This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json) Hash identifier: H2hq6uFFIAsoaQ3POqFoENgtJKG2K/ybefi7CIo+pss= Subject key identifier: 4C:52:BF:D6:20:61:9C:4A:22:09:F4:D2:2D:49:E1:5D:F6:F6:39:03 Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Certificate serial: 019B3CB4C4EFC997994F877A8FE2A3C985FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft Manifest number: 08B5 Signing time: Sat 20 Dec 2025 17:00:38 +0000 Manifest this update: Sat 20 Dec 2025 17:00:38 +0000 Manifest next update: Sun 21 Dec 2025 17:00:38 +0000 Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=) 2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: WBIuCH0V3QLP/EgsSs9iB0TnrkNNrnrD25z1ftJPJgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c4:ef:c9:97:99:4f:87:7a:8f:e2:a3:c9:85:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Validity Not Before: Dec 20 17:00:38 2025 GMT Not After : Dec 21 17:00:38 2025 GMT Subject: CN=4c52bfd620619c4a2209f4d22d49e15df6f63903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:65:81:25:21:79:d1:dc:ae:5a:fb:84:df: 94:2a:e4:90:c2:2d:bc:94:f3:77:48:bb:78:31:6a: ec:b1:3e:14:cc:ce:dd:f5:94:60:2c:d8:e1:d4:a5: ac:4d:b3:4a:d0:d0:24:5f:30:f4:25:bc:0d:d4:85: 7a:8c:70:fa:c5:af:de:b1:b9:d3:26:bc:a5:86:eb: 63:9f:e0:67:af:b8:b4:61:c9:04:4c:79:f1:43:05: 4f:72:32:f1:9d:e4:59:06:20:b2:4d:bd:b1:af:8a: 2f:5a:8f:cf:c1:0d:0d:71:ba:ac:e5:24:6b:5a:88: 1c:84:61:da:14:7f:3f:39:b3:1c:b8:85:aa:7e:cf: 49:3e:3d:39:8e:02:b3:fd:17:56:b7:b9:38:b4:cc: 02:93:c6:ea:ac:33:6c:6a:07:40:5a:c2:d4:ad:2a: d2:ed:d5:5e:5c:4b:96:cf:46:6c:de:f5:e4:50:eb: d9:8c:2a:05:15:a3:06:dd:bf:23:65:ca:d7:aa:09: ef:27:f0:72:f5:17:5e:cd:cb:fb:8a:c1:3b:b3:26: bb:da:dd:7f:f1:2b:57:e3:4d:45:34:5c:1d:36:d2: cf:d4:f7:3c:d8:5b:25:cb:99:ec:50:52:d0:bd:94: ab:cf:22:11:71:a6:ba:b7:d9:c3:92:f6:5a:f1:04: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:52:BF:D6:20:61:9C:4A:22:09:F4:D2:2D:49:E1:5D:F6:F6:39:03 X509v3 Authority Key Identifier: keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:03:d2:e2:f1:1a:b7:30:94:86:61:36:13:0e:41:d2:5b:f0: 37:09:08:c2:c8:44:5a:f0:99:3a:70:d4:2f:b5:12:18:14:d0: 47:cc:b7:eb:cf:01:de:75:e4:1a:9a:61:06:14:44:e0:c4:0d: c7:80:d4:9b:a7:10:c0:8b:72:da:82:25:5c:01:bf:74:fc:7c: 06:55:d3:29:60:e4:8a:8e:ed:50:07:9d:37:74:d8:aa:7b:90: f8:7e:0f:21:4b:41:a8:7a:40:2c:f9:46:89:8b:5b:3b:25:0d: 44:3b:80:6b:64:93:5c:d5:82:a0:43:50:87:5f:09:e3:99:1a: 3e:2e:1f:70:04:f7:e9:35:a2:f1:d0:88:b4:f5:76:d8:94:b6: a8:d5:8a:c3:ef:1c:96:1b:be:4a:e7:c7:2e:8e:8b:80:f0:95: 45:01:4a:2e:62:14:2b:c9:c9:71:0e:10:7a:c9:14:e0:d6:8d: 13:7f:ff:36:24:57:0e:a9:a7:75:39:02:da:3b:2a:e6:eb:58: d6:d5:e1:52:26:b8:44:41:ef:63:d7:bb:13:4c:3e:ee:ff:1c: 8b:2a:fb:90:3b:b8:70:39:cf:87:3a:cf:51:a5:f5:23:9f:17: ea:96:a9:54:aa:7b:ca:44:cb:d7:92:49:7a:63:1c:6f:45:d4: 77:8a:47:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMTvyZeZT4d6j+KjyYX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzZjYzRhNzQxOGEwOTQyMWJhOTgwNWU3NjRlZWYzNDJl ZjhmMzgwHhcNMjUxMjIwMTcwMDM4WhcNMjUxMjIxMTcwMDM4WjAzMTEwLwYDVQQD Eyg0YzUyYmZkNjIwNjE5YzRhMjIwOWY0ZDIyZDQ5ZTE1ZGY2ZjYzOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIBlgSUhedHcrlr7hN+UKuSQwi28 lPN3SLt4MWrssT4UzM7d9ZRgLNjh1KWsTbNK0NAkXzD0JbwN1IV6jHD6xa/esbnT Jrylhutjn+Bnr7i0YckETHnxQwVPcjLxneRZBiCyTb2xr4ovWo/PwQ0Ncbqs5SRr WogchGHaFH8/ObMcuIWqfs9JPj05jgKz/RdWt7k4tMwCk8bqrDNsagdAWsLUrSrS 7dVeXEuWz0Zs3vXkUOvZjCoFFaMG3b8jZcrXqgnvJ/By9Rdezcv7isE7sya72t1/ 8StX401FNFwdNtLP1Pc82Fsly5nsUFLQvZSrzyIRcaa6t9nDkvZa8QR/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExSv9YgYZxKIgn00i1J4V329jkDMB8GA1UdIwQY MBaAFM/GzEp0GKCUIbqYBedk7vNC7484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzIt NGFmMWZiNzQzOGU3LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzItNGFmMWZiNzQzOGU3 LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwPS4vEa tzCUhmE2Ew5B0lvwNwkIwshEWvCZOnDUL7USGBTQR8y3688B3nXkGpphBhRE4MQN x4DUm6cQwIty2oIlXAG/dPx8BlXTKWDkio7tUAedN3TYqnuQ+H4PIUtBqHpALPlG iYtbOyUNRDuAa2STXNWCoENQh18J45kaPi4fcAT36TWi8dCItPV22JS2qNWKw+8c lhu+SufHLo6LgPCVRQFKLmIUK8nJcQ4QeskU4NaNE3//NiRXDqmndTkC2jsq5utY 1tXhUia4REHvY9e7E0w+7v8ciyr7kDu4cDnPhzrPUaX1I58X6papVKp7ykTL15JJ emMcb0XUd4pHAw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:24:39 2025 by rpki-client