This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft File: Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft (raw, json) Hash identifier: 2fIDu+QeJ4CcAhNGGjhGHHsoyHwcadXhA6Ma318DL+M= Subject key identifier: CC:B6:BD:48:C7:32:99:61:3A:A7:FC:0D:02:25:01:49:45:BE:B4:D8 Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21 Certificate issuer: /CN=67cc77931dbb0e9e229c7217652b76aef4002721 Certificate serial: 019AF0F5D431C4355F77F9705907A27AD526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 00:00:33 +0000 Manifest this update: Sat 06 Dec 2025 00:00:33 +0000 Manifest next update: Sun 07 Dec 2025 00:00:33 +0000 Files and hashes: 1: Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl (hash: 6x9j+eoCpdn0Ux9ptfK9jRlWZaqFib1GI6TxHs+xtng=) 2: uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa (hash: 6nsDviQDF/u+HfsVoAuFYxI3/pTqIdYdXhGDj3wFL8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d4:31:c4:35:5f:77:f9:70:59:07:a2:7a:d5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721 Validity Not Before: Dec 6 00:00:33 2025 GMT Not After : Dec 7 00:00:33 2025 GMT Subject: CN=ccb6bd48c73299613aa7fc0d0225014945beb4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:ac:dc:35:f8:92:a6:98:8d:4c:d7:ff:21: 50:ca:71:9f:bf:7f:f4:5b:80:21:83:8c:86:83:88: a6:ae:af:d3:25:e1:9b:c7:08:bc:66:34:39:21:d4: 1b:65:26:f1:2a:1c:20:ea:66:1c:6b:33:41:99:5f: 7d:6e:c4:89:29:33:9f:2c:31:f2:22:4c:39:61:16: 92:78:2e:14:0a:48:38:48:45:43:39:51:ab:7d:8b: 8b:a5:8a:8d:dd:18:e8:28:4f:73:1e:ab:86:a5:b1: ec:a4:82:ad:2d:58:20:9e:e8:b9:28:17:f6:a5:2d: 49:2e:25:06:05:9c:4e:2f:fe:f0:e7:8f:b0:80:b6: 04:10:db:16:0e:d7:1b:6f:98:80:ba:c9:0d:bd:c2: c2:26:c6:d8:53:7c:a6:ca:4a:7c:d6:d7:a2:f5:f3: ae:64:60:00:64:86:7a:fe:97:d5:d7:7e:4f:69:00: 43:5b:ac:08:40:c5:9e:4d:4e:46:4c:79:94:96:bb: dd:be:f5:2a:8b:15:cb:67:e6:2f:24:b8:f4:d0:b7: 58:67:a9:05:c1:68:83:2f:fb:30:d8:54:c6:63:71: 5b:d6:4e:a2:66:bc:51:aa:a0:9c:b8:3e:9f:6d:be: 5b:9c:20:20:d3:e6:f4:4a:e2:96:42:ea:6f:5b:d3: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:BD:48:C7:32:99:61:3A:A7:FC:0D:02:25:01:49:45:BE:B4:D8 X509v3 Authority Key Identifier: keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3d:15:47:74:2d:c5:3c:b8:83:24:01:7f:41:57:24:4c:3c: 5b:46:61:64:f1:cb:51:5b:e2:0b:ba:98:cf:9a:46:89:98:9e: b4:3c:54:a2:09:3c:b1:78:0a:8c:0d:2e:4e:23:56:f7:ac:d2: 4f:e9:50:36:89:8f:92:ed:2f:3e:98:b4:80:9c:f7:df:eb:3f: 07:aa:9f:33:d9:c4:cb:2f:94:c5:ff:45:56:4e:20:de:ff:ba: c5:01:0a:5b:7c:a6:1c:22:75:9d:fb:74:67:4b:b6:03:b2:71: ea:9f:c1:26:58:38:fc:ee:fb:c8:37:f2:4b:a4:2d:17:7c:e1: 26:94:74:e0:d7:21:68:49:69:73:88:e4:19:27:e8:2e:16:3c: da:4b:ef:d7:b0:64:14:18:67:e2:29:83:b8:23:55:36:70:5a: a1:26:0c:53:42:62:ea:bc:77:34:d7:26:98:b9:2e:86:18:06: 81:bd:be:70:a4:1b:89:26:26:2e:5c:99:46:47:92:d1:f1:36: 7d:d1:c0:3b:1f:c8:84:97:33:12:1c:b0:2a:19:14:e0:aa:40: a8:d1:72:af:be:fe:e1:dd:a8:48:3d:2f:7a:98:bc:b2:c0:ed: 66:42:48:6e:4d:dd:49:a5:83:33:c7:74:2c:5a:27:af:b9:75: 66:d0:43:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dQxxDVfd/lwWQeietUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2M3NzkzMWRiYjBlOWUyMjljNzIxNzY1MmI3NmFlZjQw MDI3MjEwHhcNMjUxMjA2MDAwMDMzWhcNMjUxMjA3MDAwMDMzWjAzMTEwLwYDVQQD EyhjY2I2YmQ0OGM3MzI5OTYxM2FhN2ZjMGQwMjI1MDE0OTQ1YmViNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N2s3DX4kqaYjUzX/yFQynGfv3/0 W4Ahg4yGg4imrq/TJeGbxwi8ZjQ5IdQbZSbxKhwg6mYcazNBmV99bsSJKTOfLDHy Ikw5YRaSeC4UCkg4SEVDOVGrfYuLpYqN3RjoKE9zHquGpbHspIKtLVggnui5KBf2 pS1JLiUGBZxOL/7w54+wgLYEENsWDtcbb5iAuskNvcLCJsbYU3ymykp81tei9fOu ZGAAZIZ6/pfV135PaQBDW6wIQMWeTU5GTHmUlrvdvvUqixXLZ+YvJLj00LdYZ6kF wWiDL/sw2FTGY3Fb1k6iZrxRqqCcuD6fbb5bnCAg0+b0SuKWQupvW9NPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy2vUjHMplhOqf8DQIlAUlFvrTYMB8GA1UdIwQY MBaAFGfMd5Mduw6eIpxyF2Urdq70ACchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQt NGI0NmYzZDMzNzNmLzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQtNGI0NmYzZDMzNzNm LzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqT0VR3Qt xTy4gyQBf0FXJEw8W0ZhZPHLUVviC7qYz5pGiZietDxUogk8sXgKjA0uTiNW96zS T+lQNomPku0vPpi0gJz33+s/B6qfM9nEyy+Uxf9FVk4g3v+6xQEKW3ymHCJ1nft0 Z0u2A7Jx6p/BJlg4/O77yDfyS6QtF3zhJpR04NchaElpc4jkGSfoLhY82kvv17Bk FBhn4imDuCNVNnBaoSYMU0Ji6rx3NNcmmLkuhhgGgb2+cKQbiSYmLlyZRkeS0fE2 fdHAOx/IhJczEhywKhkU4KpAqNFyr77+4d2oSD0vepi8ssDtZkJIbk3dSaWDM8d0 LFonr7l1ZtBD3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:12 2025 by rpki-client