This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json) Hash identifier: zX4+e3UkUNP8Lsz8MmW0BMi9hBmJVRWptYtlKAvgM/g= Subject key identifier: B2:FB:62:4B:B3:CC:C1:FC:13:70:59:A7:BC:F0:9B:1B:D5:C3:46:D7 Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3 Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3 Certificate serial: 019AF0BF0C98EE0CDF91F065969A575D8B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 23:00:43 +0000 Manifest this update: Fri 05 Dec 2025 23:00:43 +0000 Manifest next update: Sat 06 Dec 2025 23:00:43 +0000 Files and hashes: 1: SxhhasaUaCl0zzl5IKAQ1RUxdbs.roa (hash: pJKXlQ88v8/SpEf9OxWAQJI8LbNnI8MUhTxH48lAKxU=) 2: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: XwvNcWDE89Nu3Rqf3ETwVkCChOW8r3+tqf5mvDFPF/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:0c:98:ee:0c:df:91:f0:65:96:9a:57:5d:8b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3 Validity Not Before: Dec 5 23:00:43 2025 GMT Not After : Dec 6 23:00:43 2025 GMT Subject: CN=b2fb624bb3ccc1fc137059a7bcf09b1bd5c346d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:0c:43:bb:bd:71:0d:9e:62:85:59:97:70: 86:90:06:23:a9:48:25:16:08:50:de:6e:44:aa:bd: 4d:87:fe:2c:03:fe:dd:c5:1c:bb:31:3d:5d:01:ae: 00:e2:74:b1:73:23:1c:28:be:24:0e:00:36:2f:9d: 13:20:e3:4b:fa:f5:90:3c:15:c9:a8:cc:f5:c8:4e: 60:ae:ec:fd:f8:ab:87:08:7b:3a:3c:2c:e4:7f:35: 77:97:7b:d0:cd:bd:5a:18:0a:bc:1c:82:31:2e:5d: 8a:b5:d0:5c:f2:63:5b:ee:25:19:b8:96:8e:26:c7: 54:8f:12:bc:73:22:cd:be:00:fd:ee:74:6e:81:9c: 46:77:42:b0:86:47:79:d9:85:e1:e3:d3:f7:0e:75: 8d:0a:98:12:c5:a3:2f:df:38:c3:ae:35:1b:ca:48: 15:24:a6:66:d6:19:3b:2e:34:c6:a4:aa:50:ac:57: 89:04:eb:22:02:cc:ae:a6:dd:f4:a7:40:a2:a8:8a: 20:54:5a:13:a7:6b:43:b9:18:f1:32:a9:ca:84:b6: 21:be:03:db:3a:57:e2:ce:4d:c4:57:23:e2:47:52: ef:80:12:fe:b5:15:c2:db:18:3a:30:5b:57:22:ec: c7:1f:c0:cd:50:b0:20:97:51:77:6e:ee:44:5e:3c: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:62:4B:B3:CC:C1:FC:13:70:59:A7:BC:F0:9B:1B:D5:C3:46:D7 X509v3 Authority Key Identifier: keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:66:72:c8:2f:36:18:0d:1e:e8:77:32:2b:c8:97:a8:72:87: 85:de:38:b3:36:ec:32:c3:12:a0:b3:99:0c:9d:72:cc:a4:90: c9:0b:a6:a6:1b:6a:89:a6:5c:43:bd:89:05:85:ba:ca:96:e7: da:8f:23:76:ba:47:ab:e1:b6:a6:51:d4:7b:73:38:5e:f5:cf: c8:d7:42:7f:04:25:fd:1c:9a:0b:d6:07:2d:66:6e:bb:a1:7d: ea:bc:35:87:cb:05:c5:24:37:9c:40:1f:f5:b3:46:ab:a4:1e: 28:e3:18:c9:fc:a1:f1:2c:95:e8:9d:aa:26:d9:b3:ba:ba:c5: 25:a9:29:d1:7f:fe:f9:6d:68:03:88:8f:6c:a9:61:fb:62:3d: 3e:52:28:5f:6c:e1:86:b5:17:71:6d:52:7e:05:d3:2a:9f:6d: d0:66:d5:bf:28:96:04:78:66:ad:ae:a7:dd:50:4a:80:cc:62: 4b:9e:e6:85:3d:b6:5d:63:dc:a5:61:e2:24:4e:86:92:d5:78: c7:9b:87:36:62:0f:eb:ea:00:20:c5:6f:df:82:0e:25:4a:0b: 5f:7b:cc:d3:99:f8:dd:dd:ac:32:1b:bd:95:e7:4b:36:81:24: f4:a4:8b:e4:90:40:0b:b2:9b:52:55:b8:3e:75:c9:48:66:00: 9c:6f:03:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwyY7gzfkfBllppXXYs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2YyNmI1NDFmMGJiYThhNWNlNzFlYTUzODExYjQ2YzE2 NTdhYjMwHhcNMjUxMjA1MjMwMDQzWhcNMjUxMjA2MjMwMDQzWjAzMTEwLwYDVQQD EyhiMmZiNjI0YmIzY2NjMWZjMTM3MDU5YTdiY2YwOWIxYmQ1YzM0NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQIMQ7u9cQ2eYoVZl3CGkAYjqUgl FghQ3m5Eqr1Nh/4sA/7dxRy7MT1dAa4A4nSxcyMcKL4kDgA2L50TIONL+vWQPBXJ qMz1yE5gruz9+KuHCHs6PCzkfzV3l3vQzb1aGAq8HIIxLl2KtdBc8mNb7iUZuJaO JsdUjxK8cyLNvgD97nRugZxGd0Kwhkd52YXh49P3DnWNCpgSxaMv3zjDrjUbykgV JKZm1hk7LjTGpKpQrFeJBOsiAsyupt30p0CiqIogVFoTp2tDuRjxMqnKhLYhvgPb Olfizk3EVyPiR1LvgBL+tRXC2xg6MFtXIuzHH8DNULAgl1F3bu5EXjwuqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLL7YkuzzMH8E3BZp7zwmxvVw0bXMB8GA1UdIwQY MBaAFP8/JrVB8Luopc5x6lOBG0bBZXqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYt MWMyNjBiMWUyOGQxLzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYtMWMyNjBiMWUyOGQx LzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2ZyyC82 GA0e6HcyK8iXqHKHhd44szbsMsMSoLOZDJ1yzKSQyQumphtqiaZcQ72JBYW6ypbn 2o8jdrpHq+G2plHUe3M4XvXPyNdCfwQl/RyaC9YHLWZuu6F96rw1h8sFxSQ3nEAf 9bNGq6QeKOMYyfyh8SyV6J2qJtmzurrFJakp0X/++W1oA4iPbKlh+2I9PlIoX2zh hrUXcW1SfgXTKp9t0GbVvyiWBHhmra6n3VBKgMxiS57mhT22XWPcpWHiJE6GktV4 x5uHNmIP6+oAIMVv34IOJUoLX3vM05n43d2sMhu9ledLNoEk9KSL5JBAC7KbUlW4 PnXJSGYAnG8DXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:29 2025 by rpki-client