This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json) Hash identifier: UepkUSD5HW32taniZFEe5QQuXMLWVHRb2XN+l5kfl0A= Subject key identifier: 25:30:4B:B1:00:09:A0:F3:82:E2:F6:22:CC:02:EF:AA:F3:73:69:BC Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d Certificate serial: 019AF31B8EF8B71850E175086EB549726850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft Manifest number: 0FFA Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: i48WOS0ZrtCeXqhnYEzKlAlIju8caD0irmW+DTPCnjk=) 2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8e:f8:b7:18:50:e1:75:08:6e:b5:49:72:68:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=25304bb10009a0f382e2f622cc02efaaf37369bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:c7:2f:46:39:dc:32:69:79:f7:05:9f:0b: 16:a9:00:78:c9:a3:2c:de:37:de:69:5a:17:a4:d1: 78:65:5d:b9:2f:e8:7b:2d:a9:f5:19:e0:7a:7a:e9: ba:08:37:67:5c:d9:a6:97:db:1b:01:af:29:c5:4e: e5:88:8b:14:d0:b1:3f:85:5e:7d:9b:5a:d3:eb:6f: b3:8d:67:57:2d:ca:f2:fa:0c:d2:e2:8b:6e:6f:46: 69:37:a1:89:7f:b9:8c:f0:65:aa:09:e7:63:22:5d: 0a:b0:67:b5:b6:8d:9f:ce:17:45:93:4f:98:b3:d1: 3d:48:68:45:5c:9d:78:c0:1f:c8:b8:b5:66:9a:32: 35:c6:20:e3:d6:96:e6:52:68:34:7f:d8:06:81:c7: 88:20:01:9e:33:f6:fb:8b:b1:34:00:42:a2:3a:fd: de:45:0f:09:4b:fb:f2:02:77:92:1a:b0:a9:37:54: ed:e2:33:58:42:b1:f0:ad:e8:5a:9f:8d:06:fa:a4: 9e:b1:53:ef:6f:fc:bd:48:bf:e4:c0:1d:76:9d:a7: 75:03:b8:a4:70:a1:82:e8:87:e6:2a:bf:29:59:f9: ab:55:ed:d1:fe:fb:67:77:ad:91:e0:76:d7:3f:4d: 70:be:96:8e:39:53:99:64:86:77:bc:34:68:23:00: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:4B:B1:00:09:A0:F3:82:E2:F6:22:CC:02:EF:AA:F3:73:69:BC X509v3 Authority Key Identifier: keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:16:2d:93:cb:dc:8f:00:5d:5a:c7:97:78:7c:2a:d7:2f: 39:56:7c:36:e1:4b:a5:12:90:fa:f4:79:08:5b:4e:83:89:a4: a5:61:c1:fb:e6:74:ed:99:91:28:24:7c:c5:d7:21:a5:94:de: 91:10:d0:cb:79:f3:a7:0e:fb:6e:ad:68:ed:df:26:23:54:18: 2b:2f:63:44:69:1e:b7:9f:2c:1c:5b:07:91:20:e1:3a:a8:6f: 6a:77:98:d6:92:32:b1:09:90:59:72:66:49:9d:f0:18:20:a3: 37:d5:52:e7:87:bc:8d:7a:d6:ec:e0:96:f6:ba:46:f9:80:70: d9:bc:39:b4:07:ff:e2:ab:ea:66:e1:0c:06:af:66:28:fb:90: 34:ec:bc:89:2b:23:5c:16:d5:9c:38:1e:f4:1a:bc:e1:87:6e: 12:8c:57:64:c1:b9:be:df:e3:d9:45:f7:31:69:b6:d8:b7:b7: a7:b5:01:78:9c:c9:81:2c:85:f8:5c:4c:a6:1f:67:2f:59:55: f5:61:e8:cb:86:2a:f2:c9:a6:3b:12:e9:02:43:a0:b6:fd:e7: 8d:6d:f4:a0:c4:04:e8:33:8b:a3:e8:f0:d1:74:e2:57:16:54: 97:b7:9f:de:97:68:61:91:16:41:09:1f:a0:80:11:27:57:42: 10:99:de:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG474txhQ4XUIbrVJcmhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw Yzg4N2QwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD EygyNTMwNGJiMTAwMDlhMGYzODJlMmY2MjJjYzAyZWZhYWYzNzM2OWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAognHL0Y53DJpefcFnwsWqQB4yaMs 3jfeaVoXpNF4ZV25L+h7Lan1GeB6eum6CDdnXNmml9sbAa8pxU7liIsU0LE/hV59 m1rT62+zjWdXLcry+gzS4otub0ZpN6GJf7mM8GWqCedjIl0KsGe1to2fzhdFk0+Y s9E9SGhFXJ14wB/IuLVmmjI1xiDj1pbmUmg0f9gGgceIIAGeM/b7i7E0AEKiOv3e RQ8JS/vyAneSGrCpN1Tt4jNYQrHwrehan40G+qSesVPvb/y9SL/kwB12nad1A7ik cKGC6IfmKr8pWfmrVe3R/vtnd62R4HbXP01wvpaOOVOZZIZ3vDRoIwA7TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUwS7EACaDzguL2IswC76rzc2m8MB8GA1UdIwQY MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmcWLZPL 3I8AXVrHl3h8KtcvOVZ8NuFLpRKQ+vR5CFtOg4mkpWHB++Z07ZmRKCR8xdchpZTe kRDQy3nzpw77bq1o7d8mI1QYKy9jRGket58sHFsHkSDhOqhvaneY1pIysQmQWXJm SZ3wGCCjN9VS54e8jXrW7OCW9rpG+YBw2bw5tAf/4qvqZuEMBq9mKPuQNOy8iSsj XBbVnDge9Bq84YduEoxXZMG5vt/j2UX3MWm22Le3p7UBeJzJgSyF+FxMph9nL1lV 9WHoy4Yq8smmOxLpAkOgtv3njW30oMQE6DOLo+jw0XTiVxZUl7ef3pdoYZEWQQkf oIARJ1dCEJneiA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:02 2025 by rpki-client