This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json) Hash identifier: SZfxIjNQT7D+nbP9eIYqd1gNPMQuuVfcabCVMg4yr4A= Subject key identifier: AE:F5:1B:24:5F:B2:B6:F5:96:9D:D1:C3:1D:83:BE:0F:52:44:3D:C1 Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13 Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13 Certificate serial: 019B2FD583F05B98BAE4E68882E1FA2C7662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft Manifest number: 0D96 Signing time: Thu 18 Dec 2025 05:01:20 +0000 Manifest this update: Thu 18 Dec 2025 05:01:20 +0000 Manifest next update: Fri 19 Dec 2025 05:01:20 +0000 Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=) 2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: CMzitpmGhAmx/Zx+e1Ewu+sxrAgAjQYy6KRINdCipk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:83:f0:5b:98:ba:e4:e6:88:82:e1:fa:2c:76:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13 Validity Not Before: Dec 18 05:01:20 2025 GMT Not After : Dec 19 05:01:20 2025 GMT Subject: CN=aef51b245fb2b6f5969dd1c31d83be0f52443dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:5a:f5:aa:0c:1f:04:7f:e6:ad:71:95:06: b9:b1:cc:e5:d3:4d:9c:5f:85:3a:f0:35:40:a0:4d: 66:0d:73:ad:e7:9b:00:52:65:d4:ec:b4:bc:7f:a6: a6:ba:0e:56:f3:87:81:58:33:ab:35:28:a4:02:43: 98:06:fa:b5:10:b0:0a:e2:38:5e:82:fd:8d:52:e9: 78:70:93:46:b0:f5:e5:c5:81:9d:bd:38:9f:80:de: 06:a0:af:c4:85:d7:5f:8c:e3:bb:17:3a:ae:b1:ae: 5f:7d:88:c0:26:07:51:97:0f:e4:01:99:a4:c6:e1: 2c:33:c7:50:89:33:27:ee:71:31:19:97:4c:ad:a4: 28:da:26:54:d7:02:d0:64:b7:c8:59:38:20:ea:1d: 10:4b:40:ea:2c:83:af:51:ae:86:8e:24:7b:dd:25: ed:98:ca:67:ca:00:37:76:cd:90:a4:06:7a:c8:fc: 26:de:19:ff:5f:06:57:35:c0:f7:5c:e9:89:03:ff: fd:b0:a3:11:1f:ad:1b:6b:42:43:b0:68:0e:a5:c2: 1f:8c:d8:f0:24:4e:29:f4:e7:36:3a:54:56:db:b7: 1c:3b:2f:cd:c0:42:54:85:93:63:b3:eb:2c:ed:9b: 52:9d:a2:41:14:42:6b:b6:68:9a:f3:c7:64:38:b0: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:1B:24:5F:B2:B6:F5:96:9D:D1:C3:1D:83:BE:0F:52:44:3D:C1 X509v3 Authority Key Identifier: keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:01:de:3a:fe:43:fc:26:51:8d:e1:9a:e5:b4:16:e4:4c:c4: e1:74:d3:6b:c6:69:78:6f:cd:92:d2:47:48:66:fb:92:a0:3f: 7a:9d:74:ad:df:2b:fa:5d:dd:fa:74:7d:9a:66:92:4c:6d:72: 38:da:47:a0:a4:7e:df:53:e3:74:5d:86:8f:2e:f3:9a:a5:81: 3a:33:fc:bd:9c:9d:3b:17:c3:cc:e6:91:b2:29:b1:9c:4e:5f: dd:b5:77:cb:ed:45:19:9c:b8:a4:85:8f:d3:8e:10:c7:1c:4f: cc:c3:2e:5f:57:aa:90:81:d1:2a:90:46:8b:6f:15:3a:40:f5: 68:ce:10:a6:ac:59:fe:1b:b5:3f:7d:18:40:80:a4:c9:bf:8a: b2:ab:56:0b:3f:b1:b7:d6:a2:54:e1:d3:96:bf:13:51:bd:1e: 86:e7:f8:81:b3:d9:07:dd:ee:c2:29:68:a1:12:62:4e:7f:fe: 0c:b3:ad:bd:f5:74:c4:3d:6d:7e:90:77:00:d9:a9:34:72:45: b4:a7:5c:13:9e:9f:1a:96:0b:a1:5e:7f:ea:48:a6:b2:58:6c: a8:10:ad:87:e6:57:ad:06:ee:d8:b3:f0:92:c7:34:24:d8:05: 0c:a8:df:de:1d:5c:3f:ab:2b:51:35:b4:d5:64:61:80:07:44: 51:4e:83:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1YPwW5i65OaIguH6LHZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTFjZWRmZTA4MjZmMGY5Nzc1YmRmYThlOTQyNTMwMGJk ZTlmMTMwHhcNMjUxMjE4MDUwMTIwWhcNMjUxMjE5MDUwMTIwWjAzMTEwLwYDVQQD EyhhZWY1MWIyNDVmYjJiNmY1OTY5ZGQxYzMxZDgzYmUwZjUyNDQzZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sVa9aoMHwR/5q1xlQa5sczl002c X4U68DVAoE1mDXOt55sAUmXU7LS8f6amug5W84eBWDOrNSikAkOYBvq1ELAK4jhe gv2NUul4cJNGsPXlxYGdvTifgN4GoK/EhddfjOO7Fzqusa5ffYjAJgdRlw/kAZmk xuEsM8dQiTMn7nExGZdMraQo2iZU1wLQZLfIWTgg6h0QS0DqLIOvUa6GjiR73SXt mMpnygA3ds2QpAZ6yPwm3hn/XwZXNcD3XOmJA//9sKMRH60ba0JDsGgOpcIfjNjw JE4p9Oc2OlRW27ccOy/NwEJUhZNjs+ss7ZtSnaJBFEJrtmia88dkOLBGNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK71GyRfsrb1lp3Rwx2Dvg9SRD3BMB8GA1UdIwQY MBaAFGfhzt/ggm8Pl3W9+o6UJTAL3p8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEt ZWM5Yjc1NTIxMjk3LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEtZWM5Yjc1NTIxMjk3 LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwHeOv5D /CZRjeGa5bQW5EzE4XTTa8ZpeG/NktJHSGb7kqA/ep10rd8r+l3d+nR9mmaSTG1y ONpHoKR+31PjdF2Gjy7zmqWBOjP8vZydOxfDzOaRsimxnE5f3bV3y+1FGZy4pIWP 044QxxxPzMMuX1eqkIHRKpBGi28VOkD1aM4QpqxZ/hu1P30YQICkyb+KsqtWCz+x t9aiVOHTlr8TUb0ehuf4gbPZB93uwilooRJiTn/+DLOtvfV0xD1tfpB3ANmpNHJF tKdcE56fGpYLoV5/6kimslhsqBCth+ZXrQbu2LPwksc0JNgFDKjf3h1cP6srUTW0 1WRhgAdEUU6Dpg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:24:41 2025 by rpki-client