This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json) Hash identifier: VLfz1IKMxjD93yzUFji0h7DGkHyhdItoZloCwtC48/o= Subject key identifier: 19:56:A1:4A:D1:EA:1F:B0:3A:F0:CF:E3:58:42:C3:CA:FD:77:96:E4 Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Certificate serial: 019B46CAEB8FDB03AC20CA56D6AA3FA085A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 16:01:02 +0000 Manifest this update: Mon 22 Dec 2025 16:01:02 +0000 Manifest next update: Tue 23 Dec 2025 16:01:02 +0000 Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: LYwSYyxwNyx/AK4h89nYQBi1fk0Owf4bjbYvuzP0glc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:eb:8f:db:03:ac:20:ca:56:d6:aa:3f:a0:85:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Validity Not Before: Dec 22 16:01:02 2025 GMT Not After : Dec 23 16:01:02 2025 GMT Subject: CN=1956a14ad1ea1fb03af0cfe35842c3cafd7796e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:46:42:ee:ab:b2:f2:0f:4d:21:6c:65:0f: a3:0a:f2:69:7a:06:c5:0f:86:7c:c1:15:e5:aa:b1: 1c:d2:1e:5f:dd:1f:70:b4:85:67:92:16:41:2c:bd: dc:30:dd:87:34:e9:54:45:1e:71:8a:98:dd:8b:6b: 05:79:5c:7c:98:38:3f:cb:85:f8:0e:8c:00:45:0e: 25:ce:75:82:07:12:c8:81:ae:be:38:c8:57:b5:31: f4:24:f1:d1:91:34:5f:00:90:bd:98:68:14:14:cb: 66:eb:22:4f:96:87:d3:45:41:f2:90:46:c8:19:b7: 77:eb:6b:5a:53:ff:e8:8c:c3:19:e3:c8:c4:4c:f2: 22:c1:ee:d9:fe:79:81:79:fb:c6:79:e9:a3:9f:3a: ea:24:be:dd:0d:10:53:9c:09:f1:1a:45:c3:b8:f3: 55:47:50:9e:13:39:8d:e6:e4:72:d1:ca:52:35:8f: a5:22:9b:8a:72:58:ba:69:f1:d1:c2:10:42:32:d4: 0b:b2:d9:84:56:ea:8c:a3:e4:2c:de:1e:f1:ec:61: 5e:1c:5d:05:a6:5b:b2:cd:46:8f:ae:70:d5:df:36: 3c:99:06:65:ee:43:8e:ac:7a:39:62:48:d0:71:56: c7:3f:0f:a2:c3:1e:fb:25:b1:79:50:c1:b7:f6:0d: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:56:A1:4A:D1:EA:1F:B0:3A:F0:CF:E3:58:42:C3:CA:FD:77:96:E4 X509v3 Authority Key Identifier: keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:2f:94:0c:7e:99:7c:ee:e3:ed:c8:74:b1:cf:5c:bf:22:71: 9b:7f:a7:96:f4:3c:11:84:25:58:50:f6:eb:28:fa:b5:0e:ed: 4c:0d:28:60:02:20:23:2e:46:92:9f:c4:01:ee:b4:ae:2e:18: f3:aa:68:50:8b:99:99:40:5f:94:76:61:97:6f:f4:84:10:cc: f6:9f:29:9f:65:5e:03:eb:24:9e:1a:22:81:ce:24:f8:06:c2: 2d:86:69:f7:21:da:fa:81:81:4a:da:80:8b:f8:0c:44:a5:af: ce:c2:66:65:f3:6d:ff:ad:c8:29:0a:73:02:6d:91:81:09:0b: cc:36:3d:3a:ad:71:c3:52:77:58:99:ae:78:9b:2e:53:a6:41: 3d:9c:5e:a1:b8:46:5c:1b:fc:3d:7d:4a:c1:04:f8:f5:79:e5: e6:d6:49:f8:58:68:56:98:7f:0e:1d:83:48:ce:66:80:4c:ad: 4f:08:b6:ce:42:f7:f1:75:66:b0:b7:4f:51:4f:e1:7c:dc:f2: 87:df:55:5b:56:d9:a7:59:86:f3:bd:7b:9c:72:64:c0:d7:5f: 51:4c:b3:7e:d4:d8:76:51:41:2a:b5:3c:09:3c:8e:42:26:45: de:62:03:55:ee:3d:4b:b4:52:a4:b9:d8:03:e3:01:e4:f7:6d: ea:10:ab:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyuuP2wOsIMpW1qo/oIWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQ5YmJmODRjOTlmYmU4N2FjZmUxYmJlMGRiZjdhYzYz YjQzZGYwHhcNMjUxMjIyMTYwMTAyWhcNMjUxMjIzMTYwMTAyWjAzMTEwLwYDVQQD EygxOTU2YTE0YWQxZWExZmIwM2FmMGNmZTM1ODQyYzNjYWZkNzc5NmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGxGQu6rsvIPTSFsZQ+jCvJpegbF D4Z8wRXlqrEc0h5f3R9wtIVnkhZBLL3cMN2HNOlURR5xipjdi2sFeVx8mDg/y4X4 DowARQ4lznWCBxLIga6+OMhXtTH0JPHRkTRfAJC9mGgUFMtm6yJPlofTRUHykEbI Gbd362taU//ojMMZ48jETPIiwe7Z/nmBefvGeemjnzrqJL7dDRBTnAnxGkXDuPNV R1CeEzmN5uRy0cpSNY+lIpuKcli6afHRwhBCMtQLstmEVuqMo+Qs3h7x7GFeHF0F pluyzUaPrnDV3zY8mQZl7kOOrHo5YkjQcVbHPw+iwx77JbF5UMG39g2cpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlWoUrR6h+wOvDP41hCw8r9d5bkMB8GA1UdIwQY MBaAFM7Um7+EyZ++h6z+G74Nv3rGO0PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYt OWVjOWI2N2RkYWY5LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYtOWVjOWI2N2RkYWY5 LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy+UDH6Z fO7j7ch0sc9cvyJxm3+nlvQ8EYQlWFD26yj6tQ7tTA0oYAIgIy5Gkp/EAe60ri4Y 86poUIuZmUBflHZhl2/0hBDM9p8pn2VeA+sknhoigc4k+AbCLYZp9yHa+oGBStqA i/gMRKWvzsJmZfNt/63IKQpzAm2RgQkLzDY9Oq1xw1J3WJmueJsuU6ZBPZxeobhG XBv8PX1KwQT49Xnl5tZJ+FhoVph/Dh2DSM5mgEytTwi2zkL38XVmsLdPUU/hfNzy h99VW1bZp1mG8717nHJkwNdfUUyzftTYdlFBKrU8CTyOQiZF3mIDVe49S7RSpLnY A+MB5Pdt6hCr4w== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:57 2025 by rpki-client