This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json) Hash identifier: jw/ijlh1dordDCOkGCp9j9ONFZTawganqZ51FYjwHf8= Subject key identifier: A5:E3:18:2A:4C:B9:DB:CC:4B:E8:87:52:4F:FE:6C:05:C4:5B:74:20 Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Certificate serial: 019AF2090C4AB437B77DA9723AD29AE8B49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft Manifest number: 0F2B Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: aG2Qh63G9COJlX74zca8yWWX9ayQgUamBjYdqOflkUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0c:4a:b4:37:b7:7d:a9:72:3a:d2:9a:e8:b4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=a5e3182a4cb9dbcc4be887524ffe6c05c45b7420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:2e:26:30:71:3d:f4:60:13:9b:1a:a3:0f: 5b:a4:48:7d:28:24:92:e1:d5:81:b1:8e:db:5c:3c: 0e:87:97:e1:b6:33:a2:74:f4:76:6f:31:60:0d:07: bd:9d:1f:7b:6c:ea:1b:f8:82:f4:17:f6:26:7c:6c: ea:1b:1b:35:7b:26:fb:16:5c:38:bf:c1:86:6c:9b: 62:3a:03:c3:6c:f1:0e:d1:ce:bc:f9:45:6a:ca:d4: a3:57:1d:44:96:2c:b7:71:13:69:41:1e:89:bb:2f: bd:64:ce:73:95:52:59:b9:2d:3a:9a:ac:a8:31:f0: e3:fe:7a:db:ca:52:e8:2b:b3:ee:1f:68:aa:2e:d4: cb:c4:fc:b2:65:7c:00:01:e3:c5:28:2c:b3:11:89: 00:f1:69:b1:1b:63:f9:f2:a3:31:83:f7:e1:d2:23: 5d:b3:5d:cc:69:9f:47:7d:46:09:c5:71:5f:36:44: 3b:86:fe:aa:8c:a4:60:04:48:50:c2:11:95:9a:65: 1c:e6:4e:65:5f:7f:66:c5:7a:c6:0d:9d:25:b3:1b: 3d:fe:de:44:3a:18:7c:7d:bb:31:f5:68:42:e8:f9: 4d:07:4f:ac:78:21:07:11:3e:19:c0:cf:7a:12:11: f4:57:ee:14:ed:73:4c:15:d4:fc:c7:6f:29:72:87: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E3:18:2A:4C:B9:DB:CC:4B:E8:87:52:4F:FE:6C:05:C4:5B:74:20 X509v3 Authority Key Identifier: keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:4f:a9:76:06:52:9c:75:28:ec:52:d4:c6:94:f7:65:b5:c2: 96:12:34:2c:d1:15:ba:06:d9:d8:da:b6:40:5a:fa:9c:c5:d4: 5c:9c:22:95:7b:7e:7d:cf:f9:a3:30:a8:06:8d:d7:34:9d:33: 01:db:77:31:4d:99:71:09:a6:96:fe:27:d0:bf:a6:c6:5b:e2: 97:bf:63:3b:5c:f5:43:88:40:12:a7:53:66:93:72:2a:84:e4: 61:e2:bf:96:af:1a:df:c9:ac:f5:1a:e9:23:17:6d:db:b7:a3: 4c:b8:37:45:91:c9:c1:ca:f0:7b:6e:27:da:4e:dd:da:b0:b8: a5:8d:30:b4:db:af:d9:94:42:91:16:b8:ab:e9:33:ad:1f:c0: f5:94:6d:25:0e:32:ed:f8:a9:07:21:f7:fe:c3:bc:da:75:87: 2e:ac:14:52:d2:27:fd:81:eb:7c:00:bf:d1:ed:76:8b:91:4b: 70:d3:0b:d8:b9:69:31:31:df:35:c2:59:42:6b:0f:65:4a:cb: dc:e4:99:9c:97:9e:81:50:34:b3:bd:7b:5c:fd:13:85:a0:29: 4f:80:de:15:86:93:4d:5f:55:12:a5:46:0e:15:e1:f3:1e:88: 1a:5a:fb:e4:bb:f8:ca:5d:fb:42:4d:e7:52:4e:65:a2:47:ee: b8:0f:e4:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQxKtDe3falyOtKa6LSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjJmMDlmYTM4YTM4YmM4MGNmZjgyZTBjN2I0N2IzNzkx NjM5OGEwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EyhhNWUzMTgyYTRjYjlkYmNjNGJlODg3NTI0ZmZlNmMwNWM0NWI3NDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M0uJjBxPfRgE5saow9bpEh9KCSS 4dWBsY7bXDwOh5fhtjOidPR2bzFgDQe9nR97bOob+IL0F/YmfGzqGxs1eyb7Flw4 v8GGbJtiOgPDbPEO0c68+UVqytSjVx1Eliy3cRNpQR6Juy+9ZM5zlVJZuS06mqyo MfDj/nrbylLoK7PuH2iqLtTLxPyyZXwAAePFKCyzEYkA8WmxG2P58qMxg/fh0iNd s13MaZ9HfUYJxXFfNkQ7hv6qjKRgBEhQwhGVmmUc5k5lX39mxXrGDZ0lsxs9/t5E Ohh8fbsx9WhC6PlNB0+seCEHET4ZwM96EhH0V+4U7XNMFdT8x28pcodugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXjGCpMudvMS+iHUk/+bAXEW3QgMB8GA1UdIwQY MBaAFGfy8J+jiji8gM/4Lgx7R7N5FjmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQt Zjk5OTdlMTkxMjZjLzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQtZjk5OTdlMTkxMjZj LzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2E+pdgZS nHUo7FLUxpT3ZbXClhI0LNEVugbZ2Nq2QFr6nMXUXJwilXt+fc/5ozCoBo3XNJ0z Adt3MU2ZcQmmlv4n0L+mxlvil79jO1z1Q4hAEqdTZpNyKoTkYeK/lq8a38ms9Rrp Ixdt27ejTLg3RZHJwcrwe24n2k7d2rC4pY0wtNuv2ZRCkRa4q+kzrR/A9ZRtJQ4y 7fipByH3/sO82nWHLqwUUtIn/YHrfAC/0e12i5FLcNML2LlpMTHfNcJZQmsPZUrL 3OSZnJeegVA0s717XP0ThaApT4DeFYaTTV9VEqVGDhXh8x6IGlr75Lv4yl37Qk3n Uk5lokfuuA/k7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:09 2025 by rpki-client