This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json) Hash identifier: gvpcp/dMToILtOc2RC/01EJiLvC11o7p2ppKfd78Pi4= Subject key identifier: 68:50:9C:C6:07:0A:EC:A3:37:CF:86:54:CA:07:67:9E:F5:05:7E:67 Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d Certificate serial: 019AF276F32A159199561CF718C1F9807548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: u6+5oBUoA4VMzbQN6BnO/4VKvzo/xeo4tM7WVJV+LZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f3:2a:15:91:99:56:1c:f7:18:c1:f9:80:75:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=68509cc6070aeca337cf8654ca07679ef5057e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:6d:57:35:7c:03:36:b8:28:8d:8a:6c:95: ba:7b:47:77:7b:7e:f6:45:da:0c:4b:d1:ef:3a:f4: 2f:0b:95:0f:57:54:fc:dd:ff:d5:2e:16:2c:07:be: b6:f5:93:48:3b:f4:ee:83:6c:05:2a:ae:b0:8b:77: 06:d3:3a:e5:21:67:76:39:aa:44:99:57:5d:4a:bb: f9:36:11:b0:42:7d:0f:70:41:3a:bd:71:f1:f6:1f: bb:91:c3:44:49:ad:6f:9f:6b:8d:14:89:01:69:12: 40:b9:31:7e:73:1c:fd:8a:a3:f0:33:9c:4c:5a:9e: 51:ad:63:f6:39:b6:ef:6d:64:69:fe:90:3f:00:23: 1f:28:e2:f4:10:f6:53:bc:af:53:35:63:4b:b3:25: 5c:f3:80:0a:2f:84:d3:97:57:8b:d4:3c:5b:54:a5: 65:3e:6e:91:1e:87:c4:67:14:a0:b4:e0:89:4c:d3: d8:9c:0a:c2:9f:ad:ce:7a:49:03:ca:26:4c:96:3d: 44:7f:3d:5f:3b:87:10:3a:eb:64:42:cb:c5:44:0a: fa:7b:79:8a:dd:3a:fb:c3:45:b0:16:03:e8:88:44: 4f:af:aa:22:60:14:db:21:36:75:2e:a6:9a:b8:52: fb:e8:24:a6:34:2b:a5:21:ca:52:5c:da:5b:dc:99: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:50:9C:C6:07:0A:EC:A3:37:CF:86:54:CA:07:67:9E:F5:05:7E:67 X509v3 Authority Key Identifier: keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:cf:d9:ef:0c:d4:ee:64:b7:4c:d0:6f:33:8c:c9:c6:1f:0a: ba:d1:3d:6e:28:e1:0c:d1:3c:0b:af:35:fe:c7:c8:1b:a3:c2: aa:3a:0d:18:8c:c4:3c:69:7d:f0:02:1a:20:32:b3:38:b8:ae: 9f:c6:8f:79:9e:0a:89:41:23:9b:7e:6e:c6:92:ea:2b:81:be: 28:2f:18:35:31:38:27:47:f3:6b:99:28:d6:8f:74:11:37:e7: 23:9e:a7:0e:c8:e1:5d:2d:7b:82:52:a6:d6:d0:41:d5:5d:ac: 4d:79:68:14:4f:07:fb:f2:8d:30:6a:dd:ee:38:be:35:f8:29: d1:4a:eb:19:0a:3e:67:1b:0c:b7:c8:cb:5e:95:c8:c6:d9:8e: 03:90:d4:2c:62:17:72:0b:70:d4:95:ef:92:a5:64:d0:37:fa: 05:db:2d:76:8c:f3:a9:e0:bf:6f:3c:08:19:21:60:16:26:7c: b9:38:05:27:de:07:af:ae:6e:6f:1f:6a:26:b4:e1:d9:e0:4b: 0a:59:ff:19:31:d0:1c:be:89:ef:6c:13:fa:21:88:a3:df:07: 52:9d:b1:2b:19:ab:2e:09:9b:41:75:6b:c0:96:0e:84:bf:b9: 58:a1:7d:f9:09:a1:2b:22:b8:9d:3b:88:ef:68:01:14:e7:4d: 81:d0:82:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvMqFZGZVhz3GMH5gHVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODY0NDc3ZmU5NDhiZjQ3YjkxNzk3MThjMzY5OGVlZmY1 ODExMWQwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD Eyg2ODUwOWNjNjA3MGFlY2EzMzdjZjg2NTRjYTA3Njc5ZWY1MDU3ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1BtVzV8Aza4KI2KbJW6e0d3e372 RdoMS9HvOvQvC5UPV1T83f/VLhYsB7629ZNIO/Tug2wFKq6wi3cG0zrlIWd2OapE mVddSrv5NhGwQn0PcEE6vXHx9h+7kcNESa1vn2uNFIkBaRJAuTF+cxz9iqPwM5xM Wp5RrWP2ObbvbWRp/pA/ACMfKOL0EPZTvK9TNWNLsyVc84AKL4TTl1eL1DxbVKVl Pm6RHofEZxSgtOCJTNPYnArCn63OekkDyiZMlj1Efz1fO4cQOutkQsvFRAr6e3mK 3Tr7w0WwFgPoiERPr6oiYBTbITZ1LqaauFL76CSmNCulIcpSXNpb3JlpDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhQnMYHCuyjN8+GVMoHZ571BX5nMB8GA1UdIwQY MBaAFGeGRHf+lIv0e5F5cYw2mO7/WBEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgt ODM0YWU0N2FkNDdiLzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgtODM0YWU0N2FkNDdi LzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyM/Z7wzU 7mS3TNBvM4zJxh8KutE9bijhDNE8C681/sfIG6PCqjoNGIzEPGl98AIaIDKzOLiu n8aPeZ4KiUEjm35uxpLqK4G+KC8YNTE4J0fza5ko1o90ETfnI56nDsjhXS17glKm 1tBB1V2sTXloFE8H+/KNMGrd7ji+Nfgp0UrrGQo+ZxsMt8jLXpXIxtmOA5DULGIX cgtw1JXvkqVk0Df6BdstdozzqeC/bzwIGSFgFiZ8uTgFJ94Hr65ubx9qJrTh2eBL Cln/GTHQHL6J72wT+iGIo98HUp2xKxmrLgmbQXVrwJYOhL+5WKF9+QmhKyK4nTuI 72gBFOdNgdCCTA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:57 2025 by rpki-client