This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json) Hash identifier: Mb7OjdF4PdFlwE3Odj5Q0gYal7N3We3I5yLTEp17fyU= Subject key identifier: 51:13:10:B6:43:B0:49:59:E1:06:51:A5:7A:EA:CE:78:F1:22:B7:02 Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e Certificate serial: 019AF1642B9147C8F8B96353A5C6C11B57CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft Manifest number: 13D8 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=) 2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: ZPsfCXkQfJ2oNBI9+9bG4r07reNTrLhPPNzysHIXejE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2b:91:47:c8:f8:b9:63:53:a5:c6:c1:1b:57:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=511310b643b04959e10651a57aeace78f122b702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:60:7d:2d:c1:ae:55:68:2a:99:63:19:1f: 1e:7f:31:2b:ab:0e:f1:2c:7e:b9:5b:4d:d6:10:53: 0e:52:8b:81:79:be:40:b4:c5:05:8a:42:6c:f6:ac: 78:e0:7c:ee:84:ad:20:15:e6:36:98:7d:c3:a9:91: 88:4f:82:57:ec:8d:cc:11:dd:c2:72:40:dd:0d:22: 8c:58:92:65:5c:73:78:50:0f:f1:28:f3:f9:42:a9: b9:52:1a:f9:d6:b2:26:5d:4f:5a:97:47:70:fe:b9: 7e:2b:ec:cc:1f:da:87:b8:6f:8c:9e:06:b9:52:31: 45:33:46:8d:82:22:c1:53:51:1b:49:c5:1d:4f:24: a0:81:45:74:bb:73:c1:e8:c4:c0:cb:a1:99:bb:bb: d9:1e:a1:4f:96:2b:95:29:05:9d:6c:19:8d:18:2d: ec:6a:31:51:25:05:d1:71:a9:a8:bb:dd:8a:4c:02: 31:7c:32:6d:02:18:57:95:f0:ff:12:e8:bb:a6:d4: 69:c2:e4:13:6a:98:4b:b9:fb:a8:58:d5:94:29:69: d4:ee:c6:a0:92:62:c4:fc:e0:4e:be:25:1c:99:9d: d5:12:3f:97:fb:66:98:db:a0:e9:52:54:5e:65:36: f9:8f:81:da:75:48:f8:a7:63:7f:f3:41:1a:b6:5e: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:10:B6:43:B0:49:59:E1:06:51:A5:7A:EA:CE:78:F1:22:B7:02 X509v3 Authority Key Identifier: keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b0:52:4c:97:ed:8e:90:28:50:5e:d3:56:98:51:37:f3:28: 86:4b:54:89:74:ef:3e:fd:2a:ad:b0:59:80:f6:06:5b:a0:c8: 2f:f1:74:10:f5:e7:cd:d0:d4:5e:9b:f0:78:b5:46:9f:83:46: 45:4c:fe:38:7f:93:4c:43:41:3f:0d:3a:dc:56:cf:c9:8b:3d: 39:f4:58:fb:ac:af:65:3b:d8:4c:27:b8:5f:a8:c0:59:70:1b: 34:6e:da:04:6a:0c:d5:82:97:12:3b:ed:9e:5b:56:c8:6c:01: 77:aa:df:0b:77:97:4e:02:12:54:28:e8:85:a6:41:9e:10:0d: d8:0d:0d:39:a8:14:49:44:f9:1d:a7:90:f9:3d:33:c3:22:d4: 26:af:52:58:1e:6e:bf:91:64:c2:b8:01:22:b1:a9:9b:8f:05: 03:f5:c9:18:42:fe:e8:52:1f:a4:34:83:08:5e:63:94:02:64: f8:57:8c:9f:fa:29:3c:9a:63:89:bc:9d:d6:23:8c:d1:b9:17: 40:79:e9:5e:72:9d:cf:34:83:cf:0d:1a:18:53:7c:42:d2:7d: dd:c6:79:d8:05:d0:ad:8f:4b:34:36:b7:5d:03:e1:7e:c6:41: 95:fb:74:af:91:b4:81:a0:7f:cd:ca:3b:49:e2:ab:27:ef:9f: 0b:36:a7:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCuRR8j4uWNTpcbBG1fOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2MzYTUyM2JlYTIyNGE3NGJjOTZhNGFmNDE2NGMyNDc4 NmI4MmUwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD Eyg1MTEzMTBiNjQzYjA0OTU5ZTEwNjUxYTU3YWVhY2U3OGYxMjJiNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY1gfS3BrlVoKpljGR8efzErqw7x LH65W03WEFMOUouBeb5AtMUFikJs9qx44HzuhK0gFeY2mH3DqZGIT4JX7I3MEd3C ckDdDSKMWJJlXHN4UA/xKPP5Qqm5Uhr51rImXU9al0dw/rl+K+zMH9qHuG+Mnga5 UjFFM0aNgiLBU1EbScUdTySggUV0u3PB6MTAy6GZu7vZHqFPliuVKQWdbBmNGC3s ajFRJQXRcamou92KTAIxfDJtAhhXlfD/Eui7ptRpwuQTaphLufuoWNWUKWnU7sag kmLE/OBOviUcmZ3VEj+X+2aY26DpUlReZTb5j4HadUj4p2N/80Eatl5FJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFETELZDsElZ4QZRpXrqznjxIrcCMB8GA1UdIwQY MBaAFGfMOlI76iJKdLyWpK9BZMJHhrguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEt N2NmYjE5ZjZlMTMzLzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEtN2NmYjE5ZjZlMTMz LzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLBSTJft jpAoUF7TVphRN/MohktUiXTvPv0qrbBZgPYGW6DIL/F0EPXnzdDUXpvweLVGn4NG RUz+OH+TTENBPw063FbPyYs9OfRY+6yvZTvYTCe4X6jAWXAbNG7aBGoM1YKXEjvt nltWyGwBd6rfC3eXTgISVCjohaZBnhAN2A0NOagUSUT5HaeQ+T0zwyLUJq9SWB5u v5FkwrgBIrGpm48FA/XJGEL+6FIfpDSDCF5jlAJk+FeMn/opPJpjibyd1iOM0bkX QHnpXnKdzzSDzw0aGFN8QtJ93cZ52AXQrY9LNDa3XQPhfsZBlft0r5G0gaB/zco7 SeKrJ++fCzanxA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:24 2025 by rpki-client