This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json) Hash identifier: 9vF3mimx5hkDtOIIuVzmSkDrQyAOgzU7DMrsq4/mTos= Subject key identifier: 9A:E4:72:AB:06:0A:09:73:AF:BC:4F:78:76:1E:19:AF:4E:B6:01:9B Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0 Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0 Certificate serial: 019B2C665D7AA1AC9F70E9E31800F72E3E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 13:01:04 +0000 Manifest this update: Wed 17 Dec 2025 13:01:04 +0000 Manifest next update: Thu 18 Dec 2025 13:01:04 +0000 Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=) 2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=) 3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=) 4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=) 5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: ePsjG6U0ivQV+IdAS7TByh8HpNfkRGwy51W/mydC1zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:5d:7a:a1:ac:9f:70:e9:e3:18:00:f7:2e:3e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0 Validity Not Before: Dec 17 13:01:04 2025 GMT Not After : Dec 18 13:01:04 2025 GMT Subject: CN=9ae472ab060a0973afbc4f78761e19af4eb6019b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:de:ee:20:fa:cb:f6:0a:8e:df:fa:fb:ed: 12:64:a1:fa:11:f0:43:0c:27:24:f4:0c:0c:fe:2a: f7:ac:d7:8e:d6:54:20:89:7f:76:6d:53:b9:49:ad: 5a:78:9e:0e:eb:d2:6b:4d:aa:02:16:c9:17:4d:cd: df:2a:ff:3d:94:46:08:ee:fd:b6:cc:5c:3f:7a:2a: 9a:d3:66:61:a5:6f:6d:c6:5f:bb:b9:58:89:25:91: 8c:6e:aa:cf:82:57:bf:ff:22:85:88:a3:dc:7d:80: 1d:32:63:76:38:0c:72:25:8d:f8:5c:9a:13:69:56: a2:a9:93:33:72:e6:4b:e6:50:3f:5b:be:f8:31:c2: 18:7d:6f:00:27:78:37:77:07:02:d6:1a:5f:ff:98: 87:70:05:a0:4a:6c:16:6e:00:e4:54:e3:77:5c:dd: 0b:b2:14:ec:61:d9:3c:06:b7:58:96:b7:c7:48:cc: b2:6e:97:86:2c:c8:81:ac:43:8c:fa:52:c0:e3:76: d3:9e:d4:9c:58:9a:90:ef:f6:dc:0e:4e:3d:e6:20: 63:82:71:45:d0:d7:4e:88:2e:ec:1d:46:97:77:9a: e4:ad:66:d9:70:00:f4:01:85:dc:8e:e8:92:89:63: 17:9f:01:5b:ba:e0:f4:28:9d:2b:c2:6d:9a:23:47: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E4:72:AB:06:0A:09:73:AF:BC:4F:78:76:1E:19:AF:4E:B6:01:9B X509v3 Authority Key Identifier: keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b7:d8:20:31:c5:1f:0b:b4:fb:82:4c:f6:51:21:de:c8:08: 8c:73:da:56:d8:28:95:c3:ea:fa:37:41:2b:ef:42:f3:16:ce: 10:33:5b:2c:35:02:4c:8f:76:b6:37:42:2e:8c:71:ce:5a:fa: b5:da:55:80:89:27:2c:30:80:48:1c:b2:f3:c5:9e:03:0e:d5: 8f:2d:14:46:88:60:b5:5e:b1:be:32:4b:32:f4:98:1a:fc:1f: 96:1c:37:49:b2:17:7b:c9:3e:c2:4d:fc:9e:32:e1:0e:49:8c: 24:67:de:59:45:2e:56:cd:9a:29:e2:d3:f9:dd:17:50:e0:b4: d4:da:78:f1:5d:35:11:65:0b:00:1c:e7:b8:81:c8:f8:97:e0: 88:5f:8c:c1:e3:5c:52:da:49:ca:f1:69:5a:99:6a:b0:67:fc: 95:cd:ea:86:a0:10:33:88:15:29:ab:3f:58:01:cb:5b:de:61: da:7e:07:37:aa:9f:da:a5:d1:22:93:ce:23:a1:94:b5:d3:59: b0:19:d9:90:c2:fd:17:33:fe:36:ba:16:db:ef:10:bd:48:40: 82:17:bc:e0:32:2f:71:d7:06:16:74:45:ea:19:8a:dc:f6:e5: df:ac:c8:fd:1b:c7:86:3c:40:d1:31:8b:6f:87:81:cc:d7:6b: 5c:ae:d2:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZl16oayfcOnjGAD3Lj5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzdlZjJiNzY2NTk0ODkyZDc4OTI4Y2JlNzgxNzc5ZmRj ZTY3ZDAwHhcNMjUxMjE3MTMwMTA0WhcNMjUxMjE4MTMwMTA0WjAzMTEwLwYDVQQD Eyg5YWU0NzJhYjA2MGEwOTczYWZiYzRmNzg3NjFlMTlhZjRlYjYwMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ze7iD6y/YKjt/6++0SZKH6EfBD DCck9AwM/ir3rNeO1lQgiX92bVO5Sa1aeJ4O69JrTaoCFskXTc3fKv89lEYI7v22 zFw/eiqa02ZhpW9txl+7uViJJZGMbqrPgle//yKFiKPcfYAdMmN2OAxyJY34XJoT aVaiqZMzcuZL5lA/W774McIYfW8AJ3g3dwcC1hpf/5iHcAWgSmwWbgDkVON3XN0L shTsYdk8BrdYlrfHSMyybpeGLMiBrEOM+lLA43bTntScWJqQ7/bcDk495iBjgnFF 0NdOiC7sHUaXd5rkrWbZcAD0AYXcjuiSiWMXnwFbuuD0KJ0rwm2aI0fzUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrkcqsGCglzr7xPeHYeGa9OtgGbMB8GA1UdIwQY MBaAFM/H7yt2ZZSJLXiSjL54F3n9zmfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjct OGNkNTViMDNkMjJkLzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjctOGNkNTViMDNkMjJk LzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLfYIDHF Hwu0+4JM9lEh3sgIjHPaVtgolcPq+jdBK+9C8xbOEDNbLDUCTI92tjdCLoxxzlr6 tdpVgIknLDCASByy88WeAw7Vjy0URohgtV6xvjJLMvSYGvwflhw3SbIXe8k+wk38 njLhDkmMJGfeWUUuVs2aKeLT+d0XUOC01Np48V01EWULABznuIHI+JfgiF+MweNc UtpJyvFpWplqsGf8lc3qhqAQM4gVKas/WAHLW95h2n4HN6qf2qXRIpPOI6GUtdNZ sBnZkML9FzP+NroW2+8QvUhAghe84DIvcdcGFnRF6hmK3Pbl36zI/RvHhjxA0TGL b4eBzNdrXK7SLA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:41 2025 by rpki-client