This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json) Hash identifier: AyBGD5frT/sd4xVUMn5p1XmhMm1l4lCpG71jClmBsOA= Subject key identifier: CA:A9:81:D2:4B:CC:9E:6D:1E:66:B1:5F:95:B5:1B:7B:F5:93:66:5C Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Certificate serial: 019AF1643B6F7DEADA7CF95561AF5F8463B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft Manifest number: 09C6 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=) 2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=) 3: mNeWff71JBlu_711hQE_pDJJqWY.roa (hash: sTWxhEvJ0wu3OQU/YQdLA13MJUmx0ec59XmwGow7zF8=) 4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: 9ig5ZXFS3PpSHHiQA3p75C0yN4k/CqC2s2JLRtLJIiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3b:6f:7d:ea:da:7c:f9:55:61:af:5f:84:63:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=caa981d24bcc9e6d1e66b15f95b51b7bf593665c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:49:04:a7:14:80:ab:5e:d7:30:a9:5b:1f: f7:6b:88:7a:d7:fc:8d:46:b7:9b:68:bf:1e:90:ee: d9:51:c4:bc:0c:6c:19:f1:c0:f5:6f:35:fb:6b:81: 22:7f:b8:b6:87:64:36:05:05:c1:92:5f:99:15:31: 75:e0:fe:64:5c:a8:fb:b4:7b:58:e9:3e:00:d6:2b: 62:89:a4:09:86:76:b9:d6:89:d1:36:b6:ab:04:a6: ad:8e:db:7b:99:c5:6d:8f:d5:8d:55:e1:0e:e6:58: 35:ad:44:86:23:57:70:8a:73:be:30:0a:4b:ca:f3: 3f:54:1b:a4:2e:6a:48:ab:9f:c9:1c:21:33:cd:12: a9:f3:d2:3b:21:30:a1:38:8d:d0:4d:7c:78:f4:1e: c7:f3:08:65:85:3d:62:7d:6c:50:5c:24:df:cd:cc: c9:20:df:ea:e7:36:e9:4b:6d:96:6c:04:9c:20:26: 75:df:6f:b7:46:00:3b:20:f0:ce:b6:62:3e:7d:90: 66:b4:e5:1b:60:5b:8b:0d:7f:51:87:65:d2:d3:59: b9:43:d1:8b:8b:85:29:7f:3c:81:f5:a2:32:6b:7c: 19:fc:1f:94:e6:9b:74:26:9f:18:12:7a:dd:42:63: 9d:33:e5:9e:73:65:b4:96:2f:fe:7b:a8:36:5f:fd: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:81:D2:4B:CC:9E:6D:1E:66:B1:5F:95:B5:1B:7B:F5:93:66:5C X509v3 Authority Key Identifier: keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a5:1d:30:39:8c:c4:ff:dd:f8:41:71:9d:22:77:e6:e3:41: 47:53:f6:b5:c5:d8:f4:cb:b6:ba:54:90:f3:0e:af:df:a1:1e: 0d:08:dc:e0:18:47:f8:a1:a8:65:f1:4a:f2:b5:37:74:49:20: 5f:ac:50:44:5f:d3:46:fc:3d:8d:ff:65:33:57:c9:ee:e8:35: 9c:f5:fe:4c:63:8b:53:c3:3f:95:7c:8f:b7:02:ed:11:57:ce: 01:2c:02:86:2a:05:c1:7e:5a:67:6f:f9:fa:9d:9d:bb:98:a8: 23:7a:7f:b5:3a:44:77:91:71:9a:9e:43:f5:eb:55:85:db:d6: 3c:64:27:7a:67:97:b2:c1:bf:5f:15:d9:61:a8:03:36:e0:73: 2f:65:3a:dd:06:6b:fa:14:55:58:ff:85:88:32:85:ed:8e:5b: d4:45:bd:60:c8:5d:c8:df:7d:04:c9:cb:31:76:6c:77:9b:93: 23:a0:63:14:c6:fa:55:6e:f4:98:8d:ae:82:5e:36:48:ad:2c: 6a:ec:c2:73:c5:56:0d:7d:71:46:1a:75:ce:e4:cb:02:26:2a: cb:2c:f3:7c:8d:d4:38:d5:58:68:71:58:ec:9d:48:3d:66:58: 0a:e0:82:66:0c:e6:f1:e4:ad:18:a1:99:f5:92:47:4c:f3:45: d7:cb:9c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDtvferafPlVYa9fhGO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy ZDBmM2IwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD EyhjYWE5ODFkMjRiY2M5ZTZkMWU2NmIxNWY5NWI1MWI3YmY1OTM2NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWRJBKcUgKte1zCpWx/3a4h61/yN RrebaL8ekO7ZUcS8DGwZ8cD1bzX7a4Eif7i2h2Q2BQXBkl+ZFTF14P5kXKj7tHtY 6T4A1itiiaQJhna51onRNrarBKatjtt7mcVtj9WNVeEO5lg1rUSGI1dwinO+MApL yvM/VBukLmpIq5/JHCEzzRKp89I7ITChOI3QTXx49B7H8whlhT1ifWxQXCTfzczJ IN/q5zbpS22WbAScICZ132+3RgA7IPDOtmI+fZBmtOUbYFuLDX9Rh2XS01m5Q9GL i4UpfzyB9aIya3wZ/B+U5pt0Jp8YEnrdQmOdM+Wec2W0li/+e6g2X/2ZSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqpgdJLzJ5tHmaxX5W1G3v1k2ZcMB8GA1UdIwQY MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt ODBjYzg2ZTUxODIyLzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtaUdMDmM xP/d+EFxnSJ35uNBR1P2tcXY9Mu2ulSQ8w6v36EeDQjc4BhH+KGoZfFK8rU3dEkg X6xQRF/TRvw9jf9lM1fJ7ug1nPX+TGOLU8M/lXyPtwLtEVfOASwChioFwX5aZ2/5 +p2du5ioI3p/tTpEd5Fxmp5D9etVhdvWPGQnemeXssG/XxXZYagDNuBzL2U63QZr +hRVWP+FiDKF7Y5b1EW9YMhdyN99BMnLMXZsd5uTI6BjFMb6VW70mI2ugl42SK0s auzCc8VWDX1xRhp1zuTLAiYqyyzzfI3UONVYaHFY7J1IPWZYCuCCZgzm8eStGKGZ 9ZJHTPNF18ucNg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:17 2025 by rpki-client