This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json) Hash identifier: 1ObhTRxz654O4i6VYRVOyf04rILVYzyqnJbfRc+WZG0= Subject key identifier: F3:CF:5B:3C:27:8E:AA:D7:5C:22:78:81:50:C7:2C:58:6B:32:D6:4E Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b Certificate serial: 019B50A9CD57E0B6D44368C007D1DC399CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 14:01:03 +0000 Manifest this update: Wed 24 Dec 2025 14:01:03 +0000 Manifest next update: Thu 25 Dec 2025 14:01:03 +0000 Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: yojG4RMN687AhpTB6fWrzeiXDyXb/s6jBgQuqg5njsg=) 2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:cd:57:e0:b6:d4:43:68:c0:07:d1:dc:39:9c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b Validity Not Before: Dec 24 14:01:03 2025 GMT Not After : Dec 25 14:01:03 2025 GMT Subject: CN=f3cf5b3c278eaad75c22788150c72c586b32d64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:4e:a2:24:a7:3e:58:e6:9f:6d:0f:3e:ef: a8:6e:84:12:51:e3:e2:c2:af:d0:b2:7a:9a:9e:a1: 6e:3a:29:9c:3b:10:80:f8:b8:fd:11:dd:9f:26:f3: f3:a0:b5:b8:34:1a:b0:97:e9:70:1a:0b:5e:37:08: 6b:e0:7a:40:97:9b:88:bd:70:b9:6a:f4:76:c3:ec: 3a:9b:48:27:fe:81:d8:9a:5b:b6:78:3e:27:6a:df: b3:27:35:a4:08:35:66:79:20:02:3e:ec:bf:cb:b9: 0f:54:c0:7a:9c:20:42:87:e6:56:49:89:94:b6:ad: 8d:e9:36:24:ca:64:25:dd:6e:64:94:b9:05:75:34: 0b:47:dd:aa:eb:ac:3a:75:8b:c7:fc:4e:ee:92:10: 8f:91:be:6b:cd:30:fb:ae:19:7c:28:e7:ae:7e:a5: 73:c6:61:7e:e5:37:e4:ec:27:56:ca:f8:1c:4e:cf: 08:67:29:99:41:89:9d:5e:43:94:1f:80:14:88:79: 3b:e6:cd:a6:9b:a8:ff:1d:55:63:fa:80:5b:9e:d7: 02:75:09:0c:a3:30:f3:37:fc:ec:6d:d9:74:44:c8: 08:27:65:6e:74:36:e5:71:ba:d0:9f:37:19:96:8f: 87:84:1c:61:75:7b:25:06:48:8e:af:9d:93:68:e8: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CF:5B:3C:27:8E:AA:D7:5C:22:78:81:50:C7:2C:58:6B:32:D6:4E X509v3 Authority Key Identifier: keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c3:2e:32:d7:99:b4:da:f5:cd:68:cf:af:b4:50:4e:ba:dc: f9:06:0f:1a:df:de:4f:a4:38:11:c2:b8:86:99:aa:b7:ab:ec: ee:09:3d:d3:8d:35:54:53:1e:b9:1c:da:1a:19:48:bc:86:a4: e5:45:9f:ef:c1:6e:1c:0d:58:58:91:9a:dc:b0:92:0f:be:53: 43:ec:4e:89:86:9b:cd:22:64:35:12:79:30:22:36:bd:7d:27: 8d:7e:90:80:1c:67:d8:2d:ae:c8:cd:81:d5:db:97:7e:52:90: f1:66:34:e5:65:f2:e9:e1:2a:2a:1f:6b:e6:16:20:34:89:93: 99:20:60:27:f5:ce:5b:05:34:5e:b1:18:1a:3f:f4:6b:da:39: 9b:ca:99:c5:8d:3a:0b:99:38:c2:71:24:b2:c9:a1:4b:4c:53: 1e:04:73:90:46:d1:a8:d0:16:de:11:2a:50:e6:e2:4f:98:b6: 16:49:66:4c:37:09:db:c9:b9:d0:57:de:ef:a6:30:4c:51:67: d9:ee:38:1e:61:31:56:ea:6a:17:38:1b:75:07:e4:1f:ab:5b: 76:87:c6:ef:ea:0c:a0:f8:5c:a1:7a:0d:80:74:54:59:38:d1: b5:67:1c:e5:78:b6:b8:71:23:1e:c5:79:fb:7f:a9:5b:2b:f4: 56:d9:de:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqc1X4LbUQ2jAB9HcOZy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl OTdlNmIwHhcNMjUxMjI0MTQwMTAzWhcNMjUxMjI1MTQwMTAzWjAzMTEwLwYDVQQD EyhmM2NmNWIzYzI3OGVhYWQ3NWMyMjc4ODE1MGM3MmM1ODZiMzJkNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTZOoiSnPljmn20PPu+oboQSUePi wq/QsnqanqFuOimcOxCA+Lj9Ed2fJvPzoLW4NBqwl+lwGgteNwhr4HpAl5uIvXC5 avR2w+w6m0gn/oHYmlu2eD4nat+zJzWkCDVmeSACPuy/y7kPVMB6nCBCh+ZWSYmU tq2N6TYkymQl3W5klLkFdTQLR92q66w6dYvH/E7ukhCPkb5rzTD7rhl8KOeufqVz xmF+5Tfk7CdWyvgcTs8IZymZQYmdXkOUH4AUiHk75s2mm6j/HVVj+oBbntcCdQkM ozDzN/zsbdl0RMgIJ2VudDblcbrQnzcZlo+HhBxhdXslBkiOr52TaOgSxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPPWzwnjqrXXCJ4gVDHLFhrMtZOMB8GA1UdIwQY MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt ZGMxZGI2N2RiM2NiLzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcMuMteZ tNr1zWjPr7RQTrrc+QYPGt/eT6Q4EcK4hpmqt6vs7gk90401VFMeuRzaGhlIvIak 5UWf78FuHA1YWJGa3LCSD75TQ+xOiYabzSJkNRJ5MCI2vX0njX6QgBxn2C2uyM2B 1duXflKQ8WY05WXy6eEqKh9r5hYgNImTmSBgJ/XOWwU0XrEYGj/0a9o5m8qZxY06 C5k4wnEkssmhS0xTHgRzkEbRqNAW3hEqUObiT5i2FklmTDcJ28m50Ffe76YwTFFn 2e44HmExVupqFzgbdQfkH6tbdofG7+oMoPhcoXoNgHRUWTjRtWcc5Xi2uHEjHsV5 +3+pWyv0Vtne5w== -----END CERTIFICATE-----Generated at Wed Dec 24 18:06:04 2025 by rpki-client