This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json) Hash identifier: fvKdbjtXVgExvw447nft1Gwb1BPlh8uCdGyh2PZwsp8= Subject key identifier: B0:FC:D5:D5:0F:44:7F:8F:8B:64:04:77:FE:1E:0A:C0:16:95:91:11 Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06 Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06 Certificate serial: 019B43250D8554912B9F3CF15A9C12C04EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft Manifest number: 105F Signing time: Sun 21 Dec 2025 23:01:00 +0000 Manifest this update: Sun 21 Dec 2025 23:01:00 +0000 Manifest next update: Mon 22 Dec 2025 23:01:00 +0000 Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: 5DVUDbqPXUxcRb7PykxO2BXDdZXeEeYLW4LBElClG+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:0d:85:54:91:2b:9f:3c:f1:5a:9c:12:c0:4e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06 Validity Not Before: Dec 21 23:01:00 2025 GMT Not After : Dec 22 23:01:00 2025 GMT Subject: CN=b0fcd5d50f447f8f8b640477fe1e0ac016959111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:62:4c:4d:1d:b0:a5:2a:38:0a:b6:5a:39: 78:fe:ff:ed:f8:46:ce:07:ea:01:fe:e7:37:62:1f: 06:4f:d4:2f:77:d6:e4:62:cf:c7:df:cb:e1:ad:12: 7f:bf:71:26:bd:63:71:c5:20:bc:bb:5e:bd:b5:dd: 3b:ac:a0:5d:66:54:d0:b9:3d:6c:57:6f:83:8b:b0: 50:f0:b1:81:2a:8c:d6:d9:f3:d9:b5:ca:85:f5:f4: f0:65:bd:2b:20:f0:3f:a5:45:fd:51:74:44:a1:10: 6b:7b:f7:ef:2d:62:9c:52:a1:cb:f8:97:99:72:88: 65:76:dd:dd:e1:db:b6:95:a4:8d:a9:77:da:f3:7c: cf:c9:f9:02:75:b9:af:da:88:42:24:8e:70:51:f2: d4:d1:d3:4f:0e:ed:74:17:a3:7c:a5:3e:70:6b:fd: 3d:d5:ce:88:4a:ed:06:cb:39:89:5d:12:b9:c4:40: 9c:2a:8c:eb:67:fc:23:e1:1f:28:96:03:b7:a7:58: e9:c1:6a:e9:c0:11:35:b6:86:48:c7:46:1c:80:e9: 68:73:c4:ca:80:32:0d:0a:c6:63:88:de:af:f7:44: 93:e7:78:e2:13:76:45:35:b8:71:44:01:71:3c:5d: 3a:b9:2b:c2:4a:e8:1d:33:ac:33:c4:cb:b7:ce:5a: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FC:D5:D5:0F:44:7F:8F:8B:64:04:77:FE:1E:0A:C0:16:95:91:11 X509v3 Authority Key Identifier: keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ab:71:f3:35:00:53:07:c7:00:f2:1d:bd:f0:15:bd:89:3c: 52:5d:e4:05:6e:19:01:d2:9c:78:76:ff:f9:66:7c:c4:85:7e: 2f:21:25:8b:05:b1:0b:9f:19:e7:f9:5e:17:fd:bb:54:d3:fb: 96:03:3d:12:ab:1d:48:11:f0:3b:28:d2:2d:5d:37:21:7c:c4: 6d:27:d8:b7:71:8b:02:de:0b:61:e5:03:65:20:32:66:d6:af: 83:70:3f:18:2a:57:12:60:a7:a9:88:bb:7d:f7:e5:38:59:b1: b8:03:2d:e8:d4:9b:10:7e:47:dd:50:27:24:47:c9:0d:aa:67: 16:14:e3:4f:88:01:ac:04:cd:36:ab:ef:96:a3:64:d1:af:4e: a6:51:f2:40:9c:41:60:10:a7:09:e3:74:f4:b5:a6:ae:52:e3: 25:82:f1:66:0e:cf:61:0e:4f:d5:97:ae:df:50:b2:56:0f:6e: d6:67:1a:6e:78:5f:10:d2:de:3a:b8:fc:9a:5b:7c:44:b3:05: a9:cb:d5:9c:63:62:cf:ae:8f:cf:ac:4b:40:21:d8:26:a8:59: cd:0f:c1:32:57:c9:82:c7:25:07:36:e3:7e:23:67:6a:d2:71: 81:2e:6a:7f:42:ad:57:bf:dc:c3:b8:8b:0b:60:49:47:1b:78: f4:1f:44:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQ2FVJErnzzxWpwSwE70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQ0ZDU2NTViODZkMjNhNzI4NDEwYzA0MWQzZTU4ZTQ3 MjhjMDYwHhcNMjUxMjIxMjMwMTAwWhcNMjUxMjIyMjMwMTAwWjAzMTEwLwYDVQQD EyhiMGZjZDVkNTBmNDQ3ZjhmOGI2NDA0NzdmZTFlMGFjMDE2OTU5MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OBiTE0dsKUqOAq2Wjl4/v/t+EbO B+oB/uc3Yh8GT9Qvd9bkYs/H38vhrRJ/v3EmvWNxxSC8u169td07rKBdZlTQuT1s V2+Di7BQ8LGBKozW2fPZtcqF9fTwZb0rIPA/pUX9UXREoRBre/fvLWKcUqHL+JeZ cohldt3d4du2laSNqXfa83zPyfkCdbmv2ohCJI5wUfLU0dNPDu10F6N8pT5wa/09 1c6ISu0GyzmJXRK5xECcKozrZ/wj4R8olgO3p1jpwWrpwBE1toZIx0YcgOloc8TK gDINCsZjiN6v90ST53jiE3ZFNbhxRAFxPF06uSvCSugdM6wzxMu3zlrtKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD81dUPRH+Pi2QEd/4eCsAWlZERMB8GA1UdIwQY MBaAFM7UTVZVuG0jpyhBDAQdPljkcowGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQt NjQzODJjNTdlZDQwLzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQtNjQzODJjNTdlZDQw LzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKtx8zUA UwfHAPIdvfAVvYk8Ul3kBW4ZAdKceHb/+WZ8xIV+LyEliwWxC58Z5/leF/27VNP7 lgM9EqsdSBHwOyjSLV03IXzEbSfYt3GLAt4LYeUDZSAyZtavg3A/GCpXEmCnqYi7 ffflOFmxuAMt6NSbEH5H3VAnJEfJDapnFhTjT4gBrATNNqvvlqNk0a9OplHyQJxB YBCnCeN09LWmrlLjJYLxZg7PYQ5P1Zeu31CyVg9u1mcabnhfENLeOrj8mlt8RLMF qcvVnGNiz66Pz6xLQCHYJqhZzQ/BMlfJgsclBzbjfiNnatJxgS5qf0KtV7/cw7iL C2BJRxt49B9EEQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:16 2025 by rpki-client