This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json) Hash identifier: vcTNMlamZylH12lpaqbnpfJyn2R7VuE9gVFI1tXdL+0= Subject key identifier: 4F:8F:FC:AC:BC:FF:F6:10:82:CE:A4:7F:BD:D0:87:24:23:F7:E3:0F Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8 Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8 Certificate serial: 019AF5776007A83C4164CB7BE7C98B81196E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 21:00:32 +0000 Manifest this update: Sat 06 Dec 2025 21:00:32 +0000 Manifest next update: Sun 07 Dec 2025 21:00:32 +0000 Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: 8bkk0aaz0r9lSXUPv7ubdyts+pmxCWJepVIy1d7SVVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:60:07:a8:3c:41:64:cb:7b:e7:c9:8b:81:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8 Validity Not Before: Dec 6 21:00:32 2025 GMT Not After : Dec 7 21:00:32 2025 GMT Subject: CN=4f8ffcacbcfff61082cea47fbdd0872423f7e30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:8a:ea:2a:9f:18:a3:d9:6b:23:5e:df:31: b4:1b:c1:2c:7b:28:9a:0e:3a:37:f3:8b:a8:ad:c7: 1e:80:24:5c:14:82:eb:4f:a9:cc:81:45:a2:06:f0: 36:5a:6e:86:b0:8e:36:8e:3c:a4:5b:13:c5:d4:ad: 08:0b:c6:d1:c5:25:7f:0e:3d:ac:a5:b6:c3:33:e4: 95:51:5a:b3:bc:c5:35:40:08:fb:02:3e:e4:4c:06: fc:4a:8d:d0:36:8a:96:52:bf:cd:32:1e:d8:ff:07: 76:29:88:cc:a5:b8:23:34:5f:11:e6:0b:1d:55:74: d8:9e:b0:20:21:12:06:50:02:6a:18:87:85:0b:ad: 08:1a:fe:c8:d8:28:53:af:37:f0:eb:d5:ee:5a:89: b7:16:99:cc:94:0d:9a:39:1a:6f:bb:b1:e4:e0:af: 3b:fe:63:a2:61:cf:40:55:58:3c:09:b9:17:d0:7b: 9c:09:9c:30:f2:3c:f2:8b:db:7d:80:49:ae:d1:1a: d0:63:17:f0:63:f4:07:5b:67:2e:3e:04:46:34:cc: 5e:6a:2c:68:0d:36:01:d1:1e:20:2f:cc:c7:66:55: 56:b3:84:14:a2:c4:df:56:96:06:cc:a5:19:66:bf: c8:cb:d3:32:fe:ef:2a:98:75:5c:f1:2e:d1:19:2a: 87:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8F:FC:AC:BC:FF:F6:10:82:CE:A4:7F:BD:D0:87:24:23:F7:E3:0F X509v3 Authority Key Identifier: keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:44:78:33:95:ea:3b:99:ea:fb:bf:02:66:57:50:0d:8b:67: 39:e0:28:53:0f:60:8f:d0:1a:ff:74:1e:72:63:7e:92:4b:e2: c9:e7:00:8c:ab:a3:15:7e:25:43:d5:19:58:bb:eb:2a:74:2c: 18:bb:58:33:42:6b:33:2c:71:2c:58:97:3e:2d:6d:8a:67:00: fe:5b:81:44:db:ad:e8:a5:bb:15:43:f7:15:9b:3a:00:ab:57: 0e:91:53:3d:59:3b:62:0c:e7:7f:3b:4a:a4:c9:46:a5:86:60: ae:01:20:9c:92:a2:09:62:02:85:a0:2e:37:a2:57:6a:2d:4b: ea:50:fb:3e:da:d8:74:8c:2a:79:23:99:3b:70:00:89:20:0f: 18:5d:d3:e7:f7:40:af:1c:c2:2e:a2:e7:2d:5d:5c:34:ea:52: ad:e4:85:bb:f1:e9:fb:dd:24:02:23:b4:1b:7f:3c:6c:7b:59: 55:2d:01:92:56:59:fd:3c:27:2d:98:69:5e:b3:88:39:93:da: 45:12:44:bb:5e:4c:41:a2:79:4c:3b:03:90:d2:1a:22:07:e2: 41:73:bb:1a:35:11:ec:ee:0a:ce:3d:75:e0:0b:49:b7:a6:1c: 30:a9:6d:fd:3c:48:5f:64:43:9f:49:80:f8:ac:34:03:eb:91: 80:f8:d3:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d2AHqDxBZMt758mLgRluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzM2Y2Y2NmNTdmMWM0OGYxMWMxNGZkMDA1NDA1YWNjZTM2 ZDAzYjgwHhcNMjUxMjA2MjEwMDMyWhcNMjUxMjA3MjEwMDMyWjAzMTEwLwYDVQQD Eyg0ZjhmZmNhY2JjZmZmNjEwODJjZWE0N2ZiZGQwODcyNDIzZjdlMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtouK6iqfGKPZayNe3zG0G8Eseyia Djo384uorccegCRcFILrT6nMgUWiBvA2Wm6GsI42jjykWxPF1K0IC8bRxSV/Dj2s pbbDM+SVUVqzvMU1QAj7Aj7kTAb8So3QNoqWUr/NMh7Y/wd2KYjMpbgjNF8R5gsd VXTYnrAgIRIGUAJqGIeFC60IGv7I2ChTrzfw69XuWom3FpnMlA2aORpvu7Hk4K87 /mOiYc9AVVg8CbkX0HucCZww8jzyi9t9gEmu0RrQYxfwY/QHW2cuPgRGNMxeaixo DTYB0R4gL8zHZlVWs4QUosTfVpYGzKUZZr/Iy9My/u8qmHVc8S7RGSqHhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+P/Ky8//YQgs6kf73QhyQj9+MPMB8GA1UdIwQY MBaAFPM/bM9X8cSPEcFP0AVAWszjbQO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEt ZjVkNmI0OTIzOTRiLzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEtZjVkNmI0OTIzOTRi LzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0R4M5Xq O5nq+78CZldQDYtnOeAoUw9gj9Aa/3QecmN+kkviyecAjKujFX4lQ9UZWLvrKnQs GLtYM0JrMyxxLFiXPi1timcA/luBRNut6KW7FUP3FZs6AKtXDpFTPVk7YgznfztK pMlGpYZgrgEgnJKiCWIChaAuN6JXai1L6lD7PtrYdIwqeSOZO3AAiSAPGF3T5/dA rxzCLqLnLV1cNOpSreSFu/Hp+90kAiO0G388bHtZVS0BklZZ/TwnLZhpXrOIOZPa RRJEu15MQaJ5TDsDkNIaIgfiQXO7GjUR7O4Kzj114AtJt6YcMKlt/TxIX2RDn0mA +Kw0A+uRgPjTbQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:19 2025 by rpki-client