This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json) Hash identifier: gWN5SgG6aDCTdj8TS4Re3qRMcmCT4DArwfJfTQUCznU= Subject key identifier: 42:9A:F3:3A:92:72:0C:BD:C8:C8:DA:08:19:CF:BD:42:22:45:6B:C8 Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0 Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0 Certificate serial: 019AF12CDF4EB97E0E71ED80107139D79967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft Manifest number: 0C44 Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: cXJLsHm9DC3e33NIjIkambwBd+P4QUiUBWok+SjS/0s=) 2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:df:4e:b9:7e:0e:71:ed:80:10:71:39:d7:99:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0 Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=429af33a92720cbdc8c8da0819cfbd4222456bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:98:1f:c1:70:46:b2:ee:c9:46:1c:ee:85: 99:50:3a:d0:b8:19:a6:43:b3:3b:fd:51:7c:fc:25: ed:3b:20:16:02:ca:06:f0:d9:fd:81:fd:a2:39:e3: 69:f0:64:5f:98:8d:d1:25:1f:b0:67:ed:a6:d4:7e: 21:0a:98:15:aa:84:21:c1:d6:dc:df:d7:f9:c9:0a: a5:87:08:80:95:fd:27:e4:a5:c1:4d:8c:c5:fc:18: 15:d6:12:f7:0b:eb:fa:d9:ee:3b:ec:28:dc:68:33: bc:2a:bd:3c:fb:63:76:f6:1a:9d:88:b3:4c:c3:df: 21:4b:6b:b2:bb:8a:23:d1:3a:f6:3c:71:5c:e8:14: fa:c8:9f:e3:a6:6f:3d:55:f9:68:3d:9c:4e:9c:bd: db:7a:6c:a7:7a:99:81:ac:e7:8c:7d:e0:2a:ff:63: 40:26:ed:be:bb:2d:07:4e:c2:4f:28:d3:ff:0a:f7: 23:1e:53:ff:79:7c:ad:94:38:f5:39:ff:54:23:a0: c0:74:a6:ef:69:07:d0:ef:36:aa:e9:2a:65:87:70: 40:09:cc:27:35:3f:1b:9a:4e:82:5b:43:0c:ba:8c: 2e:49:bf:83:f4:59:2e:98:9f:4c:84:c7:f8:f9:0b: 22:8f:f4:3f:37:e9:5e:b8:e5:15:f1:df:56:6c:f1: 6a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9A:F3:3A:92:72:0C:BD:C8:C8:DA:08:19:CF:BD:42:22:45:6B:C8 X509v3 Authority Key Identifier: keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:29:04:d7:54:e5:03:ea:ae:75:32:a3:68:e0:4a:e1:4d:0f: 8d:89:8d:62:2a:5d:c3:c1:3b:7b:fe:87:ff:44:ba:64:1b:db: cb:f2:4b:2c:05:38:07:65:92:bd:e2:0e:92:19:e2:56:42:ba: 6b:9c:66:3f:23:8f:27:a9:89:5b:e6:09:f1:98:af:c0:b9:0b: fb:a9:2b:ab:9d:80:b2:59:4c:6d:87:b5:bf:51:df:d2:65:4c: fd:1a:e0:d8:c8:33:45:35:14:5c:0a:24:c4:f7:68:fe:5c:52: 5f:c4:51:cb:9c:50:a1:54:7e:53:52:8f:40:22:d8:7f:be:0a: a9:4b:e8:95:04:25:40:7c:0f:33:d8:3f:d3:97:2f:80:e3:47: ea:47:2f:43:05:22:58:a4:91:8c:61:cd:09:be:61:c8:1a:14: c0:32:7f:ec:bf:21:48:52:67:12:db:a6:8d:83:eb:3e:ee:d3: ff:a2:d9:9f:f4:38:3b:da:a0:17:c7:58:7c:b7:3c:59:a6:ce: 2a:a7:f0:63:3c:88:c6:67:a9:c6:3d:69:81:a6:1d:82:73:3c: 07:2e:7f:88:d9:ae:54:ae:b2:3b:12:9f:8e:3c:9b:11:c0:c1: a0:84:bc:f7:11:e3:8d:91:4c:de:0c:dc:0d:f8:9a:bb:8f:bf: 84:b8:c0:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLN9OuX4Oce2AEHE515lnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDUzMTQ1MTY0ODNmZTI3YzA1MzBjY2I5NzA3YzM3NmQy MGU3ZjAwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD Eyg0MjlhZjMzYTkyNzIwY2JkYzhjOGRhMDgxOWNmYmQ0MjIyNDU2YmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyiYH8FwRrLuyUYc7oWZUDrQuBmm Q7M7/VF8/CXtOyAWAsoG8Nn9gf2iOeNp8GRfmI3RJR+wZ+2m1H4hCpgVqoQhwdbc 39f5yQqlhwiAlf0n5KXBTYzF/BgV1hL3C+v62e477CjcaDO8Kr08+2N29hqdiLNM w98hS2uyu4oj0Tr2PHFc6BT6yJ/jpm89VfloPZxOnL3bemynepmBrOeMfeAq/2NA Ju2+uy0HTsJPKNP/CvcjHlP/eXytlDj1Of9UI6DAdKbvaQfQ7zaq6Splh3BACcwn NT8bmk6CW0MMuowuSb+D9FkumJ9MhMf4+Qsij/Q/N+leuOUV8d9WbPFqbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKa8zqScgy9yMjaCBnPvUIiRWvIMB8GA1UdIwQY MBaAFGdFMUUWSD/ifAUwzLlwfDdtIOfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2Mt ODY1NDc4NmUyMGE5LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2MtODY1NDc4NmUyMGE5 LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCkE11Tl A+qudTKjaOBK4U0PjYmNYipdw8E7e/6H/0S6ZBvby/JLLAU4B2WSveIOkhniVkK6 a5xmPyOPJ6mJW+YJ8ZivwLkL+6krq52AsllMbYe1v1Hf0mVM/Rrg2MgzRTUUXAok xPdo/lxSX8RRy5xQoVR+U1KPQCLYf74KqUvolQQlQHwPM9g/05cvgONH6kcvQwUi WKSRjGHNCb5hyBoUwDJ/7L8hSFJnEtumjYPrPu7T/6LZn/Q4O9qgF8dYfLc8WabO KqfwYzyIxmepxj1pgaYdgnM8By5/iNmuVK6yOxKfjjybEcDBoIS89xHjjZFM3gzc Dfiau4+/hLjATw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:28 2025 by rpki-client