This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json) Hash identifier: mRYiiu8jWxhir1ZC6wg35Nk7SGHj0DpdqV0eQt0dVhc= Subject key identifier: A1:2E:24:F1:2E:0E:47:14:9C:B1:8A:5E:E0:9A:06:9B:35:1F:43:F1 Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a Certificate serial: 019B50AA41309798C484DBBA8FD206F2BA9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft Manifest number: 14CD Signing time: Wed 24 Dec 2025 14:01:33 +0000 Manifest this update: Wed 24 Dec 2025 14:01:33 +0000 Manifest next update: Thu 25 Dec 2025 14:01:33 +0000 Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: Ekp/GDt3UXbGqMei/G/f5xkE9E55XUN1Vj4XkhKms2k=) 2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:41:30:97:98:c4:84:db:ba:8f:d2:06:f2:ba:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a Validity Not Before: Dec 24 14:01:33 2025 GMT Not After : Dec 25 14:01:33 2025 GMT Subject: CN=a12e24f12e0e47149cb18a5ee09a069b351f43f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:f1:95:d5:e1:d1:fd:18:77:bf:30:6c:28: 88:57:33:21:c9:dd:6c:9f:0e:28:9f:e5:63:f1:1a: 6b:b7:c7:93:15:ee:ed:28:69:d9:45:4b:e6:65:26: ea:50:c0:4e:19:05:41:bb:c3:e5:78:eb:55:77:2e: a9:4e:0b:51:2e:2e:ba:25:4a:ae:56:ec:a0:12:77: d0:f9:a3:75:a7:00:06:a1:fa:6e:c7:0d:90:a2:8d: ec:2d:6d:38:98:d7:f1:73:6b:29:cc:bf:40:0a:ee: cd:6a:ef:75:21:43:cf:41:d0:f7:d3:46:e7:7a:4d: 39:b4:4e:79:8e:75:c4:1f:48:a8:cf:12:f4:d5:27: c9:80:24:20:6d:04:04:14:e3:91:14:09:ba:8a:c7: 3f:6c:28:03:fb:1c:8c:50:dd:f3:b7:83:0e:34:72: 74:19:16:27:5e:e7:61:45:7b:21:31:4f:fa:09:99: a9:f2:00:e4:85:78:c3:e1:fb:d8:1b:ef:08:b7:ce: f9:4c:fd:2c:6e:f8:2a:43:9a:30:93:fa:62:75:3a: 57:da:7c:0b:ed:2a:24:b2:17:33:1a:59:da:40:33: 29:24:0c:00:a3:02:3f:9c:11:1e:91:db:61:c0:82: 07:e6:60:8a:f6:c8:8f:87:fb:2b:c3:e2:81:6e:a9: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2E:24:F1:2E:0E:47:14:9C:B1:8A:5E:E0:9A:06:9B:35:1F:43:F1 X509v3 Authority Key Identifier: keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:63:24:11:dc:41:f0:c8:20:0a:42:42:2a:eb:62:f4:6f:e5: 89:be:51:6d:14:19:d0:14:e0:6d:43:6d:88:f9:3f:89:c6:15: 01:69:51:ce:3a:1d:bb:d1:6c:c0:42:60:95:55:1b:b7:7d:b0: 52:42:20:ef:3e:ca:4b:ab:0d:ef:a1:d3:ea:78:5c:03:35:2e: 56:60:62:b5:d8:47:6d:d7:cb:c1:a3:02:1e:3d:4f:c9:3f:5a: a8:0a:ad:4e:ad:61:07:15:54:83:22:bd:35:4e:da:3e:75:17: e7:32:37:1d:8a:f3:39:56:93:86:92:2f:8d:7c:96:8a:50:9d: 01:e7:47:7b:66:6b:08:2a:b0:7d:09:4a:7c:2c:a5:fd:bc:85: e7:94:2c:81:6b:dc:a3:66:90:58:23:22:2c:c3:c5:8c:8b:d5: 0e:9f:63:fb:c6:ac:23:ed:c4:91:f5:ac:70:aa:f6:06:38:0d: d2:e6:e6:85:0b:33:20:5b:8f:02:12:9f:c3:ab:39:a5:9c:5b: 5b:7a:0e:35:89:e5:9c:f9:e4:e5:f5:1b:60:6c:9c:0c:e3:9e: 8a:b6:81:7d:2e:09:5f:1b:bb:90:ad:be:14:a4:ab:f9:7b:2f: 72:8e:5d:29:f6:0c:df:76:72:b0:e6:29:7d:73:aa:b8:d5:27: 87:c4:5e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqkEwl5jEhNu6j9IG8rqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1 MDc0MmEwHhcNMjUxMjI0MTQwMTMzWhcNMjUxMjI1MTQwMTMzWjAzMTEwLwYDVQQD EyhhMTJlMjRmMTJlMGU0NzE0OWNiMThhNWVlMDlhMDY5YjM1MWY0M2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVLxldXh0f0Yd78wbCiIVzMhyd1s nw4on+Vj8Rprt8eTFe7tKGnZRUvmZSbqUMBOGQVBu8PleOtVdy6pTgtRLi66JUqu VuygEnfQ+aN1pwAGofpuxw2Qoo3sLW04mNfxc2spzL9ACu7Nau91IUPPQdD300bn ek05tE55jnXEH0iozxL01SfJgCQgbQQEFOORFAm6isc/bCgD+xyMUN3zt4MONHJ0 GRYnXudhRXshMU/6CZmp8gDkhXjD4fvYG+8It875TP0sbvgqQ5owk/pidTpX2nwL 7SokshczGlnaQDMpJAwAowI/nBEekdthwIIH5mCK9siPh/srw+KBbqkfDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEuJPEuDkcUnLGKXuCaBps1H0PxMB8GA1UdIwQY MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1mMkEdxB 8MggCkJCKuti9G/lib5RbRQZ0BTgbUNtiPk/icYVAWlRzjodu9FswEJglVUbt32w UkIg7z7KS6sN76HT6nhcAzUuVmBitdhHbdfLwaMCHj1PyT9aqAqtTq1hBxVUgyK9 NU7aPnUX5zI3HYrzOVaThpIvjXyWilCdAedHe2ZrCCqwfQlKfCyl/byF55QsgWvc o2aQWCMiLMPFjIvVDp9j+8asI+3EkfWscKr2BjgN0ubmhQszIFuPAhKfw6s5pZxb W3oONYnlnPnk5fUbYGycDOOeiraBfS4JXxu7kK2+FKSr+Xsvco5dKfYM33ZysOYp fXOquNUnh8RelA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:22 2025 by rpki-client