This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json) Hash identifier: PIzIu4qlIO3bTpF8TUZrk7z2SDdBLtvkuLwjj4towWY= Subject key identifier: C8:B8:44:47:33:D7:1C:0E:59:6F:1D:63:C0:D9:41:DC:77:12:57:81 Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Certificate serial: 019B4F6075EC81A21646B35D48865C5DE5A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 08:01:20 +0000 Manifest this update: Wed 24 Dec 2025 08:01:20 +0000 Manifest next update: Thu 25 Dec 2025 08:01:20 +0000 Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=) 2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: 9OcaiWOFD4oRKKBjUcu25iTVxRg2YcXRn5l3TnT8fO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:75:ec:81:a2:16:46:b3:5d:48:86:5c:5d:e5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Validity Not Before: Dec 24 08:01:20 2025 GMT Not After : Dec 25 08:01:20 2025 GMT Subject: CN=c8b8444733d71c0e596f1d63c0d941dc77125781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5f:83:d7:ae:20:4d:64:48:2f:33:d9:8c:96: 5f:bd:49:fd:24:27:40:c1:64:08:40:ef:51:01:4a: 04:3c:0a:41:42:63:4c:5c:cf:74:5d:14:6a:76:73: 90:63:ac:f6:54:39:a6:f7:8e:75:f2:36:fd:35:6d: 82:5c:a8:77:9c:c7:b3:2e:1b:c5:9a:f8:cd:72:54: 2c:5a:62:96:0b:77:e9:36:f0:dc:ac:23:92:a3:5a: 1a:43:cb:db:e1:b7:da:ad:b8:92:f9:82:b7:2e:e5: f3:03:7b:3c:91:fe:7b:2e:73:c5:31:01:44:c8:1d: ce:a1:b8:e8:7a:e8:99:ed:3d:0b:13:c2:de:00:20: c7:44:34:62:65:1d:19:0e:8a:0d:ef:2a:52:7c:b7: 42:ab:39:45:c9:44:52:ae:d5:4d:5e:23:fc:8e:24: 03:30:90:28:ef:18:36:69:02:46:36:7a:77:a9:7d: 06:c0:bc:3f:ee:13:29:78:d4:8c:21:38:04:84:f2: c5:ca:36:dd:86:9d:89:c4:e6:82:bf:ef:b8:97:ad: 14:38:44:fa:6e:12:7b:7b:79:f3:40:60:2b:76:7a: ac:2d:99:29:a9:e2:f7:54:4e:13:06:9a:a5:7a:ac: 89:a9:4d:06:bf:3d:bc:00:9f:76:05:40:1c:16:9d: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B8:44:47:33:D7:1C:0E:59:6F:1D:63:C0:D9:41:DC:77:12:57:81 X509v3 Authority Key Identifier: keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:26:ae:e1:42:2b:d7:bc:76:9d:0d:19:9b:78:e6:2e:ea:1e: f5:31:ff:6a:7a:a7:6f:59:2c:79:98:b6:3d:3e:4e:d7:98:e8: 4a:58:ab:c4:4d:48:a2:5b:7b:89:48:35:5b:ea:ee:5c:e4:88: 2c:f6:13:51:a7:2c:97:b3:69:d7:62:03:5b:5e:35:9f:3b:62: b8:03:c9:44:8f:a7:d5:34:c8:c8:98:14:39:1c:4f:4d:25:f5: a1:69:d8:81:da:b4:ca:cd:5f:ce:7d:12:47:db:69:6b:64:5f: f4:33:24:29:5c:24:6a:b8:01:68:78:d4:b0:15:a5:d7:ea:fd: ac:c1:fd:38:42:fa:3d:6c:b2:e9:b2:d7:41:d0:37:de:1f:a8: 58:e7:bb:51:41:a5:62:b0:9b:2a:0d:6f:38:6f:0d:b7:ff:fe: bf:72:4e:6c:02:0f:df:e4:17:ad:75:0d:c8:b0:5e:3a:4a:b0: bc:03:b1:b4:c9:a0:ae:2c:6e:fa:ed:97:38:1a:07:de:a0:80: 4f:c3:5a:e6:b7:89:8a:86:b5:e6:1c:91:ac:f9:82:64:f4:40: 2e:f4:45:ef:af:30:7c:5c:0c:8a:0a:0a:dc:69:db:31:6e:74: 28:8a:84:85:73:41:99:5c:6a:b8:db:10:96:88:1c:6d:da:8a: df:84:bb:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYHXsgaIWRrNdSIZcXeWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWRlNWY0ZmVjMTZmNTE2ZjBiYzRkNjMxYzI2Mjc2NjNm OTA1ZjMwHhcNMjUxMjI0MDgwMTIwWhcNMjUxMjI1MDgwMTIwWjAzMTEwLwYDVQQD EyhjOGI4NDQ0NzMzZDcxYzBlNTk2ZjFkNjNjMGQ5NDFkYzc3MTI1NzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F+D164gTWRILzPZjJZfvUn9JCdA wWQIQO9RAUoEPApBQmNMXM90XRRqdnOQY6z2VDmm94518jb9NW2CXKh3nMezLhvF mvjNclQsWmKWC3fpNvDcrCOSo1oaQ8vb4bfarbiS+YK3LuXzA3s8kf57LnPFMQFE yB3OobjoeuiZ7T0LE8LeACDHRDRiZR0ZDooN7ypSfLdCqzlFyURSrtVNXiP8jiQD MJAo7xg2aQJGNnp3qX0GwLw/7hMpeNSMITgEhPLFyjbdhp2JxOaCv++4l60UOET6 bhJ7e3nzQGArdnqsLZkpqeL3VE4TBpqleqyJqU0Gvz28AJ92BUAcFp3bfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi4REcz1xwOWW8dY8DZQdx3EleBMB8GA1UdIwQY MBaAFM9d5fT+wW9RbwvE1jHCYnZj+QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2Njkt NmZlMTQ5NGZiYzJjLzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2NjktNmZlMTQ5NGZiYzJj LzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSau4UIr 17x2nQ0Zm3jmLuoe9TH/anqnb1kseZi2PT5O15joSlirxE1Iolt7iUg1W+ruXOSI LPYTUacsl7Np12IDW141nztiuAPJRI+n1TTIyJgUORxPTSX1oWnYgdq0ys1fzn0S R9tpa2Rf9DMkKVwkargBaHjUsBWl1+r9rMH9OEL6PWyy6bLXQdA33h+oWOe7UUGl YrCbKg1vOG8Nt//+v3JObAIP3+QXrXUNyLBeOkqwvAOxtMmgrixu+u2XOBoH3qCA T8Na5reJioa15hyRrPmCZPRALvRF768wfFwMigoK3GnbMW50KIqEhXNBmVxquNsQ logcbdqK34S7gg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:48:25 2025 by rpki-client