This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json) Hash identifier: 1IHmuSYhkGIY6DAWhaST4HmTDiF4gXBt4BWCsxZA3Gc= Subject key identifier: DF:C0:71:72:EB:36:88:B6:62:29:93:90:63:7F:57:3C:9E:C0:75:66 Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Certificate serial: 019B330D32A1F0DA74B11DFB3485B27F6978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft Manifest number: 09E8 Signing time: Thu 18 Dec 2025 20:01:01 +0000 Manifest this update: Thu 18 Dec 2025 20:01:01 +0000 Manifest next update: Fri 19 Dec 2025 20:01:01 +0000 Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=) 2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=) 3: mNeWff71JBlu_711hQE_pDJJqWY.roa (hash: sTWxhEvJ0wu3OQU/YQdLA13MJUmx0ec59XmwGow7zF8=) 4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: PhY8knR7o1hEOaZF2u+7B9vS7QDNgTetftXMy9OqFVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:32:a1:f0:da:74:b1:1d:fb:34:85:b2:7f:69:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Validity Not Before: Dec 18 20:01:01 2025 GMT Not After : Dec 19 20:01:01 2025 GMT Subject: CN=dfc07172eb3688b662299390637f573c9ec07566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ad:4a:e3:c9:0b:46:a9:80:b8:2d:b0:29:e4: 3d:01:62:1d:dc:ea:07:5c:3e:4d:e8:cf:1c:90:b5: ea:78:32:8a:41:be:4e:22:79:3b:86:21:b4:d5:4c: 4d:ed:f1:50:13:30:20:97:2f:0c:6d:46:75:21:16: cb:89:14:cc:28:2f:c3:1a:f7:43:06:44:29:61:7d: 0e:f5:42:c0:36:38:31:31:70:89:03:c5:27:d9:a7: 6d:2e:e0:7b:72:cd:58:4e:32:b7:68:7e:f1:0a:f2: 71:7f:16:cd:95:49:a7:2b:f6:7b:6f:bc:ee:e5:8f: ba:11:36:42:13:2c:47:c5:dc:d8:71:72:72:46:57: 34:b8:78:ee:b9:6e:90:e1:bf:d1:de:66:29:0e:10: 9d:d2:1e:28:98:5c:c5:ce:38:01:af:eb:cc:3f:02: e8:c0:61:b4:9f:43:2e:36:76:fc:22:74:4c:42:c6: 97:34:78:33:bb:83:94:d6:bd:ad:77:ba:14:a8:c8: f7:57:a6:93:84:6b:41:4c:74:aa:1d:f7:23:b8:c0: e1:1f:ad:8b:b0:8b:ac:f1:3b:78:2b:2c:c7:7f:b7: 5b:87:2f:dc:04:b0:88:71:49:a1:1e:0f:de:90:76: 29:0c:4b:ae:fe:4b:89:11:8c:eb:30:70:d8:0e:47: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C0:71:72:EB:36:88:B6:62:29:93:90:63:7F:57:3C:9E:C0:75:66 X509v3 Authority Key Identifier: keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ff:9d:d4:c5:ea:08:ef:b9:45:3d:c6:1f:34:ed:9f:14:e0: 97:65:23:58:0a:04:5a:5f:60:d9:3c:12:6e:af:b8:9b:6c:c4: 18:89:9e:d3:e3:37:dd:ff:5c:81:55:0a:f3:4d:16:bc:ba:e9: 07:12:c8:55:7a:61:5c:5c:9a:a3:a9:71:24:01:b1:0e:ed:b6: 04:72:69:18:e0:bc:8b:aa:76:bf:63:ba:ae:70:57:c1:49:21: b0:71:9c:bc:8c:23:76:8c:62:2d:1f:5b:36:97:37:e3:67:38: d5:66:8a:af:43:2f:e1:a4:ca:59:49:cb:bc:7b:66:9f:38:8e: 0a:a0:96:b6:39:07:4d:80:79:98:80:05:47:31:06:61:e8:bc: b4:61:4c:55:81:6a:56:6f:31:6e:1f:95:91:c0:6c:1b:07:23: 76:7d:02:a6:52:05:35:ff:68:58:7c:81:77:b3:70:42:17:cf: 35:4b:b4:b3:0a:f0:e3:0e:56:32:db:d4:91:2d:b6:cc:21:85: 27:2f:fb:c0:09:59:c5:d8:22:cb:21:c9:ae:2c:de:be:f5:96: 42:5a:d2:a1:af:02:b9:41:98:aa:9b:64:97:59:c7:25:92:a6: 1c:0f:81:e8:43:4c:39:3f:1b:2e:8f:2c:b1:13:55:c8:19:7c: 94:e4:32:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDTKh8Np0sR37NIWyf2l4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy ZDBmM2IwHhcNMjUxMjE4MjAwMTAxWhcNMjUxMjE5MjAwMTAxWjAzMTEwLwYDVQQD EyhkZmMwNzE3MmViMzY4OGI2NjIyOTkzOTA2MzdmNTczYzllYzA3NTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+61K48kLRqmAuC2wKeQ9AWId3OoH XD5N6M8ckLXqeDKKQb5OInk7hiG01UxN7fFQEzAgly8MbUZ1IRbLiRTMKC/DGvdD BkQpYX0O9ULANjgxMXCJA8Un2adtLuB7cs1YTjK3aH7xCvJxfxbNlUmnK/Z7b7zu 5Y+6ETZCEyxHxdzYcXJyRlc0uHjuuW6Q4b/R3mYpDhCd0h4omFzFzjgBr+vMPwLo wGG0n0MuNnb8InRMQsaXNHgzu4OU1r2td7oUqMj3V6aThGtBTHSqHfcjuMDhH62L sIus8Tt4KyzHf7dbhy/cBLCIcUmhHg/ekHYpDEuu/kuJEYzrMHDYDkdxtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/AcXLrNoi2YimTkGN/VzyewHVmMB8GA1UdIwQY MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt ODBjYzg2ZTUxODIyLzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQP+d1MXq CO+5RT3GHzTtnxTgl2UjWAoEWl9g2TwSbq+4m2zEGIme0+M33f9cgVUK800WvLrp BxLIVXphXFyao6lxJAGxDu22BHJpGOC8i6p2v2O6rnBXwUkhsHGcvIwjdoxiLR9b Npc342c41WaKr0Mv4aTKWUnLvHtmnziOCqCWtjkHTYB5mIAFRzEGYei8tGFMVYFq Vm8xbh+VkcBsGwcjdn0CplIFNf9oWHyBd7NwQhfPNUu0swrw4w5WMtvUkS22zCGF Jy/7wAlZxdgiyyHJrizevvWWQlrSoa8CuUGYqptkl1nHJZKmHA+B6ENMOT8bLo8s sRNVyBl8lOQyQg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:09:26 2025 by rpki-client