This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json) Hash identifier: Ful23Z1VkqA+B1TU6IAy7KjI+tOdYamEfAYdwBbEgQM= Subject key identifier: 04:EA:FC:80:2B:CB:09:D2:E1:CF:64:26:0E:CA:33:29:B8:7E:71:41 Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4 Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4 Certificate serial: 019AF209CC0A80F5B0E4467C2E8F98BB9FCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:59 +0000 Manifest this update: Sat 06 Dec 2025 05:01:59 +0000 Manifest next update: Sun 07 Dec 2025 05:01:59 +0000 Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=) 2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: BV8T5ljKXr/GGl2wd+jJ6TkO0e3uOjJuDEQciee4y0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:cc:0a:80:f5:b0:e4:46:7c:2e:8f:98:bb:9f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4 Validity Not Before: Dec 6 05:01:59 2025 GMT Not After : Dec 7 05:01:59 2025 GMT Subject: CN=04eafc802bcb09d2e1cf64260eca3329b87e7141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:5e:98:f2:e9:44:ca:82:13:aa:c2:61:73: 0d:5f:1f:97:3e:65:60:6e:84:cd:7f:b7:3b:ec:94: 63:7e:a3:de:22:d4:da:02:d3:25:8d:bd:7d:15:63: c3:12:03:d9:1a:71:ab:85:d2:99:fb:1e:5d:1c:8b: c2:fe:38:36:72:64:c9:12:d4:66:c9:a1:f8:9a:50: 18:d6:b1:ee:8a:41:75:79:97:c2:06:e7:2f:9c:b7: 4e:13:4c:ee:d5:e0:29:70:13:9c:19:e2:df:a9:ee: ba:bf:82:26:e5:08:ff:be:92:43:88:13:d5:a2:88: 18:47:52:c5:d4:6e:8a:3e:36:21:f8:eb:5f:f4:84: e5:82:5f:34:5e:c2:fe:27:ee:9c:f6:1d:89:d8:91: 80:f5:46:91:90:df:49:fa:99:5e:53:c0:ba:01:9b: 9f:63:85:ec:c8:bc:1d:00:71:a1:81:a1:91:bb:e9: 93:27:58:c4:22:3b:2b:a2:b1:97:ad:cd:73:ed:9c: ca:83:56:31:63:98:a2:69:02:23:40:00:2e:dd:a1: 0d:68:19:63:f8:50:e2:be:17:78:16:7d:c4:a3:ad: 20:15:fe:75:41:e9:5a:2a:9c:f7:47:2a:b3:38:2f: a7:eb:77:ce:d4:7f:95:0c:d2:95:99:79:58:7b:fc: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:FC:80:2B:CB:09:D2:E1:CF:64:26:0E:CA:33:29:B8:7E:71:41 X509v3 Authority Key Identifier: keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:63:b2:5f:d8:c1:d6:63:bc:21:d4:84:d2:23:47:3d:ef:f5: 69:80:d4:b3:30:0b:a0:af:65:0a:49:95:3d:76:d0:2d:8e:e9: fe:9e:51:f5:2b:32:8f:68:26:e7:c9:b5:a8:69:a1:83:2c:f7: 11:dc:f2:e8:91:93:36:e1:62:d0:0f:d3:34:39:38:6a:d1:a8: 1b:ab:1e:3d:64:78:a8:4b:bd:77:84:d1:65:2f:72:d3:4f:09: e7:18:94:53:03:b0:38:2c:10:ac:f2:ba:e1:aa:f5:d5:72:1d: 86:f7:be:eb:ea:14:e9:bf:46:54:1b:89:77:76:9a:d5:fb:46: 41:c2:18:8c:90:1d:4a:f8:b1:bc:ac:c9:4c:ce:04:7f:98:23: bf:9f:7e:e3:50:77:09:01:34:59:f4:4f:ae:58:49:d4:ce:15: 6c:94:61:05:65:44:0f:5d:e4:0d:df:11:85:00:cf:6b:95:15: 8c:9a:8b:71:81:34:8b:72:9e:6c:e1:64:34:b9:56:b0:a8:08: eb:e1:4c:09:cc:56:76:8a:c9:20:e0:55:2c:b7:37:bf:e2:c2: 55:ce:63:0f:ca:46:19:d5:83:57:e3:d6:19:d7:af:ff:d9:f1: 23:3b:10:7e:e7:58:1a:f8:7d:61:54:36:ab:81:41:36:ea:e6: 15:b4:46:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcwKgPWw5EZ8Lo+Yu5/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0 OGExYzQwHhcNMjUxMjA2MDUwMTU5WhcNMjUxMjA3MDUwMTU5WjAzMTEwLwYDVQQD EygwNGVhZmM4MDJiY2IwOWQyZTFjZjY0MjYwZWNhMzMyOWI4N2U3MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX9emPLpRMqCE6rCYXMNXx+XPmVg boTNf7c77JRjfqPeItTaAtMljb19FWPDEgPZGnGrhdKZ+x5dHIvC/jg2cmTJEtRm yaH4mlAY1rHuikF1eZfCBucvnLdOE0zu1eApcBOcGeLfqe66v4Im5Qj/vpJDiBPV oogYR1LF1G6KPjYh+Otf9ITlgl80XsL+J+6c9h2J2JGA9UaRkN9J+pleU8C6AZuf Y4XsyLwdAHGhgaGRu+mTJ1jEIjsrorGXrc1z7ZzKg1YxY5iiaQIjQAAu3aENaBlj +FDivhd4Fn3Eo60gFf51QelaKpz3RyqzOC+n63fO1H+VDNKVmXlYe/zZvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATq/IArywnS4c9kJg7KMym4fnFBMB8GA1UdIwQY MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt ODA1MzJkZDc0ZDRkLzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWOyX9jB 1mO8IdSE0iNHPe/1aYDUszALoK9lCkmVPXbQLY7p/p5R9Ssyj2gm58m1qGmhgyz3 Edzy6JGTNuFi0A/TNDk4atGoG6sePWR4qEu9d4TRZS9y008J5xiUUwOwOCwQrPK6 4ar11XIdhve+6+oU6b9GVBuJd3aa1ftGQcIYjJAdSvixvKzJTM4Ef5gjv59+41B3 CQE0WfRPrlhJ1M4VbJRhBWVED13kDd8RhQDPa5UVjJqLcYE0i3KebOFkNLlWsKgI 6+FMCcxWdorJIOBVLLc3v+LCVc5jD8pGGdWDV+PWGdev/9nxIzsQfudYGvh9YVQ2 q4FBNurmFbRGbA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:05 2025 by rpki-client