This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json) Hash identifier: wi9EGY1IdIwR1LiQ04Su7eU5jwLRcUeu6V9hwvGkznQ= Subject key identifier: C7:74:B3:71:65:2C:7C:98:98:92:50:3D:1F:A2:62:7F:37:45:E4:EE Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31 Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31 Certificate serial: 019B5A51D56C9385075F08E3BECA4BA38BA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft Manifest number: 018F Signing time: Fri 26 Dec 2025 11:01:10 +0000 Manifest this update: Fri 26 Dec 2025 11:01:10 +0000 Manifest next update: Sat 27 Dec 2025 11:01:10 +0000 Files and hashes: 1: ay2UhLb9gVwOGFcPuT7u3po7GlY.roa (hash: Nc0lcUmEx3NfjhiK/z5Wio+LmihCcurK5+zIFKzkR30=) 2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: 8ZE1yTTHj7E1yVnmRiPfUNHEGVKQ6hVKNKiZsyymEU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:d5:6c:93:85:07:5f:08:e3:be:ca:4b:a3:8b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31 Validity Not Before: Dec 26 11:01:10 2025 GMT Not After : Dec 27 11:01:10 2025 GMT Subject: CN=c774b371652c7c989892503d1fa2627f3745e4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:55:59:4e:fa:5f:d0:b4:a2:a7:dc:89:34: 10:ad:ca:d6:04:b9:6d:e9:21:b3:de:c7:93:65:a1: af:8a:08:78:0c:1f:82:36:be:3b:4c:9b:6b:22:93: 7c:0d:1b:b1:68:10:5b:fd:bc:18:ed:26:f3:d6:12: 34:3b:06:5f:e8:4c:c3:98:e5:9a:53:2e:6d:80:08: 6d:e3:a1:e5:50:57:11:48:16:dc:3d:d2:95:6c:e6: 1a:de:29:a6:41:98:6a:ac:67:97:5c:22:bc:dd:dd: 89:31:15:cc:f1:5f:ae:b3:76:1e:18:02:0c:7d:64: 2a:84:5a:9d:a4:20:3f:36:9d:fa:62:d8:88:d6:c9: fa:b5:39:11:a2:66:d2:1b:41:76:14:26:71:5a:0f: 3e:d5:34:39:08:68:ed:35:ed:67:5b:85:ff:5d:64: 8b:ad:ee:7c:41:9b:06:41:dd:0c:6b:25:5e:2b:48: b9:b1:09:3c:1f:6b:30:0c:01:58:f4:f0:87:05:30: e1:ec:a4:56:90:dd:6b:e0:43:4d:57:ca:3a:ba:1b: e2:6b:3f:bd:67:01:ba:2c:c2:0e:48:aa:95:8c:9e: 78:4e:4e:3d:f1:37:60:fa:a1:75:dc:cf:e6:0c:2c: 65:cc:9b:14:2e:e1:26:15:a8:93:71:3f:7f:63:4b: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:74:B3:71:65:2C:7C:98:98:92:50:3D:1F:A2:62:7F:37:45:E4:EE X509v3 Authority Key Identifier: keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:08:a0:8f:8e:f4:cf:7e:79:26:e0:fd:2d:de:13:e7:44:92: 60:76:4e:a3:68:63:4d:c0:61:3b:ae:39:ea:7a:1c:dc:0d:40: 73:a3:6d:16:07:da:2b:e5:d5:3b:45:bf:43:24:14:53:5d:0f: 19:c5:5e:6e:c8:e4:ff:49:df:be:9c:9f:56:85:54:e1:b1:01: 1d:f4:79:c3:84:53:47:45:8e:3a:40:a2:a8:1f:66:8e:03:39: 33:24:0c:d6:8d:54:7f:77:84:1e:3b:7e:98:9a:99:b4:7e:ef: 48:82:2f:36:9c:24:29:f0:84:85:b8:1f:d0:86:b8:cd:c6:44: 7a:80:da:52:a1:33:49:af:8b:85:e8:8a:02:d7:f2:ac:9d:c8: a0:51:2b:0b:9e:81:4d:7f:c4:bf:4d:67:5d:f0:51:6c:df:25: 80:7b:45:c9:b9:0f:63:f0:13:46:ef:b2:f9:c3:04:3f:c8:45: b6:4a:8e:c6:af:ec:07:34:eb:d7:f3:7c:9c:9b:77:e8:0c:4a: 36:bc:d5:aa:7d:60:e3:db:a8:b2:62:20:7a:70:7f:5c:21:0e: 70:f0:fe:2c:c5:1e:18:5b:fb:52:57:8b:88:b6:81:85:c2:d4: 6a:3b:22:ca:5a:ca:2a:df:00:ee:47:97:05:65:83:ed:ad:ff: dc:fe:90:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUdVsk4UHXwjjvspLo4ujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzRjMmFlMzM4ODQ1ZWZlNzgwMmRlZWMyMzRlYWUzZjdi OTVmMzEwHhcNMjUxMjI2MTEwMTEwWhcNMjUxMjI3MTEwMTEwWjAzMTEwLwYDVQQD EyhjNzc0YjM3MTY1MmM3Yzk4OTg5MjUwM2QxZmEyNjI3ZjM3NDVlNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujlVWU76X9C0oqfciTQQrcrWBLlt 6SGz3seTZaGvigh4DB+CNr47TJtrIpN8DRuxaBBb/bwY7Sbz1hI0OwZf6EzDmOWa Uy5tgAht46HlUFcRSBbcPdKVbOYa3immQZhqrGeXXCK83d2JMRXM8V+us3YeGAIM fWQqhFqdpCA/Np36YtiI1sn6tTkRombSG0F2FCZxWg8+1TQ5CGjtNe1nW4X/XWSL re58QZsGQd0MayVeK0i5sQk8H2swDAFY9PCHBTDh7KRWkN1r4ENNV8o6uhviaz+9 ZwG6LMIOSKqVjJ54Tk498Tdg+qF13M/mDCxlzJsULuEmFaiTcT9/Y0vjZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMd0s3FlLHyYmJJQPR+iYn83ReTuMB8GA1UdIwQY MBaAFM/Ewq4ziEXv54At7sI06uP3uV8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEt ZTExMWYzMjI2MzZhLzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEtZTExMWYzMjI2MzZh LzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgigj470 z355JuD9Ld4T50SSYHZOo2hjTcBhO6456noc3A1Ac6NtFgfaK+XVO0W/QyQUU10P GcVebsjk/0nfvpyfVoVU4bEBHfR5w4RTR0WOOkCiqB9mjgM5MyQM1o1Uf3eEHjt+ mJqZtH7vSIIvNpwkKfCEhbgf0Ia4zcZEeoDaUqEzSa+LheiKAtfyrJ3IoFErC56B TX/Ev01nXfBRbN8lgHtFybkPY/ATRu+y+cMEP8hFtkqOxq/sBzTr1/N8nJt36AxK NrzVqn1g49uosmIgenB/XCEOcPD+LMUeGFv7UleLiLaBhcLUajsiylrKKt8A7keX BWWD7a3/3P6Qqw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:24 2025 by rpki-client