This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json) Hash identifier: JlZdWvlZdKbkCU0IE8eszE8ZFDmdfLMLNCL6lzaVo7Y= Subject key identifier: 4F:60:93:1A:C4:CE:3D:7F:6F:C3:D0:1B:8F:12:25:02:72:97:6B:81 Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Certificate serial: 019B378EFF540D540540DC8FBB79EABA9BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 17:01:16 +0000 Manifest this update: Fri 19 Dec 2025 17:01:16 +0000 Manifest next update: Sat 20 Dec 2025 17:01:16 +0000 Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: 23maY4XFFYJ5wmIDg/2uGq0Q0HnSYf7VOghdFTfjId0=) 2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:ff:54:0d:54:05:40:dc:8f:bb:79:ea:ba:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Validity Not Before: Dec 19 17:01:16 2025 GMT Not After : Dec 20 17:01:16 2025 GMT Subject: CN=4f60931ac4ce3d7f6fc3d01b8f12250272976b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:d0:f1:12:8c:eb:02:51:49:12:bf:0f:75: 13:aa:a6:b9:16:15:d6:f6:db:dd:bc:b7:5b:48:9f: 33:62:4e:41:22:be:dd:d9:20:77:c5:3f:53:7c:18: 03:14:72:ee:a3:85:61:17:6f:0f:4f:ad:25:a2:36: 49:51:3f:54:8a:6d:7f:cf:c9:fb:b8:12:d5:5b:45: eb:94:a1:36:3a:7d:32:77:b3:3f:43:3b:75:45:97: 5c:4e:ed:55:c6:6c:e2:69:0e:24:d4:cc:4b:e1:c6: f5:ac:8e:df:67:e8:e8:59:98:84:f0:b0:be:86:9a: 35:ac:39:31:6d:a0:00:2b:60:fe:96:3f:23:c6:e5: aa:af:cc:63:13:a5:45:db:b2:99:29:44:e9:77:3f: d1:03:4a:ee:53:f6:c1:1b:54:e1:ac:c9:8f:6e:cb: 1d:d6:e3:2c:37:e7:de:81:f8:1f:93:9f:0a:7a:6b: 1f:ab:5b:d2:50:7a:bb:f5:73:c3:98:28:6c:3e:35: a0:c3:1b:db:cf:b0:73:d1:f8:e0:cf:7b:3c:d9:fd: b0:d9:45:be:9e:8f:6b:4c:de:e7:e5:21:59:80:ec: 5d:cf:48:e8:b8:53:ee:e7:b6:f2:1d:da:0c:7b:c3: d3:ad:51:4c:3a:e5:cb:ba:be:0c:19:64:a9:69:2b: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:93:1A:C4:CE:3D:7F:6F:C3:D0:1B:8F:12:25:02:72:97:6B:81 X509v3 Authority Key Identifier: keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e1:c5:9c:72:d3:6f:a8:6c:54:59:b3:b9:e4:9e:0b:b7:65: e2:1d:7e:a9:28:89:bd:4a:0e:a7:1a:b6:6c:0a:0a:e9:77:57: 77:8e:43:72:f0:e2:fe:a0:cb:3e:2f:91:de:83:37:33:38:aa: 76:57:81:2a:9e:c7:f5:5f:87:74:aa:a4:2a:5c:77:2b:f4:62: 77:0f:70:25:30:f7:e2:84:85:c4:98:76:be:42:5b:7f:ec:3b: 5c:8d:8f:b7:24:f6:66:6c:bc:c1:0b:be:31:86:84:28:2d:7a: d3:94:a7:48:53:d9:e0:be:76:2c:a0:9e:00:c5:aa:be:9f:75: 0f:ee:fd:6e:3f:df:06:32:51:87:f2:ba:da:8b:d5:2a:e5:70: fb:4e:1f:f9:dd:52:91:48:5d:9c:64:e5:fd:69:46:db:ba:11: ae:60:e5:01:b5:ac:8b:5f:0e:8a:91:d7:da:91:fd:11:d0:1b: eb:fe:a5:8f:8a:02:eb:f1:e9:63:7a:cb:3a:5f:20:3f:e5:e5: 7e:7d:75:e1:33:46:e2:89:85:65:02:31:26:0c:92:f8:b5:a7: 29:de:3e:e8:2e:82:50:8f:83:31:05:14:8d:94:2a:8d:8a:f3: 1d:5c:3a:0c:4b:78:4f:a6:4f:38:74:6a:8e:ce:f3:25:45:63: 2c:f0:fb:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jv9UDVQFQNyPu3nqupvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh ZDQ4YTEwHhcNMjUxMjE5MTcwMTE2WhcNMjUxMjIwMTcwMTE2WjAzMTEwLwYDVQQD Eyg0ZjYwOTMxYWM0Y2UzZDdmNmZjM2QwMWI4ZjEyMjUwMjcyOTc2YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEPQ8RKM6wJRSRK/D3UTqqa5FhXW 9tvdvLdbSJ8zYk5BIr7d2SB3xT9TfBgDFHLuo4VhF28PT60lojZJUT9Uim1/z8n7 uBLVW0XrlKE2On0yd7M/Qzt1RZdcTu1VxmziaQ4k1MxL4cb1rI7fZ+joWZiE8LC+ hpo1rDkxbaAAK2D+lj8jxuWqr8xjE6VF27KZKUTpdz/RA0ruU/bBG1ThrMmPbssd 1uMsN+fegfgfk58Kemsfq1vSUHq79XPDmChsPjWgwxvbz7Bz0fjgz3s82f2w2UW+ no9rTN7n5SFZgOxdz0jouFPu57byHdoMe8PTrVFMOuXLur4MGWSpaStEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9gkxrEzj1/b8PQG48SJQJyl2uBMB8GA1UdIwQY MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5 LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquHFnHLT b6hsVFmzueSeC7dl4h1+qSiJvUoOpxq2bAoK6XdXd45DcvDi/qDLPi+R3oM3Mziq dleBKp7H9V+HdKqkKlx3K/Ridw9wJTD34oSFxJh2vkJbf+w7XI2PtyT2Zmy8wQu+ MYaEKC1605SnSFPZ4L52LKCeAMWqvp91D+79bj/fBjJRh/K62ovVKuVw+04f+d1S kUhdnGTl/WlG27oRrmDlAbWsi18OipHX2pH9EdAb6/6lj4oC6/HpY3rLOl8gP+Xl fn114TNG4omFZQIxJgyS+LWnKd4+6C6CUI+DMQUUjZQqjYrzHVw6DEt4T6ZPOHRq js7zJUVjLPD7+A== -----END CERTIFICATE-----Generated at Sat Dec 20 00:52:45 2025 by rpki-client