This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json) Hash identifier: setdHEYxaFYfKAN+uy77sFtfaoI207KnWNvGhoauLoc= Subject key identifier: 07:9E:BB:04:8F:20:0B:58:1B:BA:3F:51:1E:FE:2B:F2:A1:72:94:05 Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b Certificate serial: 019B5A52321E17DE33A3CFA2AB0B689092A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:01:34 +0000 Manifest this update: Fri 26 Dec 2025 11:01:34 +0000 Manifest next update: Sat 27 Dec 2025 11:01:34 +0000 Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: Yg2Zu5YLuS/IiFEv+rBwONVvy/I09MYkQ/SKdR6JbMY=) 2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:32:1e:17:de:33:a3:cf:a2:ab:0b:68:90:92:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b Validity Not Before: Dec 26 11:01:34 2025 GMT Not After : Dec 27 11:01:34 2025 GMT Subject: CN=079ebb048f200b581bba3f511efe2bf2a1729405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:73:ad:19:28:70:3e:3f:4e:8a:04:4b:e6:41: b1:24:be:18:3c:6a:bb:51:f6:92:17:7e:76:35:83: ec:2f:c7:45:c2:d9:f1:ec:85:0a:70:6e:15:08:fd: a3:6d:3a:61:38:b8:89:f0:90:2f:85:11:e9:3b:11: 64:08:a8:cd:92:28:f8:98:a7:ed:7c:d2:e5:f5:f2: e9:d2:56:93:56:61:46:0e:e2:1a:0e:4b:ae:77:45: a2:76:c9:1c:11:38:e6:35:0e:12:aa:d2:83:a1:6b: ae:03:8f:d3:9e:1b:c7:97:51:b3:a6:8f:a3:8c:77: ec:ff:8c:29:ee:ae:b6:c7:ba:b5:2e:08:4d:f4:7f: 86:b7:62:c3:fe:b0:09:2f:64:53:6f:be:9b:75:ba: 43:b0:8d:c0:68:1c:74:7d:ae:ca:e1:99:03:30:dd: 9e:77:9e:f8:e7:02:c7:2e:3a:ab:7f:34:d0:b0:1d: 9b:3a:18:4c:ba:e3:23:1a:e1:28:e8:36:19:e4:61: e8:e1:c0:6c:76:34:a4:9f:ce:37:a5:0b:14:3a:a9: 70:43:be:22:2f:ad:54:3a:24:60:15:61:0b:3e:f1: e6:43:41:3b:68:86:97:78:4e:6a:dd:b6:e9:17:e3: b4:e7:5b:c5:c5:55:c5:69:ea:42:18:d9:1b:2a:03: 80:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9E:BB:04:8F:20:0B:58:1B:BA:3F:51:1E:FE:2B:F2:A1:72:94:05 X509v3 Authority Key Identifier: keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a8:8f:26:6b:fe:d1:3c:48:36:dd:ee:33:13:43:46:3e:14: 4d:98:d7:3b:17:0b:fe:2a:74:bc:87:0a:e0:86:8c:34:6b:b4: 2f:b4:33:49:32:3a:e4:6b:94:c3:d1:10:9a:fb:8e:81:52:cd: 7f:d3:7e:94:b2:62:9e:b1:1a:93:4c:3d:cc:ef:39:67:59:55: a2:fe:5a:e3:cb:1d:b1:0e:65:b4:dd:ac:52:6d:a7:48:5a:ac: fd:36:81:b6:cf:f7:78:79:8f:c1:de:2d:ae:5b:22:99:b5:da: 70:4a:99:f3:cd:bb:81:1f:51:63:d0:64:3c:2d:bc:39:11:0b: 18:b8:87:92:a5:73:b0:4d:40:51:1d:fc:1b:aa:7f:da:03:29: e0:f5:5f:13:17:da:99:0f:af:f9:81:6c:b0:a0:c1:d7:fa:37: 7c:10:f7:9f:f8:08:a3:61:50:e8:79:7c:62:fb:e5:52:3c:f3: e7:43:d3:c0:52:ec:bc:0d:7f:0a:0f:f5:bc:86:81:85:2a:f9: 49:52:a1:dc:3f:4d:c7:fa:89:57:37:c1:5a:da:b3:4e:28:3d: 10:47:bc:a2:ed:b6:98:5f:91:ce:5c:8c:56:88:d9:45:ba:cd: 98:5d:84:7b:f6:ef:c4:3d:cb:a7:40:a4:d8:32:e9:ab:b8:eb: 57:05:74:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUjIeF94zo8+iqwtokJKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl OTdlNmIwHhcNMjUxMjI2MTEwMTM0WhcNMjUxMjI3MTEwMTM0WjAzMTEwLwYDVQQD EygwNzllYmIwNDhmMjAwYjU4MWJiYTNmNTExZWZlMmJmMmExNzI5NDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3OtGShwPj9OigRL5kGxJL4YPGq7 UfaSF352NYPsL8dFwtnx7IUKcG4VCP2jbTphOLiJ8JAvhRHpOxFkCKjNkij4mKft fNLl9fLp0laTVmFGDuIaDkuud0WidskcETjmNQ4SqtKDoWuuA4/TnhvHl1Gzpo+j jHfs/4wp7q62x7q1LghN9H+Gt2LD/rAJL2RTb76bdbpDsI3AaBx0fa7K4ZkDMN2e d5745wLHLjqrfzTQsB2bOhhMuuMjGuEo6DYZ5GHo4cBsdjSkn843pQsUOqlwQ74i L61UOiRgFWELPvHmQ0E7aIaXeE5q3bbpF+O051vFxVXFaepCGNkbKgOAmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeeuwSPIAtYG7o/UR7+K/KhcpQFMB8GA1UdIwQY MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt ZGMxZGI2N2RiM2NiLzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKiPJmv+ 0TxINt3uMxNDRj4UTZjXOxcL/ip0vIcK4IaMNGu0L7QzSTI65GuUw9EQmvuOgVLN f9N+lLJinrEak0w9zO85Z1lVov5a48sdsQ5ltN2sUm2nSFqs/TaBts/3eHmPwd4t rlsimbXacEqZ8827gR9RY9BkPC28ORELGLiHkqVzsE1AUR38G6p/2gMp4PVfExfa mQ+v+YFssKDB1/o3fBD3n/gIo2FQ6Hl8YvvlUjzz50PTwFLsvA1/Cg/1vIaBhSr5 SVKh3D9Nx/qJVzfBWtqzTig9EEe8ou22mF+RzlyMVojZRbrNmF2Ee/bvxD3Lp0Ck 2DLpq7jrVwV0HA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:09 2025 by rpki-client