This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json) Hash identifier: nWck26b6oWRH0u2LHcmTpq2Sro5t1UsuLZHUz7jlx4Y= Subject key identifier: F3:48:0E:55:ED:2E:57:31:FD:2C:C9:A1:08:7A:EC:5D:CE:63:AE:48 Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc Certificate serial: 019AF276D2236D929C579B31B23ED72820D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft Manifest number: 0CFA Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: 4MDFjGchxFgPtIi7syT52y3fwL4PpqPiSsjF/Ex5X+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d2:23:6d:92:9c:57:9b:31:b2:3e:d7:28:20:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=f3480e55ed2e5731fd2cc9a1087aec5dce63ae48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:73:e6:75:a7:ab:e8:01:00:8f:75:42:55: 23:76:1b:ec:4f:ef:da:5c:7c:ee:3f:b0:8f:5c:1a: f8:b1:9b:95:bb:b9:c3:e1:ef:ce:ad:a1:25:35:ba: 36:5b:8f:36:dd:9f:0d:32:50:97:3f:71:7c:c4:50: e8:70:b6:5b:37:5b:39:9f:45:e8:fc:fe:72:1a:e4: 45:00:1e:50:7b:bb:6f:33:f1:17:68:d9:30:3b:11: 2b:1e:c6:26:86:30:14:fb:c2:5c:0b:67:57:5f:4f: 22:86:35:47:6d:07:99:d0:1b:f0:56:2b:9e:80:43: fc:23:cc:e3:c0:07:c6:d4:c3:13:f8:c0:83:6c:30: d6:e5:cb:ca:90:11:be:78:c4:10:5e:41:0a:91:1a: 14:91:dd:4e:48:da:c5:6b:18:e6:47:f0:78:01:fe: 54:61:c9:82:d8:05:e1:77:0c:17:a5:a9:93:7f:b7: 12:08:c8:a0:a8:48:ac:29:de:d9:4c:ab:3f:c7:4d: 81:ff:e7:ba:c1:f5:df:77:a8:6f:81:34:c8:26:e2: bf:9d:2a:8f:5a:45:f2:14:3e:0b:d8:50:ae:72:23: 0c:6b:66:ad:e0:be:67:be:97:92:1f:55:46:1f:0b: 3f:f5:0a:91:2b:99:1a:df:a7:8f:ad:7c:da:89:a6: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:48:0E:55:ED:2E:57:31:FD:2C:C9:A1:08:7A:EC:5D:CE:63:AE:48 X509v3 Authority Key Identifier: keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e4:0a:41:79:3f:71:2c:6a:5b:be:f8:1a:c7:73:b4:f9:a4: 03:9f:06:44:0b:8c:f5:3a:cf:4b:dd:8c:ca:79:f8:0a:71:f4: f0:27:53:9d:c3:25:d7:d0:35:29:79:87:8a:b1:75:66:b3:bb: 25:48:10:68:14:35:65:d8:fe:63:c5:1e:a3:f9:ca:28:b1:57: 4f:1d:40:50:8e:94:85:f2:14:23:31:77:8b:af:8f:5e:ad:b4: 6c:9f:15:75:7a:2c:73:a1:3b:5e:4c:45:da:d0:7d:83:73:5d: 3c:49:05:5d:79:35:46:53:f2:e1:c6:8a:ba:d2:83:e1:05:55: 93:d0:f1:21:0c:76:4a:33:8c:c7:3a:63:7e:c4:c5:0b:04:7e: 6c:d3:d8:30:43:0f:9d:83:22:fe:0e:6e:65:1e:3a:66:8e:41: 1a:33:3b:b3:53:9b:5e:c9:15:77:51:c9:3a:98:86:8f:f1:44: 5d:1d:bc:b9:1e:62:ff:b2:f1:f7:dc:6e:97:2e:ef:6c:95:34: f2:56:c7:5c:ee:ee:f5:b6:e7:29:28:7b:fa:90:ea:ba:27:6a: 2c:71:5a:15:c3:29:f8:ab:a3:81:74:4e:02:80:cd:1f:c8:07: 84:6f:da:23:c7:d9:db:16:c1:a2:52:09:0d:7d:4c:2e:37:30: ff:32:ee:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtIjbZKcV5sxsj7XKCDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjhkNWIxYTFkMjI1NDEyODc2ODJiZGM2OTM2ZmYyYzUy NWFiYmMwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD EyhmMzQ4MGU1NWVkMmU1NzMxZmQyY2M5YTEwODdhZWM1ZGNlNjNhZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mdz5nWnq+gBAI91QlUjdhvsT+/a XHzuP7CPXBr4sZuVu7nD4e/OraElNbo2W4823Z8NMlCXP3F8xFDocLZbN1s5n0Xo /P5yGuRFAB5Qe7tvM/EXaNkwOxErHsYmhjAU+8JcC2dXX08ihjVHbQeZ0BvwViue gEP8I8zjwAfG1MMT+MCDbDDW5cvKkBG+eMQQXkEKkRoUkd1OSNrFaxjmR/B4Af5U YcmC2AXhdwwXpamTf7cSCMigqEisKd7ZTKs/x02B/+e6wfXfd6hvgTTIJuK/nSqP WkXyFD4L2FCuciMMa2at4L5nvpeSH1VGHws/9QqRK5ka36ePrXzaiabr1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNIDlXtLlcx/SzJoQh67F3OY65IMB8GA1UdIwQY MBaAFM/41bGh0iVBKHaCvcaTb/LFJau8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wY2EzMTAtM2RmZS00MTNkLThmNGYt NWFmZTFjZTkyYzRjLzEvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wY2EzMTAtM2RmZS00MTNkLThmNGYtNWFmZTFjZTkyYzRj LzEvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuQKQXk/ cSxqW774GsdztPmkA58GRAuM9TrPS92Mynn4CnH08CdTncMl19A1KXmHirF1ZrO7 JUgQaBQ1Zdj+Y8Ueo/nKKLFXTx1AUI6UhfIUIzF3i6+PXq20bJ8VdXosc6E7XkxF 2tB9g3NdPEkFXXk1RlPy4caKutKD4QVVk9DxIQx2SjOMxzpjfsTFCwR+bNPYMEMP nYMi/g5uZR46Zo5BGjM7s1ObXskVd1HJOpiGj/FEXR28uR5i/7Lx99xuly7vbJU0 8lbHXO7u9bbnKSh7+pDquidqLHFaFcMp+KujgXROAoDNH8gHhG/aI8fZ2xbBolIJ DX1MLjcw/zLuDw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:49 2025 by rpki-client