73:51:64:d4:7d:9a:3f:80:a4:5e:37:9a:a8:19: 6b:66:e2:5d:f4:b8:3c:00:4c:d6:fa:7d:f9:a2:5d:59:80:eb: 14:94:75:df:57:97:32:94:42:e3:f9:29:00:d9:5c:5b:27:62: 79:32:6f:a1:88:8f:2e:8a:35:e3:7f:85:b2:21:cf:8c:07:59: b9:3b:48:1a:dc:62:88:9c:26:d4:1b:d1:fb:e9:22:9e:07:07: b0:6e:5d:9e:46:a4:8d:22:9b:9f:fa:95:d9:2d:0e:43:6a:65: 4b:69:1b:f9:91:64:ba:b6:41:1d:2f:4d:05:3c:35:2b:4e:07: b6:7f:54:b2:f7:04:c2:09:e3:c2:a9:55:7b:20:d3:19:ae:f0: 68:81:ae:0a:8c:0f:ce:8f:dd:36:4e:9f:0e:8a:94:8b:f6:73: 59:91:b9:af:72:53:51:77:3a:ce:54:57:3e:1b:31:d5:76:50: df:7e:3e:dc:2c:e2:b0:26:f7:e3:ea:51:cc:55:8b:7f:16:a1: 10:e2:5c:ea:47:b1:fa:3f:49:8b:24:6d:3f:8f:94:60:7e:2d: 41:42:07:b3:67:f8:4f:a6:2e:9d:44:e7:d4:1b:37:aa:d4:c4: 40:2f:12:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv210pLwk0Rzp7x07wiqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk OTRmNjEwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD Eyg2YTQ4NWM0NzM5OTQ4OGVjMDViZGE2Y2MzY2JmM2I3ZTA4MzY5NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tjic/bix2lJ2tetqLAL5IwlCRnq hGl158trnv4maTWpMcTPKqmDwYgCGqQjY1L7JbgF1XIcNH9fohHvu5yxbyWOqWXX zic3QzydxSgX/M0ox5pq3o39fIp2eaDHSCqAaZC3iRfQoJpOam4nb7FlZJUftWBr q2xKp3P1vSSt1u5LmFi9PfypFUx+7iM90HKO0ijKaxSFOTGfDvvlRyphnrX2AtoB M6LwBeCco4gU4M2zs9ny2Pg/Mq5IV00/WYtetE0pl8wv6w3fEHC4OeXv+CJtAKUu 8KarvIFG12D7BGkYtRWzLc5uC0iiieU1k9+8HP7J8Nm+N8vweBSzeznRIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpIXEc5lIjsBb2mzDy/O34INpTiMB8GA1UdIwQY MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt ZWY0YjY1OWVmZjhkLzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/AfubIJ Z+tT7Y5X8bxhFThTcIy4wXNRZNR9mj+ApF43mqgZa2biXfS4PABM1vp9+aJdWYDr FJR131eXMpRC4/kpANlcWydieTJvoYiPLoo143+FsiHPjAdZuTtIGtxiiJwm1BvR ++kingcHsG5dnkakjSKbn/qV2S0OQ2plS2kb+ZFkurZBHS9NBTw1K04Htn9UsvcE wgnjwqlVeyDTGa7waIGuCowPzo/dNk6fDoqUi/ZzWZG5r3JTUXc6zlRXPhsx1XZQ 334+3CzisCb34+pRzFWLfxahEOJc6kex+j9JiyRtP4+UYH4tQUIHs2f4T6YunUTn 1Bs3qtTEQC8SiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:31 2025 by rpki-client