This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json) Hash identifier: O8i5yvNAgnisvBFzRYf03ZXt7LLWqizu2PaaAKM48j8= Subject key identifier: E8:C6:21:5E:55:4E:5D:D6:E1:7B:FB:CC:57:5C:8A:55:F5:2F:57:E6 Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0 Certificate serial: 019B08FEA19B4D4AA8BD99AE19F75B1130FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft Manifest number: 125F Signing time: Wed 10 Dec 2025 16:01:03 +0000 Manifest this update: Wed 10 Dec 2025 16:01:03 +0000 Manifest next update: Thu 11 Dec 2025 16:01:03 +0000 Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=) 2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: 6KK6A8Fw2Y3Elhl7Pfp2LeMrZ8WcCObc6exKLaLNv/A=) 3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:a1:9b:4d:4a:a8:bd:99:ae:19:f7:5b:11:30:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0 Validity Not Before: Dec 10 16:01:03 2025 GMT Not After : Dec 11 16:01:03 2025 GMT Subject: CN=e8c6215e554e5dd6e17bfbcc575c8a55f52f57e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:2c:f5:37:d3:a1:49:19:0e:0c:59:8c:8f: 1a:58:ec:29:ca:da:9f:ed:26:9c:05:92:0c:85:fb: c8:d7:9b:97:7a:7e:66:66:0c:54:71:e0:cb:81:a9: a8:34:9c:0f:e9:a4:32:3b:f2:7d:e2:cf:a3:06:16: da:fb:40:15:19:c5:f6:28:c7:33:b1:58:dd:b1:c1: 8c:fd:1d:b6:39:8e:68:be:12:2e:37:db:c8:b9:70: c7:b2:f8:93:f8:8e:4d:cb:fe:00:ec:44:b3:6f:c0: 77:c0:99:7a:7e:e8:1e:83:1c:7a:d0:0c:dd:0e:d6: 66:01:74:00:c5:a2:10:72:c3:a7:f0:bc:da:1c:96: 6d:f0:3e:3e:f2:0a:2a:d3:df:93:3b:4b:d2:35:3e: 03:c2:82:fd:2f:24:72:1a:7f:8d:ae:04:83:9b:7d: 07:55:2e:d0:73:19:70:23:f7:37:a0:30:d4:4b:18: a9:71:ff:12:49:26:81:25:b5:38:2b:4b:18:da:70: 0c:d0:4b:ad:29:1b:b8:51:18:d7:a8:b6:01:de:4e: 75:e0:55:58:e3:c0:9a:71:20:5f:38:e2:dd:40:72: 5c:2f:48:83:bc:f7:9b:4d:8e:a0:b4:60:ca:28:07: d5:d3:72:3c:c7:ca:1b:4e:81:4e:6c:a3:c6:93:d9: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C6:21:5E:55:4E:5D:D6:E1:7B:FB:CC:57:5C:8A:55:F5:2F:57:E6 X509v3 Authority Key Identifier: keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:6c:41:a0:f6:ec:fb:d7:fe:39:4c:1b:17:2a:d8:e3:3c: 9e:58:30:02:c8:9e:8a:ac:77:6a:f4:a6:91:85:49:1d:d5:a5: 43:32:5c:c1:87:26:55:a6:fb:82:5e:2d:9a:d0:a7:a5:88:53: 85:48:fd:d2:67:f7:d6:31:51:b0:4d:d9:82:e5:35:b1:2b:ae: 49:2f:1d:8a:7b:03:df:f6:f9:83:b3:eb:c9:8a:e5:11:bf:a7: ab:60:90:b3:a0:61:19:e7:79:9f:63:17:0b:87:97:8b:43:64: 22:99:7b:ea:a9:ae:b6:f9:a6:39:54:d3:41:3d:df:cb:10:a3: 49:78:41:92:ca:6e:3f:42:47:1c:52:09:e8:27:fd:ef:35:3e: 87:1d:6d:3b:47:20:d1:d8:c4:23:1d:17:2e:ba:95:65:bd:e2: 08:21:99:15:a6:0a:a9:c8:58:68:29:e4:41:fa:b8:55:66:7b: 43:12:f3:d2:1c:0e:46:cd:86:ab:36:e3:4b:2c:7f:70:ac:7a: 0e:40:ce:42:96:8d:d5:ed:25:1c:3c:89:59:d6:a3:9f:66:a9: a8:2b:1c:ee:86:f9:15:e2:30:8f:9e:d3:35:99:b9:01:5f:67: 94:ed:0c:74:ec:f1:ae:88:ae:2d:99:66:73:cd:0e:7e:d6:5d: b0:d7:89:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/qGbTUqovZmuGfdbETD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3 OWFhZDAwHhcNMjUxMjEwMTYwMTAzWhcNMjUxMjExMTYwMTAzWjAzMTEwLwYDVQQD EyhlOGM2MjE1ZTU1NGU1ZGQ2ZTE3YmZiY2M1NzVjOGE1NWY1MmY1N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTos9TfToUkZDgxZjI8aWOwpytqf 7SacBZIMhfvI15uXen5mZgxUceDLgamoNJwP6aQyO/J94s+jBhba+0AVGcX2KMcz sVjdscGM/R22OY5ovhIuN9vIuXDHsviT+I5Ny/4A7ESzb8B3wJl6fugegxx60Azd DtZmAXQAxaIQcsOn8LzaHJZt8D4+8goq09+TO0vSNT4DwoL9LyRyGn+NrgSDm30H VS7QcxlwI/c3oDDUSxipcf8SSSaBJbU4K0sY2nAM0EutKRu4URjXqLYB3k514FVY 48CacSBfOOLdQHJcL0iDvPebTY6gtGDKKAfV03I8x8obToFObKPGk9k7twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjGIV5VTl3W4Xv7zFdcilX1L1fmMB8GA1UdIwQY MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt Y2FjYThiODBjOTFjLzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeNsQaD2 7PvX/jlMGxcq2OM8nlgwAsieiqx3avSmkYVJHdWlQzJcwYcmVab7gl4tmtCnpYhT hUj90mf31jFRsE3ZguU1sSuuSS8dinsD3/b5g7PryYrlEb+nq2CQs6BhGed5n2MX C4eXi0NkIpl76qmutvmmOVTTQT3fyxCjSXhBkspuP0JHHFIJ6Cf97zU+hx1tO0cg 0djEIx0XLrqVZb3iCCGZFaYKqchYaCnkQfq4VWZ7QxLz0hwORs2GqzbjSyx/cKx6 DkDOQpaN1e0lHDyJWdajn2apqCsc7ob5FeIwj57TNZm5AV9nlO0MdOzxroiuLZlm c80OftZdsNeJAQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:04:14 2025 by rpki-client