This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft File: Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json) Hash identifier: fROXy/9Cv0w5dBBBoxNnJe6w/l58rxUFBqPlE4lsVLw= Subject key identifier: F7:04:AC:B8:FF:0F:60:2C:34:FE:D7:58:34:98:8A:16:53:09:8B:C5 Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86 Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86 Certificate serial: 019AF31D43AE149E1B309AEDB25819306F3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:52 +0000 Manifest this update: Sat 06 Dec 2025 10:02:52 +0000 Manifest next update: Sun 07 Dec 2025 10:02:52 +0000 Files and hashes: 1: 21cAYiN5jMpqkJRdEkHSMeQVgkY.roa (hash: KwzUXQv1pIgCUyqyYd3vxndo9n20A9iWRxEC49c1pqI=) 2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: 91H6JY2glqtbrEPMKOf1uG0up209w8jrzzg7IROb/g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:43:ae:14:9e:1b:30:9a:ed:b2:58:19:30:6f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86 Validity Not Before: Dec 6 10:02:52 2025 GMT Not After : Dec 7 10:02:52 2025 GMT Subject: CN=f704acb8ff0f602c34fed75834988a1653098bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:62:97:e6:84:30:f8:7e:6f:b8:60:9c:0c: 12:83:e1:63:b7:a2:c8:65:8f:37:af:1a:b6:37:bf: 91:07:c3:85:a4:c1:3b:98:fa:64:7b:20:b9:e7:f0: b0:70:ed:8f:28:9e:5d:f1:b2:54:0d:a1:f8:1d:53: 02:dd:c4:1e:68:f4:e8:36:33:6e:1b:01:f3:38:40: 58:0f:a0:34:45:ac:a8:73:b4:9c:b2:bb:a0:d4:03: a5:bd:28:da:35:81:76:2b:28:48:4b:a0:d1:05:1b: 54:93:70:71:70:14:4a:f3:58:77:95:f6:96:33:3f: d8:1d:86:5b:ad:a9:d1:8e:5b:df:9e:bb:12:dd:13: 2e:77:3b:17:cb:04:77:8e:8b:4c:b3:7b:91:2e:10: 19:99:a5:78:b1:9c:61:b5:93:8f:95:36:dc:8d:2a: 23:25:c5:10:f7:1c:49:ce:51:7a:b9:5a:6a:8a:f1: 7f:cc:fb:36:01:59:6b:54:7c:5c:61:7f:83:94:fe: be:b5:3f:53:98:eb:0d:bb:ee:a0:23:99:40:56:66: 32:41:36:e4:24:0b:61:88:a2:08:a5:05:c0:a0:81: 37:33:b7:ad:13:c0:64:5d:54:72:e9:57:da:4c:fb: 95:20:c8:ed:f7:f0:12:b4:8f:6c:dc:da:72:2b:2a: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:04:AC:B8:FF:0F:60:2C:34:FE:D7:58:34:98:8A:16:53:09:8B:C5 X509v3 Authority Key Identifier: keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:af:44:c7:eb:73:6f:67:43:5b:0d:42:d7:39:2d:df:2e:e4: 81:50:ef:c9:a8:04:80:34:ca:69:5f:0b:11:61:67:63:be:40: b6:06:9b:5e:4f:50:99:c0:a5:d4:08:7d:24:48:ba:4b:c2:d8: b8:05:17:15:dc:2d:a2:e5:48:74:45:21:a2:cc:54:42:ad:a9: 6a:c9:cd:fc:6b:5e:b5:2b:6e:bb:f3:31:cf:f7:40:9b:39:59: 20:93:92:c4:65:fe:fb:b9:a2:f6:20:53:ca:f3:47:88:4f:ac: ae:e3:0c:29:3f:e2:f3:b0:12:4b:55:1e:78:c6:03:db:ee:10: b0:65:05:77:ab:31:9c:45:b5:37:7b:0a:18:8d:a4:45:ec:13: a1:99:c1:6f:7a:ff:d5:39:38:41:28:d2:44:c5:59:6a:e5:3e: 1d:df:a5:5c:23:08:50:df:41:2d:79:10:c9:b6:c6:88:e9:90: 5c:23:e8:ca:eb:17:57:91:fa:bc:4b:17:f6:09:c2:5f:50:d7: 57:3f:23:2e:96:82:c2:d6:b0:8a:50:f4:cf:64:92:1b:d6:0f: 0a:8f:7d:d9:98:a7:bf:2b:66:26:ed:8d:8b:28:e5:25:7c:e2: 42:96:9d:db:e7:bd:18:d6:ab:56:b5:51:f7:ca:2b:1f:d1:06: e4:a9:de:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUOuFJ4bMJrtslgZMG89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjI0NGRlMDE5MGE2ZGQ1YTg5OWEyYjM3YjAwMmI5YWU2 MzJjODYwHhcNMjUxMjA2MTAwMjUyWhcNMjUxMjA3MTAwMjUyWjAzMTEwLwYDVQQD EyhmNzA0YWNiOGZmMGY2MDJjMzRmZWQ3NTgzNDk4OGExNjUzMDk4YmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xxil+aEMPh+b7hgnAwSg+Fjt6LI ZY83rxq2N7+RB8OFpME7mPpkeyC55/CwcO2PKJ5d8bJUDaH4HVMC3cQeaPToNjNu GwHzOEBYD6A0Rayoc7Scsrug1AOlvSjaNYF2KyhIS6DRBRtUk3BxcBRK81h3lfaW Mz/YHYZbranRjlvfnrsS3RMudzsXywR3jotMs3uRLhAZmaV4sZxhtZOPlTbcjSoj JcUQ9xxJzlF6uVpqivF/zPs2AVlrVHxcYX+DlP6+tT9TmOsNu+6gI5lAVmYyQTbk JAthiKIIpQXAoIE3M7etE8BkXVRy6VfaTPuVIMjt9/AStI9s3NpyKyq9lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcErLj/D2AsNP7XWDSYihZTCYvFMB8GA1UdIwQY MBaAFGdiRN4BkKbdWomaKzewArmuYyyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYt Y2UzMmQ2NmYzMGE4LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYtY2UzMmQ2NmYzMGE4 LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq9Ex+tz b2dDWw1C1zkt3y7kgVDvyagEgDTKaV8LEWFnY75AtgabXk9QmcCl1Ah9JEi6S8LY uAUXFdwtouVIdEUhosxUQq2pasnN/GtetStuu/Mxz/dAmzlZIJOSxGX++7mi9iBT yvNHiE+sruMMKT/i87ASS1UeeMYD2+4QsGUFd6sxnEW1N3sKGI2kRewToZnBb3r/ 1Tk4QSjSRMVZauU+Hd+lXCMIUN9BLXkQybbGiOmQXCPoyusXV5H6vEsX9gnCX1DX Vz8jLpaCwtawilD0z2SSG9YPCo992ZinvytmJu2NiyjlJXziQpad2+e9GNarVrVR 98orH9EG5Kneyg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:56 2025 by rpki-client