This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json) Hash identifier: WYKVPrz+Gde9eh4QXwV7JzlLlZ2PN33rdixHcYtiYEI= Subject key identifier: 1C:F8:87:29:F7:17:BF:71:54:0D:53:95:EB:19:CB:D6:AB:37:22:DD Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac Certificate serial: 019B3BD9A424E8FED2F618A22A5CEC9EC241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 13:01:17 +0000 Manifest this update: Sat 20 Dec 2025 13:01:17 +0000 Manifest next update: Sun 21 Dec 2025 13:01:17 +0000 Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: slwaGxzZ8IUfP/iK+YkLdENnTfCAac6mcu+Nrr/qSVM=) 2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=) 3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:a4:24:e8:fe:d2:f6:18:a2:2a:5c:ec:9e:c2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac Validity Not Before: Dec 20 13:01:17 2025 GMT Not After : Dec 21 13:01:17 2025 GMT Subject: CN=1cf88729f717bf71540d5395eb19cbd6ab3722dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:ba:08:68:58:b0:94:90:54:f0:70:35:87: b2:48:28:aa:7e:0c:0e:2a:2d:a7:d9:26:b0:ca:6d: 20:f4:3d:30:54:44:c9:d1:0c:a0:a2:fb:a9:69:87: c0:b6:2d:17:e0:e4:75:d7:79:32:2d:1e:71:dc:0c: 5e:fd:3b:66:11:e2:27:1b:68:63:8e:bd:85:a6:b8: e9:ac:14:c1:17:53:7a:92:0f:c0:84:4b:3f:3a:9c: 0c:06:d9:61:ad:35:d8:dc:14:67:c4:ea:c3:4a:50: 45:4a:02:40:cb:31:3e:6b:f1:7c:66:b7:70:99:93: 79:cc:7d:21:d5:df:ed:b6:e4:ae:dd:37:54:9c:ef: c6:26:e9:a6:f2:64:29:c9:07:af:c4:8d:3d:63:92: 02:f4:cc:55:26:79:5a:e5:f8:c6:ca:ca:83:cf:7c: 53:2a:a7:de:7f:13:82:d7:ca:fd:eb:89:6e:4c:42: f5:53:66:1a:05:0d:fb:de:ff:94:59:f4:5a:bb:b6: a6:62:cc:52:ee:ca:4d:d8:bd:48:7a:18:aa:00:0f: df:96:4a:d1:28:fb:76:2b:f5:fd:b4:cc:d0:5a:0a: c4:96:e8:ac:ae:fe:34:3d:2c:67:8f:d4:72:e0:2f: f4:14:41:94:89:56:0b:3f:03:3a:19:5c:0f:5b:36: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F8:87:29:F7:17:BF:71:54:0D:53:95:EB:19:CB:D6:AB:37:22:DD X509v3 Authority Key Identifier: keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:91:98:ed:29:a5:71:9f:43:5a:e6:35:55:14:54:93:49:8a: 3c:d9:d3:0d:10:13:e4:f3:dc:a3:2c:3d:7c:26:c4:eb:16:03: dc:25:38:cb:b4:6e:f9:04:f1:48:e3:36:a3:d2:b2:d8:ec:88: 70:7e:fb:87:d7:36:66:39:ec:9c:8c:2b:a8:3e:fb:b9:2a:e6: 22:75:f1:59:5f:51:7d:06:69:49:c8:18:79:a9:87:5e:09:4d: b5:ba:b0:be:ad:19:8a:0d:fc:3a:2e:35:50:9f:90:d3:ed:c7: bf:70:61:7c:af:4e:05:c4:00:f4:87:54:27:4a:ff:c2:2a:72: 2e:5c:10:ea:21:fc:c2:67:62:4e:00:ea:12:85:1f:37:74:15: 5d:16:62:ff:5d:d5:12:5e:04:8f:1c:65:20:37:db:fe:fa:81: 09:49:7e:c4:12:02:18:64:e1:c7:a6:a9:b9:64:a5:19:c4:de: 98:e3:d4:06:b3:6a:ee:f5:32:0f:e8:94:ac:d1:05:f7:f6:c4: 36:6b:a1:2b:bd:17:66:86:83:15:c8:11:e0:53:2e:07:55:6f: 0b:43:16:7a:30:0b:0e:9c:ef:a0:ec:59:7f:d3:a0:29:03:60: 3d:50:c2:f3:d5:ac:92:60:0d:b3:e3:b2:84:8a:ed:df:a6:d3: c2:7c:12:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72aQk6P7S9hiiKlzsnsJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl ODZhYWMwHhcNMjUxMjIwMTMwMTE3WhcNMjUxMjIxMTMwMTE3WjAzMTEwLwYDVQQD EygxY2Y4ODcyOWY3MTdiZjcxNTQwZDUzOTVlYjE5Y2JkNmFiMzcyMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Em6CGhYsJSQVPBwNYeySCiqfgwO Ki2n2Sawym0g9D0wVETJ0QygovupaYfAti0X4OR113kyLR5x3Axe/TtmEeInG2hj jr2FprjprBTBF1N6kg/AhEs/OpwMBtlhrTXY3BRnxOrDSlBFSgJAyzE+a/F8Zrdw mZN5zH0h1d/ttuSu3TdUnO/GJumm8mQpyQevxI09Y5IC9MxVJnla5fjGysqDz3xT KqfefxOC18r964luTEL1U2YaBQ373v+UWfRau7amYsxS7spN2L1IehiqAA/flkrR KPt2K/X9tMzQWgrEluisrv40PSxnj9Ry4C/0FEGUiVYLPwM6GVwPWzbaCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz4hyn3F79xVA1TlesZy9arNyLdMB8GA1UdIwQY MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5GY7Sml cZ9DWuY1VRRUk0mKPNnTDRAT5PPcoyw9fCbE6xYD3CU4y7Ru+QTxSOM2o9Ky2OyI cH77h9c2ZjnsnIwrqD77uSrmInXxWV9RfQZpScgYeamHXglNtbqwvq0Zig38Oi41 UJ+Q0+3Hv3BhfK9OBcQA9IdUJ0r/wipyLlwQ6iH8wmdiTgDqEoUfN3QVXRZi/13V El4EjxxlIDfb/vqBCUl+xBICGGThx6apuWSlGcTemOPUBrNq7vUyD+iUrNEF9/bE NmuhK70XZoaDFcgR4FMuB1VvC0MWejALDpzvoOxZf9OgKQNgPVDC89WskmANs+Oy hIrt36bTwnwSVw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:45 2025 by rpki-client