This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json) Hash identifier: s7+2Jk+Sa6q/7blHMI1A8iDlDUENPQqoxVt7uk47+ho= Subject key identifier: 65:26:D4:A7:20:A6:02:25:CD:EE:AF:A6:EA:EC:DC:84:66:A3:68:A1 Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Certificate serial: 019B4625D96AE728BDABDC80B67F86B31792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft Manifest number: 03F3 Signing time: Mon 22 Dec 2025 13:00:44 +0000 Manifest this update: Mon 22 Dec 2025 13:00:44 +0000 Manifest next update: Tue 23 Dec 2025 13:00:44 +0000 Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=) 2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: OFxU8SfrO4iFuqjZNxgDlaCQAm7nJGMPjTSivtdrY6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:d9:6a:e7:28:bd:ab:dc:80:b6:7f:86:b3:17:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Validity Not Before: Dec 22 13:00:44 2025 GMT Not After : Dec 23 13:00:44 2025 GMT Subject: CN=6526d4a720a60225cdeeafa6eaecdc8466a368a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:8b:a4:72:fa:88:9b:fa:fc:48:ab:c7:be: 75:f9:8d:90:da:48:0d:63:bf:38:7e:88:03:3b:37: b8:13:2f:a2:10:53:c5:6e:b5:9b:09:ac:c8:d5:a9: 80:7d:ec:b9:8d:65:38:20:ef:50:31:eb:3b:4d:cd: 73:a3:f4:5d:1b:3b:a5:39:08:c8:eb:d7:77:9d:13: ff:bb:51:8c:e9:ad:12:4b:e2:ff:12:cc:d4:0c:d8: 87:f9:8a:41:a6:64:19:a2:b2:3c:9b:c1:3f:f2:f1: 9d:8b:fb:65:50:8b:a0:ad:fd:78:2d:09:21:b1:45: eb:b0:2d:e5:92:60:28:77:c9:7a:fe:7d:44:5a:c4: e4:62:d6:62:de:92:9d:f5:47:90:58:4c:13:e1:62: 19:07:6b:aa:48:60:94:c2:34:c5:8b:2c:b4:89:85: d9:6c:03:63:9e:6e:72:9f:d4:6f:d2:6b:e2:e7:f6: 31:52:40:fe:ce:e9:42:b5:58:2b:63:1a:01:a9:62: 87:43:1c:30:ee:56:ed:59:93:3e:e6:6a:41:61:22: 87:05:4d:be:f7:12:a1:de:9d:b6:b8:5a:67:e7:5b: 67:db:78:7a:86:0f:5e:08:86:a3:bd:99:11:c1:34: 57:cf:4e:62:fa:ac:8c:bc:37:e3:84:1f:cb:6d:8e: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:26:D4:A7:20:A6:02:25:CD:EE:AF:A6:EA:EC:DC:84:66:A3:68:A1 X509v3 Authority Key Identifier: keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:40:78:7c:e8:42:07:b1:f8:25:32:78:8d:88:27:c5:a6:e9: dc:54:3d:36:66:da:d1:38:9c:c7:b4:94:00:15:ca:e4:90:9e: 67:1f:c2:d5:2c:88:56:ae:f4:00:1a:f3:14:29:3e:cc:3a:21: 14:62:bf:7b:ee:fd:45:9c:90:a4:e8:a8:5f:08:95:bb:78:87: d9:67:e5:7f:96:d0:f8:4b:41:a2:f2:c1:fa:71:d5:fa:2e:8a: 73:6e:e5:cb:66:3d:8d:2e:49:cc:83:df:bf:69:76:95:8a:0c: 5d:c5:f7:ba:1e:01:84:35:9f:fd:4a:15:d9:29:91:51:37:ee: 6a:ce:ab:f6:76:5e:8b:34:ba:6c:5a:e4:e5:69:86:35:e9:28: 66:1e:15:33:78:10:ca:55:b1:7c:8c:6c:0a:0d:f4:33:ff:8f: 2a:b5:41:9a:02:f9:89:f3:27:aa:8a:47:60:e7:81:05:08:4b: 69:a2:3c:3e:59:d0:50:81:77:14:29:b5:a9:c6:d8:7a:df:c8: a8:87:40:23:83:e7:6c:76:78:82:85:a4:54:1c:05:3a:81:16: 69:99:42:a1:4b:15:90:7d:2f:4a:28:11:eb:75:99:30:e8:ec: 14:39:8b:24:66:30:90:fb:c2:e6:42:47:dd:60:64:6d:f9:49: 35:6f:44:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJdlq5yi9q9yAtn+GsxeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk NjBiZWYwHhcNMjUxMjIyMTMwMDQ0WhcNMjUxMjIzMTMwMDQ0WjAzMTEwLwYDVQQD Eyg2NTI2ZDRhNzIwYTYwMjI1Y2RlZWFmYTZlYWVjZGM4NDY2YTM2OGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+WLpHL6iJv6/Eirx751+Y2Q2kgN Y784fogDOze4Ey+iEFPFbrWbCazI1amAfey5jWU4IO9QMes7Tc1zo/RdGzulOQjI 69d3nRP/u1GM6a0SS+L/EszUDNiH+YpBpmQZorI8m8E/8vGdi/tlUIugrf14LQkh sUXrsC3lkmAod8l6/n1EWsTkYtZi3pKd9UeQWEwT4WIZB2uqSGCUwjTFiyy0iYXZ bANjnm5yn9Rv0mvi5/YxUkD+zulCtVgrYxoBqWKHQxww7lbtWZM+5mpBYSKHBU2+ 9xKh3p22uFpn51tn23h6hg9eCIajvZkRwTRXz05i+qyMvDfjhB/LbY7bOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUm1KcgpgIlze6vpurs3IRmo2ihMB8GA1UdIwQY MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4 LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEB4fOhC B7H4JTJ4jYgnxabp3FQ9Nmba0Ticx7SUABXK5JCeZx/C1SyIVq70ABrzFCk+zDoh FGK/e+79RZyQpOioXwiVu3iH2Wflf5bQ+EtBovLB+nHV+i6Kc27ly2Y9jS5JzIPf v2l2lYoMXcX3uh4BhDWf/UoV2SmRUTfuas6r9nZeizS6bFrk5WmGNekoZh4VM3gQ ylWxfIxsCg30M/+PKrVBmgL5ifMnqopHYOeBBQhLaaI8PlnQUIF3FCm1qcbYet/I qIdAI4PnbHZ4goWkVBwFOoEWaZlCoUsVkH0vSigR63WZMOjsFDmLJGYwkPvC5kJH 3WBkbflJNW9E9g== -----END CERTIFICATE-----Generated at Mon Dec 22 17:10:18 2025 by rpki-client