This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json) Hash identifier: D1JF4D8NZHictbAEQgQXl5XEoqnCDwsye3D0C6PnTKI= Subject key identifier: 30:3F:9B:C3:A6:11:D0:B9:EF:E4:32:39:79:9D:C5:85:B3:22:8E:F6 Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Certificate serial: 019B07B5A10876252B3CD881121461650B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft Manifest number: 0247 Signing time: Wed 10 Dec 2025 10:01:42 +0000 Manifest this update: Wed 10 Dec 2025 10:01:42 +0000 Manifest next update: Thu 11 Dec 2025 10:01:42 +0000 Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: aiyHCt3/YcHM8zsnpjiDpltPYxUVAykiYHgo3bk0Sdw=) 2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:a1:08:76:25:2b:3c:d8:81:12:14:61:65:0b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Validity Not Before: Dec 10 10:01:42 2025 GMT Not After : Dec 11 10:01:42 2025 GMT Subject: CN=303f9bc3a611d0b9efe43239799dc585b3228ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:36:f5:c1:ae:0c:00:d8:bd:ec:da:bf:43: c3:15:95:ca:10:46:46:cc:03:c1:85:18:7a:82:93: e2:e0:bc:a5:99:aa:36:ed:ab:11:0f:e8:e9:d4:62: 80:32:3d:38:65:95:cc:51:24:15:c4:53:e5:6d:a7: af:e5:fc:e5:0e:1f:8a:96:4b:43:1a:f7:04:7a:e4: 1e:5f:b1:33:80:f7:90:66:c5:26:a0:42:80:fb:6e: c0:73:e5:74:47:45:42:77:6b:79:a4:18:c9:80:8f: 6e:0c:45:22:04:8c:5e:17:f9:1d:14:4e:db:34:6f: 1d:6e:30:f0:c9:66:de:06:70:22:29:6a:2a:de:7b: 83:ac:e1:92:91:25:1d:d9:68:75:34:fb:a6:1a:9c: 25:55:81:30:28:85:d4:a0:a8:4d:ba:51:49:84:07: 2d:a2:d1:2b:2e:2a:3d:16:bb:40:d6:e9:02:dc:bd: 15:97:af:11:28:c6:8c:57:62:84:e9:ec:1d:e0:5a: e7:31:27:0c:09:3c:a2:c5:51:ec:77:09:39:c1:26: f7:f9:1e:34:85:0a:9b:63:af:a3:e6:14:dd:a3:2c: 48:04:1a:21:ee:f5:62:f7:a0:fa:5b:ca:b3:6e:42: 61:c0:fd:7d:e1:72:39:90:41:36:4c:5f:bd:4b:84: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:9B:C3:A6:11:D0:B9:EF:E4:32:39:79:9D:C5:85:B3:22:8E:F6 X509v3 Authority Key Identifier: keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a7:d9:09:9f:c4:9f:f2:88:bd:de:b4:0e:e1:be:e0:a3:42: 61:37:fd:fb:6c:fe:c7:4f:e5:ef:9b:35:f7:f8:ae:f0:0c:da: cc:48:f3:fb:4c:8e:89:31:8d:de:6b:b4:90:63:82:77:35:d9: a8:1c:5f:5d:56:37:a8:fe:95:26:68:b5:a6:b8:c1:8f:2b:1c: dc:fb:de:98:b3:e8:7b:9b:89:3b:86:f6:b6:0d:e4:f5:87:4f: d7:c2:32:4b:14:e7:98:a5:7e:be:71:4f:55:81:27:5a:b6:17: 42:93:b2:6b:07:8c:09:0e:74:21:da:3e:9f:32:80:82:3a:f9: 86:e1:ac:d1:75:d0:1a:80:65:98:aa:10:0f:e4:4a:6f:25:cd: 5a:25:fa:c3:08:fd:50:42:78:67:a6:31:eb:29:3b:cf:14:a4: ee:04:da:80:2f:80:57:36:01:84:04:e2:27:34:81:a0:a4:cc: 51:3d:d8:41:43:f6:02:f6:53:b7:19:ab:dd:dd:92:f2:8f:b3: 95:45:7e:2e:2b:37:7e:e2:20:47:3d:99:6c:b9:2e:f0:87:73: 26:d0:f3:8b:9d:b6:0e:6b:1b:46:b9:09:8d:9f:fa:74:59:55: 19:a3:1a:b5:43:26:64:71:05:56:8f:a7:a4:72:18:25:51:23: 56:87:39:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtaEIdiUrPNiBEhRhZQsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk NzcxYjIwHhcNMjUxMjEwMTAwMTQyWhcNMjUxMjExMTAwMTQyWjAzMTEwLwYDVQQD EygzMDNmOWJjM2E2MTFkMGI5ZWZlNDMyMzk3OTlkYzU4NWIzMjI4ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnE29cGuDADYvezav0PDFZXKEEZG zAPBhRh6gpPi4Lylmao27asRD+jp1GKAMj04ZZXMUSQVxFPlbaev5fzlDh+KlktD GvcEeuQeX7EzgPeQZsUmoEKA+27Ac+V0R0VCd2t5pBjJgI9uDEUiBIxeF/kdFE7b NG8dbjDwyWbeBnAiKWoq3nuDrOGSkSUd2Wh1NPumGpwlVYEwKIXUoKhNulFJhAct otErLio9FrtA1ukC3L0Vl68RKMaMV2KE6ewd4FrnMScMCTyixVHsdwk5wSb3+R40 hQqbY6+j5hTdoyxIBBoh7vVi96D6W8qzbkJhwP194XI5kEE2TF+9S4RWTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDA/m8OmEdC57+QyOXmdxYWzIo72MB8GA1UdIwQY MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt NDM3NWQ2NzVmY2YzLzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKfZCZ/E n/KIvd60DuG+4KNCYTf9+2z+x0/l75s19/iu8AzazEjz+0yOiTGN3mu0kGOCdzXZ qBxfXVY3qP6VJmi1prjBjysc3PvemLPoe5uJO4b2tg3k9YdP18IySxTnmKV+vnFP VYEnWrYXQpOyaweMCQ50Ido+nzKAgjr5huGs0XXQGoBlmKoQD+RKbyXNWiX6wwj9 UEJ4Z6Yx6yk7zxSk7gTagC+AVzYBhATiJzSBoKTMUT3YQUP2AvZTtxmr3d2S8o+z lUV+Lis3fuIgRz2ZbLku8IdzJtDzi522DmsbRrkJjZ/6dFlVGaMatUMmZHEFVo+n pHIYJVEjVoc5mg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:48:58 2025 by rpki-client