This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json) Hash identifier: Hh+SIKAmb8PA786bzN19vQsQNO8qyfxGB//Gr5mMuMc= Subject key identifier: 49:9A:C8:BF:F8:A5:43:66:72:DD:0E:77:EF:49:A4:E8:4A:3F:07:72 Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Certificate serial: 019B3A8F915EC5942A60F53BC2C5EB8EEEDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft Manifest number: 03ED Signing time: Sat 20 Dec 2025 07:00:45 +0000 Manifest this update: Sat 20 Dec 2025 07:00:45 +0000 Manifest next update: Sun 21 Dec 2025 07:00:45 +0000 Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=) 2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: Cy71XvGLSfqij/WzBa8U/Xc2demWKNw9wo8Q/C+Djyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:91:5e:c5:94:2a:60:f5:3b:c2:c5:eb:8e:ee:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Validity Not Before: Dec 20 07:00:45 2025 GMT Not After : Dec 21 07:00:45 2025 GMT Subject: CN=499ac8bff8a5436672dd0e77ef49a4e84a3f0772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:b3:57:a6:b5:99:31:eb:c9:d7:5b:7c:e9: 52:63:e0:4e:f7:bd:96:76:7a:99:44:81:ef:e4:6e: 3b:5a:63:2e:14:32:e2:99:e0:02:27:e8:50:05:1a: 3a:bb:dd:93:59:85:29:ff:ec:a6:e5:ac:c7:99:33: b9:89:a4:bf:d9:52:74:61:46:2c:fe:24:a0:02:ea: d3:b0:5a:1f:8e:09:f6:33:14:bf:2a:33:60:73:3e: 28:4f:37:2d:b4:a8:b3:57:91:fe:35:09:ac:cd:e4: fe:f1:ab:a1:28:40:a1:4b:06:d1:a1:af:4f:c0:af: e0:55:fa:33:0e:9e:07:8f:62:a0:5f:94:e8:a5:ea: 2c:f9:ba:a7:b9:cb:08:8c:64:ba:5a:a6:ff:7e:22: f1:d7:02:8a:40:cc:c6:49:6f:49:2d:13:74:fa:04: 3a:79:cf:9a:a5:ab:e2:16:f4:16:a6:f2:63:42:60: de:73:7c:2c:04:93:71:25:d2:b3:8e:e5:73:69:00: 87:52:00:f1:ea:8f:5e:8b:11:c0:9c:a5:74:ea:11: a0:fa:ac:00:e6:e8:3e:fc:96:5a:17:4b:83:55:0d: 79:c1:27:6a:1f:2e:8c:85:ea:b9:39:7b:0b:2b:2a: 00:92:ea:b6:81:80:f9:54:88:bb:80:4c:0c:ca:da: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9A:C8:BF:F8:A5:43:66:72:DD:0E:77:EF:49:A4:E8:4A:3F:07:72 X509v3 Authority Key Identifier: keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:28:47:a2:5e:31:23:0f:eb:be:eb:ae:ba:df:08:43:7c:66: 29:89:63:f5:6d:3f:d5:ba:71:4e:76:65:54:5e:ac:81:e6:31: b1:db:68:32:77:e8:a6:b9:5a:75:4e:e7:46:b0:26:27:9d:00: 43:19:68:d2:a6:47:14:28:5d:6d:34:3e:04:43:f3:b8:0c:65: 4f:55:d8:1b:89:c3:5f:78:ec:c3:92:97:7f:d5:80:2a:fa:b2: fe:0d:10:5b:d5:ba:02:95:67:3c:ae:b5:d4:82:6b:34:aa:53: 87:44:13:1c:ca:da:7d:4a:41:ce:1b:7a:5d:f1:3e:36:4b:35: 1b:54:ef:4a:c6:ad:6c:63:8d:b1:76:06:2a:d1:e4:27:f7:28: b5:96:4d:4c:46:1e:29:2d:29:c7:95:41:0f:94:74:26:a2:e4: ea:06:c1:1c:0d:7f:10:8e:73:87:e9:c6:f5:ee:3e:39:89:96: 0d:f6:9f:18:04:97:aa:07:71:60:79:ec:24:73:fc:18:77:ec: 08:ff:77:1d:06:92:26:2b:be:3f:e8:19:e8:e8:80:f4:91:b7: 15:e4:cc:4f:45:24:db:74:d7:87:52:d4:58:af:16:04:c0:da: 11:75:c9:fa:af:17:7f:7b:43:e9:2e:7d:31:c5:40:b8:f2:0f: 10:72:80:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j5FexZQqYPU7wsXrju7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk NjBiZWYwHhcNMjUxMjIwMDcwMDQ1WhcNMjUxMjIxMDcwMDQ1WjAzMTEwLwYDVQQD Eyg0OTlhYzhiZmY4YTU0MzY2NzJkZDBlNzdlZjQ5YTRlODRhM2YwNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEyzV6a1mTHryddbfOlSY+BO972W dnqZRIHv5G47WmMuFDLimeACJ+hQBRo6u92TWYUp/+ym5azHmTO5iaS/2VJ0YUYs /iSgAurTsFofjgn2MxS/KjNgcz4oTzcttKizV5H+NQmszeT+8auhKEChSwbRoa9P wK/gVfozDp4Hj2KgX5Topeos+bqnucsIjGS6Wqb/fiLx1wKKQMzGSW9JLRN0+gQ6 ec+apaviFvQWpvJjQmDec3wsBJNxJdKzjuVzaQCHUgDx6o9eixHAnKV06hGg+qwA 5ug+/JZaF0uDVQ15wSdqHy6Mheq5OXsLKyoAkuq2gYD5VIi7gEwMyto4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmayL/4pUNmct0Od+9JpOhKPwdyMB8GA1UdIwQY MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4 LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABihHol4x Iw/rvuuuut8IQ3xmKYlj9W0/1bpxTnZlVF6sgeYxsdtoMnfoprladU7nRrAmJ50A Qxlo0qZHFChdbTQ+BEPzuAxlT1XYG4nDX3jsw5KXf9WAKvqy/g0QW9W6ApVnPK61 1IJrNKpTh0QTHMrafUpBzht6XfE+Nks1G1TvSsatbGONsXYGKtHkJ/cotZZNTEYe KS0px5VBD5R0JqLk6gbBHA1/EI5zh+nG9e4+OYmWDfafGASXqgdxYHnsJHP8GHfs CP93HQaSJiu+P+gZ6OiA9JG3FeTMT0Uk23TXh1LUWK8WBMDaEXXJ+q8Xf3tD6S59 McVAuPIPEHKA2A== -----END CERTIFICATE-----Generated at Sat Dec 20 09:09:06 2025 by rpki-client