This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json) Hash identifier: idmU8JXd7oyy3zi9ueUj3lFpFak7mQhtjPRfZU3sCV8= Subject key identifier: D8:D5:DF:7B:2B:C4:E6:52:4D:3F:54:C9:8F:5C:42:43:E3:A4:8D:51 Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4 Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4 Certificate serial: 019B31C340430AEF53750567A527351016CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 14:00:38 +0000 Manifest this update: Thu 18 Dec 2025 14:00:38 +0000 Manifest next update: Fri 19 Dec 2025 14:00:38 +0000 Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=) 2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: 6900x68xR2XImvpy2b/DJBhfUu3J72/BCR2jWXR/z1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:40:43:0a:ef:53:75:05:67:a5:27:35:10:16:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4 Validity Not Before: Dec 18 14:00:38 2025 GMT Not After : Dec 19 14:00:38 2025 GMT Subject: CN=d8d5df7b2bc4e6524d3f54c98f5c4243e3a48d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:65:6e:cd:d2:f4:89:75:4c:4e:01:d0:e4: eb:bb:74:f5:6a:3b:23:c9:c8:44:c3:dc:01:82:17: 0a:f6:cb:41:a1:13:e2:c4:7c:7b:27:74:11:f8:e9: 88:18:4a:1f:87:65:27:5f:1a:09:18:f8:96:66:3b: b4:7d:29:58:d6:02:2e:4b:90:7d:bc:83:58:ad:cc: 31:5b:4b:2e:21:0e:f1:42:a2:f7:02:10:46:38:62: b5:b7:9d:e0:72:78:02:8d:11:b0:69:d3:d9:74:81: 3c:d8:5a:8a:4d:e1:9d:8d:2b:61:e2:86:d2:34:77: da:27:08:d5:02:6d:a3:21:0b:6f:69:60:74:ab:7d: 14:e3:6f:65:9d:b9:e8:3f:6f:64:b3:35:cd:ed:39: 61:b9:8d:df:9f:35:b9:1d:2b:e4:66:b1:13:a3:5b: eb:cf:a8:28:d5:cc:d9:54:d2:9e:9e:e1:db:7d:c0: 5a:b3:23:9d:dd:dd:46:13:d3:07:04:a1:eb:3e:ea: a0:fb:c4:81:af:83:67:84:1e:45:40:18:06:c2:b5: 2b:4b:96:1d:c8:3e:4a:a6:bc:b6:78:f5:6f:6d:33: 06:62:08:cb:6a:4e:df:35:c9:08:d5:39:ab:c9:43: f8:63:96:ac:b9:48:8f:bb:aa:60:a2:b8:08:37:5a: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D5:DF:7B:2B:C4:E6:52:4D:3F:54:C9:8F:5C:42:43:E3:A4:8D:51 X509v3 Authority Key Identifier: keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:cc:80:d2:22:01:d9:99:15:57:5a:9c:17:20:fa:e1:69:30: 03:da:62:0b:c6:ce:5e:99:37:93:65:5a:d0:d0:da:83:c2:a3: 4a:fc:db:43:68:10:07:da:d5:06:8a:98:06:a7:30:d9:55:55: 5a:a3:7f:6b:3e:b7:39:11:90:8c:e7:c8:d6:c7:fc:2b:20:0e: 86:69:f5:88:bd:a4:c7:32:b1:d9:34:5c:0c:80:c1:0c:82:b0: 17:76:24:af:6b:3b:d7:98:ba:ee:99:bb:a2:20:86:7e:3d:28: 20:00:a1:91:1f:3a:0b:02:dd:60:45:0f:fb:6a:e6:4a:35:87: d1:d2:fa:ce:a1:fa:40:ce:d1:84:fb:a4:58:15:be:d1:ff:5c: d0:4c:61:39:1c:c1:ab:cf:e8:c9:cd:c0:1e:ae:6d:60:9e:ec: 9e:fd:8c:17:9c:2d:5f:b8:c6:20:37:2f:91:8b:d1:2e:9a:dd: 0e:d8:66:c5:e8:d2:f4:f1:11:aa:b4:d6:30:ea:15:0f:31:e2: de:b4:0f:36:11:26:22:ce:b8:fc:da:a2:83:13:53:71:4c:a6: 5a:b1:e2:8d:5f:42:fe:c8:76:78:54:81:fa:69:59:aa:97:5f: 81:d1:f5:e9:2b:de:c6:4b:8e:46:06:75:77:00:aa:1a:65:ef: 8c:23:5e:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw0BDCu9TdQVnpSc1EBbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0 OGExYzQwHhcNMjUxMjE4MTQwMDM4WhcNMjUxMjE5MTQwMDM4WjAzMTEwLwYDVQQD EyhkOGQ1ZGY3YjJiYzRlNjUyNGQzZjU0Yzk4ZjVjNDI0M2UzYTQ4ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RFlbs3S9Il1TE4B0OTru3T1ajsj ychEw9wBghcK9stBoRPixHx7J3QR+OmIGEofh2UnXxoJGPiWZju0fSlY1gIuS5B9 vINYrcwxW0suIQ7xQqL3AhBGOGK1t53gcngCjRGwadPZdIE82FqKTeGdjSth4obS NHfaJwjVAm2jIQtvaWB0q30U429lnbnoP29kszXN7TlhuY3fnzW5HSvkZrETo1vr z6go1czZVNKenuHbfcBasyOd3d1GE9MHBKHrPuqg+8SBr4NnhB5FQBgGwrUrS5Yd yD5Kpry2ePVvbTMGYgjLak7fNckI1TmryUP4Y5asuUiPu6pgorgIN1psRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjV33srxOZSTT9UyY9cQkPjpI1RMB8GA1UdIwQY MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt ODA1MzJkZDc0ZDRkLzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsyA0iIB 2ZkVV1qcFyD64WkwA9piC8bOXpk3k2Va0NDag8KjSvzbQ2gQB9rVBoqYBqcw2VVV WqN/az63ORGQjOfI1sf8KyAOhmn1iL2kxzKx2TRcDIDBDIKwF3Ykr2s715i67pm7 oiCGfj0oIAChkR86CwLdYEUP+2rmSjWH0dL6zqH6QM7RhPukWBW+0f9c0ExhORzB q8/oyc3AHq5tYJ7snv2MF5wtX7jGIDcvkYvRLprdDthmxejS9PERqrTWMOoVDzHi 3rQPNhEmIs64/NqigxNTcUymWrHijV9C/sh2eFSB+mlZqpdfgdH16SvexkuORgZ1 dwCqGmXvjCNeJQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:11:04 2025 by rpki-client