This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json) Hash identifier: JVhWAm9fzZyDdpRw4NrlJWfx3FYfKOpAzq+iyYyX9cc= Subject key identifier: DF:53:A9:A5:3D:5B:2B:CD:58:F7:1A:D3:25:B7:C4:E3:27:6B:EF:C0 Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a Certificate serial: 019AF209525EE150D681ECC970E1D3F487DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft Manifest number: 149C Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: Neqi3heeqaqC+2E2HV7ahF6idz86Fr47s1kD+qIuclQ=) 2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:52:5e:e1:50:d6:81:ec:c9:70:e1:d3:f4:87:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=df53a9a53d5b2bcd58f71ad325b7c4e3276befc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:4f:f2:80:98:2a:00:b8:6f:95:73:c7:e0: 69:c6:3e:36:b2:92:a4:56:4b:a4:b3:73:8f:46:f3: 9b:75:b7:bb:df:10:8e:a2:6a:93:08:71:4b:03:82: ad:fc:4a:02:8a:39:60:e4:78:d6:f3:dd:60:b5:e2: 87:7e:b4:b9:32:fa:49:49:48:25:1d:03:77:a5:b7: f2:46:18:26:c0:aa:ad:8f:a6:46:3b:0a:32:d9:35: ac:9f:44:53:9c:43:eb:41:9c:1a:be:73:24:f9:8c: 5a:de:cf:52:a0:c4:8b:ac:ac:46:7e:c6:5f:c7:4a: 4e:e0:6c:75:cc:f4:ec:e7:57:0a:d4:ef:8b:c5:42: 70:53:21:5c:a3:29:ad:da:85:fd:82:0c:80:63:33: cd:64:4c:d8:10:12:d6:ef:54:78:ef:6b:41:a0:26: aa:84:d0:de:00:3c:9c:bc:f3:c0:f1:b2:79:9f:1b: ff:1b:af:9f:bc:16:ec:64:b3:6b:0c:b2:dd:8c:a3: 97:a4:3d:17:79:35:e8:0c:d2:3e:b6:41:12:7e:4e: 8d:a1:35:d7:cd:79:b4:a2:b4:d7:4d:b4:5e:89:57: cf:50:08:3f:7a:5b:5a:f8:de:b3:c5:9f:c3:f9:98: ce:69:52:8b:32:9d:14:ba:81:5a:f5:13:cb:74:39: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:53:A9:A5:3D:5B:2B:CD:58:F7:1A:D3:25:B7:C4:E3:27:6B:EF:C0 X509v3 Authority Key Identifier: keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8f:23:bd:a6:38:bb:e4:83:22:48:7e:11:07:67:04:b5:2d: ba:88:dc:c2:31:1c:58:44:eb:ee:73:7d:39:c4:e0:4e:1c:6c: 90:d0:c8:1d:92:39:c9:b6:ee:33:7a:2c:7c:8e:08:e7:7b:5b: 21:7e:5c:bd:43:0b:f8:3f:35:4f:c6:f0:5b:04:c3:5e:33:3b: b1:bf:7b:04:e5:92:26:67:42:98:e7:4e:4d:26:ee:f9:77:ff: bb:1b:7c:2a:0d:67:d2:39:03:47:91:ad:7b:d2:5f:6d:a3:69: a7:d6:01:bd:eb:f8:a1:d5:cf:b5:24:a1:75:4c:1b:49:ca:e4: 48:a3:c3:a3:f4:ec:ae:51:5e:4a:32:52:4f:6b:67:bc:8e:c9: 73:6a:1b:bb:a9:72:07:e0:d1:26:c0:b0:1a:27:1d:54:e0:68: b7:0b:3c:ad:eb:70:ec:d2:06:20:fc:c7:91:ba:20:b5:04:d4: 5c:d6:d5:0b:8c:6f:e8:19:76:4d:cd:18:e8:45:31:e2:56:b8: 2d:09:f3:44:a7:62:b6:d6:ed:c2:13:01:94:4a:57:0e:5c:46: ee:11:62:c1:dd:3a:fb:a5:ab:bc:33:c0:bb:1c:de:c2:f1:a2: 6f:24:4d:d5:7e:b0:c0:4b:a3:05:54:42:61:02:60:6f:7a:d1: c8:fc:3d:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVJe4VDWgezJcOHT9IfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1 MDc0MmEwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EyhkZjUzYTlhNTNkNWIyYmNkNThmNzFhZDMyNWI3YzRlMzI3NmJlZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosZP8oCYKgC4b5Vzx+Bpxj42spKk Vkuks3OPRvObdbe73xCOomqTCHFLA4Kt/EoCijlg5HjW891gteKHfrS5MvpJSUgl HQN3pbfyRhgmwKqtj6ZGOwoy2TWsn0RTnEPrQZwavnMk+Yxa3s9SoMSLrKxGfsZf x0pO4Gx1zPTs51cK1O+LxUJwUyFcoymt2oX9ggyAYzPNZEzYEBLW71R472tBoCaq hNDeADycvPPA8bJ5nxv/G6+fvBbsZLNrDLLdjKOXpD0XeTXoDNI+tkESfk6NoTXX zXm0orTXTbReiVfPUAg/elta+N6zxZ/D+ZjOaVKLMp0UuoFa9RPLdDldRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9TqaU9WyvNWPca0yW3xOMna+/AMB8GA1UdIwQY MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI8jvaY4 u+SDIkh+EQdnBLUtuojcwjEcWETr7nN9OcTgThxskNDIHZI5ybbuM3osfI4I53tb IX5cvUML+D81T8bwWwTDXjM7sb97BOWSJmdCmOdOTSbu+Xf/uxt8Kg1n0jkDR5Gt e9JfbaNpp9YBvev4odXPtSShdUwbScrkSKPDo/TsrlFeSjJST2tnvI7Jc2obu6ly B+DRJsCwGicdVOBotws8retw7NIGIPzHkbogtQTUXNbVC4xv6Bl2Tc0Y6EUx4la4 LQnzRKdittbtwhMBlEpXDlxG7hFiwd06+6WrvDPAuxzewvGibyRN1X6wwEujBVRC YQJgb3rRyPw9NQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:12 2025 by rpki-client