This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json) Hash identifier: XpyjQnGbYKHt4G9NTTuEUsvsvXmIO2GIzqN+38e7IcA= Subject key identifier: 51:47:FD:6A:CC:5D:C2:51:18:3D:E7:7F:67:A1:AD:C9:97:21:A3:60 Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0 Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0 Certificate serial: 019B41A4663D1F3A82480413FF2F1EE5E787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 16:00:51 +0000 Manifest this update: Sun 21 Dec 2025 16:00:51 +0000 Manifest next update: Mon 22 Dec 2025 16:00:51 +0000 Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=) 2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=) 3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=) 4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=) 5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: vthzwr7UTr/WKuyEPSQxw2e4+xl+cstcphrfD9GWwvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:66:3d:1f:3a:82:48:04:13:ff:2f:1e:e5:e7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0 Validity Not Before: Dec 21 16:00:51 2025 GMT Not After : Dec 22 16:00:51 2025 GMT Subject: CN=5147fd6acc5dc251183de77f67a1adc99721a360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:83:e5:10:2b:2a:49:25:56:ee:d0:38:a6: 74:34:f9:9b:d9:ad:9b:82:2e:db:09:91:16:68:a3: 17:e8:92:d8:f2:e6:6a:e8:3f:4c:f0:66:b4:c3:75: 4b:ca:12:ad:2f:68:da:d5:1a:31:7d:db:f8:c3:66: a4:9d:30:1f:6e:fe:28:81:2d:d5:4d:8a:27:74:94: ea:36:6c:dc:63:10:b5:b7:ef:4a:b9:72:3f:2a:32: 21:c9:d1:72:5d:2f:03:4c:22:bd:5e:3e:f4:aa:0f: 8e:52:80:e9:e9:fc:e0:d1:62:d7:dd:57:ee:45:06: 07:24:54:54:51:14:12:86:52:0e:b7:0e:c2:93:0c: 30:94:2c:ef:67:e2:cd:00:59:51:d3:60:57:e2:86: 62:eb:54:83:72:84:52:2f:c5:5a:b5:7e:0d:2d:3f: c6:bd:dc:1a:38:56:33:e6:34:84:e9:82:87:58:75: 88:cf:06:6a:c1:e7:e7:c4:54:4a:60:95:ca:7c:2d: f0:a1:1b:ef:91:79:f4:20:0f:ca:6e:4c:f8:a1:f4: 83:e5:b6:a8:19:89:c4:fd:c6:74:1b:e7:86:ad:fb: 51:ac:b9:7e:5c:e7:cf:49:2a:48:78:99:54:9c:21: fc:71:47:55:97:d2:d0:a7:14:8e:8c:24:f0:e1:01: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:47:FD:6A:CC:5D:C2:51:18:3D:E7:7F:67:A1:AD:C9:97:21:A3:60 X509v3 Authority Key Identifier: keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b8:67:3b:e0:b2:b6:67:6a:44:da:37:b1:5d:41:92:7e:23: 27:64:4b:59:67:ff:db:09:96:b9:de:02:f7:81:48:f9:a0:4a: 19:cf:62:27:b0:51:c9:67:b7:bd:6b:ad:1d:be:00:37:31:3a: 28:61:31:3e:cd:c4:cb:f2:61:85:9e:2e:8f:7d:32:93:16:8f: 88:27:10:60:90:78:2a:19:98:4f:e3:b0:6d:34:4b:22:a2:9d: 34:58:1a:e6:cb:f1:48:6d:94:df:a7:04:ae:f0:71:5a:0f:41: 82:d2:55:a3:68:17:f3:bf:c1:98:7a:89:db:93:d3:07:3f:9c: 7b:3a:34:c7:f4:1d:8e:d0:d2:2e:96:2c:0b:0f:f3:5e:99:c9: 27:ab:a6:68:84:fd:ac:d4:b8:78:aa:b9:02:6a:4d:01:5e:22: 88:4b:05:c6:91:2c:95:70:4f:a8:70:fd:d8:71:02:d4:b2:7c: 16:97:b5:a7:3c:73:6d:d5:19:0a:0b:ed:08:1a:43:03:ac:44: ac:36:ec:17:09:bd:22:04:8c:4a:3a:5a:bd:dd:40:95:96:03: 46:2b:54:60:9b:b4:39:7b:c8:fe:23:dc:65:7a:17:c8:f8:bd: 80:27:64:05:4c:a3:12:18:e4:f8:81:fe:a5:2a:6d:8b:ae:79: 2e:ab:04:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpGY9HzqCSAQT/y8e5eeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzdlZjJiNzY2NTk0ODkyZDc4OTI4Y2JlNzgxNzc5ZmRj ZTY3ZDAwHhcNMjUxMjIxMTYwMDUxWhcNMjUxMjIyMTYwMDUxWjAzMTEwLwYDVQQD Eyg1MTQ3ZmQ2YWNjNWRjMjUxMTgzZGU3N2Y2N2ExYWRjOTk3MjFhMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6iD5RArKkklVu7QOKZ0NPmb2a2b gi7bCZEWaKMX6JLY8uZq6D9M8Ga0w3VLyhKtL2ja1Roxfdv4w2aknTAfbv4ogS3V TYondJTqNmzcYxC1t+9KuXI/KjIhydFyXS8DTCK9Xj70qg+OUoDp6fzg0WLX3Vfu RQYHJFRUURQShlIOtw7CkwwwlCzvZ+LNAFlR02BX4oZi61SDcoRSL8VatX4NLT/G vdwaOFYz5jSE6YKHWHWIzwZqwefnxFRKYJXKfC3woRvvkXn0IA/Kbkz4ofSD5bao GYnE/cZ0G+eGrftRrLl+XOfPSSpIeJlUnCH8cUdVl9LQpxSOjCTw4QEuIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFH/WrMXcJRGD3nf2ehrcmXIaNgMB8GA1UdIwQY MBaAFM/H7yt2ZZSJLXiSjL54F3n9zmfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjct OGNkNTViMDNkMjJkLzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjctOGNkNTViMDNkMjJk LzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbhnO+Cy tmdqRNo3sV1Bkn4jJ2RLWWf/2wmWud4C94FI+aBKGc9iJ7BRyWe3vWutHb4ANzE6 KGExPs3Ey/JhhZ4uj30ykxaPiCcQYJB4KhmYT+OwbTRLIqKdNFga5svxSG2U36cE rvBxWg9BgtJVo2gX87/BmHqJ25PTBz+cezo0x/QdjtDSLpYsCw/zXpnJJ6umaIT9 rNS4eKq5AmpNAV4iiEsFxpEslXBPqHD92HEC1LJ8Fpe1pzxzbdUZCgvtCBpDA6xE rDbsFwm9IgSMSjpavd1AlZYDRitUYJu0OXvI/iPcZXoXyPi9gCdkBUyjEhjk+IH+ pSpti655LqsEjA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:27 2025 by rpki-client