This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json) Hash identifier: XLI1Ipss5H2gcdOixLxaE/dlE25gdpyZYY2/+61XWRs= Subject key identifier: 0E:E8:40:1D:6D:DE:2D:E3:CE:FC:9F:FC:2A:6F:8D:06:AA:55:9E:FB Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37 Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37 Certificate serial: 019AF12DE374C933363BD7FEB196942EAD10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft Manifest number: 1222 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: EkIOR3+mvigBmhS/862/8mwDDdJsaggzx+63TKVXGek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e3:74:c9:33:36:3b:d7:fe:b1:96:94:2e:ad:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=0ee8401d6dde2de3cefc9ffc2a6f8d06aa559efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:45:4f:0d:a4:96:14:4b:07:67:ef:2b:9e: 9e:35:d9:2c:48:f0:c8:7a:e4:27:5f:de:57:3e:89: 53:07:74:64:84:b1:5a:bb:25:9e:14:94:99:af:cb: f1:37:e9:7b:60:68:3d:16:4e:7d:15:b7:9d:79:cf: 44:aa:a2:8a:8d:e7:dd:d8:3a:ab:21:42:34:0c:aa: 15:68:f0:b6:3f:b9:58:09:ad:06:75:03:7a:aa:5b: 00:c1:7a:86:b5:c2:77:eb:3b:97:80:2a:43:b7:32: 89:1c:82:0f:da:4d:9f:c7:40:13:df:9e:89:90:2b: 01:81:37:4a:1d:5c:73:01:6a:ad:62:ee:ea:f8:db: ed:89:e9:3a:a5:d8:a9:7c:b8:65:e3:40:cf:64:29: 58:97:6f:49:17:1c:e1:2b:e2:61:a9:bd:91:a0:92: 26:18:1a:13:90:ac:7c:63:8a:24:a5:ff:6f:02:8b: dd:0b:cd:52:95:da:1c:d1:3d:f0:53:e4:9b:0e:32: 22:99:91:10:3c:b2:e8:25:90:fd:17:d3:ed:36:9c: 81:ea:cf:c8:26:25:dc:5b:32:74:fc:71:0f:6a:b0: 9a:2a:a7:1f:ed:9a:2c:30:8f:09:6d:51:f0:72:e5: ef:8a:c0:bb:e6:7e:18:d9:c3:f8:18:ba:7c:ec:d4: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E8:40:1D:6D:DE:2D:E3:CE:FC:9F:FC:2A:6F:8D:06:AA:55:9E:FB X509v3 Authority Key Identifier: keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5d:6e:8c:30:27:b8:81:50:fd:60:84:51:b1:d7:b8:bb:58: a8:20:53:c4:7f:b3:46:ac:69:f3:c0:8d:96:4a:67:fc:a7:dc: d5:a1:18:bf:b0:54:b7:b1:ae:5c:87:39:42:45:7c:c2:0c:08: d9:69:91:57:a9:78:c5:98:cc:ad:74:c5:4c:fa:da:1c:40:95: 18:d5:cf:af:0e:63:c1:20:15:12:13:ac:2f:c0:b9:c6:15:b9: 70:f2:9c:c3:79:dd:b1:5e:9b:0d:24:fa:4d:a7:77:a1:87:fe: 18:f9:cf:b7:da:8b:03:4c:34:83:d2:cd:01:55:3b:d6:d5:c8: 42:65:3d:55:48:e0:48:53:07:10:12:85:d4:ca:f9:b9:3f:c4: d0:eb:0d:e4:84:4c:40:9c:8d:e7:5b:f3:ba:a5:59:e6:74:4f: 6a:86:38:2b:2b:fe:c5:a7:27:a1:ef:9a:38:6d:84:d1:d4:ad: b6:84:2a:d2:17:c5:7b:78:d0:2e:db:83:d6:bf:bd:b8:36:b1: 62:4d:c9:05:2b:35:11:1d:34:02:74:3c:97:3d:a3:2c:b8:e0: 8d:4d:2b:cf:79:85:63:3d:e2:f9:34:f5:89:db:d4:b8:16:68: 6a:78:2a:ef:81:4b:9a:e0:62:1f:bb:72:00:4f:fb:e8:8d:fd: 3f:e9:8f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeN0yTM2O9f+sZaULq0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDFiOTNhYzNkYTY0ZWIzNzY4NWQ3ZWFhMTlhYWI3NGMy MzdmMzcwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EygwZWU4NDAxZDZkZGUyZGUzY2VmYzlmZmMyYTZmOGQwNmFhNTU5ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qlFTw2klhRLB2fvK56eNdksSPDI euQnX95XPolTB3RkhLFauyWeFJSZr8vxN+l7YGg9Fk59Fbedec9EqqKKjefd2Dqr IUI0DKoVaPC2P7lYCa0GdQN6qlsAwXqGtcJ36zuXgCpDtzKJHIIP2k2fx0AT356J kCsBgTdKHVxzAWqtYu7q+Nvtiek6pdipfLhl40DPZClYl29JFxzhK+Jhqb2RoJIm GBoTkKx8Y4okpf9vAovdC81Sldoc0T3wU+SbDjIimZEQPLLoJZD9F9PtNpyB6s/I JiXcWzJ0/HEParCaKqcf7ZosMI8JbVHwcuXvisC75n4Y2cP4GLp87NQR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7oQB1t3i3jzvyf/CpvjQaqVZ77MB8GA1UdIwQY MBaAFM7RuTrD2mTrN2hdfqoZqrdMI383MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEt ODE2Y2I4NTNhZWRkLzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEtODE2Y2I4NTNhZWRk LzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP11ujDAn uIFQ/WCEUbHXuLtYqCBTxH+zRqxp88CNlkpn/Kfc1aEYv7BUt7GuXIc5QkV8wgwI 2WmRV6l4xZjMrXTFTPraHECVGNXPrw5jwSAVEhOsL8C5xhW5cPKcw3ndsV6bDST6 Tad3oYf+GPnPt9qLA0w0g9LNAVU71tXIQmU9VUjgSFMHEBKF1Mr5uT/E0OsN5IRM QJyN51vzuqVZ5nRPaoY4Kyv+xacnoe+aOG2E0dSttoQq0hfFe3jQLtuD1r+9uDax Yk3JBSs1ER00AnQ8lz2jLLjgjU0rz3mFYz3i+TT1idvUuBZoangq74FLmuBiH7ty AE/76I39P+mPrw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:01 2025 by rpki-client