This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json) Hash identifier: x3hL5NKTolo8OaJ7BwlQ2cqZBW3F2UIVHRWJ1LVCy58= Subject key identifier: 5D:30:AC:FD:24:45:83:2C:FF:F5:D0:A7:99:B7:A5:5F:86:B3:C0:BC Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Certificate serial: 019B45820AE6F78A63AED03FFD95F8451BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft Manifest number: 0267 Signing time: Mon 22 Dec 2025 10:01:48 +0000 Manifest this update: Mon 22 Dec 2025 10:01:48 +0000 Manifest next update: Tue 23 Dec 2025 10:01:48 +0000 Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: 8uSwKNTJmqCeWG5uUaboUmfcYxpurbRPVEFrQGOiyWc=) 2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:82:0a:e6:f7:8a:63:ae:d0:3f:fd:95:f8:45:1b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Validity Not Before: Dec 22 10:01:48 2025 GMT Not After : Dec 23 10:01:48 2025 GMT Subject: CN=5d30acfd2445832cfff5d0a799b7a55f86b3c0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:47:10:b9:36:db:d1:76:d6:06:06:30:45: f2:13:e2:33:70:a2:37:89:e0:f2:07:b5:6e:a2:7b: 74:8d:ba:fb:a4:07:ad:60:08:24:ba:57:a6:77:d7: 73:50:c1:b4:2c:50:91:ce:ef:e7:9a:5c:e1:2f:ad: c6:92:42:2f:c0:21:38:ef:59:26:38:39:58:83:4b: cf:4b:63:a5:4e:6a:42:ba:89:7a:e6:51:dc:5a:cd: 1f:70:e5:cb:70:9a:2b:68:58:29:22:49:7d:66:82: 91:84:e8:94:35:e0:43:80:fb:cd:e0:c3:55:42:12: 98:98:76:6f:52:5b:30:a0:75:0a:45:d6:60:51:81: d8:36:1e:bb:e3:14:05:a5:df:8b:14:93:85:41:c4: fd:61:77:e7:c9:37:31:e5:9e:7d:54:c8:80:3d:7c: 01:15:da:b1:97:5e:b1:45:44:6e:d9:5d:2f:df:35: 85:51:f1:fa:af:ba:7b:8a:8e:15:20:65:dc:50:86: d1:cf:8d:29:56:bb:6d:f6:c2:86:4f:53:e5:77:4f: 36:58:3c:ba:06:ea:56:97:79:94:e5:a8:0e:10:ad: f6:44:d2:a1:d9:45:80:ab:d6:37:8c:4f:70:2e:a2: b5:1d:72:b8:8c:b4:c7:a3:58:96:62:f1:2f:5e:31: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:AC:FD:24:45:83:2C:FF:F5:D0:A7:99:B7:A5:5F:86:B3:C0:BC X509v3 Authority Key Identifier: keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:15:c9:19:ac:d2:12:25:27:38:3d:0c:9a:6c:f6:78:48:ac: 83:c0:c0:e8:2c:5a:ee:6e:c5:95:0a:83:6e:0b:99:64:7b:bc: ca:dd:1f:8e:2e:c5:a7:40:6b:e0:37:4b:66:32:b8:04:ad:4d: 99:fb:61:71:61:c8:0b:dd:9d:09:35:96:5f:51:49:28:d9:3e: 91:f8:87:cc:4b:3d:cc:64:99:48:99:77:0f:1b:2a:d3:13:e3: 1a:08:01:da:9f:84:21:fb:b8:22:71:8a:16:29:69:e4:7c:67: c1:84:9f:91:60:8b:84:74:7d:4e:82:75:55:dd:5c:ac:0b:6a: 72:68:ae:4a:da:7c:08:a6:ef:51:8e:6b:2f:42:2c:a5:e6:c6: 85:8a:5e:67:5c:68:ab:c7:9d:eb:f6:29:7f:27:b5:b9:e6:6c: 8a:64:5a:ad:e7:6a:4c:89:5d:c1:a2:8c:94:e8:6d:03:b6:58: 47:95:0c:bb:83:b7:f5:ce:19:fb:45:90:a4:8a:56:a5:72:3b: 9c:5a:cb:1e:50:2c:e0:8d:32:ff:b0:11:4d:85:bd:67:90:af: 23:9e:44:b9:1b:34:54:23:51:3f:bd:2f:df:c2:d4:25:04:71: da:fc:45:de:f2:4d:57:ee:b1:30:24:aa:c8:36:69:a1:d0:2f: b7:59:52:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFggrm94pjrtA//ZX4RRupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk NzcxYjIwHhcNMjUxMjIyMTAwMTQ4WhcNMjUxMjIzMTAwMTQ4WjAzMTEwLwYDVQQD Eyg1ZDMwYWNmZDI0NDU4MzJjZmZmNWQwYTc5OWI3YTU1Zjg2YjNjMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EBHELk229F21gYGMEXyE+IzcKI3 ieDyB7Vuont0jbr7pAetYAgkulemd9dzUMG0LFCRzu/nmlzhL63GkkIvwCE471km ODlYg0vPS2OlTmpCuol65lHcWs0fcOXLcJoraFgpIkl9ZoKRhOiUNeBDgPvN4MNV QhKYmHZvUlswoHUKRdZgUYHYNh674xQFpd+LFJOFQcT9YXfnyTcx5Z59VMiAPXwB Fdqxl16xRURu2V0v3zWFUfH6r7p7io4VIGXcUIbRz40pVrtt9sKGT1Pld082WDy6 BupWl3mU5agOEK32RNKh2UWAq9Y3jE9wLqK1HXK4jLTHo1iWYvEvXjF7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0wrP0kRYMs//XQp5m3pV+Gs8C8MB8GA1UdIwQY MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt NDM3NWQ2NzVmY2YzLzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhXJGazS EiUnOD0Mmmz2eEisg8DA6Cxa7m7FlQqDbguZZHu8yt0fji7Fp0Br4DdLZjK4BK1N mfthcWHIC92dCTWWX1FJKNk+kfiHzEs9zGSZSJl3Dxsq0xPjGggB2p+EIfu4InGK Filp5HxnwYSfkWCLhHR9ToJ1Vd1crAtqcmiuStp8CKbvUY5rL0IspebGhYpeZ1xo q8ed6/Ypfye1ueZsimRaredqTIldwaKMlOhtA7ZYR5UMu4O39c4Z+0WQpIpWpXI7 nFrLHlAs4I0y/7ARTYW9Z5CvI55EuRs0VCNRP70v38LUJQRx2vxF3vJNV+6xMCSq yDZpodAvt1lS/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:50 2025 by rpki-client