This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json) Hash identifier: WuDQryWRMeuUjqhjxJDeoqD2gETTqHHLpQKAFv0R1sQ= Subject key identifier: B4:0A:E2:69:23:D1:4B:C1:95:7A:07:A0:4D:69:69:BA:9F:3E:B2:F1 Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Certificate serial: 019AF23F71F184ED430C22361256EF494DEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: rRSDqPikFX7q5QYPbRpANeolR9YTigKL4ZEKaiPZrp8=) 2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:71:f1:84:ed:43:0c:22:36:12:56:ef:49:4d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=b40ae26923d14bc1957a07a04d6969ba9f3eb2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:12:ce:44:39:53:97:4e:64:2e:77:6a:10: 2f:35:95:8b:20:39:dc:80:55:66:b5:eb:b5:47:c5: 97:6a:eb:46:71:50:0f:ee:92:59:8b:c4:ac:b1:da: 4e:47:52:39:83:a8:c0:9c:cb:3f:08:50:61:1d:6e: 9d:34:b0:a5:44:73:31:1c:f1:0b:d1:50:9b:97:29: df:59:18:3e:57:2e:f9:61:f6:d7:47:50:ec:64:07: 53:38:2d:f8:a6:3c:db:94:bf:bf:43:a8:03:16:89: b0:30:54:e5:44:56:b7:5a:f5:60:db:e4:34:33:bc: da:ee:d6:fd:8e:2e:ce:eb:f5:6a:3a:c1:3c:94:fe: 7f:52:d7:83:f8:c9:11:ed:1f:3b:79:ea:42:e2:1c: d8:22:94:17:81:ac:2f:24:85:a7:f5:33:20:5f:65: 77:8c:80:ac:ca:16:b7:c8:48:54:58:72:cb:3f:e8: c1:36:64:b3:df:3c:e6:25:de:a2:48:4d:76:bf:1d: cc:3b:d1:82:94:03:87:14:0a:03:d6:c5:63:f7:8b: 83:3e:93:00:1c:47:12:4f:63:35:fc:20:c8:9e:d0: 41:33:9c:94:43:13:6b:49:a5:b7:28:f3:db:52:2f: ef:ef:7f:11:38:06:3f:78:e2:ab:b3:6b:f4:8e:40: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0A:E2:69:23:D1:4B:C1:95:7A:07:A0:4D:69:69:BA:9F:3E:B2:F1 X509v3 Authority Key Identifier: keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:32:27:35:e0:a5:c0:89:89:ef:95:dc:89:31:ce:10:dd:f0: 4a:3b:6a:56:b1:cd:60:0b:6e:ea:e0:31:2f:89:1b:e1:74:69: 10:1d:1b:a3:31:40:9c:3e:b1:61:8e:ec:cb:34:ab:6f:9d:a6: 41:a6:17:e1:54:20:6e:48:79:c6:40:e3:90:41:63:73:1d:0f: fe:61:f2:79:40:c1:85:f3:50:fc:75:a5:d6:a9:46:6b:29:93: 1e:9e:8b:4f:d8:b8:55:4a:a6:d3:2c:20:c1:65:c5:e2:b3:c9: db:d2:13:28:c5:fb:dd:56:54:db:a8:dc:c3:7b:6e:f2:19:59: aa:da:d1:d9:84:a4:a3:9d:60:e2:9a:a4:59:da:ab:90:92:0a: fb:1a:1c:04:c0:1f:4d:c1:4e:9a:19:03:4c:bc:a6:3d:19:cb: c2:23:3f:fe:ca:b7:da:30:04:4a:f9:5e:ef:db:ae:82:7c:73: 46:9f:9a:c9:7a:4d:65:ef:70:d9:18:49:30:f2:08:7a:0b:06: 4f:9c:95:90:46:92:af:60:99:9e:93:df:c4:e3:3f:c8:9c:b0: cb:f0:df:68:68:23:e1:e3:f3:0d:f5:51:c3:92:52:2b:7e:7e: d1:ce:f7:5d:24:4d:c8:9a:49:a8:e9:59:7e:d9:74:80:41:ce: 22:fc:41:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3HxhO1DDCI2ElbvSU3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm YjgwMWYwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EyhiNDBhZTI2OTIzZDE0YmMxOTU3YTA3YTA0ZDY5NjliYTlmM2ViMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktYSzkQ5U5dOZC53ahAvNZWLIDnc gFVmteu1R8WXautGcVAP7pJZi8SssdpOR1I5g6jAnMs/CFBhHW6dNLClRHMxHPEL 0VCblynfWRg+Vy75YfbXR1DsZAdTOC34pjzblL+/Q6gDFomwMFTlRFa3WvVg2+Q0 M7za7tb9ji7O6/VqOsE8lP5/UteD+MkR7R87eepC4hzYIpQXgawvJIWn9TMgX2V3 jICsyha3yEhUWHLLP+jBNmSz3zzmJd6iSE12vx3MO9GClAOHFAoD1sVj94uDPpMA HEcST2M1/CDIntBBM5yUQxNrSaW3KPPbUi/v738ROAY/eOKrs2v0jkCDBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQK4mkj0UvBlXoHoE1pabqfPrLxMB8GA1UdIwQY MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTInNeCl wImJ75XciTHOEN3wSjtqVrHNYAtu6uAxL4kb4XRpEB0bozFAnD6xYY7syzSrb52m QaYX4VQgbkh5xkDjkEFjcx0P/mHyeUDBhfNQ/HWl1qlGaymTHp6LT9i4VUqm0ywg wWXF4rPJ29ITKMX73VZU26jcw3tu8hlZqtrR2YSko51g4pqkWdqrkJIK+xocBMAf TcFOmhkDTLymPRnLwiM//sq32jAESvle79uugnxzRp+ayXpNZe9w2RhJMPIIegsG T5yVkEaSr2CZnpPfxOM/yJywy/DfaGgj4ePzDfVRw5JSK35+0c73XSRNyJpJqOlZ ftl0gEHOIvxB+w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:31 2025 by rpki-client