This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json) Hash identifier: HR1mbmYKihZ+n6YtTahfjwdtgW4GasgksgDOwc4YPcw= Subject key identifier: E0:EE:A8:EA:18:FF:64:C5:4C:AA:79:63:85:CA:17:04:62:98:39:DB Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b Certificate serial: 019AF9C325089EC64210FFFC8A17269E637B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 17:01:46 +0000 Manifest this update: Sun 07 Dec 2025 17:01:46 +0000 Manifest next update: Mon 08 Dec 2025 17:01:46 +0000 Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: iq4OIcCC4kmH3yhsoe6kc8KLH6bF1JMEk4kPGjdQaVM=) 2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:c3:25:08:9e:c6:42:10:ff:fc:8a:17:26:9e:63:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b Validity Not Before: Dec 7 17:01:46 2025 GMT Not After : Dec 8 17:01:46 2025 GMT Subject: CN=e0eea8ea18ff64c54caa796385ca1704629839db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:e9:92:90:03:be:7d:b9:2d:0e:74:c1:3e: 3e:3a:f9:d0:e7:85:87:67:d0:d7:7d:57:c8:e8:19: 95:a2:31:79:27:56:bf:68:cf:9e:e9:d6:d4:83:23: 59:96:24:de:54:8b:4f:14:ca:48:43:fc:fe:19:c6: 72:3c:73:53:78:30:4a:eb:2f:10:45:c0:33:fb:25: 50:7c:c6:cb:53:84:b1:f2:b2:bc:7f:cc:b4:5f:ab: 99:83:92:c7:5b:00:b3:95:29:54:f2:e1:83:a3:08: bd:b8:34:64:1c:69:cf:da:e6:5a:18:66:df:c4:b3: 35:d6:30:ed:ac:4d:83:26:60:99:f0:12:25:ec:20: 73:6b:07:99:8c:08:9e:ba:35:31:13:f5:f5:f7:e0: 46:94:5d:0c:8f:68:61:74:5b:79:7a:bb:2d:0f:02: aa:5b:79:0e:f0:e3:a0:83:e1:08:c8:cb:5b:7f:38: 67:73:0e:5e:13:33:62:a9:65:1a:fa:54:6e:d5:d2: ee:ba:1d:29:c0:95:da:bd:c3:77:01:7e:b9:36:e1: 22:51:40:39:3c:af:47:35:45:aa:c4:c3:ab:a3:f9: 99:1b:80:60:0a:59:b9:cf:3f:e9:ca:00:1b:91:02: 0c:5b:d2:6e:ce:de:03:3a:12:cb:93:43:37:c1:e8: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:A8:EA:18:FF:64:C5:4C:AA:79:63:85:CA:17:04:62:98:39:DB X509v3 Authority Key Identifier: keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3c:11:ae:16:62:b9:b2:c2:c9:6e:17:ee:56:c4:0f:b8:4b: 8a:e9:0b:75:ea:01:2e:3a:d6:74:4f:52:8f:9b:49:9c:13:89: 2d:27:c9:51:ac:59:47:b4:26:b5:74:8f:66:38:5a:bc:c7:61: ff:27:5e:0f:c3:0d:03:8c:d7:2f:8a:12:01:54:7e:07:26:52: b4:60:f3:89:30:d9:af:b9:b0:d1:43:b3:a3:74:04:d4:57:02: d1:dd:10:33:5c:2f:bc:1c:75:7c:1f:85:4e:27:b9:96:6f:58: 86:6f:69:fe:ba:43:79:a5:34:ef:fc:43:f6:c6:93:48:83:14: 62:d0:0a:b6:b2:cb:51:9f:27:67:25:3b:ff:8a:2d:88:7f:a6: af:d6:41:33:df:4e:cb:59:c3:b6:2b:de:49:0c:10:0c:6b:76: 5f:59:9f:03:31:9e:ba:43:74:23:94:ad:be:8d:15:23:fc:f5: 79:9a:6c:5e:68:d1:f0:62:3d:d5:3e:f8:22:e6:8f:fb:d5:d6: 16:78:ab:4c:a4:b3:17:b2:97:e2:ae:89:63:2a:d9:fc:7a:88: 10:75:6c:85:13:31:0a:21:f5:c4:3f:4e:24:9e:0f:fe:9e:e7: 1c:56:04:fb:85:7d:76:6d:51:c1:3a:98:5c:79:1f:f6:1b:46: 65:4a:55:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5wyUInsZCEP/8ihcmnmN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl OTdlNmIwHhcNMjUxMjA3MTcwMTQ2WhcNMjUxMjA4MTcwMTQ2WjAzMTEwLwYDVQQD EyhlMGVlYThlYTE4ZmY2NGM1NGNhYTc5NjM4NWNhMTcwNDYyOTgzOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqODpkpADvn25LQ50wT4+OvnQ54WH Z9DXfVfI6BmVojF5J1a/aM+e6dbUgyNZliTeVItPFMpIQ/z+GcZyPHNTeDBK6y8Q RcAz+yVQfMbLU4Sx8rK8f8y0X6uZg5LHWwCzlSlU8uGDowi9uDRkHGnP2uZaGGbf xLM11jDtrE2DJmCZ8BIl7CBzaweZjAieujUxE/X19+BGlF0Mj2hhdFt5erstDwKq W3kO8OOgg+EIyMtbfzhncw5eEzNiqWUa+lRu1dLuuh0pwJXavcN3AX65NuEiUUA5 PK9HNUWqxMOro/mZG4BgClm5zz/pygAbkQIMW9Juzt4DOhLLk0M3weiFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODuqOoY/2TFTKp5Y4XKFwRimDnbMB8GA1UdIwQY MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt ZGMxZGI2N2RiM2NiLzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTwRrhZi ubLCyW4X7lbED7hLiukLdeoBLjrWdE9Sj5tJnBOJLSfJUaxZR7QmtXSPZjhavMdh /ydeD8MNA4zXL4oSAVR+ByZStGDziTDZr7mw0UOzo3QE1FcC0d0QM1wvvBx1fB+F Tie5lm9Yhm9p/rpDeaU07/xD9saTSIMUYtAKtrLLUZ8nZyU7/4otiH+mr9ZBM99O y1nDtiveSQwQDGt2X1mfAzGeukN0I5Stvo0VI/z1eZpsXmjR8GI91T74IuaP+9XW FnirTKSzF7KX4q6JYyrZ/HqIEHVshRMxCiH1xD9OJJ4P/p7nHFYE+4V9dm1RwTqY XHkf9htGZUpVQA== -----END CERTIFICATE-----Generated at Mon Dec 8 02:10:55 2025 by rpki-client