This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json) Hash identifier: c4VFYYPTCWEpEkeHtr79Zei4cQ1I6labR8CWdMnUX10= Subject key identifier: B9:A2:FB:2D:04:BE:FC:FF:4D:A5:F7:E9:7B:12:BC:34:37:FC:B3:A7 Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84 Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84 Certificate serial: 019AF088E1F7D9E3EB01DD2FD912D8A0BE14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft Manifest number: 16FA Signing time: Fri 05 Dec 2025 22:01:33 +0000 Manifest this update: Fri 05 Dec 2025 22:01:33 +0000 Manifest next update: Sat 06 Dec 2025 22:01:33 +0000 Files and hashes: 1: Kyq8dvDQCWTM4SDI01T-WEma_xs.roa (hash: csmuD1qBTRKUBvLNGvxDwNNOARNFB8rqYka6vl5ZQvQ=) 2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: OZfuUVGJUtoMcW7YyFLwZ3uHczvLAjMWUwxJB1u/wiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:e1:f7:d9:e3:eb:01:dd:2f:d9:12:d8:a0:be:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc8df88054060df685bba9739123e8342d479e84 Validity Not Before: Dec 5 22:01:33 2025 GMT Not After : Dec 6 22:01:33 2025 GMT Subject: CN=b9a2fb2d04befcff4da5f7e97b12bc3437fcb3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:2c:bc:c4:56:9f:cb:08:61:9e:78:3e:b9: 68:d1:01:44:70:80:09:5c:b2:2d:31:db:41:c3:7f: 63:47:ba:c8:2c:73:92:b1:3e:fd:36:ab:6d:b2:67: fb:23:a6:32:f4:8c:2a:16:24:ff:d0:c4:45:8a:32: cd:4d:18:15:c0:56:e7:6a:09:a1:ca:b9:16:93:a6: d5:54:b1:58:7d:2b:72:99:62:d2:c4:e8:f0:b8:4e: 72:a0:54:53:ee:52:92:bb:86:d3:ed:34:14:77:68: e4:42:b3:68:d6:1f:7f:6d:1c:1e:ff:de:fe:d8:19: 0d:bf:5c:1f:8e:a8:63:17:42:ee:e9:18:18:aa:cf: 0d:61:a8:aa:8b:e5:fd:4b:0e:05:0b:47:f4:dd:8e: 19:97:09:7c:f4:29:f3:87:c0:35:b9:c6:01:a5:6c: af:7e:e2:0a:29:4c:d2:ee:df:52:9b:b8:c7:a0:3c: 35:99:e9:93:69:65:ce:8f:da:29:ed:f1:93:f9:54: bd:2e:e9:b7:ca:c5:7a:50:9c:cf:f1:87:83:b6:dc: 44:15:07:09:f0:de:36:48:01:1b:30:c3:b1:85:f4: 7c:79:18:b4:f7:8a:e3:56:a8:39:2c:f3:05:c4:28: 5e:82:98:c5:33:ef:96:bb:ed:c8:54:ae:e6:d7:f4: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A2:FB:2D:04:BE:FC:FF:4D:A5:F7:E9:7B:12:BC:34:37:FC:B3:A7 X509v3 Authority Key Identifier: keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fa:e0:a5:e0:1d:bb:d2:1f:f0:52:9b:2f:89:2d:14:b5:89: 50:01:d1:4a:59:f8:a8:32:d5:08:78:56:ad:51:15:4d:cb:7a: ee:d4:d4:15:e2:16:2e:96:cb:92:6a:9b:53:24:d3:a7:63:cc: 47:d7:85:0b:07:08:78:79:a1:b4:fc:19:ad:d5:ac:49:cb:d9: b7:93:d3:a0:a6:2e:79:c0:50:d1:fb:41:db:49:6c:c8:d3:4f: 21:91:96:5b:61:62:59:06:60:f4:77:7d:45:40:e1:cb:3a:7e: 56:e4:64:a9:b4:e6:d8:ce:11:36:0a:52:01:b2:68:96:a6:aa: a5:24:36:95:79:d2:f7:4c:48:8b:47:3c:f7:79:78:be:5e:ed: 9d:bf:78:02:ae:65:e7:19:31:79:60:60:aa:82:05:26:16:b6: be:bf:77:da:c1:05:e9:8b:7a:42:1d:07:37:48:ba:1f:45:e8: 34:00:43:a3:f3:a9:f2:99:f7:f7:66:d2:29:6e:4a:20:36:d5: 65:b2:d5:f8:93:30:e6:a5:0d:a7:8c:69:99:6c:e9:66:0f:59: 09:51:1b:a6:f6:71:bf:3d:f1:89:e7:96:5c:8e:f4:2c:03:9b: e0:87:62:88:3a:a4:83:d0:7a:c8:51:76:55:cb:4e:fe:b0:99: 5b:fb:2e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiOH32ePrAd0v2RLYoL4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOGRmODgwNTQwNjBkZjY4NWJiYTk3MzkxMjNlODM0MmQ0 NzllODQwHhcNMjUxMjA1MjIwMTMzWhcNMjUxMjA2MjIwMTMzWjAzMTEwLwYDVQQD EyhiOWEyZmIyZDA0YmVmY2ZmNGRhNWY3ZTk3YjEyYmMzNDM3ZmNiM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzUsvMRWn8sIYZ54Prlo0QFEcIAJ XLItMdtBw39jR7rILHOSsT79Nqttsmf7I6Yy9IwqFiT/0MRFijLNTRgVwFbnagmh yrkWk6bVVLFYfStymWLSxOjwuE5yoFRT7lKSu4bT7TQUd2jkQrNo1h9/bRwe/97+ 2BkNv1wfjqhjF0Lu6RgYqs8NYaiqi+X9Sw4FC0f03Y4Zlwl89Cnzh8A1ucYBpWyv fuIKKUzS7t9Sm7jHoDw1memTaWXOj9op7fGT+VS9Lum3ysV6UJzP8YeDttxEFQcJ 8N42SAEbMMOxhfR8eRi094rjVqg5LPMFxChegpjFM++Wu+3IVK7m1/QMzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmi+y0Evvz/TaX36XsSvDQ3/LOnMB8GA1UdIwQY MBaAFMyN+IBUBg32hbupc5Ej6DQtR56EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMt ZGM3ODFjYzJhMjU4LzEvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMtZGM3ODFjYzJhMjU4 LzEvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/rgpeAd u9If8FKbL4ktFLWJUAHRSln4qDLVCHhWrVEVTct67tTUFeIWLpbLkmqbUyTTp2PM R9eFCwcIeHmhtPwZrdWsScvZt5PToKYuecBQ0ftB20lsyNNPIZGWW2FiWQZg9Hd9 RUDhyzp+VuRkqbTm2M4RNgpSAbJolqaqpSQ2lXnS90xIi0c893l4vl7tnb94Aq5l 5xkxeWBgqoIFJha2vr932sEF6Yt6Qh0HN0i6H0XoNABDo/Op8pn392bSKW5KIDbV ZbLV+JMw5qUNp4xpmWzpZg9ZCVEbpvZxvz3xieeWXI70LAOb4IdiiDqkg9B6yFF2 VctO/rCZW/suPA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:05 2025 by rpki-client