This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json) Hash identifier: r51eyNQZyFbteOmKW9z8EAL3mFqo8OjNQYO7DtbUeXk= Subject key identifier: 00:E4:B5:FB:DF:91:1A:CB:91:F3:45:94:55:56:92:28:DB:E6:3B:81 Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0 Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0 Certificate serial: 019B5ABFA71C378D4432F290BFDCF3BF93E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 13:01:07 +0000 Manifest this update: Fri 26 Dec 2025 13:01:07 +0000 Manifest next update: Sat 27 Dec 2025 13:01:07 +0000 Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=) 2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=) 3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=) 4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=) 5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: tHTvsngyILM1XyKM6VcWF51CSriNsn1c0mC2Rgdhq/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:a7:1c:37:8d:44:32:f2:90:bf:dc:f3:bf:93:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0 Validity Not Before: Dec 26 13:01:07 2025 GMT Not After : Dec 27 13:01:07 2025 GMT Subject: CN=00e4b5fbdf911acb91f3459455569228dbe63b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:4d:1d:87:9d:c5:e5:b2:32:84:98:08:be: 38:5e:0b:88:19:98:77:a3:1a:d3:04:4e:8c:f7:63: 5b:74:5b:fa:c9:c8:fb:65:6a:0a:89:6d:31:c3:b0: d1:86:d0:a6:a5:09:8d:7a:65:09:25:e7:a4:f4:71: 1d:6c:ba:61:5b:12:37:36:57:a5:15:a7:7b:b8:14: d9:23:30:6e:fa:21:e9:2c:1f:e3:bd:fb:c6:a6:5a: a6:cb:7b:b6:34:89:8b:a2:89:3c:04:11:17:d7:4f: 56:86:3f:e9:d9:93:bb:7c:08:43:69:82:fa:d4:ff: ee:c8:8b:d7:20:c1:20:4e:21:c0:66:4c:19:49:68: 33:03:19:b2:7a:70:3f:57:0a:6a:7d:a0:ce:aa:52: c7:0a:81:ab:a9:e0:76:53:d6:a9:f8:6c:35:ff:e1: 8a:7c:e0:5c:4d:a0:4b:f7:70:26:7c:e2:ff:55:11: 94:8d:ed:d2:0d:59:92:e5:e2:be:4e:65:88:e2:7c: 46:4d:7a:74:92:a1:97:6a:75:71:2a:f8:78:ba:16: 55:a1:2e:fe:52:2a:7f:04:0d:72:60:db:60:8a:79: f8:a3:fb:69:1b:66:82:a4:3e:f3:45:3a:0a:19:a7: f3:72:a2:8e:e8:11:d7:24:6a:60:2e:99:b4:59:0a: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:B5:FB:DF:91:1A:CB:91:F3:45:94:55:56:92:28:DB:E6:3B:81 X509v3 Authority Key Identifier: keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:61:43:8c:6f:32:09:d2:c2:13:b2:dc:0e:bf:44:d7:00:0c: 32:e3:0b:37:5b:9b:48:b5:93:fd:54:b6:a9:fe:a1:cc:61:01: 89:fd:ee:8f:7d:31:a0:47:01:a4:5c:42:b0:dc:59:16:dc:2a: e7:b9:c7:b8:f6:35:46:47:43:94:84:6f:61:2a:fb:ac:12:b1: 1e:3f:8b:1e:46:41:d8:5b:49:13:51:a7:de:12:57:05:0e:2c: fb:c0:03:28:7c:66:80:5e:7f:b1:9a:7b:cf:4f:a6:30:e9:d6: 92:75:f4:59:15:c2:89:c6:12:49:6d:c3:6f:50:38:91:f7:03: 9d:6c:61:1f:95:2f:b0:16:27:6b:bd:fa:bf:e8:9e:d9:e7:10: b7:36:11:cd:09:62:b5:23:17:18:13:9e:e5:5a:78:91:b6:4f: a6:09:13:1e:b6:64:f4:88:50:71:45:bd:8c:ca:30:90:17:0c: 2b:0d:64:b1:af:fa:2a:e5:87:dc:c2:9f:16:22:25:e6:92:8d: 65:70:d2:47:4b:2e:e1:68:ce:b6:0e:1b:16:f1:e2:c2:81:e3: b2:d3:b1:07:d2:bb:ef:92:d4:2c:e6:3c:d1:eb:20:84:cb:47: ef:05:17:2b:8a:e5:6a:ff:ad:48:7f:1c:91:4b:5a:cb:f3:f4: fa:da:0f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6ccN41EMvKQv9zzv5PlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzdlZjJiNzY2NTk0ODkyZDc4OTI4Y2JlNzgxNzc5ZmRj ZTY3ZDAwHhcNMjUxMjI2MTMwMTA3WhcNMjUxMjI3MTMwMTA3WjAzMTEwLwYDVQQD EygwMGU0YjVmYmRmOTExYWNiOTFmMzQ1OTQ1NTU2OTIyOGRiZTYzYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEBNHYedxeWyMoSYCL44XguIGZh3 oxrTBE6M92NbdFv6ycj7ZWoKiW0xw7DRhtCmpQmNemUJJeek9HEdbLphWxI3Nlel Fad7uBTZIzBu+iHpLB/jvfvGplqmy3u2NImLook8BBEX109Whj/p2ZO7fAhDaYL6 1P/uyIvXIMEgTiHAZkwZSWgzAxmyenA/VwpqfaDOqlLHCoGrqeB2U9ap+Gw1/+GK fOBcTaBL93AmfOL/VRGUje3SDVmS5eK+TmWI4nxGTXp0kqGXanVxKvh4uhZVoS7+ Uip/BA1yYNtginn4o/tpG2aCpD7zRToKGafzcqKO6BHXJGpgLpm0WQqH3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADktfvfkRrLkfNFlFVWkijb5juBMB8GA1UdIwQY MBaAFM/H7yt2ZZSJLXiSjL54F3n9zmfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjct OGNkNTViMDNkMjJkLzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjctOGNkNTViMDNkMjJk LzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2FDjG8y CdLCE7LcDr9E1wAMMuMLN1ubSLWT/VS2qf6hzGEBif3uj30xoEcBpFxCsNxZFtwq 57nHuPY1RkdDlIRvYSr7rBKxHj+LHkZB2FtJE1Gn3hJXBQ4s+8ADKHxmgF5/sZp7 z0+mMOnWknX0WRXCicYSSW3Db1A4kfcDnWxhH5UvsBYna736v+ie2ecQtzYRzQli tSMXGBOe5Vp4kbZPpgkTHrZk9IhQcUW9jMowkBcMKw1ksa/6KuWH3MKfFiIl5pKN ZXDSR0su4WjOtg4bFvHiwoHjstOxB9K775LULOY80esghMtH7wUXK4rlav+tSH8c kUtay/P0+toPsg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:56 2025 by rpki-client