This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json) Hash identifier: 3uF/xPI+s3kLyCNBfAHa4pQv8gXyrnEvcjN4VOcN3qk= Subject key identifier: 13:D3:59:5F:D2:E1:46:FB:1A:34:A4:0C:FD:4B:FB:4D:60:7F:9F:C7 Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Certificate serial: 019AF209B43FF74F52CE3393CB046A4E2A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:53 +0000 Manifest this update: Sat 06 Dec 2025 05:01:53 +0000 Manifest next update: Sun 07 Dec 2025 05:01:53 +0000 Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=) 2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: xTMK+vwo9kiWcLy3s9COGuRl6P6pGZ1K7C+mEgxktKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b4:3f:f7:4f:52:ce:33:93:cb:04:6a:4e:2a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Validity Not Before: Dec 6 05:01:53 2025 GMT Not After : Dec 7 05:01:53 2025 GMT Subject: CN=13d3595fd2e146fb1a34a40cfd4bfb4d607f9fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:6f:38:f0:2b:a1:20:35:ad:f9:46:1f:10: 6e:b4:c0:42:d6:f4:6b:84:d3:bb:b1:7c:55:a3:83: b2:06:0c:98:11:c6:87:21:5f:3c:63:e0:dc:db:88: 12:23:21:c4:c6:c1:12:72:99:c6:78:f4:b2:06:2d: b0:06:42:35:8b:ca:a0:b4:ba:dd:bb:7e:77:3b:d4: 7b:d0:cb:88:fd:bf:9b:2d:68:55:62:75:bf:f5:ae: 72:32:aa:4b:07:e9:95:06:e2:bc:10:1e:b3:25:ed: 65:1d:30:36:7b:c0:98:94:e6:71:7e:de:b3:af:f9: ca:9e:e8:fd:09:58:bd:98:3e:e9:cd:01:73:f0:46: 81:00:1a:fd:76:fc:a4:17:57:b0:90:a5:a8:fb:10: 9f:b5:28:2e:ba:1a:a0:64:b4:ab:f2:f6:6d:49:03: 98:1b:58:ca:48:d8:13:4c:d7:62:a0:b3:e7:0e:ec: 05:46:c7:7c:ac:41:be:97:7b:17:35:7b:77:c1:6f: e4:4d:aa:de:7c:fc:66:6e:62:40:30:ea:d5:bb:25: 3b:0c:91:c0:ec:87:90:98:1b:2c:b5:5b:6a:e7:ce: 56:c0:56:1d:47:7e:ce:84:c2:dc:ae:eb:49:e0:2d: a3:ac:44:89:a0:69:0b:ad:db:bc:10:bd:36:66:1a: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:59:5F:D2:E1:46:FB:1A:34:A4:0C:FD:4B:FB:4D:60:7F:9F:C7 X509v3 Authority Key Identifier: keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ed:e5:d1:be:2c:f8:12:87:fe:1d:7c:cc:90:d3:42:41:ce: 58:ff:f9:0f:e1:05:ea:30:13:a2:ea:76:5a:a3:8d:4f:07:88: 5b:7f:a4:93:bc:aa:83:3c:b7:b1:42:ce:78:bd:c3:c1:03:3d: 13:44:04:8f:11:b6:d3:ea:f3:35:fb:be:ad:db:ab:f6:e6:2a: 21:ce:1d:c3:36:b8:4b:f9:7a:20:86:b6:3d:0c:28:5c:88:14: 4a:8a:9b:66:0e:ab:44:af:d1:f9:97:cb:93:68:0f:cc:1d:9b: 9a:ee:08:27:c5:4f:26:aa:2d:25:fb:9e:51:f1:02:c2:e5:94: d1:18:b0:23:60:b9:ae:04:d5:65:d7:0c:dc:a1:e2:af:44:95: 07:b3:59:9a:38:d8:f1:24:09:56:15:a9:8b:7a:63:07:94:54: 67:93:5c:f4:db:e0:a5:99:77:6c:96:3d:35:4a:a7:bb:73:41: e0:85:23:e4:b2:36:04:de:07:24:2a:66:f4:a3:bf:32:dc:c3: 78:42:f9:41:e0:59:28:47:83:f0:7e:46:07:b2:b9:5b:2d:85: de:26:e3:70:55:3c:bf:b1:c9:fe:63:4d:0d:c3:c1:2b:ba:e5: 5f:0d:ad:72:f7:30:26:d7:b1:40:eb:0d:f8:45:b5:64:ae:89: c2:e3:1a:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbQ/909SzjOTywRqTipUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGNkOTI2YmYzNzBkM2ZhMDE4M2ExMzhiNTdiMDk4M2Nk YWNhMGEwHhcNMjUxMjA2MDUwMTUzWhcNMjUxMjA3MDUwMTUzWjAzMTEwLwYDVQQD EygxM2QzNTk1ZmQyZTE0NmZiMWEzNGE0MGNmZDRiZmI0ZDYwN2Y5ZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqRvOPAroSA1rflGHxButMBC1vRr hNO7sXxVo4OyBgyYEcaHIV88Y+Dc24gSIyHExsEScpnGePSyBi2wBkI1i8qgtLrd u353O9R70MuI/b+bLWhVYnW/9a5yMqpLB+mVBuK8EB6zJe1lHTA2e8CYlOZxft6z r/nKnuj9CVi9mD7pzQFz8EaBABr9dvykF1ewkKWo+xCftSguuhqgZLSr8vZtSQOY G1jKSNgTTNdioLPnDuwFRsd8rEG+l3sXNXt3wW/kTarefPxmbmJAMOrVuyU7DJHA 7IeQmBsstVtq585WwFYdR37OhMLcrutJ4C2jrESJoGkLrdu8EL02ZhotWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPTWV/S4Ub7GjSkDP1L+01gf5/HMB8GA1UdIwQY MBaAFGfc2Sa/Nw0/oBg6E4tXsJg82soKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjIt OWY1YjJlYjQ5MmEwLzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjItOWY1YjJlYjQ5MmEw LzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae3l0b4s +BKH/h18zJDTQkHOWP/5D+EF6jAToup2WqONTweIW3+kk7yqgzy3sULOeL3DwQM9 E0QEjxG20+rzNfu+rdur9uYqIc4dwza4S/l6IIa2PQwoXIgUSoqbZg6rRK/R+ZfL k2gPzB2bmu4IJ8VPJqotJfueUfECwuWU0RiwI2C5rgTVZdcM3KHir0SVB7NZmjjY 8SQJVhWpi3pjB5RUZ5Nc9NvgpZl3bJY9NUqnu3NB4IUj5LI2BN4HJCpm9KO/MtzD eEL5QeBZKEeD8H5GB7K5Wy2F3ibjcFU8v7HJ/mNNDcPBK7rlXw2tcvcwJtexQOsN +EW1ZK6JwuMajA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:12 2025 by rpki-client