This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json) Hash identifier: x0vsMQDu6H6So5TvcQKLltj64fVMhoDomou6z27f+tw= Subject key identifier: C6:50:CB:7D:B2:8E:A4:95:00:42:50:88:CD:D7:07:07:8D:D4:05:6B Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Certificate serial: 019AF3BFF6CDF8A0268913B223864EE8C701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 13:00:35 +0000 Manifest this update: Sat 06 Dec 2025 13:00:35 +0000 Manifest next update: Sun 07 Dec 2025 13:00:35 +0000 Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: 6jry0/WRUNhOZpfSbKlR4hl7KTboXBwUMKBV4oMW8wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:f6:cd:f8:a0:26:89:13:b2:23:86:4e:e8:c7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Validity Not Before: Dec 6 13:00:35 2025 GMT Not After : Dec 7 13:00:35 2025 GMT Subject: CN=c650cb7db28ea49500425088cdd707078dd4056b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:b0:a8:de:f8:39:2d:78:72:5d:af:09:37: 62:03:50:fa:33:50:eb:71:d5:ee:47:70:90:11:a7: 2b:24:fd:56:c9:c8:13:21:1d:62:e5:98:df:1f:f2: f0:7c:08:b4:67:ef:8d:e6:d2:88:e6:00:69:d4:f5: 0d:e7:7c:cc:8c:36:62:c1:7c:96:e9:3f:62:9e:be: ff:27:fd:d5:47:82:6c:09:a3:c4:0b:cc:bf:7e:f4: 74:80:64:78:97:88:37:4c:87:82:bf:e4:4e:f6:08: 9f:2b:d1:4e:ae:16:a7:da:ae:71:49:0d:6c:19:ab: 7a:e4:26:55:ed:86:6f:e0:c4:7c:dd:99:b4:fa:f1: e8:c9:7d:ec:3c:b1:4f:37:04:84:12:3e:1a:42:58: ea:30:e5:81:1b:0b:c4:f8:da:c4:53:f1:7a:9e:b7: 7d:42:02:18:97:3a:78:af:b3:a0:fe:85:47:d0:d2: 6b:49:61:dd:d3:95:e6:a5:8b:24:e9:23:67:31:35: bd:f0:4b:78:50:e7:74:99:cb:15:b5:4c:68:6b:1a: da:b3:4a:21:1a:d5:ed:76:b9:e6:81:d7:56:b5:23: fe:cf:7d:34:8c:f2:b2:95:ab:bc:80:46:2c:fd:81: 39:07:5b:87:d3:40:b0:03:ec:d4:88:9e:96:02:56: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:50:CB:7D:B2:8E:A4:95:00:42:50:88:CD:D7:07:07:8D:D4:05:6B X509v3 Authority Key Identifier: keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:27:ee:69:cc:8b:0a:88:d9:9c:10:23:d2:fb:3e:77:91:62: ac:ae:64:cb:56:d9:87:50:a7:86:2c:71:09:c8:fc:c7:03:65: 85:45:07:b4:58:e0:8b:bf:be:83:cd:61:c6:3c:e8:41:31:d4: 30:a2:5b:6b:be:11:f3:9c:30:ec:37:09:72:fe:86:ce:90:fd: 6e:b9:4d:8a:ed:4c:72:6e:3c:40:c6:c1:76:5b:7b:0f:25:02: fd:a1:6b:02:15:9d:3a:3d:f4:43:c9:48:1f:22:be:ad:3b:37: 0e:99:48:fe:bb:2a:59:49:7a:97:94:77:9e:50:65:d0:5f:1d: 81:e6:c9:10:a3:f3:97:87:cd:ee:cd:98:9b:ab:cd:ec:9d:55: d4:71:1c:c1:41:ea:23:2e:cd:f6:e2:5f:6b:53:95:01:ce:00: f1:a5:33:e3:c3:a5:0b:8a:56:5f:11:3b:30:7d:07:48:46:bc: 1a:0b:2f:3d:1e:49:05:15:7b:dd:bc:d7:e8:6a:c6:a1:af:84: 76:77:ff:e4:27:b7:bd:0b:a5:c9:0f:de:3a:d7:60:7f:b9:c3: 25:75:bd:3a:7e:2a:b7:7c:06:aa:38:63:c9:f0:fa:96:76:1d: 60:c8:79:97:9a:1d:af:76:45:bf:57:64:44:22:14:03:fd:53: 70:93:94:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/bN+KAmiROyI4ZO6McBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQ5YmJmODRjOTlmYmU4N2FjZmUxYmJlMGRiZjdhYzYz YjQzZGYwHhcNMjUxMjA2MTMwMDM1WhcNMjUxMjA3MTMwMDM1WjAzMTEwLwYDVQQD EyhjNjUwY2I3ZGIyOGVhNDk1MDA0MjUwODhjZGQ3MDcwNzhkZDQwNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBSwqN74OS14cl2vCTdiA1D6M1Dr cdXuR3CQEacrJP1WycgTIR1i5ZjfH/LwfAi0Z++N5tKI5gBp1PUN53zMjDZiwXyW 6T9inr7/J/3VR4JsCaPEC8y/fvR0gGR4l4g3TIeCv+RO9gifK9FOrhan2q5xSQ1s Gat65CZV7YZv4MR83Zm0+vHoyX3sPLFPNwSEEj4aQljqMOWBGwvE+NrEU/F6nrd9 QgIYlzp4r7Og/oVH0NJrSWHd05XmpYsk6SNnMTW98Et4UOd0mcsVtUxoaxras0oh GtXtdrnmgddWtSP+z300jPKylau8gEYs/YE5B1uH00CwA+zUiJ6WAlaOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZQy32yjqSVAEJQiM3XBweN1AVrMB8GA1UdIwQY MBaAFM7Um7+EyZ++h6z+G74Nv3rGO0PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYt OWVjOWI2N2RkYWY5LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYtOWVjOWI2N2RkYWY5 LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSfuacyL CojZnBAj0vs+d5FirK5ky1bZh1CnhixxCcj8xwNlhUUHtFjgi7++g81hxjzoQTHU MKJba74R85ww7DcJcv6GzpD9brlNiu1Mcm48QMbBdlt7DyUC/aFrAhWdOj30Q8lI HyK+rTs3DplI/rsqWUl6l5R3nlBl0F8dgebJEKPzl4fN7s2Ym6vN7J1V1HEcwUHq Iy7N9uJfa1OVAc4A8aUz48OlC4pWXxE7MH0HSEa8GgsvPR5JBRV73bzX6GrGoa+E dnf/5Ce3vQulyQ/eOtdgf7nDJXW9On4qt3wGqjhjyfD6lnYdYMh5l5odr3ZFv1dk RCIUA/1TcJOUQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:37 2025 by rpki-client