This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json) Hash identifier: RaEz/pG34vlrppbLUazdTfnLFBwiskOZ5Zii+wsf4/s= Subject key identifier: 3A:57:0C:E5:C3:6D:D2:75:DF:D8:FC:D6:BD:C4:6B:C1:57:85:6B:27 Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019AF3F801EEF88C7470EF5DEEE7A6057629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 14:01:48 +0000 Manifest this update: Sat 06 Dec 2025 14:01:48 +0000 Manifest next update: Sun 07 Dec 2025 14:01:48 +0000 Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=) 2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=) 3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=) 4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=) 5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: GsfDr06dygUiTfGGgd2vD63vPSXYiT2CDexDm5SSLYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:01:ee:f8:8c:74:70:ef:5d:ee:e7:a6:05:76:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Dec 6 14:01:48 2025 GMT Not After : Dec 7 14:01:48 2025 GMT Subject: CN=3a570ce5c36dd275dfd8fcd6bdc46bc157856b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:2a:1f:a9:7c:69:24:c2:2a:bc:48:a8:c9: 71:26:2d:9a:e6:ac:ad:c3:8d:49:5e:d4:26:4d:f3: 1e:1d:1a:8a:c3:6e:ce:db:35:00:3a:0d:34:0e:be: 63:c1:96:f7:db:ab:e2:51:77:51:d1:f5:ed:40:f3: b9:e0:08:b1:f2:e3:c3:d0:14:f1:01:80:90:fc:17: 97:6d:ad:46:58:bd:a4:ab:1f:da:8a:97:8c:b6:cc: eb:cf:b7:77:47:ef:30:c2:c3:37:76:22:93:9f:8f: bf:bc:06:63:f9:b1:f4:c0:5a:81:31:75:89:8d:29: 51:a7:0e:52:da:9f:cd:39:40:05:a2:4d:2f:ec:e1: 2f:14:f0:bf:eb:9f:66:82:5b:bc:9f:bb:b4:a8:61: 03:96:41:ce:d2:4f:a1:0a:73:59:21:0d:35:8a:4a: cd:a7:f8:08:33:b3:3b:c8:09:d6:40:f7:b5:ac:25: b4:d0:9b:c1:4d:52:8c:5a:b6:89:a4:2c:49:f5:3c: 17:ae:4d:43:1e:90:68:7b:79:cb:4c:17:3d:65:58: 6c:70:e7:79:c8:f3:ba:a0:96:ab:b6:50:c4:aa:a0: 12:58:67:6d:fd:87:05:71:48:d8:7c:c5:cc:84:15: c9:fe:a8:09:0d:43:be:b7:51:05:21:67:9b:7b:b1: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:57:0C:E5:C3:6D:D2:75:DF:D8:FC:D6:BD:C4:6B:C1:57:85:6B:27 X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e3:2f:1c:03:b8:33:63:75:f4:77:1e:f6:a1:a0:ad:6f:e0: 91:be:92:cd:d2:df:73:08:24:0d:ba:a3:dc:51:88:c3:32:9f: d3:03:46:6a:2d:9e:13:02:03:8e:8f:68:9d:f9:73:96:2b:e9: 5a:5f:5e:2a:22:d2:50:5a:e4:3b:5e:43:68:93:4d:08:2f:e3: 99:f2:e1:3f:0a:ce:b9:40:61:2d:1b:c3:12:68:69:08:d6:4b: be:34:c9:b6:c2:c5:28:d1:15:64:b9:a9:88:64:d0:62:96:19: 60:2a:7c:7c:40:c4:be:83:74:41:8c:50:f1:83:8a:af:ff:3c: 74:18:fe:b4:be:84:2e:83:64:92:a2:dc:ce:38:55:d6:e7:3b: fd:f0:7d:48:30:5d:0a:8e:91:94:9d:5e:3f:f8:db:d1:d9:8e: ff:07:55:a2:74:87:2e:d7:1a:fe:43:00:b0:b8:7b:19:b4:08: 57:b8:9e:86:08:dd:b5:b4:1e:af:79:0e:1e:0d:1e:80:fb:fd: 65:e7:5c:c0:0d:03:5e:66:ec:48:ae:81:40:87:5e:22:73:3d: 10:75:0a:e5:b0:bf:28:80:de:bb:cf:12:74:d4:c9:aa:85:a4: dc:a4:28:d5:fe:c0:25:be:ec:aa:eb:2d:d1:24:8c:ea:3d:cd: da:93:98:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AHu+Ix0cO9d7uemBXYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjUxMjA2MTQwMTQ4WhcNMjUxMjA3MTQwMTQ4WjAzMTEwLwYDVQQD EygzYTU3MGNlNWMzNmRkMjc1ZGZkOGZjZDZiZGM0NmJjMTU3ODU2YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFsqH6l8aSTCKrxIqMlxJi2a5qyt w41JXtQmTfMeHRqKw27O2zUAOg00Dr5jwZb326viUXdR0fXtQPO54Aix8uPD0BTx AYCQ/BeXba1GWL2kqx/aipeMtszrz7d3R+8wwsM3diKTn4+/vAZj+bH0wFqBMXWJ jSlRpw5S2p/NOUAFok0v7OEvFPC/659mglu8n7u0qGEDlkHO0k+hCnNZIQ01ikrN p/gIM7M7yAnWQPe1rCW00JvBTVKMWraJpCxJ9TwXrk1DHpBoe3nLTBc9ZVhscOd5 yPO6oJartlDEqqASWGdt/YcFcUjYfMXMhBXJ/qgJDUO+t1EFIWebe7GFtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpXDOXDbdJ139j81r3Ea8FXhWsnMB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOMvHAO4 M2N19Hce9qGgrW/gkb6SzdLfcwgkDbqj3FGIwzKf0wNGai2eEwIDjo9onflzlivp Wl9eKiLSUFrkO15DaJNNCC/jmfLhPwrOuUBhLRvDEmhpCNZLvjTJtsLFKNEVZLmp iGTQYpYZYCp8fEDEvoN0QYxQ8YOKr/88dBj+tL6ELoNkkqLczjhV1uc7/fB9SDBd Co6RlJ1eP/jb0dmO/wdVonSHLtca/kMAsLh7GbQIV7iehgjdtbQer3kOHg0egPv9 ZedcwA0DXmbsSK6BQIdeInM9EHUK5bC/KIDeu88SdNTJqoWk3KQo1f7AJb7squst 0SSM6j3N2pOYaw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:26 2025 by rpki-client