This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json) Hash identifier: U7l8fv9J2tjPHbBV6F8Mpy4JTrb8KfbDbnZ8Flu6UDs= Subject key identifier: CD:EE:7C:C9:51:1F:7C:7C:CB:AD:AF:17:21:93:F5:F1:93:21:08:25 Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Certificate serial: 019AF2ADACD0203E855B803E2F1B380D23D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: zqjxXXZRstKja3gpCzJlpXkLeVP5y3E2XJjbX3LInmk=) 2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ac:d0:20:3e:85:5b:80:3e:2f:1b:38:0d:23:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=cdee7cc9511f7c7ccbadaf172193f5f193210825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:21:82:11:67:c1:01:ae:92:48:22:cc:4b: f1:a4:55:da:01:b3:19:12:83:e4:f1:45:fd:63:bd: ba:63:6f:bd:ca:cb:ca:16:0f:a4:ff:5a:71:06:35: 98:d6:28:a0:be:dd:f1:ab:7a:e0:3f:21:be:95:44: b6:96:6c:bb:f5:4d:82:b2:eb:fc:4f:ae:04:e9:a2: 6b:f0:13:e0:81:50:9c:b4:6e:2a:02:b2:5d:88:9f: 0c:87:71:c8:69:b0:d5:99:91:a4:9f:f5:b0:80:72: c4:c5:fe:d6:6f:39:45:72:28:5e:69:72:ee:aa:5b: 36:69:8b:b5:0d:b4:cc:ef:02:18:5f:26:d4:75:0b: bd:7c:a4:60:cf:d8:0a:87:8e:7c:5e:80:bd:78:fc: 9a:e5:bd:0d:2d:68:8a:6f:82:ac:cf:77:d4:61:fb: 95:df:05:77:ad:09:e4:c7:84:d3:df:11:37:9c:cd: 52:8b:1c:fb:9c:84:fa:b3:c8:98:5a:80:30:11:c8: 09:96:28:b0:a7:c6:48:23:9a:ab:a0:30:f5:cd:e5: 17:f2:44:57:c6:df:65:0d:0e:b9:2e:99:aa:38:ec: c2:60:53:c3:e0:45:46:a9:9a:a1:6b:9b:08:52:29: 77:fa:5a:e2:2c:18:1e:57:db:5e:b1:b1:d6:19:71: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:7C:C9:51:1F:7C:7C:CB:AD:AF:17:21:93:F5:F1:93:21:08:25 X509v3 Authority Key Identifier: keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:60:48:a5:38:6f:22:58:f8:0d:ba:86:94:8e:dc:a5:0c:e5: 9e:62:b9:68:ce:5b:0f:5a:28:41:39:cb:bf:26:0e:2e:17:ed: 17:33:43:e5:51:e7:bf:78:09:fa:5f:1f:5e:d7:cc:8e:dc:aa: 36:e1:c2:22:21:6d:8b:12:02:37:2d:06:7a:3f:a6:c2:38:79: 1d:27:56:48:c2:f4:27:ff:e7:27:26:0e:73:5b:1d:ef:1e:cd: 98:f6:71:af:be:d9:b8:cd:a8:e2:07:c0:fc:d3:2b:66:a8:ba: a0:63:bd:75:af:8f:f4:2c:bf:56:c3:1e:bf:da:b9:cb:52:7f: 8b:c1:76:77:09:86:09:7c:ac:39:09:5e:61:49:14:a3:a7:c6: b3:56:41:1e:0b:fd:0e:91:34:ef:f0:c9:6f:1d:e4:43:ce:80: 56:ba:8a:6c:bc:c7:ad:74:4f:69:d9:ab:93:85:0c:cb:fe:0b: d3:c5:0b:85:31:2e:9f:09:43:04:8a:e5:5c:7c:c5:0e:0f:c1: 89:35:aa:e9:9b:af:05:e0:d8:f6:9e:53:d1:ef:5a:6b:20:5c: d4:46:cf:d8:43:83:d7:c8:ee:ef:2a:dd:77:ef:b2:d9:67:8a: 8c:59:6f:45:40:b6:bc:8b:f7:86:41:a7:08:ff:bc:30:70:12: 53:3a:fa:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrazQID6FW4A+Lxs4DSPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh NjcwNGQwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EyhjZGVlN2NjOTUxMWY3YzdjY2JhZGFmMTcyMTkzZjVmMTkzMjEwODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsochghFnwQGukkgizEvxpFXaAbMZ EoPk8UX9Y726Y2+9ysvKFg+k/1pxBjWY1iigvt3xq3rgPyG+lUS2lmy79U2Csuv8 T64E6aJr8BPggVCctG4qArJdiJ8Mh3HIabDVmZGkn/WwgHLExf7WbzlFciheaXLu qls2aYu1DbTM7wIYXybUdQu9fKRgz9gKh458XoC9ePya5b0NLWiKb4Ksz3fUYfuV 3wV3rQnkx4TT3xE3nM1Sixz7nIT6s8iYWoAwEcgJliiwp8ZII5qroDD1zeUX8kRX xt9lDQ65LpmqOOzCYFPD4EVGqZqha5sIUil3+lriLBgeV9tesbHWGXGsjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3ufMlRH3x8y62vFyGT9fGTIQglMB8GA1UdIwQY MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt NjY2M2ZhYmExZGQwLzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmBIpThv Ilj4DbqGlI7cpQzlnmK5aM5bD1ooQTnLvyYOLhftFzND5VHnv3gJ+l8fXtfMjtyq NuHCIiFtixICNy0Gej+mwjh5HSdWSML0J//nJyYOc1sd7x7NmPZxr77ZuM2o4gfA /NMrZqi6oGO9da+P9Cy/VsMev9q5y1J/i8F2dwmGCXysOQleYUkUo6fGs1ZBHgv9 DpE07/DJbx3kQ86AVrqKbLzHrXRPadmrk4UMy/4L08ULhTEunwlDBIrlXHzFDg/B iTWq6ZuvBeDY9p5T0e9aayBc1EbP2EOD18ju7yrdd++y2WeKjFlvRUC2vIv3hkGn CP+8MHASUzr6CQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:35 2025 by rpki-client