This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json) Hash identifier: 3Y4qlepSwESO3+9URaq1DjMyQUtQaK+xZ/IBqktEaRY= Subject key identifier: 4E:2A:14:A8:89:72:40:C9:4B:34:1B:12:AF:AC:F5:E4:5F:90:8D:E6 Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019B378F0288FF68A805AE79B594C820552C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 17:01:17 +0000 Manifest this update: Fri 19 Dec 2025 17:01:17 +0000 Manifest next update: Sat 20 Dec 2025 17:01:17 +0000 Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=) 2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=) 3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=) 4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=) 5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: 7U++XCwZIz71VJe+mbKoGJbaXXeLN+ivI15yEenU9SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:02:88:ff:68:a8:05:ae:79:b5:94:c8:20:55:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Dec 19 17:01:17 2025 GMT Not After : Dec 20 17:01:17 2025 GMT Subject: CN=4e2a14a8897240c94b341b12afacf5e45f908de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:bb:fb:cd:60:ca:77:7d:0a:31:1d:9e:66: 24:bd:03:9d:40:a4:f0:e5:8a:5b:f4:0c:38:1d:0a: 09:fd:e0:3c:5c:52:b0:90:48:d3:ad:2b:48:70:56: 5d:3b:b4:1a:48:b2:55:94:b1:e0:ad:ca:8c:b6:66: 7e:f7:2d:b8:7d:ec:55:cc:76:0e:f8:54:48:7c:ac: 26:4b:e1:f8:e6:9d:96:bb:c9:7e:c3:98:d3:cc:12: 9b:29:f0:45:57:77:8e:19:c6:3e:54:da:2d:c9:3d: 1d:16:6b:d7:17:a8:d5:21:ab:cd:ca:03:34:4b:3e: 2c:f4:9f:30:fe:fd:f3:a4:d7:35:27:0a:48:6e:b0: 90:ad:df:1b:0b:8f:31:fe:9f:26:08:1e:aa:b9:65: 16:83:ba:94:b4:55:3e:30:69:4e:07:eb:e6:40:c9: c4:81:56:7f:8d:0e:e4:42:3c:52:61:bb:a3:6f:cd: 3d:93:33:08:ed:06:64:44:37:a0:66:0f:90:89:58: df:ad:0c:49:a2:35:ea:0e:d1:14:5d:67:95:e2:f2: 59:9d:1e:22:81:0d:e5:b8:3c:e1:27:da:f0:14:9a: 47:2a:73:67:a1:a7:02:9a:dd:66:73:85:c5:9b:19: 68:e2:d2:99:45:da:8d:6c:c9:e5:bd:f0:63:91:52: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2A:14:A8:89:72:40:C9:4B:34:1B:12:AF:AC:F5:E4:5F:90:8D:E6 X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:85:f4:69:e1:30:c7:4c:9f:ac:1a:7f:86:a8:0d:9a:7f:9e: 54:98:d3:7a:11:cf:9a:41:f5:f5:2b:30:df:7e:f2:df:c5:f9: fe:9c:67:31:67:91:35:cf:28:55:80:ee:f9:41:11:ed:e4:1d: 9b:96:4c:ad:7d:03:dd:c5:f8:3a:87:93:bd:bb:d6:13:82:e8: 0a:14:0a:3d:0f:5b:3d:08:13:8f:7e:08:13:d3:eb:f8:08:f1: c9:00:07:5d:fe:02:e2:ab:2a:af:69:7a:47:f3:5e:8d:df:d1: 65:84:40:df:76:20:30:da:8d:16:00:04:10:39:0f:63:71:ee: 30:e1:09:52:a6:0c:90:57:69:00:96:a0:b6:b3:b5:0f:e5:a9: b1:bb:9b:96:1d:f1:86:2d:28:26:d9:27:72:91:5b:a0:31:08: 8e:c6:bb:98:34:6a:cf:46:48:33:8a:39:57:1d:21:c7:76:75: 38:6e:21:b7:4c:76:4e:6b:c1:68:ce:ec:02:ee:dd:49:d3:1e: 99:61:ab:d3:bb:2d:db:ff:95:4e:b3:32:a2:8f:9f:04:70:37: c3:93:e8:da:e4:3e:00:f2:73:ce:12:c2:8e:3b:57:09:e1:6b: 35:3b:65:72:02:70:50:92:51:88:ae:a7:e1:2f:cc:0e:7d:01: 80:1f:35:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jwKI/2ioBa55tZTIIFUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjUxMjE5MTcwMTE3WhcNMjUxMjIwMTcwMTE3WjAzMTEwLwYDVQQD Eyg0ZTJhMTRhODg5NzI0MGM5NGIzNDFiMTJhZmFjZjVlNDVmOTA4ZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVO7+81gynd9CjEdnmYkvQOdQKTw 5Ypb9Aw4HQoJ/eA8XFKwkEjTrStIcFZdO7QaSLJVlLHgrcqMtmZ+9y24fexVzHYO +FRIfKwmS+H45p2Wu8l+w5jTzBKbKfBFV3eOGcY+VNotyT0dFmvXF6jVIavNygM0 Sz4s9J8w/v3zpNc1JwpIbrCQrd8bC48x/p8mCB6quWUWg7qUtFU+MGlOB+vmQMnE gVZ/jQ7kQjxSYbujb809kzMI7QZkRDegZg+QiVjfrQxJojXqDtEUXWeV4vJZnR4i gQ3luDzhJ9rwFJpHKnNnoacCmt1mc4XFmxlo4tKZRdqNbMnlvfBjkVLv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4qFKiJckDJSzQbEq+s9eRfkI3mMB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoX0aeEw x0yfrBp/hqgNmn+eVJjTehHPmkH19Ssw337y38X5/pxnMWeRNc8oVYDu+UER7eQd m5ZMrX0D3cX4OoeTvbvWE4LoChQKPQ9bPQgTj34IE9Pr+AjxyQAHXf4C4qsqr2l6 R/Nejd/RZYRA33YgMNqNFgAEEDkPY3HuMOEJUqYMkFdpAJagtrO1D+Wpsbublh3x hi0oJtkncpFboDEIjsa7mDRqz0ZIM4o5Vx0hx3Z1OG4ht0x2TmvBaM7sAu7dSdMe mWGr07st2/+VTrMyoo+fBHA3w5Po2uQ+APJzzhLCjjtXCeFrNTtlcgJwUJJRiK6n 4S/MDn0BgB81ZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:25:39 2025 by rpki-client