This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json) Hash identifier: Qqs0GSw6ccO56HV0pbA9veWWDhZkqI2TVSKDLhyADVg= Subject key identifier: AA:D5:82:5E:4B:5E:97:CF:0D:F2:F7:98:AE:8E:74:E5:C1:90:A0:1B Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Certificate serial: 019B3C108EE649C86FBF7F5A7798E25AE746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:01:16 +0000 Manifest this update: Sat 20 Dec 2025 14:01:16 +0000 Manifest next update: Sun 21 Dec 2025 14:01:16 +0000 Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=) 2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: F5mG7gX5W/YYTkZwwrp1Oph6dO5vWb9L0s0JrLjYbU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:8e:e6:49:c8:6f:bf:7f:5a:77:98:e2:5a:e7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Validity Not Before: Dec 20 14:01:16 2025 GMT Not After : Dec 21 14:01:16 2025 GMT Subject: CN=aad5825e4b5e97cf0df2f798ae8e74e5c190a01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ef:71:c1:e1:b7:3b:75:be:fc:e4:96:57:25: d7:8d:7f:f8:31:2a:a9:d1:45:7d:2a:d0:c3:87:d8: 11:e3:20:29:63:65:70:4f:7c:ac:2a:a2:75:50:99: 91:4e:06:06:b9:0d:4d:e2:33:fc:b5:97:1f:a8:4a: c2:aa:f3:7b:bd:60:fe:90:4f:c3:d5:9f:4c:c1:07: 21:18:c0:03:f4:37:6d:db:39:cf:0f:76:19:97:20: f5:38:de:f6:79:ca:b4:76:a2:39:19:76:a2:83:a1: a2:f0:86:ef:c1:88:f4:7c:ff:5c:c6:74:55:ef:3c: e2:db:65:a0:7d:5d:b9:e4:d6:c6:13:73:2a:3c:07: 98:07:a0:97:4f:97:e7:68:cc:71:e0:0e:8c:3e:03: f8:c9:51:4c:88:e9:fd:b9:68:9b:f4:ee:2e:8e:eb: 9b:1f:e5:2b:72:b6:ac:c7:74:91:24:0a:a9:bd:e1: 1b:b3:ad:10:54:7b:cb:ec:c8:12:17:8d:80:3c:02: f1:01:87:96:19:88:87:60:93:37:da:fb:2b:4a:39: 53:39:4d:8c:9e:42:24:5b:58:a6:5b:66:90:93:d0: 35:ee:97:4f:14:18:cd:c4:16:0e:fd:fc:17:0a:a5: a0:8a:4d:df:0b:13:61:e8:88:42:00:5a:53:5b:9b: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D5:82:5E:4B:5E:97:CF:0D:F2:F7:98:AE:8E:74:E5:C1:90:A0:1B X509v3 Authority Key Identifier: keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:23:8d:a6:83:26:af:c4:2d:66:7a:44:c7:e2:10:11:be:21: cf:3b:e8:0c:c9:ef:ae:86:22:43:b9:8c:9e:4e:f9:e8:2c:72: e1:2f:5c:ca:be:d2:be:d6:7b:e5:e7:2b:06:bf:43:93:70:17: 2a:97:22:c6:c6:df:03:b0:01:fb:4b:98:31:46:cc:e4:c5:81: a3:9b:3f:45:a4:21:6b:1d:ab:e8:fd:1d:9b:a1:97:52:ca:19: f5:b9:eb:38:0d:01:09:26:87:8b:a5:71:99:30:28:cc:c5:0e: da:6f:2c:d3:19:5a:20:d5:cb:46:81:3a:ce:c7:d2:f9:7c:c5: b4:45:f4:21:1f:fe:a3:98:28:13:a5:69:85:8a:a7:5d:90:2b: 0b:2b:93:b6:70:28:98:96:7f:9d:c5:34:f3:ee:6b:8c:bd:24: 82:99:5e:7b:32:89:5a:d3:af:d8:2e:f8:cf:f3:34:ef:f4:45: 92:a7:02:7e:c0:61:00:15:25:87:90:da:b2:71:32:c6:7d:0f: fc:39:4d:ee:82:21:c1:0f:6d:36:b5:6c:8f:9f:16:14:2a:4c: 4d:fd:83:99:78:4c:91:42:8c:ab:1e:37:ab:f8:84:ca:6d:c4: cd:a1:01:28:13:a0:63:47:36:b5:0a:fc:e3:dd:e8:08:fe:8c: 50:f5:de:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EI7mSchvv39ad5jiWudGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWRlNWY0ZmVjMTZmNTE2ZjBiYzRkNjMxYzI2Mjc2NjNm OTA1ZjMwHhcNMjUxMjIwMTQwMTE2WhcNMjUxMjIxMTQwMTE2WjAzMTEwLwYDVQQD EyhhYWQ1ODI1ZTRiNWU5N2NmMGRmMmY3OThhZThlNzRlNWMxOTBhMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/e9xweG3O3W+/OSWVyXXjX/4MSqp 0UV9KtDDh9gR4yApY2VwT3ysKqJ1UJmRTgYGuQ1N4jP8tZcfqErCqvN7vWD+kE/D 1Z9MwQchGMAD9Ddt2znPD3YZlyD1ON72ecq0dqI5GXaig6Gi8IbvwYj0fP9cxnRV 7zzi22WgfV255NbGE3MqPAeYB6CXT5fnaMxx4A6MPgP4yVFMiOn9uWib9O4ujuub H+Urcrasx3SRJAqpveEbs60QVHvL7MgSF42APALxAYeWGYiHYJM32vsrSjlTOU2M nkIkW1imW2aQk9A17pdPFBjNxBYO/fwXCqWgik3fCxNh6IhCAFpTW5tBZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrVgl5LXpfPDfL3mK6OdOXBkKAbMB8GA1UdIwQY MBaAFM9d5fT+wW9RbwvE1jHCYnZj+QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2Njkt NmZlMTQ5NGZiYzJjLzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2NjktNmZlMTQ5NGZiYzJj LzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiONpoMm r8QtZnpEx+IQEb4hzzvoDMnvroYiQ7mMnk756Cxy4S9cyr7SvtZ75ecrBr9Dk3AX KpcixsbfA7AB+0uYMUbM5MWBo5s/RaQhax2r6P0dm6GXUsoZ9bnrOA0BCSaHi6Vx mTAozMUO2m8s0xlaINXLRoE6zsfS+XzFtEX0IR/+o5goE6VphYqnXZArCyuTtnAo mJZ/ncU08+5rjL0kgpleezKJWtOv2C74z/M07/RFkqcCfsBhABUlh5DasnEyxn0P /DlN7oIhwQ9tNrVsj58WFCpMTf2DmXhMkUKMqx43q/iEym3EzaEBKBOgY0c2tQr8 493oCP6MUPXeHg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:11:01 2025 by rpki-client