This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json) Hash identifier: ob7uf5Dy4zcmujY8WwRVn+mPMQ2VBcAnbNku5Mbhqso= Subject key identifier: 38:A1:3E:0D:D8:D5:FD:9C:02:84:3A:AD:6C:77:E2:85:36:88:B0:9C Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Certificate serial: 019AF31B5358450B6C409AD8029E46C3E140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft Manifest number: 03C8 Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=) 2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: rniLLz/a9AvywDLPLsy5q25DYFGCbiSw2/ygBEQeEfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:53:58:45:0b:6c:40:9a:d8:02:9e:46:c3:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=38a13e0dd8d5fd9c02843aad6c77e2853688b09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:89:9a:37:cf:4e:f4:e8:4a:6b:7a:a0:94: 81:79:62:70:df:1a:bb:35:9b:bd:21:6a:f9:8c:ee: 33:75:22:34:a0:9a:b7:dc:cf:4e:67:99:f7:d9:13: 77:85:66:0c:aa:42:4f:eb:9c:88:fd:4f:d4:69:5e: 13:60:a4:eb:fb:39:63:ac:66:8d:dc:08:a5:f3:8d: 10:89:e5:2e:1f:b6:43:c7:15:08:06:ea:a1:c9:8d: a2:6b:13:b2:ad:0b:dd:74:80:84:df:0a:f3:03:6a: 96:89:73:45:a3:3f:a3:c5:99:d8:95:a0:cb:55:78: b9:a9:89:c8:79:ee:5b:68:d4:52:24:40:13:6f:f9: dc:78:8d:f3:45:a5:26:41:41:60:66:d9:d1:6f:72: 43:11:4f:33:ed:92:02:35:a8:22:11:e8:2e:32:32: 73:da:ed:82:1e:11:da:92:e5:0e:87:1e:14:59:08: b3:17:72:89:31:f3:33:b9:09:29:0d:a5:97:4e:c5: 4e:a7:df:72:e2:9a:3c:0d:fc:cf:04:61:57:f1:8a: 83:b6:0d:9d:eb:1a:6f:a3:51:f9:8a:ec:3e:9e:a0: 95:d8:64:2b:95:8c:95:f9:02:bf:cc:6d:b0:af:e5: 61:05:b9:03:3d:21:c5:66:38:3d:48:98:4c:c4:58: 8f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A1:3E:0D:D8:D5:FD:9C:02:84:3A:AD:6C:77:E2:85:36:88:B0:9C X509v3 Authority Key Identifier: keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5d:85:7e:5c:a1:45:17:fa:af:23:c3:b7:2e:48:af:db:5b: a8:21:f0:b8:c7:46:79:1e:ab:d4:7e:f6:f2:da:47:f5:d0:e2: 52:f3:09:d2:a0:a4:e0:c8:73:e4:c7:0f:39:71:85:de:89:92: 18:ca:86:9f:8f:5c:52:9a:e8:72:a5:9d:7a:ef:bd:cd:71:d1: f0:13:93:42:4b:11:ba:c7:9d:91:3c:98:4b:f0:53:32:e3:63: 89:10:fa:1f:0c:fc:2f:39:9f:58:d3:20:95:8d:c3:e8:dd:88: ed:7d:81:67:bd:47:eb:c5:a4:83:21:0b:9a:08:71:15:11:96: a9:e8:32:6f:ea:29:84:a2:9f:63:fb:85:22:7a:1d:7b:f1:fe: 23:44:cf:23:71:a1:5a:2d:08:ae:fa:0b:39:55:71:04:7f:f9: 37:8c:f7:8f:3e:56:66:22:4f:66:68:a8:b0:43:e2:4b:97:35: 94:52:03:d0:83:ed:c9:8a:c1:20:e0:fe:a1:40:bc:44:6a:a3: 06:18:01:52:f1:88:75:bb:3e:fa:49:72:1a:f6:3b:13:5c:0d: 75:98:18:4c:3a:6b:5c:14:fc:a4:e3:7b:a9:d9:a7:f2:03:d8: 49:80:3c:67:ca:08:3d:93:7e:8b:5e:58:ca:3f:bb:55:50:ec: ba:95:b2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1NYRQtsQJrYAp5Gw+FAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk NjBiZWYwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD EygzOGExM2UwZGQ4ZDVmZDljMDI4NDNhYWQ2Yzc3ZTI4NTM2ODhiMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM2JmjfPTvToSmt6oJSBeWJw3xq7 NZu9IWr5jO4zdSI0oJq33M9OZ5n32RN3hWYMqkJP65yI/U/UaV4TYKTr+zljrGaN 3Ail840QieUuH7ZDxxUIBuqhyY2iaxOyrQvddICE3wrzA2qWiXNFoz+jxZnYlaDL VXi5qYnIee5baNRSJEATb/nceI3zRaUmQUFgZtnRb3JDEU8z7ZICNagiEeguMjJz 2u2CHhHakuUOhx4UWQizF3KJMfMzuQkpDaWXTsVOp99y4po8DfzPBGFX8YqDtg2d 6xpvo1H5iuw+nqCV2GQrlYyV+QK/zG2wr+VhBbkDPSHFZjg9SJhMxFiP2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDihPg3Y1f2cAoQ6rWx34oU2iLCcMB8GA1UdIwQY MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4 LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl2Fflyh RRf6ryPDty5Ir9tbqCHwuMdGeR6r1H728tpH9dDiUvMJ0qCk4Mhz5McPOXGF3omS GMqGn49cUprocqWdeu+9zXHR8BOTQksRusedkTyYS/BTMuNjiRD6Hwz8LzmfWNMg lY3D6N2I7X2BZ71H68WkgyELmghxFRGWqegyb+ophKKfY/uFInode/H+I0TPI3Gh Wi0IrvoLOVVxBH/5N4z3jz5WZiJPZmiosEPiS5c1lFID0IPtyYrBIOD+oUC8RGqj BhgBUvGIdbs++klyGvY7E1wNdZgYTDprXBT8pON7qdmn8gPYSYA8Z8oIPZN+i15Y yj+7VVDsupWyMg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:32 2025 by rpki-client