This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json) Hash identifier: hGM9LXYHDMt9bavByiI1q7hLH8StdvaKnNQbFMfOrmI= Subject key identifier: E2:B0:E9:A9:DE:29:3B:21:BC:D2:B7:65:5B:E4:94:56:BB:62:DB:61 Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c Certificate serial: 019B70A260924D17E4DD21BF3A27017FE4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft Manifest number: 109F Signing time: Tue 30 Dec 2025 19:00:48 +0000 Manifest this update: Tue 30 Dec 2025 19:00:48 +0000 Manifest next update: Wed 31 Dec 2025 19:00:48 +0000 Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: 5IzBJWStmiMvzCpj983y+1u4U9OqRNvCI7zEoRrCRQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:60:92:4d:17:e4:dd:21:bf:3a:27:01:7f:e4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c Validity Not Before: Dec 30 19:00:48 2025 GMT Not After : Dec 31 19:00:48 2025 GMT Subject: CN=e2b0e9a9de293b21bcd2b7655be49456bb62db61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:25:81:38:f0:8f:d1:5e:27:60:80:23:4a: 9f:db:53:72:5c:6a:ac:3e:b4:4e:d8:61:c9:2b:2f: 7f:33:0a:2e:60:4c:d7:4e:2a:e0:57:f6:1b:65:86: 89:f7:4d:cc:e5:58:6d:8b:8d:a2:e9:93:b3:36:d8: 72:79:d3:40:a5:c9:9c:8b:47:c8:bb:44:05:df:f1: ef:0f:dd:66:2d:79:ad:f2:f4:c1:23:e9:62:71:e7: 09:a5:c9:57:ec:4e:cd:fb:ec:7a:fd:8e:38:99:33: da:65:cf:79:30:90:0d:f7:78:37:ae:d4:43:b1:3e: e9:84:01:10:c2:dc:d2:b8:47:79:6d:29:d8:5f:20: 42:9a:c7:3c:ab:9b:89:31:26:8d:c2:8b:02:02:ce: 9b:0b:23:49:34:a2:2b:60:69:34:86:61:ae:fa:c6: 47:80:14:c7:1d:26:b6:60:25:dd:5a:61:05:4f:00: 01:c7:4a:24:5a:96:1a:86:dc:99:1a:e9:86:f7:73: 98:ed:3c:bb:d9:c3:f9:9e:2e:17:79:0d:23:c4:db: ba:2c:05:ce:91:c7:0b:29:82:b8:ce:38:0f:d1:34: ea:d6:00:16:b1:ca:0b:7c:56:84:13:64:ad:e7:73: a7:f3:ff:89:25:8b:c3:28:e1:8f:7c:20:16:61:95: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B0:E9:A9:DE:29:3B:21:BC:D2:B7:65:5B:E4:94:56:BB:62:DB:61 X509v3 Authority Key Identifier: keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0d:38:65:8b:cd:b8:a7:22:fc:c2:f3:07:13:f7:0b:72:52: 27:4c:3e:07:48:18:e9:f1:77:8b:57:87:98:89:9f:20:96:1e: f0:53:62:e0:f4:6a:3e:a3:0f:45:82:ce:db:a6:24:69:ac:b0: 2d:19:fc:db:b1:2a:c4:7c:68:37:05:59:7a:19:57:49:60:a7: 98:65:58:e8:e1:f1:d6:c3:2e:29:7d:a4:25:07:74:d8:27:38: 66:6f:95:d3:78:da:72:42:6a:ef:4e:63:09:33:b0:60:22:51: b6:ae:e1:dc:7f:e7:a7:40:5d:af:12:11:f5:9a:43:3e:b7:01: 97:07:1c:6e:a0:17:1b:e1:ac:7f:e4:f7:24:45:2c:ae:ac:f9: 75:bc:f3:70:43:97:58:4e:8a:6a:31:1f:bf:36:2b:d6:c9:3c: 69:51:2d:b0:c0:c6:26:62:54:01:24:dc:30:7c:28:0c:81:ea: 81:74:d8:7e:71:c1:e7:21:3f:01:9d:a5:f8:f0:09:b3:54:f7: 70:ae:35:6c:9a:ca:31:97:40:b3:e6:38:5a:33:f3:e6:e9:71: ab:0c:c8:bc:62:72:7c:61:e3:46:c6:73:dc:b7:7a:3b:a4:10: 4b:c0:a5:a3:16:cf:dd:68:15:c6:5a:76:cb:32:40:81:84:42: 4a:97:55:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwomCSTRfk3SG/OicBf+TsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzhiNWRmNzUzYzc0OWFlNTc4MTBmOWQ5M2YzYmE1MWFl MDVkNWMwHhcNMjUxMjMwMTkwMDQ4WhcNMjUxMjMxMTkwMDQ4WjAzMTEwLwYDVQQD EyhlMmIwZTlhOWRlMjkzYjIxYmNkMmI3NjU1YmU0OTQ1NmJiNjJkYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwElgTjwj9FeJ2CAI0qf21NyXGqs PrRO2GHJKy9/MwouYEzXTirgV/YbZYaJ903M5Vhti42i6ZOzNthyedNApcmci0fI u0QF3/HvD91mLXmt8vTBI+licecJpclX7E7N++x6/Y44mTPaZc95MJAN93g3rtRD sT7phAEQwtzSuEd5bSnYXyBCmsc8q5uJMSaNwosCAs6bCyNJNKIrYGk0hmGu+sZH gBTHHSa2YCXdWmEFTwABx0okWpYahtyZGumG93OY7Ty72cP5ni4XeQ0jxNu6LAXO kccLKYK4zjgP0TTq1gAWscoLfFaEE2St53On8/+JJYvDKOGPfCAWYZUq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKw6aneKTshvNK3ZVvklFa7YtthMB8GA1UdIwQY MBaAFGfItd91PHSa5XgQ+dk/O6Ua4F1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhpMTMzVThkSnJsZUJENTJUODdwUnJnWFZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNTBiZTItYjliNi00NzdiLTg0ZmMt ZmJlNDdhZDYyYWE1LzEvWjhpMTMzVThkSnJsZUJENTJUODdwUnJnWFZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNTBiZTItYjliNi00NzdiLTg0ZmMtZmJlNDdhZDYyYWE1 LzEvWjhpMTMzVThkSnJsZUJENTJUODdwUnJnWFZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQ04ZYvN uKci/MLzBxP3C3JSJ0w+B0gY6fF3i1eHmImfIJYe8FNi4PRqPqMPRYLO26Ykaayw LRn827EqxHxoNwVZehlXSWCnmGVY6OHx1sMuKX2kJQd02Cc4Zm+V03jackJq705j CTOwYCJRtq7h3H/np0BdrxIR9ZpDPrcBlwccbqAXG+Gsf+T3JEUsrqz5dbzzcEOX WE6KajEfvzYr1sk8aVEtsMDGJmJUASTcMHwoDIHqgXTYfnHB5yE/AZ2l+PAJs1T3 cK41bJrKMZdAs+Y4WjPz5ulxqwzIvGJyfGHjRsZz3Ld6O6QQS8CloxbP3WgVxlp2 yzJAgYRCSpdVDg== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:50 2025 by rpki-client