This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json) Hash identifier: gPjL80QiJzJcyUhF59k2ApyzXCYizOjQltYErQzv4vU= Subject key identifier: C9:09:5C:C6:F5:C9:B5:6D:01:20:25:57:97:62:39:BE:2A:4E:38:91 Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0 Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0 Certificate serial: 019AF5778603E77AE8E415742E3228FE9CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:00:42 +0000 Manifest this update: Sat 06 Dec 2025 21:00:42 +0000 Manifest next update: Sun 07 Dec 2025 21:00:42 +0000 Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: BTwJlMKwo8WCrl5sS71uYtXjOChpnYcxImALrh3owpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:86:03:e7:7a:e8:e4:15:74:2e:32:28:fe:9c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0 Validity Not Before: Dec 6 21:00:42 2025 GMT Not After : Dec 7 21:00:42 2025 GMT Subject: CN=c9095cc6f5c9b56d01202557976239be2a4e3891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:71:e3:11:68:e6:1f:14:3b:a4:fd:f3:d9: c4:aa:bc:60:fa:a6:66:b6:de:87:a6:a1:cf:13:40: 50:85:5a:4c:9d:04:20:6b:fd:af:29:17:66:d0:ab: 3d:f4:6a:6d:b1:bb:8f:51:a4:39:3e:31:35:f5:91: b4:bb:9c:5a:2e:06:d0:7a:68:2c:6e:fa:ab:27:dd: c5:11:4a:95:f4:d3:f5:c2:3c:e0:ad:d5:49:b4:16: b4:94:c0:5f:b6:4c:4c:8b:10:00:6b:22:28:fe:1d: 52:b3:97:a8:c7:41:a8:d8:64:c0:8a:ba:a6:1c:f7: 62:d5:22:6f:af:91:1d:8c:18:3e:c9:af:ee:b6:d3: 0f:ef:89:8c:52:e3:e5:ac:c3:21:7f:dc:39:17:9f: a9:0d:91:7f:00:f9:5b:3c:a3:1b:fe:3c:db:f6:5b: 62:e6:36:a9:92:d7:a2:bc:90:2f:6c:81:eb:7d:64: ff:76:9a:10:f3:fd:e7:4e:f4:be:85:c7:35:94:5f: 68:4d:7a:7f:54:41:14:51:e9:f7:de:a5:3a:46:78: 4c:8c:d9:8b:6a:57:41:fb:70:db:ae:b3:0d:d0:5e: 1a:f3:3b:d2:bd:94:79:fb:14:11:0d:72:36:43:5b: ac:5d:de:29:3d:27:9a:0f:8a:03:18:bd:95:05:e2: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:09:5C:C6:F5:C9:B5:6D:01:20:25:57:97:62:39:BE:2A:4E:38:91 X509v3 Authority Key Identifier: keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:81:49:d1:a6:9b:3d:65:fa:c5:7b:ed:5d:aa:ac:cf:b9:b5: 26:06:e9:de:bf:5d:17:5f:31:b8:77:2e:a6:24:41:59:8a:a2: 9a:cf:83:06:d0:9b:52:0d:04:3e:49:f1:e3:5b:57:f1:99:77: e8:31:a0:38:d1:fd:51:30:26:55:e4:86:74:d5:7d:bc:e2:f4: 3b:c8:78:a4:20:cb:2d:b6:09:af:dc:8f:85:cf:f4:23:54:b8: 9e:0d:9e:01:bc:77:d7:3a:f7:aa:80:09:31:7a:c4:a9:cf:98: c1:46:83:8a:57:c8:1e:f6:ec:28:96:43:03:9c:de:26:f7:ed: 57:ae:86:c4:ef:29:c7:09:13:1c:37:13:c3:f7:36:ae:55:ac: f9:29:2a:bc:05:56:cb:cc:86:43:07:f0:ab:5b:5c:dd:52:c6: 68:da:e2:ea:ec:c1:e6:c9:bd:53:e8:e5:6b:1f:54:b3:4b:e0: d5:b1:29:c1:93:ef:69:5e:e5:46:0c:08:bd:86:31:5b:74:50: b5:30:37:db:f9:3d:96:41:bb:ff:cd:d1:7c:75:c2:d8:4b:e0: 04:42:37:cc:aa:26:1b:83:d2:eb:2c:4b:91:71:97:5c:64:e7: 4a:f6:63:c1:5a:ce:3d:2f:3e:ee:eb:a1:b3:bf:a9:1e:f2:c4: 42:f9:a5:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4YD53ro5BV0LjIo/pzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjY0OWZmNmM3Yjk3NThmNDIwYjFlZGNlMDdhNGVkMzcz ODM3YzAwHhcNMjUxMjA2MjEwMDQyWhcNMjUxMjA3MjEwMDQyWjAzMTEwLwYDVQQD EyhjOTA5NWNjNmY1YzliNTZkMDEyMDI1NTc5NzYyMzliZTJhNGUzODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGdx4xFo5h8UO6T989nEqrxg+qZm tt6HpqHPE0BQhVpMnQQga/2vKRdm0Ks99GptsbuPUaQ5PjE19ZG0u5xaLgbQemgs bvqrJ93FEUqV9NP1wjzgrdVJtBa0lMBftkxMixAAayIo/h1Ss5eox0Go2GTAirqm HPdi1SJvr5EdjBg+ya/uttMP74mMUuPlrMMhf9w5F5+pDZF/APlbPKMb/jzb9lti 5japkteivJAvbIHrfWT/dpoQ8/3nTvS+hcc1lF9oTXp/VEEUUen33qU6RnhMjNmL aldB+3DbrrMN0F4a8zvSvZR5+xQRDXI2Q1usXd4pPSeaD4oDGL2VBeKS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkJXMb1ybVtASAlV5diOb4qTjiRMB8GA1UdIwQY MBaAFGf2Sf9se5dY9CCx7c4HpO03ODfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9aSl8yeDdsMWowSUxIdHpnZWs3VGM0TjhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ZDBjMjEtNjllZi00MGJmLTg2MTEt MGYyYzM5NjdkYTljLzEvWl9aSl8yeDdsMWowSUxIdHpnZWs3VGM0TjhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ZDBjMjEtNjllZi00MGJmLTg2MTEtMGYyYzM5NjdkYTlj LzEvWl9aSl8yeDdsMWowSUxIdHpnZWs3VGM0TjhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIFJ0aab PWX6xXvtXaqsz7m1Jgbp3r9dF18xuHcupiRBWYqims+DBtCbUg0EPknx41tX8Zl3 6DGgONH9UTAmVeSGdNV9vOL0O8h4pCDLLbYJr9yPhc/0I1S4ng2eAbx31zr3qoAJ MXrEqc+YwUaDilfIHvbsKJZDA5zeJvftV66GxO8pxwkTHDcTw/c2rlWs+SkqvAVW y8yGQwfwq1tc3VLGaNri6uzB5sm9U+jlax9Us0vg1bEpwZPvaV7lRgwIvYYxW3RQ tTA32/k9lkG7/83RfHXC2EvgBEI3zKomG4PS6yxLkXGXXGTnSvZjwVrOPS8+7uuh s7+pHvLEQvmlNg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:41 2025 by rpki-client