This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json) Hash identifier: zcyyairQ6Tj10r7CwJcCsAxZhxIkoAfYQt4hrCUdKt4= Subject key identifier: 0B:D3:25:BD:8A:B6:5D:9A:A7:37:C9:77:B7:FB:F2:8C:9C:80:F5:29 Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c Certificate serial: 019AF31B782FC0C096983DEFC4E4616EA01C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft Manifest number: 105E Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: P1slXJ/7hpxw1Bbpyj9HKWSDedi7TlbKZehCGmFG/+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:78:2f:c0:c0:96:98:3d:ef:c4:e4:61:6e:a0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=0bd325bd8ab65d9aa737c977b7fbf28c9c80f529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:7e:85:3c:89:d8:cf:08:a5:c9:0d:42:3a: eb:a6:2f:d5:37:b5:b4:61:33:71:c9:d4:bb:9c:fb: 40:42:fe:3b:b0:db:9f:6d:6d:1e:c5:3c:18:8a:70: cc:a3:66:1b:2a:0d:70:a6:02:b4:62:21:6a:39:22: bd:ae:9d:20:99:d3:7b:e6:d9:d5:0f:51:ba:59:7b: 68:52:b7:f6:1b:7d:fa:4f:85:24:30:47:ea:2a:f9: 1d:5f:a3:24:23:f2:37:5e:bd:1d:2d:2e:27:59:a7: 18:12:fe:cc:57:60:dc:af:66:6d:92:79:61:54:7c: ef:fc:9f:10:1c:fd:81:d8:0d:41:65:81:e2:42:dd: c5:b0:32:d1:eb:0b:43:a3:48:e3:f4:89:89:0d:0f: 5a:18:6b:84:dd:3b:6c:3d:c2:3b:de:99:28:41:77: c7:3a:3d:71:20:2b:f0:96:59:5d:dc:25:3f:7a:62: 7f:c4:44:08:9a:e9:31:51:73:c8:68:a0:e2:92:b4: 4b:af:d3:ed:c0:9e:ec:20:73:b7:0a:06:cb:83:ba: 39:3d:d5:a6:16:7c:be:a3:53:7c:1e:02:b9:6a:13: d3:e6:32:5c:b6:d6:31:5a:3a:51:2d:bc:6b:be:ed: 6d:b9:6a:3e:3b:c4:cd:fc:60:0a:9e:c2:1c:60:0b: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D3:25:BD:8A:B6:5D:9A:A7:37:C9:77:B7:FB:F2:8C:9C:80:F5:29 X509v3 Authority Key Identifier: keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:aa:89:b1:01:fa:10:33:cc:5c:11:93:00:59:6c:69:58:0b: 07:b6:e0:90:0c:42:89:4e:c4:bf:07:d6:73:ac:b2:87:9a:2d: e1:d2:e8:80:88:a5:c6:e7:f4:96:e3:41:a0:00:74:e4:d4:30: 2b:e4:b2:b7:61:b1:a7:6f:fc:1b:b7:45:e9:1c:66:4e:b1:b7: 75:1a:0e:da:2c:ab:2e:29:53:07:d3:da:a6:62:16:21:e4:c2: 80:b3:56:c0:7c:5b:a6:e9:52:97:e3:e7:c2:94:ae:38:22:2a: 34:72:0f:ee:a6:d5:12:19:b2:e9:97:aa:4e:85:75:b1:dc:25: 82:ea:83:22:3c:c3:74:97:e3:a7:53:6c:ac:11:57:73:cb:b3: 04:b5:98:51:de:47:6b:62:87:5e:18:5f:4b:c8:5c:38:de:24: eb:56:52:7c:bd:b9:9a:5f:9a:72:36:72:ae:e0:69:72:51:3e: 9b:41:ea:d5:5a:77:77:29:da:b6:ff:23:09:ef:3e:02:00:a8: 9e:2a:4b:8a:fb:6f:5a:27:39:6b:66:26:f1:11:00:5a:c0:40: 64:6a:bd:fe:d3:1b:6d:dc:5e:a8:e1:8e:96:98:89:aa:a3:94: 64:01:95:00:23:b9:23:2c:8d:dc:e6:80:cb:a2:b9:7f:9b:c2: 9d:4b:5e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3gvwMCWmD3vxORhbqAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzhiNWRmNzUzYzc0OWFlNTc4MTBmOWQ5M2YzYmE1MWFl MDVkNWMwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD EygwYmQzMjViZDhhYjY1ZDlhYTczN2M5NzdiN2ZiZjI4YzljODBmNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE1+hTyJ2M8IpckNQjrrpi/VN7W0 YTNxydS7nPtAQv47sNufbW0exTwYinDMo2YbKg1wpgK0YiFqOSK9rp0gmdN75tnV D1G6WXtoUrf2G336T4UkMEfqKvkdX6MkI/I3Xr0dLS4nWacYEv7MV2Dcr2Ztknlh VHzv/J8QHP2B2A1BZYHiQt3FsDLR6wtDo0jj9ImJDQ9aGGuE3TtsPcI73pkoQXfH Oj1xICvwllld3CU/emJ/xEQImukxUXPIaKDikrRLr9PtwJ7sIHO3CgbLg7o5PdWm Fny+o1N8HgK5ahPT5jJcttYxWjpRLbxrvu1tuWo+O8TN/GAKnsIcYAs8cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvTJb2Ktl2apzfJd7f78oycgPUpMB8GA1UdIwQY MBaAFGfItd91PHSa5XgQ+dk/O6Ua4F1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhpMTMzVThkSnJsZUJENTJUODdwUnJnWFZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNTBiZTItYjliNi00NzdiLTg0ZmMt ZmJlNDdhZDYyYWE1LzEvWjhpMTMzVThkSnJsZUJENTJUODdwUnJnWFZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNTBiZTItYjliNi00NzdiLTg0ZmMtZmJlNDdhZDYyYWE1 LzEvWjhpMTMzVThkSnJsZUJENTJUODdwUnJnWFZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqqJsQH6 EDPMXBGTAFlsaVgLB7bgkAxCiU7EvwfWc6yyh5ot4dLogIilxuf0luNBoAB05NQw K+Syt2Gxp2/8G7dF6RxmTrG3dRoO2iyrLilTB9PapmIWIeTCgLNWwHxbpulSl+Pn wpSuOCIqNHIP7qbVEhmy6ZeqToV1sdwlguqDIjzDdJfjp1NsrBFXc8uzBLWYUd5H a2KHXhhfS8hcON4k61ZSfL25ml+acjZyruBpclE+m0Hq1Vp3dynatv8jCe8+AgCo nipLivtvWic5a2Ym8REAWsBAZGq9/tMbbdxeqOGOlpiJqqOUZAGVACO5IyyN3OaA y6K5f5vCnUtepg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:12 2025 by rpki-client