This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft File: Z8-tqx1DTEwmEYyaYp50-p83xGE.mft (raw, json) Hash identifier: cx0eiE+DG46x1py3PKJHfifRivMKHBHYhTu7pEvSrk8= Subject key identifier: 9A:A4:F2:E3:E2:96:77:B1:62:5A:89:E0:E6:67:E1:BB:8F:9E:C8:A0 Authority key identifier: 67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61 Certificate issuer: /CN=67cfadab1d434c4c26118c9a629e74fa9f37c461 Certificate serial: 019B5A88CA2FB7AF5421E05973407B6601A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft Manifest number: 63 Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: Z8-tqx1DTEwmEYyaYp50-p83xGE.crl (hash: C8zaBsG1Q+bca//KUe0sqv2OBV/0psJBIsnhrq3m29g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ca:2f:b7:af:54:21:e0:59:73:40:7b:66:01:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cfadab1d434c4c26118c9a629e74fa9f37c461 Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=9aa4f2e3e29677b1625a89e0e667e1bb8f9ec8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:bf:53:73:3c:c0:82:25:5e:b8:b1:d9:7f: 06:b0:a7:e4:83:1a:a5:8c:5f:ef:5e:a7:fb:6f:34: 82:18:5f:f6:e8:1c:db:31:97:88:06:83:40:71:2c: 73:d3:73:c9:dc:d4:89:a2:96:02:69:f6:86:b0:28: f4:59:7a:4e:16:dc:c0:5b:fa:f1:0c:59:74:14:2c: 7d:49:f7:84:16:31:bd:ad:40:f2:91:ab:6f:0d:00: 36:82:39:ee:c4:c5:09:2c:83:89:e9:99:2c:0c:dd: 49:f7:07:f3:c5:56:b0:c3:fe:de:a7:cf:19:48:bf: 56:36:77:be:75:10:ff:e2:83:1c:bf:ee:ba:cc:c7: 19:f3:76:47:eb:9d:2d:ca:65:cc:5b:be:7b:63:1e: b4:b2:44:61:f1:56:69:c3:7e:b6:2b:80:9c:15:b7: c6:f7:08:3b:cb:75:30:de:a2:29:31:9f:1f:78:83: 8d:10:4d:4c:4b:60:b5:4d:f7:e1:b5:04:f6:31:74: fb:d2:52:50:47:35:79:e8:54:df:a7:2f:99:bc:6d: 80:3d:fc:6c:9e:06:02:0a:65:55:1e:31:50:76:72: 46:a9:4f:41:9a:f6:54:c5:e6:6b:e0:4b:14:47:5a: fd:7f:79:0d:d1:ab:ad:10:90:1a:a0:5b:7d:93:48: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A4:F2:E3:E2:96:77:B1:62:5A:89:E0:E6:67:E1:BB:8F:9E:C8:A0 X509v3 Authority Key Identifier: keyid:67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d1:62:08:87:0c:d4:f7:9c:d5:a3:c3:53:ed:48:c1:f1:d1: 9f:bd:7f:a1:95:a9:5d:69:03:46:6d:9f:c5:e7:46:58:dd:fb: 59:68:0a:26:97:a2:3e:d8:1d:f3:c2:67:a7:c9:21:ab:87:f1: 12:fc:30:ee:60:a2:af:0e:a9:54:24:6d:82:72:56:97:89:33: a7:9a:dd:c7:54:fd:17:04:7c:59:4a:31:94:e9:01:8d:36:e4: 1b:40:24:92:86:be:9c:68:99:27:2c:e4:74:a7:ba:91:1b:12: 24:dd:6a:c4:7d:6e:64:cc:e6:e1:bb:2f:6e:f8:ae:17:ba:9e: 7b:74:46:b4:e0:bb:0d:b4:79:d2:e5:65:85:1c:ff:d4:6e:18: be:64:28:8b:69:df:96:d2:ef:fc:2c:c4:40:47:dc:f6:19:02: 03:f8:a2:00:24:d4:c3:79:f2:b6:0e:e1:a1:7a:a4:b7:77:f8: 0d:b9:f1:3e:a9:ff:bb:b8:f5:7c:a0:a7:65:5b:b5:b3:c2:1e: 19:7f:38:5e:cd:71:7c:5c:3b:d3:29:76:e6:57:97:0b:cb:0b: 1b:76:ff:5d:32:19:8b:d3:af:b4:7e:3f:2d:c1:4e:38:cc:6e: b0:1c:92:48:a0:42:07:17:4f:75:12:ea:df:e8:7a:7b:73:2b: 3e:22:74:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMovt69UIeBZc0B7ZgGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2ZhZGFiMWQ0MzRjNGMyNjExOGM5YTYyOWU3NGZhOWYz N2M0NjEwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD Eyg5YWE0ZjJlM2UyOTY3N2IxNjI1YTg5ZTBlNjY3ZTFiYjhmOWVjOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY2/U3M8wIIlXrix2X8GsKfkgxql jF/vXqf7bzSCGF/26BzbMZeIBoNAcSxz03PJ3NSJopYCafaGsCj0WXpOFtzAW/rx DFl0FCx9SfeEFjG9rUDykatvDQA2gjnuxMUJLIOJ6ZksDN1J9wfzxVaww/7ep88Z SL9WNne+dRD/4oMcv+66zMcZ83ZH650tymXMW757Yx60skRh8VZpw362K4CcFbfG 9wg7y3Uw3qIpMZ8feIONEE1MS2C1TffhtQT2MXT70lJQRzV56FTfpy+ZvG2APfxs ngYCCmVVHjFQdnJGqU9BmvZUxeZr4EsUR1r9f3kN0autEJAaoFt9k0gXSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqk8uPilnexYlqJ4OZn4buPnsigMB8GA1UdIwQY MBaAFGfPrasdQ0xMJhGMmmKedPqfN8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjgtdHF4MURURXdtRVl5YVlwNTAtcDgzeEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xZTFlYzgtZGJmNC00M2UzLWJmZWEt NzM3OTdkMDA2ODdmLzEvWjgtdHF4MURURXdtRVl5YVlwNTAtcDgzeEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xZTFlYzgtZGJmNC00M2UzLWJmZWEtNzM3OTdkMDA2ODdm LzEvWjgtdHF4MURURXdtRVl5YVlwNTAtcDgzeEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdFiCIcM 1Pec1aPDU+1IwfHRn71/oZWpXWkDRm2fxedGWN37WWgKJpeiPtgd88Jnp8khq4fx Evww7mCirw6pVCRtgnJWl4kzp5rdx1T9FwR8WUoxlOkBjTbkG0Akkoa+nGiZJyzk dKe6kRsSJN1qxH1uZMzm4bsvbviuF7qee3RGtOC7DbR50uVlhRz/1G4YvmQoi2nf ltLv/CzEQEfc9hkCA/iiACTUw3nytg7hoXqkt3f4DbnxPqn/u7j1fKCnZVu1s8Ie GX84Xs1xfFw70yl25leXC8sLG3b/XTIZi9OvtH4/LcFOOMxusBySSKBCBxdPdRLq 3+h6e3MrPiJ0/g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:35 2025 by rpki-client