This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json) Hash identifier: 1Wup3WSlgF6RQxvMyITksmP4AyCa74yIVeBX+dnra6s= Subject key identifier: 25:D1:B8:E9:6B:D4:60:5F:66:6E:91:61:96:BB:EA:E1:B0:93:F0:17 Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Certificate serial: 019AF509B9A1DAA4BA10C3CA01ED971093AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft Manifest number: 02A4 Signing time: Sat 06 Dec 2025 19:00:46 +0000 Manifest this update: Sat 06 Dec 2025 19:00:46 +0000 Manifest next update: Sun 07 Dec 2025 19:00:46 +0000 Files and hashes: 1: 9yysPrsTvaDRMls4-pX0957dwiw.roa (hash: aqJVPhU1WTAEqvaL619sknSOiWwAlubUTNbFFjISOrQ=) 2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=) 3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: I1UpnAbaTqkuNJo50FTAZ2VtqEaoN3F95xMs/aF+G2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b9:a1:da:a4:ba:10:c3:ca:01:ed:97:10:93:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Validity Not Before: Dec 6 19:00:46 2025 GMT Not After : Dec 7 19:00:46 2025 GMT Subject: CN=25d1b8e96bd4605f666e916196bbeae1b093f017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:37:49:e1:9d:34:bc:3e:31:c1:48:2e:df: b0:f6:c8:e3:42:aa:10:2c:84:61:f5:4c:1c:e7:5f: f4:88:8d:7f:ed:ad:af:f2:9b:09:3f:57:ec:b0:90: ea:01:3f:81:c0:88:3d:9c:84:ce:b2:56:5f:fd:dd: 13:dd:da:a9:79:2a:d6:bb:8a:d2:47:95:fb:62:06: 98:e1:96:5e:08:6d:06:e6:c2:1f:4f:c8:df:24:7d: 06:26:e5:d2:b4:39:65:04:1f:21:32:64:4a:da:a5: 71:71:de:d3:60:7a:bf:d9:25:18:4c:6d:9e:fb:93: e4:dd:50:7d:aa:12:dc:cd:55:2b:26:17:f6:6a:4e: 17:93:85:9c:23:84:29:6c:5e:58:1c:5d:ae:28:d8: ff:f0:09:de:a0:a3:a6:bc:ad:c7:65:5d:60:4f:f4: 4c:ce:8f:ee:8b:d1:11:26:d2:ae:02:7d:7a:86:e4: 6c:d6:9a:ba:54:bf:fe:ba:2e:eb:e0:2e:14:4c:c6: a2:ab:3e:9b:81:ae:90:11:e0:25:db:82:05:3a:e0: f1:97:7a:f9:83:0b:e9:15:ef:d9:56:00:8c:7a:a8: 19:fd:36:8d:61:4a:ec:4e:7c:96:a4:f5:9d:89:46: 90:ca:c1:52:c7:fd:b6:a5:37:fc:67:bc:84:bb:83: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:B8:E9:6B:D4:60:5F:66:6E:91:61:96:BB:EA:E1:B0:93:F0:17 X509v3 Authority Key Identifier: keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:92:82:b4:88:0e:74:50:c4:55:cb:7e:1b:36:da:86:a4:54: 2d:55:04:54:46:ec:7a:d9:33:f6:85:39:ae:b1:5c:dd:c8:21: c2:8a:fb:55:3f:0f:0a:d5:fe:41:c4:60:06:c7:46:64:b5:5e: bc:42:e8:a2:97:06:01:06:65:d8:01:9f:eb:5b:f8:d6:dd:aa: e8:66:74:9d:38:9f:29:6d:fe:80:73:68:07:c9:24:b3:52:80: cf:5d:e1:ce:4f:01:32:3d:6a:67:d9:45:88:2c:ee:f5:59:4f: ac:fd:31:b8:67:dd:86:92:31:74:60:1e:51:a4:60:38:ce:dd: 41:2a:8b:65:6e:b7:11:ee:7c:78:9b:69:1a:b3:80:9b:2c:63: 8d:7d:ee:04:40:36:b9:09:dc:a4:64:e7:d1:43:21:09:5e:70: fe:5a:db:76:2e:a8:2e:7c:aa:a1:09:b0:7c:22:e4:b5:ee:33: d2:99:27:fb:36:28:ba:8b:75:0b:2f:2e:04:47:b4:e8:4d:d0: a5:ca:7f:4e:98:07:a9:94:6c:71:96:62:40:78:6e:87:38:50: 77:3f:c5:42:8f:16:66:e9:a2:67:fc:56:22:47:37:a1:61:88: 10:9b:35:4e:c7:e7:59:00:32:35:d6:f6:58:a6:bb:95:c2:7d: 81:0c:b6:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cbmh2qS6EMPKAe2XEJOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz NDEzMjYwHhcNMjUxMjA2MTkwMDQ2WhcNMjUxMjA3MTkwMDQ2WjAzMTEwLwYDVQQD EygyNWQxYjhlOTZiZDQ2MDVmNjY2ZTkxNjE5NmJiZWFlMWIwOTNmMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCs3SeGdNLw+McFILt+w9sjjQqoQ LIRh9Uwc51/0iI1/7a2v8psJP1fssJDqAT+BwIg9nITOslZf/d0T3dqpeSrWu4rS R5X7YgaY4ZZeCG0G5sIfT8jfJH0GJuXStDllBB8hMmRK2qVxcd7TYHq/2SUYTG2e +5Pk3VB9qhLczVUrJhf2ak4Xk4WcI4QpbF5YHF2uKNj/8AneoKOmvK3HZV1gT/RM zo/ui9ERJtKuAn16huRs1pq6VL/+ui7r4C4UTMaiqz6bga6QEeAl24IFOuDxl3r5 gwvpFe/ZVgCMeqgZ/TaNYUrsTnyWpPWdiUaQysFSx/22pTf8Z7yEu4NcLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXRuOlr1GBfZm6RYZa76uGwk/AXMB8GA1UdIwQY MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpKCtIgO dFDEVct+GzbahqRULVUEVEbsetkz9oU5rrFc3cghwor7VT8PCtX+QcRgBsdGZLVe vELoopcGAQZl2AGf61v41t2q6GZ0nTifKW3+gHNoB8kks1KAz13hzk8BMj1qZ9lF iCzu9VlPrP0xuGfdhpIxdGAeUaRgOM7dQSqLZW63Ee58eJtpGrOAmyxjjX3uBEA2 uQncpGTn0UMhCV5w/lrbdi6oLnyqoQmwfCLkte4z0pkn+zYouot1Cy8uBEe06E3Q pcp/TpgHqZRscZZiQHhuhzhQdz/FQo8WZumiZ/xWIkc3oWGIEJs1TsfnWQAyNdb2 WKa7lcJ9gQy2Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:04 2025 by rpki-client