This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json) Hash identifier: L3/N7XsmaTkMMbvHs/yFaL0ZlQyNc8O+sd4Bqy/z+hA= Subject key identifier: 88:F7:0B:9A:1C:4D:CF:7C:E8:65:C4:AF:CE:DD:AA:3B:74:B7:FF:C8 Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06 Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06 Certificate serial: 019AF20910C80D1B71A2E512AE8BFE9E1E3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft Manifest number: 1035 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: jMvorvnhOd870S6wF55l2xQ5s5XZYCQwQWTPEY200sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:10:c8:0d:1b:71:a2:e5:12:ae:8b:fe:9e:1e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=88f70b9a1c4dcf7ce865c4afceddaa3b74b7ffc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:63:50:9d:f6:68:54:77:99:5f:09:43:c1: 4c:e6:70:56:f7:fc:69:0e:48:5a:02:e7:f9:58:67: 15:78:3a:02:62:43:c7:fa:47:79:01:8d:f6:1e:65: 10:1a:43:69:9d:75:f1:a5:06:a7:69:02:a8:cd:3d: a3:b4:5b:14:e6:ab:22:76:81:fb:8e:bd:9b:54:64: e9:61:99:a6:ff:92:90:e3:46:01:ba:c7:3d:2c:e6: e8:91:7a:36:fd:ea:ae:68:c4:85:94:c3:d2:35:1e: 80:48:26:fc:f0:76:3b:b0:c7:ea:b1:e2:82:52:d4: c4:57:7a:54:a4:ff:79:67:45:07:92:0a:6b:bc:f9: 3f:9b:00:0e:f6:f8:ba:29:af:d8:e8:ed:b0:f9:5b: 41:05:11:d4:71:74:ba:97:aa:29:a3:f0:73:71:bb: d4:c2:e5:01:2f:fe:0f:78:a8:c8:ad:a6:db:38:7a: 09:b7:0a:86:aa:b9:6f:09:0c:4d:9d:c8:6f:a0:16: 92:54:9c:85:0c:06:fd:e4:58:0b:77:d1:b3:8a:9d: 23:3f:bc:31:ce:16:ce:0f:97:98:36:aa:8f:d4:01: 7e:af:16:12:52:f7:22:93:1c:c7:18:05:73:51:ae: 5f:49:bb:f1:c3:04:8b:03:b9:c2:d5:16:d3:e3:80: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:0B:9A:1C:4D:CF:7C:E8:65:C4:AF:CE:DD:AA:3B:74:B7:FF:C8 X509v3 Authority Key Identifier: keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3d:27:b6:50:61:f9:49:2a:76:44:b2:de:62:31:55:30:84: 01:6b:a0:fe:82:71:33:b4:f4:73:8e:d6:01:29:8d:d1:b6:69: 9e:f8:2a:2f:6e:16:5d:5e:31:d1:93:d7:01:fa:e5:e0:c4:6e: 84:1c:08:28:95:86:54:76:1c:e9:32:05:cd:29:4a:30:f3:c0: af:aa:a3:81:83:c6:29:14:56:15:fa:90:95:f3:77:0b:6a:80: 68:e8:62:63:2f:03:c1:ac:30:c9:ef:06:50:c1:c8:ec:51:62: 0c:ed:e1:5e:d2:b8:d5:2f:6a:09:ed:b3:31:52:b6:8f:d7:a5: d0:0e:57:90:b1:f5:4b:92:ee:d6:95:59:c0:9a:8f:fe:dc:be: 57:89:99:88:9e:37:96:dc:31:a8:94:af:54:b0:09:fc:78:05: 82:d5:d5:4b:28:b2:0b:8a:ca:b4:0d:a1:ac:36:a7:6d:ab:11: 9f:9e:d7:6d:fa:34:92:b8:c2:19:82:74:27:03:3d:97:17:db: 3d:55:a0:b1:b3:7c:37:23:71:8e:8d:b0:9b:a7:ee:1f:d4:9f: ea:e9:0a:30:eb:35:44:99:60:a3:82:e6:3c:b5:27:e0:2a:13: 08:a6:ba:7f:7d:76:87:6f:d4:58:46:ee:29:74:79:ca:7e:08: 8c:19:ab:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRDIDRtxouUSrov+nh4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQ0ZDU2NTViODZkMjNhNzI4NDEwYzA0MWQzZTU4ZTQ3 MjhjMDYwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD Eyg4OGY3MGI5YTFjNGRjZjdjZTg2NWM0YWZjZWRkYWEzYjc0YjdmZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmhjUJ32aFR3mV8JQ8FM5nBW9/xp DkhaAuf5WGcVeDoCYkPH+kd5AY32HmUQGkNpnXXxpQanaQKozT2jtFsU5qsidoH7 jr2bVGTpYZmm/5KQ40YBusc9LObokXo2/equaMSFlMPSNR6ASCb88HY7sMfqseKC UtTEV3pUpP95Z0UHkgprvPk/mwAO9vi6Ka/Y6O2w+VtBBRHUcXS6l6opo/BzcbvU wuUBL/4PeKjIrabbOHoJtwqGqrlvCQxNnchvoBaSVJyFDAb95FgLd9Gzip0jP7wx zhbOD5eYNqqP1AF+rxYSUvcikxzHGAVzUa5fSbvxwwSLA7nC1RbT44AVyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIj3C5ocTc986GXEr87dqjt0t//IMB8GA1UdIwQY MBaAFM7UTVZVuG0jpyhBDAQdPljkcowGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQt NjQzODJjNTdlZDQwLzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQtNjQzODJjNTdlZDQw LzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz0ntlBh +UkqdkSy3mIxVTCEAWug/oJxM7T0c47WASmN0bZpnvgqL24WXV4x0ZPXAfrl4MRu hBwIKJWGVHYc6TIFzSlKMPPAr6qjgYPGKRRWFfqQlfN3C2qAaOhiYy8Dwawwye8G UMHI7FFiDO3hXtK41S9qCe2zMVK2j9el0A5XkLH1S5Lu1pVZwJqP/ty+V4mZiJ43 ltwxqJSvVLAJ/HgFgtXVSyiyC4rKtA2hrDanbasRn57Xbfo0krjCGYJ0JwM9lxfb PVWgsbN8NyNxjo2wm6fuH9Sf6ukKMOs1RJlgo4LmPLUn4CoTCKa6f312h2/UWEbu KXR5yn4IjBmr0w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:42 2025 by rpki-client