This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft File: Z3NwPrTqs2ernekaKsQe4yAUAw8.mft (raw, json) Hash identifier: 0TiC8HaxgVpaOn0utbWfIVcesBV1YY7nXWwHQ+a2z2s= Subject key identifier: 48:0B:9B:A9:5A:62:5A:55:AB:43:E1:2C:A9:51:D0:B1:65:58:D8:7E Authority key identifier: 67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F Certificate issuer: /CN=6773703eb4eab367ab9de91a2ac41ee32014030f Certificate serial: 019AF12CE514BB8462BA099376B51690428C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft Manifest number: 0A29 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: Z3NwPrTqs2ernekaKsQe4yAUAw8.crl (hash: +mwSQ7geIW4aVlZ1XSv+JiT1+4gW34NyLwNG3KoyBII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e5:14:bb:84:62:ba:09:93:76:b5:16:90:42:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6773703eb4eab367ab9de91a2ac41ee32014030f Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=480b9ba95a625a55ab43e12ca951d0b16558d87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:23:e0:c4:3d:2c:bf:53:0e:f9:ef:d9:2a: 3a:2e:2a:0b:e4:2c:29:72:d6:6c:07:e9:b8:f9:b7: 1a:44:a7:1d:3a:00:a3:bf:67:4d:a1:09:9a:fc:ab: 92:a5:ab:e8:9a:06:3f:e9:4b:da:85:73:9f:16:e4: 29:9f:7a:12:c7:03:a7:4f:1d:29:f1:af:74:e7:32: fa:96:8f:f0:75:01:27:d5:fe:54:4e:72:27:89:36: 36:e5:8c:a5:04:8c:6f:ef:2a:08:64:33:af:0e:1f: aa:50:ee:c5:57:04:34:5b:bd:62:88:34:3b:26:88: d8:16:b3:16:1b:9d:81:d3:ce:1a:b7:ed:9c:4c:53: 0f:c1:f6:03:d2:60:84:9f:62:87:94:48:1d:7b:ce: d7:5e:9b:79:11:b2:51:c9:1d:41:41:d7:69:02:88: a5:74:76:f6:ae:c3:58:75:50:38:4b:bb:95:d3:e8: 57:9d:ad:53:a9:ba:26:db:af:4e:94:76:29:dd:e0: 60:5f:8f:5b:47:5a:29:a4:a7:5c:4e:8b:2d:8d:2d: 95:b6:b9:2b:65:54:8e:20:b5:1f:2a:16:84:3c:43: b4:6e:b6:b4:70:2b:78:47:4e:3c:c8:1b:39:85:d2: 45:b1:01:c0:c6:78:d2:ae:da:e4:bc:51:ea:ea:43: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:9B:A9:5A:62:5A:55:AB:43:E1:2C:A9:51:D0:B1:65:58:D8:7E X509v3 Authority Key Identifier: keyid:67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fb:22:47:a2:bb:8e:78:11:67:0b:a5:63:c0:a2:07:86:5a: 9d:3f:de:ae:d1:c2:14:05:71:c8:43:19:d8:1e:e2:52:82:2f: a4:2f:f9:87:7d:e9:90:73:f8:87:1d:5f:c8:d7:74:4c:c9:d8: a9:5b:31:26:21:9c:53:fc:1e:af:42:a0:8f:24:f7:cb:91:db: dd:93:ed:e6:4f:c9:a0:e3:0f:26:94:6c:15:03:a8:b4:63:6e: 3b:1b:78:8f:42:11:89:2e:e2:b1:e4:45:8a:d9:f8:43:f3:0b: ff:10:71:f4:1d:4b:c7:ba:c8:36:c3:72:d7:f2:81:35:28:b9: cc:dc:37:d9:e6:6d:f4:2d:51:5f:7d:5b:8c:c1:57:c5:4f:21: ba:e0:f4:c8:98:56:bd:86:b7:22:dd:a5:b7:53:f2:74:4a:5c: ac:dc:96:ed:4b:5a:b8:bb:5d:9a:ce:1a:70:18:99:08:4e:22: 1f:ff:41:35:e4:18:c4:5f:32:58:67:6e:97:7b:e5:77:02:6f: 1f:e6:8a:6b:62:27:79:74:09:e7:fc:17:a6:c2:88:ff:7b:11: 14:fd:1d:40:34:f1:8d:21:d1:85:e3:95:c0:d6:96:a1:0f:80: 15:81:c6:e8:c8:ba:1b:10:18:67:df:b9:54:1f:21:80:91:92: d9:fc:76:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOUUu4RiugmTdrUWkEKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzM3MDNlYjRlYWIzNjdhYjlkZTkxYTJhYzQxZWUzMjAx NDAzMGYwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD Eyg0ODBiOWJhOTVhNjI1YTU1YWI0M2UxMmNhOTUxZDBiMTY1NThkODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxAj4MQ9LL9TDvnv2So6LioL5Cwp ctZsB+m4+bcaRKcdOgCjv2dNoQma/KuSpavomgY/6UvahXOfFuQpn3oSxwOnTx0p 8a905zL6lo/wdQEn1f5UTnIniTY25YylBIxv7yoIZDOvDh+qUO7FVwQ0W71iiDQ7 JojYFrMWG52B084at+2cTFMPwfYD0mCEn2KHlEgde87XXpt5EbJRyR1BQddpAoil dHb2rsNYdVA4S7uV0+hXna1Tqbom269OlHYp3eBgX49bR1oppKdcTostjS2Vtrkr ZVSOILUfKhaEPEO0bra0cCt4R048yBs5hdJFsQHAxnjSrtrkvFHq6kMmWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgLm6laYlpVq0PhLKlR0LFlWNh+MB8GA1UdIwQY MBaAFGdzcD606rNnq53pGirEHuMgFAMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNOd1ByVHFzMmVybmVrYUtzUWU0eUFVQXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Y2E2NTUtMWU4Yy00MjQzLTg4ZGYt NDdmZWJiMGFjMjU5LzEvWjNOd1ByVHFzMmVybmVrYUtzUWU0eUFVQXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84Y2E2NTUtMWU4Yy00MjQzLTg4ZGYtNDdmZWJiMGFjMjU5 LzEvWjNOd1ByVHFzMmVybmVrYUtzUWU0eUFVQXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPsiR6K7 jngRZwulY8CiB4ZanT/ertHCFAVxyEMZ2B7iUoIvpC/5h33pkHP4hx1fyNd0TMnY qVsxJiGcU/wer0KgjyT3y5Hb3ZPt5k/JoOMPJpRsFQOotGNuOxt4j0IRiS7iseRF itn4Q/ML/xBx9B1Lx7rINsNy1/KBNSi5zNw32eZt9C1RX31bjMFXxU8huuD0yJhW vYa3It2lt1PydEpcrNyW7UtauLtdms4acBiZCE4iH/9BNeQYxF8yWGdul3vldwJv H+aKa2IneXQJ5/wXpsKI/3sRFP0dQDTxjSHRheOVwNaWoQ+AFYHG6Mi6GxAYZ9+5 VB8hgJGS2fx24g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:40 2025 by rpki-client