This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json) Hash identifier: jJvI7LTu+OdMahApwOJtV0ix76Y4YzF3bhwh7lI6sdM= Subject key identifier: CF:4E:2C:5C:80:C3:9A:A2:CD:79:F1:3D:00:97:F9:1F:33:7E:C4:7E Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Certificate serial: 019B3FED2A069E42C17A91D75CF0881EF677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 08:01:05 +0000 Manifest this update: Sun 21 Dec 2025 08:01:05 +0000 Manifest next update: Mon 22 Dec 2025 08:01:05 +0000 Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=) 2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=) 3: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (hash: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=) 4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: ly0KS2UZbXFDhcTVeXozttX95/vwRCtGgv/VxtORMIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:2a:06:9e:42:c1:7a:91:d7:5c:f0:88:1e:f6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61 Validity Not Before: Dec 21 08:01:05 2025 GMT Not After : Dec 22 08:01:05 2025 GMT Subject: CN=cf4e2c5c80c39aa2cd79f13d0097f91f337ec47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:06:bd:18:bc:98:52:e7:8e:e6:be:04:33: bc:33:31:70:f8:a0:ae:ac:31:30:a8:fc:8f:8e:52: 4f:c7:2c:c4:80:d3:aa:8f:a2:07:08:78:ae:77:ef: d4:5a:2a:57:6a:ee:ef:92:9c:2c:08:9c:e3:af:c7: ca:17:0d:ac:bf:67:0f:da:67:1d:c3:90:4d:7a:1e: db:4d:07:8d:aa:bd:ee:5e:be:d3:27:c7:9f:70:7f: e6:03:ea:39:c1:78:85:4e:bc:50:bd:f1:58:ab:8d: 18:22:f8:4d:fd:f3:99:e1:06:99:c9:5e:d8:81:27: e6:7f:94:43:46:33:6d:9a:ff:da:5c:3e:ae:c9:55: 95:74:79:66:4e:ea:1c:e5:67:d4:21:52:a5:00:de: ff:ce:20:01:86:88:fb:a7:b2:af:c6:d5:04:77:c2: 30:1f:50:29:72:b1:10:fe:95:e7:53:de:75:f0:a0: 42:25:50:53:1e:ee:a5:7a:b6:41:b1:22:a9:64:59: de:5d:d4:48:aa:b7:bf:11:48:d5:7a:8b:40:d6:8c: 83:0e:39:e1:08:41:f0:f8:ed:da:09:4f:b7:d6:60: 65:31:5e:df:ec:b7:e8:ad:95:6d:21:5f:f8:7d:91: 6a:57:74:ac:cc:94:41:ae:85:45:0c:e5:18:9c:6c: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4E:2C:5C:80:C3:9A:A2:CD:79:F1:3D:00:97:F9:1F:33:7E:C4:7E X509v3 Authority Key Identifier: keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:27:f7:aa:b2:ab:70:2c:51:c4:a9:a7:65:60:6a:1c:49:7a: 8f:e3:c7:ed:15:1c:64:e0:3b:0d:31:2a:02:15:7e:9e:a6:0a: 5b:b1:01:59:5c:45:46:24:44:c9:28:ab:29:0f:aa:f0:74:13: 90:7c:30:22:ff:c7:f6:45:64:cf:e3:99:9e:2b:2d:77:2b:c4: fc:c0:f0:a4:57:39:ad:3f:54:95:18:46:13:6b:ca:02:ca:34: 38:71:1c:0a:f3:a4:57:91:de:1c:47:65:3b:b4:fc:fa:d2:b1: 11:b9:60:d3:1a:6d:32:15:24:62:72:17:71:7c:3f:eb:61:85: 89:ad:47:fa:d7:26:19:a6:be:04:51:06:f8:14:c7:de:91:c1: 4e:a7:8c:17:4b:47:d6:03:c5:4f:1c:6e:7e:36:ea:5c:64:36: 63:0b:d1:25:2c:6c:fc:ae:6d:db:44:80:15:dd:95:ca:1f:d6: ec:9b:df:b7:54:0d:12:a9:86:03:2c:38:7b:3b:00:60:4b:c2: 51:1f:eb:0d:c4:f7:7a:df:d8:8e:15:21:00:e7:9a:7f:20:9e: 6f:ce:88:fa:5c:40:52:35:04:47:9b:a5:6e:e3:1e:53:50:4f: 50:5d:19:fd:dd:2b:43:ab:55:59:47:d1:90:5e:cb:a5:b6:0c: bf:ac:ba:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7SoGnkLBepHXXPCIHvZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk OTRmNjEwHhcNMjUxMjIxMDgwMTA1WhcNMjUxMjIyMDgwMTA1WjAzMTEwLwYDVQQD EyhjZjRlMmM1YzgwYzM5YWEyY2Q3OWYxM2QwMDk3ZjkxZjMzN2VjNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hkGvRi8mFLnjua+BDO8MzFw+KCu rDEwqPyPjlJPxyzEgNOqj6IHCHiud+/UWipXau7vkpwsCJzjr8fKFw2sv2cP2mcd w5BNeh7bTQeNqr3uXr7TJ8efcH/mA+o5wXiFTrxQvfFYq40YIvhN/fOZ4QaZyV7Y gSfmf5RDRjNtmv/aXD6uyVWVdHlmTuoc5WfUIVKlAN7/ziABhoj7p7KvxtUEd8Iw H1ApcrEQ/pXnU9518KBCJVBTHu6lerZBsSKpZFneXdRIqre/EUjVeotA1oyDDjnh CEHw+O3aCU+31mBlMV7f7LforZVtIV/4fZFqV3SszJRBroVFDOUYnGzWLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9OLFyAw5qizXnxPQCX+R8zfsR+MB8GA1UdIwQY MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt ZWY0YjY1OWVmZjhkLzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeif3qrKr cCxRxKmnZWBqHEl6j+PH7RUcZOA7DTEqAhV+nqYKW7EBWVxFRiREySirKQ+q8HQT kHwwIv/H9kVkz+OZnistdyvE/MDwpFc5rT9UlRhGE2vKAso0OHEcCvOkV5HeHEdl O7T8+tKxEblg0xptMhUkYnIXcXw/62GFia1H+tcmGaa+BFEG+BTH3pHBTqeMF0tH 1gPFTxxufjbqXGQ2YwvRJSxs/K5t20SAFd2Vyh/W7Jvft1QNEqmGAyw4ezsAYEvC UR/rDcT3et/YjhUhAOeafyCeb86I+lxAUjUER5ulbuMeU1BPUF0Z/d0rQ6tVWUfR kF7LpbYMv6y6Qg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:23:43 2025 by rpki-client