This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json) Hash identifier: G2gMrB+3vXY2IizkzjER8z1mT/J0ECyuT2BNIM8DM3E= Subject key identifier: 78:AA:C3:18:7E:A9:41:5A:A3:89:06:1C:57:B1:98:2D:83:50:08:2D Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Certificate serial: 019AF46537694A73273FE06C2FBD17CA78F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft Manifest number: 023D Signing time: Sat 06 Dec 2025 16:01:05 +0000 Manifest this update: Sat 06 Dec 2025 16:01:05 +0000 Manifest next update: Sun 07 Dec 2025 16:01:05 +0000 Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: Nceu08hxhTBoLfiwFtWrGH08inMbNLfXStTMqkU2V9E=) 2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:37:69:4a:73:27:3f:e0:6c:2f:bd:17:ca:78:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Validity Not Before: Dec 6 16:01:05 2025 GMT Not After : Dec 7 16:01:05 2025 GMT Subject: CN=78aac3187ea9415aa389061c57b1982d8350082d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:70:fb:a8:68:26:cb:1e:fe:21:f6:8d:23: 55:01:49:83:21:a4:2e:20:cc:e6:ff:22:02:e8:04: c1:db:4d:bb:5e:8b:e3:db:96:72:ad:13:7d:51:fd: 5b:72:4a:1c:e5:c6:9e:23:94:ad:a3:2f:68:48:d1: 1f:5e:ed:3a:f2:ad:cf:6d:a1:11:0d:f6:6d:7f:a6: 34:8f:8c:0e:28:7c:b1:a7:db:90:8e:55:19:8a:49: 36:05:24:bc:a0:48:60:e0:95:a4:c7:d8:ab:af:66: dd:fd:a3:d9:d4:60:6c:15:c1:68:e3:f4:dc:88:c4: 19:da:fc:72:a9:b2:be:1e:f9:e3:64:15:4a:b5:6b: 0c:1a:0b:d0:13:f1:c2:71:ba:46:e7:47:da:09:62: bf:a0:1d:20:24:28:c6:95:e6:3e:01:a2:b4:4d:71: 74:69:3d:a4:0b:4f:76:73:b1:ca:ca:96:52:d4:a3: 81:8e:a5:60:cc:bf:1f:9e:91:ba:a4:ab:17:7c:4c: 98:32:8d:ad:1f:27:4c:e8:4e:e2:5e:4d:33:fa:84: ea:2c:4c:2d:65:ae:0c:d7:cc:0f:51:24:c9:e9:1e: e3:ed:f2:5c:13:ed:f0:9f:ac:7e:32:db:6f:5d:60: 33:25:67:61:cb:e7:29:54:98:90:c4:50:01:5f:20: 98:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AA:C3:18:7E:A9:41:5A:A3:89:06:1C:57:B1:98:2D:83:50:08:2D X509v3 Authority Key Identifier: keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:49:ec:f0:43:e1:f4:ff:a4:e8:1d:15:5f:12:81:ad:3b:9c: 49:a9:09:7a:48:0a:42:78:f4:55:5c:cf:c6:a5:4f:40:01:d8: b8:13:b1:94:30:2c:6f:5d:2c:65:e9:ab:6d:6a:15:4c:56:5b: 68:d7:de:31:6f:d7:16:02:15:7c:2a:c7:df:6a:fe:08:88:77: 6d:18:05:df:38:18:3c:4d:fd:0b:7c:d8:b7:f8:0b:d8:ef:41: 44:88:40:ca:57:0e:1f:95:db:d4:87:4e:8c:da:89:1f:22:73: ef:02:11:13:25:cc:8f:2c:9e:d8:c7:d5:89:ae:26:73:14:2f: 05:b2:c1:15:3f:c8:09:96:6b:47:fd:70:69:63:93:b5:b9:fe: cc:52:f2:83:1c:87:77:16:f5:b5:a5:0f:64:53:86:b1:5a:42: 6c:48:d9:3c:4c:c4:5b:19:8b:2c:03:73:58:a9:40:04:5f:0c: 24:3d:a6:85:0d:d3:ae:4b:b8:5d:e0:21:27:29:2c:51:5f:5b: 9d:44:d5:ce:79:2e:46:dd:7b:27:42:d8:3d:01:81:93:71:bb: 13:7d:f4:b8:66:a1:90:ca:b2:00:79:b5:60:db:3e:36:ec:9c: 3f:e4:07:1b:a0:82:8d:04:52:b9:53:df:a2:4f:66:df:4b:c1: 3e:cb:b0:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTdpSnMnP+BsL70XynjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk NzcxYjIwHhcNMjUxMjA2MTYwMTA1WhcNMjUxMjA3MTYwMTA1WjAzMTEwLwYDVQQD Eyg3OGFhYzMxODdlYTk0MTVhYTM4OTA2MWM1N2IxOTgyZDgzNTAwODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGVw+6hoJsse/iH2jSNVAUmDIaQu IMzm/yIC6ATB2027Xovj25ZyrRN9Uf1bckoc5caeI5Stoy9oSNEfXu068q3PbaER DfZtf6Y0j4wOKHyxp9uQjlUZikk2BSS8oEhg4JWkx9irr2bd/aPZ1GBsFcFo4/Tc iMQZ2vxyqbK+HvnjZBVKtWsMGgvQE/HCcbpG50faCWK/oB0gJCjGleY+AaK0TXF0 aT2kC092c7HKypZS1KOBjqVgzL8fnpG6pKsXfEyYMo2tHydM6E7iXk0z+oTqLEwt Za4M18wPUSTJ6R7j7fJcE+3wn6x+MttvXWAzJWdhy+cpVJiQxFABXyCYeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiqwxh+qUFao4kGHFexmC2DUAgtMB8GA1UdIwQY MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt NDM3NWQ2NzVmY2YzLzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUns8EPh 9P+k6B0VXxKBrTucSakJekgKQnj0VVzPxqVPQAHYuBOxlDAsb10sZemrbWoVTFZb aNfeMW/XFgIVfCrH32r+CIh3bRgF3zgYPE39C3zYt/gL2O9BRIhAylcOH5Xb1IdO jNqJHyJz7wIREyXMjyye2MfVia4mcxQvBbLBFT/ICZZrR/1waWOTtbn+zFLygxyH dxb1taUPZFOGsVpCbEjZPEzEWxmLLANzWKlABF8MJD2mhQ3Trku4XeAhJyksUV9b nUTVznkuRt17J0LYPQGBk3G7E330uGahkMqyAHm1YNs+NuycP+QHG6CCjQRSuVPf ok9m30vBPsuwqg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:26 2025 by rpki-client