This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json) Hash identifier: PcxxaLay98VpsKRU+kAF8ZEP0+w88D3KJzipqaDK+H8= Subject key identifier: 88:1C:A5:0F:D5:38:D7:6F:F2:69:F6:47:91:C6:66:9F:6E:11:19:C3 Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019B243ED4AECB8CA48D4840973F5FBD19B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 23:00:56 +0000 Manifest this update: Mon 15 Dec 2025 23:00:56 +0000 Manifest next update: Tue 16 Dec 2025 23:00:56 +0000 Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=) 2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=) 3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=) 4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=) 5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: Z2qsaebGORi7ydG6GzLvLCLc4wJ396UYg/5GrC5XN6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:d4:ae:cb:8c:a4:8d:48:40:97:3f:5f:bd:19:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Dec 15 23:00:56 2025 GMT Not After : Dec 16 23:00:56 2025 GMT Subject: CN=881ca50fd538d76ff269f64791c6669f6e1119c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:cf:9c:9e:99:a2:d7:73:a3:51:22:bb:73: 6e:6f:de:4f:aa:65:a7:ee:59:09:73:22:1e:ca:18: 8b:7c:56:76:8b:dd:ef:14:fb:39:ac:62:1d:b7:45: 2c:da:4e:5c:e3:87:19:00:51:6d:03:b6:8f:68:a0: 2a:28:89:3a:5b:1f:f7:a1:b7:96:2d:2d:c5:23:b8: 2c:77:34:a9:c6:32:51:76:5d:c8:6e:af:ab:35:db: 12:b9:ba:70:53:08:73:05:fc:59:7c:9d:fe:d1:a9: 4f:81:48:d4:16:05:77:da:bc:41:e9:3c:85:fc:4f: 21:d4:28:43:81:51:67:fe:eb:f1:4e:a9:93:11:77: 9a:fb:32:6a:ca:24:4e:93:7c:7a:4f:12:c0:97:08: ac:92:95:89:40:30:2f:16:48:98:86:92:06:ec:d8: 0d:a1:bc:84:54:b1:dd:a4:b6:e2:9a:33:4b:9e:94: e2:05:00:5e:a4:e6:5b:7c:f6:bd:0b:80:53:49:9f: 6d:54:6f:cb:71:e1:cb:56:e4:c0:b9:d7:e6:d9:6a: a7:04:32:a2:c3:fe:de:63:6a:88:be:8d:98:1a:a8: 2e:33:cd:4d:10:40:cd:52:b0:c2:1d:56:ee:41:77: 0c:ff:06:73:51:19:64:6d:b4:d5:d2:60:f1:f2:44: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1C:A5:0F:D5:38:D7:6F:F2:69:F6:47:91:C6:66:9F:6E:11:19:C3 X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e8:4b:c2:65:6f:a0:b1:3c:f8:0c:2b:76:5a:ae:57:98:0e: 82:81:bf:e5:06:e9:01:8f:37:62:0e:11:df:32:ca:0d:8a:e7: 5c:5b:0b:80:49:5e:26:f1:39:9c:a6:e0:d5:20:24:e7:6b:5c: 39:b1:6a:4c:00:9d:33:3a:e7:d3:da:3d:bf:f3:99:06:e1:b5: 88:16:2e:99:d8:d9:5e:cb:0b:b1:d2:33:1f:d9:05:bf:92:93: 33:28:47:c4:e8:f1:5e:b1:77:48:fe:5f:3a:63:05:d8:5c:9f: cf:df:a5:f6:29:0a:06:b0:79:17:79:c9:a8:29:02:d4:70:34: 64:24:91:00:4a:69:ac:1f:de:7b:83:f5:a8:0f:10:b8:cc:1b: 56:95:e4:4a:ad:90:7f:53:55:2a:96:05:3b:96:d3:71:30:d6: fe:87:bd:1f:5f:53:cf:da:41:ad:0c:c7:a9:a7:65:74:c3:c5: 3d:d0:a3:ab:ba:b4:b9:b8:13:1e:a5:df:c8:b1:52:2e:7f:a8: 69:60:b1:e3:f2:c5:8e:35:b7:ed:61:6d:2e:ae:d8:31:06:c1: 90:fc:fb:ba:5e:63:5e:80:c4:20:7c:f5:1e:f2:5d:f4:0e:19: ba:23:34:11:e6:e0:fb:db:72:46:d5:c2:f3:04:7b:47:a4:c1: 2c:92:05:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPtSuy4ykjUhAlz9fvRm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjUxMjE1MjMwMDU2WhcNMjUxMjE2MjMwMDU2WjAzMTEwLwYDVQQD Eyg4ODFjYTUwZmQ1MzhkNzZmZjI2OWY2NDc5MWM2NjY5ZjZlMTExOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW7PnJ6Zotdzo1Eiu3Nub95PqmWn 7lkJcyIeyhiLfFZ2i93vFPs5rGIdt0Us2k5c44cZAFFtA7aPaKAqKIk6Wx/3obeW LS3FI7gsdzSpxjJRdl3Ibq+rNdsSubpwUwhzBfxZfJ3+0alPgUjUFgV32rxB6TyF /E8h1ChDgVFn/uvxTqmTEXea+zJqyiROk3x6TxLAlwiskpWJQDAvFkiYhpIG7NgN obyEVLHdpLbimjNLnpTiBQBepOZbfPa9C4BTSZ9tVG/LceHLVuTAudfm2WqnBDKi w/7eY2qIvo2YGqguM81NEEDNUrDCHVbuQXcM/wZzURlkbbTV0mDx8kQrGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgcpQ/VONdv8mn2R5HGZp9uERnDMB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOhLwmVv oLE8+AwrdlquV5gOgoG/5QbpAY83Yg4R3zLKDYrnXFsLgEleJvE5nKbg1SAk52tc ObFqTACdMzrn09o9v/OZBuG1iBYumdjZXssLsdIzH9kFv5KTMyhHxOjxXrF3SP5f OmMF2Fyfz9+l9ikKBrB5F3nJqCkC1HA0ZCSRAEpprB/ee4P1qA8QuMwbVpXkSq2Q f1NVKpYFO5bTcTDW/oe9H19Tz9pBrQzHqadldMPFPdCjq7q0ubgTHqXfyLFSLn+o aWCx4/LFjjW37WFtLq7YMQbBkPz7ul5jXoDEIHz1HvJd9A4ZuiM0Eebg+9tyRtXC 8wR7R6TBLJIFZQ== -----END CERTIFICATE-----Generated at Tue Dec 16 05:00:25 2025 by rpki-client