This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json) Hash identifier: QxTsndF+4Q4XcdXyHrriPqv92qbqqPQrX+OzVzJh3Y0= Subject key identifier: 6F:58:FB:35:6C:EE:F0:38:AF:37:C2:32:24:AF:AE:D1:FF:E4:13:8F Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Certificate serial: 019AF163E8F25258CF105F462B4CC19F7E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft Manifest number: 088E Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=) 2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: g45FjzhKPFanDNyxp6EVkq7ja8inpbxBB/PCZIDNh+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e8:f2:52:58:cf:10:5f:46:2b:4c:c1:9f:7e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=6f58fb356ceef038af37c23224afaed1ffe4138f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:c5:1c:2e:b0:21:1e:b0:58:d4:8b:a1:18: 2d:95:f1:a6:ac:8e:15:03:08:27:62:2d:5f:1d:22: 93:24:a1:db:8e:2c:83:3e:dc:10:24:dc:ff:08:f6: 80:1f:58:02:7d:ad:77:27:a6:db:ac:45:1b:54:d6: 06:56:87:13:58:93:21:48:ac:7c:f9:a9:c4:e1:6f: 72:93:0e:52:1f:41:fb:2d:5e:4c:10:c5:ae:99:3a: 5c:e8:3c:9d:90:0f:be:3b:36:93:d0:d9:1f:bb:f5: 66:b2:3c:5e:30:91:31:20:59:b7:ae:63:d1:e3:e2: 93:a3:43:46:dd:42:8b:bc:bb:b4:86:f1:1c:26:72: 91:12:34:ea:75:23:c1:c9:cb:1f:9a:97:f2:8b:57: 13:6d:48:b8:c2:78:5e:07:b3:ae:d1:b3:0c:8d:27: 4e:28:d5:3e:64:82:df:b9:7a:57:1f:39:fc:c8:e2: 82:72:05:d2:9f:8e:ce:1e:90:e6:29:7c:f0:c3:30: c6:25:2a:2f:e3:0f:82:0e:af:e6:8b:57:55:61:8e: a4:0a:dd:4e:34:a4:42:4a:0d:2e:7e:27:79:a0:2a: 65:ec:9c:66:47:c7:d2:f4:d9:60:35:7f:17:62:a8: 1b:14:0c:77:97:4e:90:11:d8:78:95:7e:45:10:a0: 9f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:58:FB:35:6C:EE:F0:38:AF:37:C2:32:24:AF:AE:D1:FF:E4:13:8F X509v3 Authority Key Identifier: keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:97:a7:35:c5:c8:22:4f:36:07:1b:32:00:86:ba:b4:b1:41: 1f:6c:2a:be:c5:6f:05:f2:96:e2:8e:3e:74:cb:9f:e3:61:ab: a7:34:a7:6f:9e:a3:36:fa:25:52:33:5c:9b:c7:c6:2b:7c:c3: a0:f5:54:cd:a9:5e:7e:02:da:25:f6:13:0b:ef:d3:1a:32:3a: 12:4a:d2:fa:c4:04:29:06:c7:81:ab:99:db:0b:00:62:8d:2b: 5c:64:72:f0:61:06:1d:9b:5d:60:a9:93:f7:4a:f5:7d:26:f4: 90:79:c6:49:c1:85:96:14:84:8d:ae:eb:4d:5d:58:d7:96:21: 41:5f:27:c6:c9:8d:65:1d:59:35:25:d6:3b:c4:4f:d0:84:65: 39:96:f7:83:ac:ee:9d:85:4f:02:01:e9:a6:fa:cf:4b:37:21: 7b:10:42:92:f0:84:ac:1f:a1:8a:1e:9d:84:1c:2c:a9:cf:fe: 4e:9d:b8:47:cd:ef:7a:7b:35:c6:0c:14:3c:8a:60:9e:dd:16: 1b:27:ac:f8:01:28:b0:00:5f:03:d8:54:58:d7:85:ef:fa:e5: 4e:f4:cc:3a:43:3d:43:b0:1b:e9:f3:92:56:0a:9c:79:72:16: 2e:2e:2c:72:e3:40:08:63:41:b3:c5:08:59:08:1b:46:85:62: f3:0b:bb:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+jyUljPEF9GK0zBn36aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzZjYzRhNzQxOGEwOTQyMWJhOTgwNWU3NjRlZWYzNDJl ZjhmMzgwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD Eyg2ZjU4ZmIzNTZjZWVmMDM4YWYzN2MyMzIyNGFmYWVkMWZmZTQxMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy/FHC6wIR6wWNSLoRgtlfGmrI4V AwgnYi1fHSKTJKHbjiyDPtwQJNz/CPaAH1gCfa13J6bbrEUbVNYGVocTWJMhSKx8 +anE4W9ykw5SH0H7LV5MEMWumTpc6DydkA++OzaT0Nkfu/VmsjxeMJExIFm3rmPR 4+KTo0NG3UKLvLu0hvEcJnKREjTqdSPBycsfmpfyi1cTbUi4wnheB7Ou0bMMjSdO KNU+ZILfuXpXHzn8yOKCcgXSn47OHpDmKXzwwzDGJSov4w+CDq/mi1dVYY6kCt1O NKRCSg0ufid5oCpl7JxmR8fS9NlgNX8XYqgbFAx3l06QEdh4lX5FEKCfiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9Y+zVs7vA4rzfCMiSvrtH/5BOPMB8GA1UdIwQY MBaAFM/GzEp0GKCUIbqYBedk7vNC7484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzIt NGFmMWZiNzQzOGU3LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzItNGFmMWZiNzQzOGU3 LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZenNcXI Ik82BxsyAIa6tLFBH2wqvsVvBfKW4o4+dMuf42GrpzSnb56jNvolUjNcm8fGK3zD oPVUzalefgLaJfYTC+/TGjI6EkrS+sQEKQbHgauZ2wsAYo0rXGRy8GEGHZtdYKmT 90r1fSb0kHnGScGFlhSEja7rTV1Y15YhQV8nxsmNZR1ZNSXWO8RP0IRlOZb3g6zu nYVPAgHppvrPSzchexBCkvCErB+hih6dhBwsqc/+Tp24R83vens1xgwUPIpgnt0W Gyes+AEosABfA9hUWNeF7/rlTvTMOkM9Q7Ab6fOSVgqceXIWLi4scuNACGNBs8UI WQgbRoVi8wu7Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:43:58 2025 by rpki-client