This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft File: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json) Hash identifier: nz+dMlaRIftNtXVbjUqqYVIM40XgJhdQ9I9JiZrpweY= Subject key identifier: 9B:6C:D6:47:61:48:CC:95:A5:2A:5F:42:F7:02:2D:52:BF:F8:B9:8C Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C Certificate issuer: /CN=93c64c668eff34740816eda85a459d0c422e063c Certificate serial: 019AF31CB2802CA2FA7D04152A8B07666E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: 7tot+xfsTofvwINk7M2jzxngVaDSFFasXOchReQlBoU=) 2: zR4iLeAlwp_N8F3SE1jgzNAAf5g.roa (hash: xWq9xR6Qocj5qbdstuQx7KrJz2/dodBVSQAGA+Ot/AI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b2:80:2c:a2:fa:7d:04:15:2a:8b:07:66:6e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=9b6cd6476148cc95a52a5f42f7022d52bff8b98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:af:d0:ec:ce:75:dd:c6:1e:2a:19:1e:ce: 7b:0b:58:84:d9:47:db:8e:37:10:90:53:8c:39:13: e8:f3:80:c0:a8:63:1b:bc:5a:e8:79:b5:3a:04:65: 0d:62:a9:c6:a5:41:2e:96:22:a6:1e:21:99:d6:d6: 4a:78:36:67:a8:cf:5e:5d:d6:7b:39:0f:bd:33:0a: 88:3f:4c:10:a8:85:e8:91:75:06:ff:03:13:f4:38: 1a:63:13:e5:d4:07:fd:bb:a8:0b:ff:67:30:50:8c: ff:92:eb:bb:48:16:f4:ff:46:4c:ba:14:83:98:67: ed:71:12:4e:b4:79:2c:5f:db:25:7e:5d:c7:fa:9d: f7:eb:19:c2:cc:fa:e3:15:cc:d1:7b:75:f1:3e:78: 7c:6c:3f:e7:57:a9:a6:84:4a:e3:e6:22:88:97:1a: c5:da:72:34:3c:b2:89:71:cc:d9:a7:d5:fb:c0:61: a6:15:5d:4e:6e:9d:3a:71:24:d5:f3:c7:75:f4:95: 01:81:59:5b:96:05:39:a8:f2:cc:42:a2:cd:c2:92: 57:f1:4a:b7:b0:da:23:99:bf:81:68:67:ff:28:47: 49:da:5d:16:4a:fc:09:31:ba:01:61:78:05:e0:22: 61:14:a8:36:b2:08:35:7d:57:78:0f:31:eb:a2:30: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6C:D6:47:61:48:CC:95:A5:2A:5F:42:F7:02:2D:52:BF:F8:B9:8C X509v3 Authority Key Identifier: keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ad:e9:4b:c8:c1:72:b5:7e:38:aa:d9:ff:97:71:05:ab:69: 02:f6:90:3c:cd:f9:b2:63:e2:e4:50:f1:d1:f2:ce:8f:9c:eb: dc:4c:04:b5:92:13:e1:d8:75:ed:8f:f6:c4:94:9f:95:25:4d: 96:88:f4:5e:2b:a8:7b:c7:e4:22:44:5f:75:c4:16:d0:88:c9: 52:3c:ed:3a:9d:6b:7f:17:ca:fc:1d:7e:6f:c5:c9:ba:e4:9c: 45:62:a5:08:af:94:7b:6c:b2:a5:0d:da:85:bf:01:f1:ce:56: 54:2c:8a:78:6a:bd:ea:b6:26:dc:78:0b:79:d3:1d:80:c2:44: 16:6e:8e:48:fa:ba:db:57:65:ab:28:54:a9:8d:6b:ae:9d:bd: 4c:0f:9c:f6:c9:3d:d7:45:d2:25:1f:74:4c:7c:81:e5:54:af: 9c:eb:e8:a0:e6:d6:c9:c4:d9:f8:82:fd:fb:fd:fa:b8:8b:71: ea:6a:c2:9c:16:7b:21:1a:d4:5f:3f:3d:eb:b3:25:29:b8:0c: 89:8e:33:4b:28:86:ac:c6:d8:63:14:03:2d:2f:5b:29:d7:77: 61:af:3f:c8:e4:4f:ae:01:75:0f:0c:c1:f9:89:f7:e8:62:22: c0:e6:4d:a7:51:f1:07:c0:3a:80:21:6a:df:84:dc:0d:97:17: 13:22:62:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLKALKL6fQQVKosHZm6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzY0YzY2OGVmZjM0NzQwODE2ZWRhODVhNDU5ZDBjNDIy ZTA2M2MwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD Eyg5YjZjZDY0NzYxNDhjYzk1YTUyYTVmNDJmNzAyMmQ1MmJmZjhiOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kWv0OzOdd3GHioZHs57C1iE2Ufb jjcQkFOMORPo84DAqGMbvFroebU6BGUNYqnGpUEuliKmHiGZ1tZKeDZnqM9eXdZ7 OQ+9MwqIP0wQqIXokXUG/wMT9DgaYxPl1Af9u6gL/2cwUIz/kuu7SBb0/0ZMuhSD mGftcRJOtHksX9slfl3H+p336xnCzPrjFczRe3XxPnh8bD/nV6mmhErj5iKIlxrF 2nI0PLKJcczZp9X7wGGmFV1Obp06cSTV88d19JUBgVlblgU5qPLMQqLNwpJX8Uq3 sNojmb+BaGf/KEdJ2l0WSvwJMboBYXgF4CJhFKg2sgg1fVd4DzHrojB7AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJts1kdhSMyVpSpfQvcCLVK/+LmMMB8GA1UdIwQY MBaAFJPGTGaO/zR0CBbtqFpFnQxCLgY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzIt MTQ3ZWM5NmVhNzMwLzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzItMTQ3ZWM5NmVhNzMw LzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK3pS8jB crV+OKrZ/5dxBatpAvaQPM35smPi5FDx0fLOj5zr3EwEtZIT4dh17Y/2xJSflSVN loj0Xiuoe8fkIkRfdcQW0IjJUjztOp1rfxfK/B1+b8XJuuScRWKlCK+Ue2yypQ3a hb8B8c5WVCyKeGq96rYm3HgLedMdgMJEFm6OSPq621dlqyhUqY1rrp29TA+c9sk9 10XSJR90THyB5VSvnOvooObWycTZ+IL9+/36uItx6mrCnBZ7IRrUXz8967MlKbgM iY4zSyiGrMbYYxQDLS9bKdd3Ya8/yORPrgF1DwzB+Yn36GIiwOZNp1HxB8A6gCFq 34TcDZcXEyJiiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:41 2025 by rpki-client