This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json) Hash identifier: kFclgg3uHzHc8Pze9uinNIl+bsJ8G/L/V1FgBFqZc80= Subject key identifier: 83:21:EC:99:18:79:66:35:7E:DE:6D:7C:5E:30:16:5F:ED:06:C9:19 Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Certificate serial: 019B5A52047812CFCCD9CCEC7F95415B47D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 11:01:23 +0000 Manifest this update: Fri 26 Dec 2025 11:01:23 +0000 Manifest next update: Sat 27 Dec 2025 11:01:23 +0000 Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: AW8td8sHBEdN9FNL6ZkHa6BJeFjAaeOUdBmQfL5RRao=) 2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:04:78:12:cf:cc:d9:cc:ec:7f:95:41:5b:47:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Validity Not Before: Dec 26 11:01:23 2025 GMT Not After : Dec 27 11:01:23 2025 GMT Subject: CN=8321ec99187966357ede6d7c5e30165fed06c919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:9a:80:33:01:8d:d5:cc:19:01:d3:90:b5: 00:53:24:7b:64:6b:45:12:ac:ee:22:42:05:bd:54: fe:28:50:d7:4c:ba:0d:bf:d6:0d:ac:f7:27:56:3c: 64:57:2f:49:7d:da:31:bd:66:b4:8d:82:57:17:a1: 71:83:fb:3f:19:4b:a8:00:b2:ce:3b:62:a5:c6:40: e1:9c:cb:3d:94:c1:92:e4:1e:6b:31:fa:81:88:37: f3:40:83:fa:2d:04:63:b1:a8:8c:db:7d:6b:59:bf: d3:81:a0:e8:0b:26:42:1b:ad:05:75:5f:ef:50:8e: 01:38:42:40:d6:41:03:21:97:ef:54:e1:ac:2b:76: f3:8e:9a:9b:42:80:8a:21:f9:5c:69:c9:27:77:8e: cf:f0:2b:69:cc:95:53:9a:03:55:0d:bd:d9:83:f4: 31:a0:dc:10:a0:34:95:20:19:f6:24:15:b1:bf:cc: c1:b0:5b:c4:7e:82:96:8c:ce:41:11:fa:62:dd:65: dc:cc:73:e6:cf:fa:ce:e6:a5:f5:72:08:91:91:40: 90:cc:5a:15:66:63:88:e2:9c:61:8e:68:19:7a:cb: a9:70:2d:9b:07:83:99:5f:32:41:0f:ee:41:00:bd: 5a:2f:e7:3e:ea:30:49:7d:e8:80:92:2f:1f:6f:99: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:21:EC:99:18:79:66:35:7E:DE:6D:7C:5E:30:16:5F:ED:06:C9:19 X509v3 Authority Key Identifier: keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:59:11:d0:19:68:d5:83:e4:5e:8c:92:f4:8f:f1:d4:80:4c: 9d:9a:78:7e:68:81:f4:27:e2:86:a3:93:07:d2:be:0f:1e:20: d5:5c:b6:df:06:fb:b5:4c:dd:3f:e4:1c:bd:e7:e5:7e:95:77: a2:3d:29:11:ae:db:94:49:21:48:c7:ef:92:f7:01:5b:bf:33: 3f:c6:a3:0c:38:10:4c:e2:5d:89:b4:44:b1:b6:67:18:04:15: bf:58:a1:3f:a4:c6:e6:2f:43:3d:b1:5b:7b:fe:74:7c:9b:cb: 5a:35:bf:a6:04:0a:fd:fc:bc:dd:95:45:34:1c:c5:83:11:4e: c7:e6:bd:b4:82:0c:c3:e7:51:88:81:28:cb:76:87:5b:27:d5: 89:61:54:d9:64:00:11:31:f2:8f:c9:84:3f:42:a2:ba:81:1e: a6:90:96:a2:1a:72:04:c2:b8:74:59:c4:51:04:6d:b8:9e:98: 58:8c:f7:a2:67:66:70:b7:cd:eb:46:2a:47:9c:74:e6:89:d4: 65:1d:f6:0b:4f:9a:65:f1:0e:3f:9b:59:aa:93:00:ee:a2:04: 6a:8d:a1:86:fd:c8:46:78:7d:c1:ef:e3:d9:68:5d:e7:e6:11: 54:e0:31:7e:86:a8:de:3b:42:9b:83:35:20:82:ff:15:3b:0c: c5:57:78:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgR4Es/M2czsf5VBW0fQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh ZDQ4YTEwHhcNMjUxMjI2MTEwMTIzWhcNMjUxMjI3MTEwMTIzWjAzMTEwLwYDVQQD Eyg4MzIxZWM5OTE4Nzk2NjM1N2VkZTZkN2M1ZTMwMTY1ZmVkMDZjOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eiagDMBjdXMGQHTkLUAUyR7ZGtF EqzuIkIFvVT+KFDXTLoNv9YNrPcnVjxkVy9JfdoxvWa0jYJXF6Fxg/s/GUuoALLO O2KlxkDhnMs9lMGS5B5rMfqBiDfzQIP6LQRjsaiM231rWb/TgaDoCyZCG60FdV/v UI4BOEJA1kEDIZfvVOGsK3bzjpqbQoCKIflcacknd47P8CtpzJVTmgNVDb3Zg/Qx oNwQoDSVIBn2JBWxv8zBsFvEfoKWjM5BEfpi3WXczHPmz/rO5qX1cgiRkUCQzFoV ZmOI4pxhjmgZesupcC2bB4OZXzJBD+5BAL1aL+c+6jBJfeiAki8fb5mn0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMh7JkYeWY1ft5tfF4wFl/tBskZMB8GA1UdIwQY MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5 LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlkR0Blo 1YPkXoyS9I/x1IBMnZp4fmiB9CfihqOTB9K+Dx4g1Vy23wb7tUzdP+QcveflfpV3 oj0pEa7blEkhSMfvkvcBW78zP8ajDDgQTOJdibREsbZnGAQVv1ihP6TG5i9DPbFb e/50fJvLWjW/pgQK/fy83ZVFNBzFgxFOx+a9tIIMw+dRiIEoy3aHWyfViWFU2WQA ETHyj8mEP0KiuoEeppCWohpyBMK4dFnEUQRtuJ6YWIz3omdmcLfN60YqR5x05onU ZR32C0+aZfEOP5tZqpMA7qIEao2hhv3IRnh9we/j2Whd5+YRVOAxfoao3jtCm4M1 IIL/FTsMxVd4bA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:36 2025 by rpki-client