This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json) Hash identifier: EBME7Bqd5DrzSoltbAmROL64C61azH+PwfJTZpLMiK8= Subject key identifier: BC:28:23:5C:26:54:78:A3:14:99:18:3B:5E:F1:3B:2A:3A:01:16:A8 Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c Certificate serial: 019AF31C0ADA8C826DFC9A83DDA81B6C5DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft Manifest number: 0AC8 Signing time: Sat 06 Dec 2025 10:01:32 +0000 Manifest this update: Sat 06 Dec 2025 10:01:32 +0000 Manifest next update: Sun 07 Dec 2025 10:01:32 +0000 Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: 1YQtUb29+mwcOcCNgmUDFlPl+DzxTTEuXyRiNdoKO+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0a:da:8c:82:6d:fc:9a:83:dd:a8:1b:6c:5d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c Validity Not Before: Dec 6 10:01:32 2025 GMT Not After : Dec 7 10:01:32 2025 GMT Subject: CN=bc28235c265478a31499183b5ef13b2a3a0116a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:26:3e:89:b1:a8:f4:24:08:89:c8:3d:11: 53:cd:60:45:9d:94:66:3b:f5:9e:85:36:44:1c:ae: 79:5a:55:82:3a:50:69:4a:bc:03:15:bc:64:c7:20: db:f2:2c:81:61:1f:53:ee:57:c8:ca:6e:3f:ec:e2: 33:fb:2a:5e:bc:c8:79:11:79:84:ba:03:fd:1c:53: 2f:71:1b:a4:ce:b1:81:6b:cc:ba:8b:06:a8:c9:ed: 18:c9:72:b0:6a:a7:37:01:aa:d3:52:e4:e1:f0:af: bb:3c:a3:f7:5c:ed:fb:65:42:20:16:28:0d:0a:3e: 3d:48:76:60:cc:76:56:20:1c:30:b5:b9:7c:b9:bd: d9:94:0c:98:f8:37:d5:96:c1:18:de:51:74:7e:41: 43:ed:ad:fb:8c:c4:73:1f:a9:f2:8b:21:0d:32:bc: 9f:c2:a5:fc:b5:11:64:6d:b5:00:c8:33:eb:98:0a: 6e:36:7e:25:b0:ee:6a:2f:d1:de:44:aa:2d:7d:9b: c5:2b:bd:f8:12:9b:13:61:82:dd:e4:1e:56:23:db: d7:d0:07:7c:32:f5:4a:0b:4d:85:dc:6f:0f:5b:b4: 34:be:db:52:bb:78:64:bc:ff:3d:5c:e2:0f:e7:9e: e0:61:5d:bc:77:b1:33:87:17:b5:1c:7f:9d:00:58: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:28:23:5C:26:54:78:A3:14:99:18:3B:5E:F1:3B:2A:3A:01:16:A8 X509v3 Authority Key Identifier: keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f6:8b:9f:ea:ec:c0:61:f9:25:11:31:65:bd:94:2e:63:d3: 3b:7b:2d:2b:7e:76:a6:43:52:a8:55:81:69:4f:11:9d:90:a4: eb:18:6c:8c:8b:e9:74:6e:04:b6:bc:08:26:18:64:2d:35:a2: d5:fc:52:f9:88:23:4c:88:b8:97:bd:61:19:69:16:d7:4e:c5: 53:10:a9:1d:d1:88:23:07:e0:1a:38:65:9e:64:4b:33:2b:13: 93:df:4e:04:f8:9d:9a:e2:2a:4a:a3:a3:ae:fd:39:a0:10:69: bd:d5:f8:3e:0b:64:9c:40:4a:de:b0:d0:3b:40:9b:40:da:e4: f1:1a:d8:0e:41:93:74:d2:74:90:d4:ca:54:0a:7f:af:78:00: 1c:cb:1d:ec:a3:3e:4f:86:5c:d2:5e:ba:67:31:ff:40:90:b7: 1a:d5:d7:95:b6:db:bf:3a:88:e5:38:a1:4e:c4:24:1d:69:3c: d2:5b:b6:30:23:93:21:fc:90:cf:68:0a:3c:3b:ce:9e:58:25: 37:5b:4e:3d:d2:76:8d:72:66:6f:7a:b2:82:69:10:af:f7:89: 59:02:75:b5:d5:5d:d1:82:8c:4c:83:9a:d1:74:a0:ea:69:b8: 0f:7b:b0:a6:c5:58:4c:33:c6:ce:8d:71:be:14:78:34:86:12: 33:62:2b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHArajIJt/JqD3agbbF2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGQwY2E2YmI0OWQ2Yzk3YTkzYTMzNDk1Nzc2ZGUyNzUw MzNkNGMwHhcNMjUxMjA2MTAwMTMyWhcNMjUxMjA3MTAwMTMyWjAzMTEwLwYDVQQD EyhiYzI4MjM1YzI2NTQ3OGEzMTQ5OTE4M2I1ZWYxM2IyYTNhMDExNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUomPomxqPQkCInIPRFTzWBFnZRm O/WehTZEHK55WlWCOlBpSrwDFbxkxyDb8iyBYR9T7lfIym4/7OIz+ypevMh5EXmE ugP9HFMvcRukzrGBa8y6iwaoye0YyXKwaqc3AarTUuTh8K+7PKP3XO37ZUIgFigN Cj49SHZgzHZWIBwwtbl8ub3ZlAyY+DfVlsEY3lF0fkFD7a37jMRzH6nyiyENMryf wqX8tRFkbbUAyDPrmApuNn4lsO5qL9HeRKotfZvFK734EpsTYYLd5B5WI9vX0Ad8 MvVKC02F3G8PW7Q0vttSu3hkvP89XOIP557gYV28d7Ezhxe1HH+dAFiwHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwoI1wmVHijFJkYO17xOyo6ARaoMB8GA1UdIwQY MBaAFM9NDKa7SdbJepOjNJV3beJ1Az1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDkt YWMwYmQzN2M5ZGMxLzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDktYWMwYmQzN2M5ZGMx LzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/aLn+rs wGH5JRExZb2ULmPTO3stK352pkNSqFWBaU8RnZCk6xhsjIvpdG4EtrwIJhhkLTWi 1fxS+YgjTIi4l71hGWkW107FUxCpHdGIIwfgGjhlnmRLMysTk99OBPidmuIqSqOj rv05oBBpvdX4PgtknEBK3rDQO0CbQNrk8RrYDkGTdNJ0kNTKVAp/r3gAHMsd7KM+ T4Zc0l66ZzH/QJC3GtXXlbbbvzqI5TihTsQkHWk80lu2MCOTIfyQz2gKPDvOnlgl N1tOPdJ2jXJmb3qygmkQr/eJWQJ1tdVd0YKMTIOa0XSg6mm4D3uwpsVYTDPGzo1x vhR4NIYSM2Iryw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:37 2025 by rpki-client