This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json) Hash identifier: Ro27tslYabat+EK+Yb9w7FrYQdLWR2G9OV3vGOa3DPE= Subject key identifier: 26:FD:78:AE:57:1F:91:C6:F0:4C:3B:03:DA:CD:C4:58:1C:75:90:49 Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Certificate serial: 019B39467BC4FBBE8248D0D44C552771AE7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft Manifest number: 1782 Signing time: Sat 20 Dec 2025 01:01:19 +0000 Manifest this update: Sat 20 Dec 2025 01:01:19 +0000 Manifest next update: Sun 21 Dec 2025 01:01:19 +0000 Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: gPKh2W2qcSSrR7WgGYzYU2QtjxFCJm5P9yORLvAwxdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:7b:c4:fb:be:82:48:d0:d4:4c:55:27:71:ae:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Validity Not Before: Dec 20 01:01:19 2025 GMT Not After : Dec 21 01:01:19 2025 GMT Subject: CN=26fd78ae571f91c6f04c3b03dacdc4581c759049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:b7:3e:f5:fa:8b:50:a3:6a:2a:4a:ac:1f: 7d:9c:68:89:8f:8d:d9:da:12:72:81:a3:2a:cb:a7: dd:04:3f:7b:69:79:b4:2a:e2:07:43:20:36:5e:b4: f5:89:37:38:43:c8:91:50:a3:2e:f6:8b:b6:93:3e: 26:ef:21:bf:e8:04:1d:d9:41:8d:e3:bf:6d:0b:12: f7:6d:4a:a1:50:62:ec:9a:5c:76:54:a5:a4:4a:62: 8f:56:36:20:ab:82:ad:64:b7:2a:91:8c:62:2f:b5: b5:11:9c:83:9f:05:15:4a:89:fe:5a:e3:28:7c:1b: ca:cf:05:31:03:df:a8:84:2b:b2:be:82:65:22:72: fa:22:b1:f7:cb:73:a5:ac:e0:18:d5:e8:c3:7c:8b: 5a:47:49:93:6b:a4:33:5e:b8:55:b8:be:88:ea:0a: 13:46:eb:ca:9f:fe:02:b4:00:ee:e7:92:27:c4:e7: 8b:97:01:61:06:d0:cc:7a:6d:22:1c:32:a7:7a:ba: 7a:73:f3:f3:d3:bb:fb:53:58:a4:f5:3a:0c:3f:9b: f6:fa:87:78:05:f9:0b:d9:47:c3:d0:17:60:df:3e: a4:ec:c8:53:cc:c0:ab:36:1b:cd:56:98:f3:5a:d1: 64:96:6e:5e:fc:26:96:16:8b:a0:dd:6f:bb:a5:f5: ef:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FD:78:AE:57:1F:91:C6:F0:4C:3B:03:DA:CD:C4:58:1C:75:90:49 X509v3 Authority Key Identifier: keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:16:8e:b9:dc:05:ae:be:c8:22:69:56:f5:99:76:1c:e9:cd: f4:d3:bc:02:43:e0:87:bd:8a:0e:e5:4d:56:21:4e:b0:da:99: 2f:39:ef:19:5c:cb:8a:cf:21:bb:55:d7:e7:e6:7c:98:e8:4b: c0:29:d5:c6:9a:3c:6d:ee:a6:da:84:7a:41:ae:a6:bd:db:0b: da:e8:89:f2:0a:59:44:49:f8:4f:28:bb:76:3d:17:e9:c2:b9: 21:a6:ef:27:ba:a6:87:93:7c:6c:d0:2f:2f:2f:2c:48:90:b4: d0:09:71:9d:e5:c7:a8:40:8f:a3:a1:24:59:2b:48:56:39:81: 7b:9c:ed:fe:a3:34:51:63:f7:59:17:45:2f:ac:f6:c4:18:60: 00:f9:36:89:69:da:2e:4e:7a:82:be:bb:17:bc:46:54:c0:5b: 19:24:8a:b1:60:79:7f:26:aa:62:60:c5:2e:d4:96:f1:51:e4: 7f:6b:b6:5e:a6:a3:85:1e:2c:f8:28:00:3b:25:33:1b:53:5a: d9:70:b6:8d:7b:84:c7:9a:0f:cd:f9:ea:86:91:1a:d9:b0:e5: aa:3e:81:06:c4:4e:c4:da:56:e5:d8:62:90:ac:7d:de:2f:e9: e5:7e:3b:8c:23:8f:2d:f7:9c:eb:da:44:a8:3c:7b:87:7d:7d: 4b:a3:9f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RnvE+76CSNDUTFUnca57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQ5YmJmODRjOTlmYmU4N2FjZmUxYmJlMGRiZjdhYzYz YjQzZGYwHhcNMjUxMjIwMDEwMTE5WhcNMjUxMjIxMDEwMTE5WjAzMTEwLwYDVQQD EygyNmZkNzhhZTU3MWY5MWM2ZjA0YzNiMDNkYWNkYzQ1ODFjNzU5MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaq3PvX6i1CjaipKrB99nGiJj43Z 2hJygaMqy6fdBD97aXm0KuIHQyA2XrT1iTc4Q8iRUKMu9ou2kz4m7yG/6AQd2UGN 479tCxL3bUqhUGLsmlx2VKWkSmKPVjYgq4KtZLcqkYxiL7W1EZyDnwUVSon+WuMo fBvKzwUxA9+ohCuyvoJlInL6IrH3y3OlrOAY1ejDfItaR0mTa6QzXrhVuL6I6goT RuvKn/4CtADu55InxOeLlwFhBtDMem0iHDKnerp6c/Pz07v7U1ik9ToMP5v2+od4 BfkL2UfD0Bdg3z6k7MhTzMCrNhvNVpjzWtFklm5e/CaWFoug3W+7pfXvNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb9eK5XH5HG8Ew7A9rNxFgcdZBJMB8GA1UdIwQY MBaAFM7Um7+EyZ++h6z+G74Nv3rGO0PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYt OWVjOWI2N2RkYWY5LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYtOWVjOWI2N2RkYWY5 LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRaOudwF rr7IImlW9Zl2HOnN9NO8AkPgh72KDuVNViFOsNqZLznvGVzLis8hu1XX5+Z8mOhL wCnVxpo8be6m2oR6Qa6mvdsL2uiJ8gpZREn4Tyi7dj0X6cK5IabvJ7qmh5N8bNAv Ly8sSJC00AlxneXHqECPo6EkWStIVjmBe5zt/qM0UWP3WRdFL6z2xBhgAPk2iWna Lk56gr67F7xGVMBbGSSKsWB5fyaqYmDFLtSW8VHkf2u2XqajhR4s+CgAOyUzG1Na 2XC2jXuEx5oPzfnqhpEa2bDlqj6BBsROxNpW5dhikKx93i/p5X47jCOPLfec69pE qDx7h319S6OfdQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:38 2025 by rpki-client