This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json) Hash identifier: +bVvjKEzAxHaTqVSrJyusVMCeNKc9pcjQJ3MuwXPyZk= Subject key identifier: 50:CE:0F:74:10:C0:5B:33:8A:F6:8D:33:E5:5F:A7:7D:D9:53:37:30 Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12 Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12 Certificate serial: 019B390F6ECB081B6C2A3356002AC92437D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft Manifest number: 1782 Signing time: Sat 20 Dec 2025 00:01:11 +0000 Manifest this update: Sat 20 Dec 2025 00:01:11 +0000 Manifest next update: Sun 21 Dec 2025 00:01:11 +0000 Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: CbAxbAGmVG9fdO53lEix9GuFPOPqBFnUgqw3ugxZKA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:6e:cb:08:1b:6c:2a:33:56:00:2a:c9:24:37:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12 Validity Not Before: Dec 20 00:01:11 2025 GMT Not After : Dec 21 00:01:11 2025 GMT Subject: CN=50ce0f7410c05b338af68d33e55fa77dd9533730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:20:0e:a1:c9:bf:dd:ff:38:fa:90:d7:49:47: 10:ea:d4:09:61:08:04:44:74:b0:de:5a:82:c7:c0: eb:63:89:cb:41:43:c0:9e:d3:50:8a:c8:b0:e5:d6: 14:42:9d:80:9d:58:67:8b:69:4f:53:13:0f:7b:9d: 05:c4:6b:2a:5a:ad:8b:5a:72:e7:27:30:1a:00:f4: be:9d:b7:79:c9:eb:52:d5:47:53:8d:ea:a3:2e:73: 7a:9c:f7:c7:b1:d1:10:75:ae:10:49:a5:7c:19:cb: c2:65:fd:68:a3:23:3a:a2:a5:b5:ea:ae:72:44:d6: 79:83:ee:59:52:59:db:ec:db:45:01:76:03:4c:ce: 94:2d:03:84:02:d8:b9:76:75:39:ae:9d:e1:1c:3a: 7f:67:36:79:10:23:9e:6e:5d:26:6a:bb:24:44:28: 0e:8b:18:07:40:bd:f2:eb:37:ed:23:47:71:0f:1d: ee:22:31:7d:66:59:7d:da:67:a8:7c:d6:70:03:90: 76:41:ef:9e:90:03:69:44:54:73:3d:b9:64:72:c6: d0:00:18:a2:55:fe:83:f5:94:8a:2a:d6:7e:19:e0: 07:3d:96:7e:18:52:aa:df:b7:63:59:0c:5f:33:5f: 01:ab:48:1d:6d:22:fa:14:81:a7:cf:8b:e6:d4:31: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CE:0F:74:10:C0:5B:33:8A:F6:8D:33:E5:5F:A7:7D:D9:53:37:30 X509v3 Authority Key Identifier: keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:db:ef:5d:f7:94:e1:b4:86:e8:50:16:31:bc:6e:d5:88:8b: 4e:44:a8:94:56:08:80:79:34:29:c8:03:6b:dd:7b:95:33:33: 53:fb:bc:73:90:c5:2a:a3:54:0d:fe:fc:fe:5c:71:2a:42:3e: 42:9d:2f:cb:4f:f5:77:cb:6a:58:5f:c3:af:ff:52:ce:b3:69: bb:b6:36:22:08:0b:5b:98:16:d9:ee:14:00:31:20:99:da:a7: 54:66:a5:85:d8:c1:06:c3:8e:06:39:d2:c2:59:3c:ce:41:1f: 07:67:33:6b:40:6f:6c:f8:f8:f7:8b:89:0d:96:91:77:95:82: dd:53:77:e9:15:ff:7c:96:11:fe:66:86:6c:25:0c:2e:ff:08: ea:ec:c3:54:48:8b:4e:f3:a6:e1:48:36:c0:59:22:56:e1:c4: ff:75:6e:62:91:ae:ba:eb:a6:1c:25:92:ae:d6:2b:37:cf:37: ee:ee:24:94:9f:4d:27:86:33:13:c1:de:86:aa:b0:df:3b:ff: 39:2e:fb:8c:c4:71:ea:49:8b:29:21:75:7f:c2:36:4c:d6:62: 48:f3:0a:1b:15:1d:ca:ad:33:bc:e8:25:9e:bf:e1:9d:1a:34: 98:a0:c0:20:b2:e9:06:5b:8e:b2:ca:e9:3b:92:2d:93:be:ea: d3:01:44:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D27LCBtsKjNWACrJJDfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0 YThiMTIwHhcNMjUxMjIwMDAwMTExWhcNMjUxMjIxMDAwMTExWjAzMTEwLwYDVQQD Eyg1MGNlMGY3NDEwYzA1YjMzOGFmNjhkMzNlNTVmYTc3ZGQ5NTMzNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyAOocm/3f84+pDXSUcQ6tQJYQgE RHSw3lqCx8DrY4nLQUPAntNQisiw5dYUQp2AnVhni2lPUxMPe50FxGsqWq2LWnLn JzAaAPS+nbd5yetS1UdTjeqjLnN6nPfHsdEQda4QSaV8GcvCZf1ooyM6oqW16q5y RNZ5g+5ZUlnb7NtFAXYDTM6ULQOEAti5dnU5rp3hHDp/ZzZ5ECOebl0marskRCgO ixgHQL3y6zftI0dxDx3uIjF9Zll92meofNZwA5B2Qe+ekANpRFRzPblkcsbQABii Vf6D9ZSKKtZ+GeAHPZZ+GFKq37djWQxfM18Bq0gdbSL6FIGnz4vm1DGGlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDOD3QQwFszivaNM+Vfp33ZUzcwMB8GA1UdIwQY MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtvvXfeU 4bSG6FAWMbxu1YiLTkSolFYIgHk0KcgDa917lTMzU/u8c5DFKqNUDf78/lxxKkI+ Qp0vy0/1d8tqWF/Dr/9SzrNpu7Y2IggLW5gW2e4UADEgmdqnVGalhdjBBsOOBjnS wlk8zkEfB2cza0BvbPj494uJDZaRd5WC3VN36RX/fJYR/maGbCUMLv8I6uzDVEiL TvOm4Ug2wFkiVuHE/3VuYpGuuuumHCWSrtYrN8837u4klJ9NJ4YzE8Hehqqw3zv/ OS77jMRx6kmLKSF1f8I2TNZiSPMKGxUdyq0zvOglnr/hnRo0mKDAILLpBluOssrp O5Itk77q0wFEFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:56 2025 by rpki-client