This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json) Hash identifier: 8ZSwIunSVJRkBJSKdgGqtqBZL0pxSkQWLQR+1l/+p44= Subject key identifier: BE:4C:74:5D:92:9B:D4:FD:AC:27:BA:74:77:2D:15:2B:7D:BE:6A:20 Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Certificate serial: 019AF23FDFF92A8C849F05514D7189CB0CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: 33yzs5s+fP6GJAqplQSSPqixbbDHzGeHtwnxh31XUo8=) 2: nTVVQnVXJMG-QyafLdMazVtzFSM.roa (hash: wBqPAHjbAyigYDbp/GK1N5eLyKdIQZmkBLvYK8qNoBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:df:f9:2a:8c:84:9f:05:51:4d:71:89:cb:0c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=be4c745d929bd4fdac27ba74772d152b7dbe6a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:d8:f2:4c:b6:82:3e:8e:ad:47:2c:1a:21: 0a:92:59:fd:5a:c0:06:45:83:3a:c0:93:98:94:4b: 00:3d:f5:f2:c2:46:9d:27:6c:e9:ce:22:11:40:a9: 41:cc:96:3e:b0:6e:18:18:f3:72:0d:08:53:2a:33: 47:9a:09:b6:96:4b:44:95:44:fb:5d:fb:b3:fc:b9: 68:e6:6e:77:d1:74:e4:a0:cc:1d:94:74:90:ca:5b: df:c4:91:20:14:5b:79:35:6a:f6:c9:e7:ba:39:c0: f5:21:97:98:e3:44:5f:ee:a0:77:64:f3:f6:54:a7: bd:2e:b6:e2:1e:66:39:79:2e:e3:c4:9a:0f:f1:d3: 68:a8:33:f7:dc:d0:10:c6:b1:cf:55:04:bf:9d:64: ae:90:4e:60:2b:ac:be:63:a6:fa:ea:51:9c:68:e0: 7e:ce:83:63:00:5c:4a:8e:22:49:a0:d5:3a:ef:ed: f6:0b:c8:e4:6b:61:e6:17:1e:2a:36:37:85:cd:fc: 3c:48:e4:8d:4b:82:4d:bc:2a:90:09:ce:dd:f7:e5: 54:51:8d:3b:5f:71:ad:69:6e:c1:18:2d:45:a2:b2: 51:39:8f:9e:b6:03:8a:98:f9:04:56:1c:c7:8b:6e: aa:97:79:fb:f6:d8:8a:2a:2b:a9:ca:50:77:a8:1e: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4C:74:5D:92:9B:D4:FD:AC:27:BA:74:77:2D:15:2B:7D:BE:6A:20 X509v3 Authority Key Identifier: keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:84:72:00:36:da:1d:ed:49:88:47:d9:da:c3:ee:28:13:27: 86:d9:f6:af:a4:72:86:03:65:e1:fa:d4:b4:7b:ae:08:2c:89: 2d:02:e1:36:a5:e7:04:74:b5:b1:6e:c1:c4:8e:b1:8c:95:f9: 74:af:c1:da:87:4b:21:f7:2b:95:bc:42:a8:fc:72:fe:4b:5b: da:d9:f5:fd:a0:eb:31:25:1e:af:88:f6:f9:35:59:0b:7d:c5: 8b:20:e2:9f:e2:bf:39:b9:22:59:53:07:1f:49:fc:e2:09:5f: 62:5e:44:bf:6e:35:77:c3:11:4e:eb:a2:f8:bb:3c:b5:e5:4d: 5f:86:89:00:a1:08:b2:0a:ef:b9:be:4b:94:68:11:d1:ea:dd: 39:f8:2b:c5:88:2e:be:20:e6:b5:d5:9d:91:c0:08:0a:db:9f: 3a:79:f6:88:64:b7:01:d5:1f:43:e8:ba:0e:8f:f8:bd:28:ca: 59:67:71:d3:9e:49:fb:cd:60:fb:c7:cd:a1:25:02:3d:a1:c3: 30:26:1c:13:a6:37:48:6d:5c:23:8b:15:1b:9b:f1:36:40:53: e2:c6:db:ff:40:24:a6:78:b9:a9:af:83:1e:bd:1f:30:af:f6: 9e:6a:a3:64:21:16:b5:07:6f:a4:98:db:a5:01:ef:fb:44:38: 0a:76:e0:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9/5KoyEnwVRTXGJywzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliM2YyOWZmOWVhNzFiM2MzZGMxZjVhZjA1NGI0MTY0N2M5 MWFmOTgwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD EyhiZTRjNzQ1ZDkyOWJkNGZkYWMyN2JhNzQ3NzJkMTUyYjdkYmU2YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB3Y8ky2gj6OrUcsGiEKkln9WsAG RYM6wJOYlEsAPfXywkadJ2zpziIRQKlBzJY+sG4YGPNyDQhTKjNHmgm2lktElUT7 Xfuz/Llo5m530XTkoMwdlHSQylvfxJEgFFt5NWr2yee6OcD1IZeY40Rf7qB3ZPP2 VKe9LrbiHmY5eS7jxJoP8dNoqDP33NAQxrHPVQS/nWSukE5gK6y+Y6b66lGcaOB+ zoNjAFxKjiJJoNU67+32C8jka2HmFx4qNjeFzfw8SOSNS4JNvCqQCc7d9+VUUY07 X3GtaW7BGC1ForJROY+etgOKmPkEVhzHi26ql3n79tiKKiupylB3qB727wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5MdF2Sm9T9rCe6dHctFSt9vmogMB8GA1UdIwQY MBaAFJs/Kf+epxs8PcH1rwVLQWR8ka+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTct ZjQ2MjI0YjBkMTYxLzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTctZjQ2MjI0YjBkMTYx LzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoRyADba He1JiEfZ2sPuKBMnhtn2r6RyhgNl4frUtHuuCCyJLQLhNqXnBHS1sW7BxI6xjJX5 dK/B2odLIfcrlbxCqPxy/ktb2tn1/aDrMSUer4j2+TVZC33FiyDin+K/ObkiWVMH H0n84glfYl5Ev241d8MRTuui+Ls8teVNX4aJAKEIsgrvub5LlGgR0erdOfgrxYgu viDmtdWdkcAICtufOnn2iGS3AdUfQ+i6Do/4vSjKWWdx055J+81g+8fNoSUCPaHD MCYcE6Y3SG1cI4sVG5vxNkBT4sbb/0Akpni5qa+DHr0fMK/2nmqjZCEWtQdvpJjb pQHv+0Q4CnbgJA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:20 2025 by rpki-client