This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json) Hash identifier: 4ImZTxicvHF39+ewebV7TY4MtaDF3gyHQry3/awo46o= Subject key identifier: A8:50:20:A6:3F:6C:D4:95:44:6D:D2:B2:29:06:4F:FD:FC:88:E6:B5 Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Certificate serial: 019AF20939849A4C18D820F587F44604E486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: +Z7Q+FVPNCSz/1d7MjHXfdEkRvbNcenSk+wDu2R6aYg=) 2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:39:84:9a:4c:18:d8:20:f5:87:f4:46:04:e4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=a85020a63f6cd495446dd2b229064ffdfc88e6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:3b:d0:42:d8:b2:74:f9:35:10:77:b7:a4: 2c:67:34:c8:9d:ff:8f:5b:05:8e:97:25:b0:ef:52: 14:20:2d:61:5c:9e:f2:87:74:7d:2d:97:7e:74:ab: e1:a7:4e:d9:aa:f9:2d:60:bb:a3:aa:91:09:8c:ed: 98:9a:9e:90:e2:c3:f0:72:96:9d:22:84:be:75:05: 00:94:6e:a1:3d:c8:55:2a:62:7d:a9:7b:d7:4f:df: c3:e4:f2:ea:01:8f:b6:cd:14:4d:5b:68:53:21:53: 70:17:3f:3d:8b:30:12:4d:2b:8b:d7:95:5a:d6:a4: 5a:22:69:df:99:86:4f:2f:d9:4e:31:f8:71:b7:e9: 02:c3:44:1a:4e:3e:b2:7a:1a:0f:2a:26:c6:df:9e: ef:63:2a:51:2c:e8:ad:00:e6:8d:fc:5a:0d:d7:e3: 6e:73:21:a7:c7:d1:b1:5b:96:96:03:4b:f8:da:cc: 00:c6:78:00:1f:fd:8c:16:0d:84:df:56:80:90:17: a5:1b:48:87:a7:86:26:09:b2:83:e9:2e:9f:45:db: 0f:fe:38:6c:46:0b:1e:f4:e3:6a:6f:55:61:cf:d2: 48:cb:f9:40:b9:f2:2b:b2:cf:32:23:49:61:06:78: ad:bb:0b:57:df:98:25:8e:5c:38:90:d7:02:23:66: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:50:20:A6:3F:6C:D4:95:44:6D:D2:B2:29:06:4F:FD:FC:88:E6:B5 X509v3 Authority Key Identifier: keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ed:f9:3d:75:39:c7:b4:87:81:d1:85:4e:e7:93:9b:ac:21: ca:4b:00:a7:23:22:86:9b:35:44:38:68:77:43:98:96:c4:3f: a7:ad:30:3f:b5:de:27:18:a9:d0:f9:f8:be:3e:67:04:de:09: bb:1f:ed:32:10:8c:f8:b1:da:1e:0d:3b:0b:e4:bf:e4:39:5a: 32:b8:66:1e:86:b2:6b:b4:1a:66:f3:71:fa:04:a5:65:6e:a6: 76:09:2a:9c:cc:de:cd:d8:42:66:78:77:f6:ce:63:7a:10:6b: e9:3c:01:29:bb:d3:4d:16:21:72:b3:61:d0:d7:f5:3c:38:c9: 58:0f:24:61:10:db:78:b4:b0:ba:07:89:50:80:67:ee:cb:89: 1c:fb:85:02:5e:cf:26:75:c3:32:b9:e4:d1:f3:ea:f1:0d:f4: 7c:03:76:a3:99:bd:5b:72:df:46:41:10:fc:78:27:64:b7:74: 40:2c:3b:1f:15:28:38:40:72:93:e9:ec:2e:13:b8:3a:29:dc: 42:d6:e8:29:d7:94:e4:60:9b:b5:53:3c:3d:8f:8b:2f:e8:90: e8:a1:fa:42:47:f5:9f:17:c3:f3:8e:c2:73:87:86:db:db:b0: 32:b6:f7:20:35:3f:0b:4c:bd:16:8e:c1:c0:05:7c:ac:c6:2a: 35:07:a2:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTmEmkwY2CD1h/RGBOSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh ZDQ4YTEwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhhODUwMjBhNjNmNmNkNDk1NDQ2ZGQyYjIyOTA2NGZmZGZjODhlNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsM70ELYsnT5NRB3t6QsZzTInf+P WwWOlyWw71IUIC1hXJ7yh3R9LZd+dKvhp07ZqvktYLujqpEJjO2Ymp6Q4sPwcpad IoS+dQUAlG6hPchVKmJ9qXvXT9/D5PLqAY+2zRRNW2hTIVNwFz89izASTSuL15Va 1qRaImnfmYZPL9lOMfhxt+kCw0QaTj6yehoPKibG357vYypRLOitAOaN/FoN1+Nu cyGnx9GxW5aWA0v42swAxngAH/2MFg2E31aAkBelG0iHp4YmCbKD6S6fRdsP/jhs Rgse9ONqb1Vhz9JIy/lAufIrss8yI0lhBnituwtX35gljlw4kNcCI2aVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhQIKY/bNSVRG3SsikGT/38iOa1MB8GA1UdIwQY MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5 LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu35PXU5 x7SHgdGFTueTm6whyksApyMihps1RDhod0OYlsQ/p60wP7XeJxip0Pn4vj5nBN4J ux/tMhCM+LHaHg07C+S/5DlaMrhmHoaya7QaZvNx+gSlZW6mdgkqnMzezdhCZnh3 9s5jehBr6TwBKbvTTRYhcrNh0Nf1PDjJWA8kYRDbeLSwugeJUIBn7suJHPuFAl7P JnXDMrnk0fPq8Q30fAN2o5m9W3LfRkEQ/HgnZLd0QCw7HxUoOEByk+nsLhO4Oinc QtboKdeU5GCbtVM8PY+LL+iQ6KH6Qkf1nxfD847Cc4eG29uwMrb3IDU/C0y9Fo7B wAV8rMYqNQeiwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:23 2025 by rpki-client