This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json) Hash identifier: 9Z6KsIspRFI1Ye5c0nyij0j4aeVY52erkTv097K1qjE= Subject key identifier: E0:0B:F2:DF:82:74:3D:37:FF:3F:4E:6E:C7:B3:BE:D9:4F:72:6B:F2 Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Certificate serial: 019B3D90D4ECDC121DAF9211C03C2A6EBBF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 21:01:00 +0000 Manifest this update: Sat 20 Dec 2025 21:01:00 +0000 Manifest next update: Sun 21 Dec 2025 21:01:00 +0000 Files and hashes: 1: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: pXjbZf19yiX8ZCaAx1c6U5KAkwOeQYTI6KZUNh7A0wM=) 2: nTVVQnVXJMG-QyafLdMazVtzFSM.roa (hash: wBqPAHjbAyigYDbp/GK1N5eLyKdIQZmkBLvYK8qNoBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d4:ec:dc:12:1d:af:92:11:c0:3c:2a:6e:bb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98 Validity Not Before: Dec 20 21:01:00 2025 GMT Not After : Dec 21 21:01:00 2025 GMT Subject: CN=e00bf2df82743d37ff3f4e6ec7b3bed94f726bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:72:e2:f9:a0:d4:cb:0d:aa:ed:70:37:50: 57:53:57:0f:7e:a1:94:05:fc:26:85:0f:f1:6c:9b: 68:b2:57:e8:f7:c5:25:e0:7e:00:bf:bc:4f:2c:7c: f8:70:00:d5:5d:7a:1d:fa:60:21:e1:38:46:81:e7: 11:d0:8f:e5:61:c4:fd:9e:83:49:c1:1e:c4:65:d3: 1a:3d:be:57:e6:fd:9c:62:97:34:d5:a5:e0:24:76: aa:ed:76:ac:e2:85:f8:27:24:59:ae:50:42:8b:33: b6:17:48:0f:6a:6c:38:0e:ee:fb:a0:25:66:b6:93: c5:c4:fe:9a:66:18:9f:e4:ac:9c:cc:00:90:0d:bb: d2:44:95:33:13:02:31:e1:06:56:eb:91:f1:65:17: c4:85:6b:82:b6:81:af:0d:7f:e9:1c:6d:ec:ef:3d: 3c:8c:92:c0:3e:c3:26:c2:eb:a3:f8:c7:81:44:ba: 08:8d:b5:e0:53:83:59:c4:63:54:78:3d:bb:24:a8: 85:a1:45:c6:c6:ed:ca:f4:ee:fc:81:5c:fe:3e:0f: bd:7c:e7:41:d2:51:59:0b:4a:f2:4a:92:00:bc:26: 19:81:64:09:67:64:a9:c8:c8:83:b9:2c:02:4d:61: 77:b2:27:87:ac:e4:9e:bc:8c:4c:f5:7e:4a:f6:9d: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:F2:DF:82:74:3D:37:FF:3F:4E:6E:C7:B3:BE:D9:4F:72:6B:F2 X509v3 Authority Key Identifier: keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:39:8d:4d:2f:1d:f6:8a:ea:56:3f:91:60:a7:66:ed:d8:01: b8:c5:c8:81:0a:a3:d3:83:4c:b0:e6:b5:36:5d:d7:0c:30:bd: d3:16:5d:5b:99:2e:cd:df:a7:7c:04:c2:55:4e:37:02:45:5d: a8:0b:c7:5a:90:be:39:a5:10:cf:2c:df:1a:8e:b2:05:e7:84: d5:d1:4e:6e:cf:14:5d:cf:79:21:9d:9d:05:2a:59:12:b4:66: e4:f2:79:4b:c7:45:87:d0:48:8a:62:86:f7:f1:fe:05:a0:32: e1:bc:18:15:06:ce:b7:e5:bf:a7:33:13:ee:7c:f2:8a:34:d7: 2e:c5:17:cd:f1:24:b6:9e:91:11:99:9e:c3:9f:71:77:b6:1a: f9:2d:69:8d:60:bb:03:9d:bd:74:6b:f4:0e:87:dd:bb:cc:f0: 69:1d:d6:8f:6c:e1:98:4a:83:9f:29:91:3d:90:ce:42:79:7d: 20:97:e3:d2:ea:08:71:5a:01:cc:cd:c9:63:cb:de:4e:cc:3d: f2:d1:65:fe:34:44:19:67:99:42:c9:be:6a:8a:d7:a5:46:f8: a7:41:c7:3a:5a:80:18:55:ab:23:8c:1b:3e:09:29:63:c8:ec: 9d:45:60:09:88:eb:8a:f6:f1:dd:5e:68:8e:de:53:e6:bb:fa: f1:2d:27:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNTs3BIdr5IRwDwqbrv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliM2YyOWZmOWVhNzFiM2MzZGMxZjVhZjA1NGI0MTY0N2M5 MWFmOTgwHhcNMjUxMjIwMjEwMTAwWhcNMjUxMjIxMjEwMTAwWjAzMTEwLwYDVQQD EyhlMDBiZjJkZjgyNzQzZDM3ZmYzZjRlNmVjN2IzYmVkOTRmNzI2YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDRy4vmg1MsNqu1wN1BXU1cPfqGU BfwmhQ/xbJtoslfo98Ul4H4Av7xPLHz4cADVXXod+mAh4ThGgecR0I/lYcT9noNJ wR7EZdMaPb5X5v2cYpc01aXgJHaq7Xas4oX4JyRZrlBCizO2F0gPamw4Du77oCVm tpPFxP6aZhif5KyczACQDbvSRJUzEwIx4QZW65HxZRfEhWuCtoGvDX/pHG3s7z08 jJLAPsMmwuuj+MeBRLoIjbXgU4NZxGNUeD27JKiFoUXGxu3K9O78gVz+Pg+9fOdB 0lFZC0rySpIAvCYZgWQJZ2SpyMiDuSwCTWF3sieHrOSevIxM9X5K9p1n8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAL8t+CdD03/z9ObsezvtlPcmvyMB8GA1UdIwQY MBaAFJs/Kf+epxs8PcH1rwVLQWR8ka+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTct ZjQ2MjI0YjBkMTYxLzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xYWEyZDgtNjEwNi00ODA4LThjOTctZjQ2MjI0YjBkMTYx LzEvbXo4cF81Nm5Henc5d2ZXdkJVdEJaSHlScjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzmNTS8d 9orqVj+RYKdm7dgBuMXIgQqj04NMsOa1Nl3XDDC90xZdW5kuzd+nfATCVU43AkVd qAvHWpC+OaUQzyzfGo6yBeeE1dFObs8UXc95IZ2dBSpZErRm5PJ5S8dFh9BIimKG 9/H+BaAy4bwYFQbOt+W/pzMT7nzyijTXLsUXzfEktp6REZmew59xd7Ya+S1pjWC7 A529dGv0Dofdu8zwaR3Wj2zhmEqDnymRPZDOQnl9IJfj0uoIcVoBzM3JY8veTsw9 8tFl/jREGWeZQsm+aorXpUb4p0HHOlqAGFWrI4wbPgkpY8jsnUVgCYjrivbx3V5o jt5T5rv68S0nwA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:08:44 2025 by rpki-client