This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json) Hash identifier: JzTin+ICv5gkOVFRJoyqNaG6AI5fLhMFawRBjXrRYuc= Subject key identifier: 33:EF:80:8F:96:B5:9E:A3:9E:D1:C6:D3:F9:8F:61:36:D7:32:57:1E Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb Certificate serial: 019AF12D3B4BF35054FFCAD12437E2727B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft Manifest number: 0457 Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: NzjtMqqID9O9GaDxppIPHCjYrCQe76tw/w4OO/YVKP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3b:4b:f3:50:54:ff:ca:d1:24:37:e2:72:7b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=33ef808f96b59ea39ed1c6d3f98f6136d732571e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:eb:b6:3f:6d:5b:14:cf:18:58:fd:2a:6e: b9:89:24:6c:c1:b0:50:ae:90:8c:09:c2:90:64:0f: 18:6a:ba:1a:7f:23:3b:a9:e9:75:cf:eb:61:04:a1: 66:b2:c4:59:68:87:6c:1d:13:d2:a7:ca:14:f5:70: f4:a9:4c:79:ba:46:10:f8:e0:1d:4d:db:1e:44:fd: eb:af:70:55:02:80:0e:f7:04:6a:34:16:ce:bf:19: 34:2e:45:35:b7:7b:ba:e2:fb:20:ce:be:39:9f:33: de:58:7d:fd:61:29:3c:07:b6:ae:e3:f1:65:2c:80: 00:93:c3:25:2e:5d:e9:19:4f:ee:84:73:9d:c0:31: cd:33:95:a3:76:de:7c:e1:a3:ba:d5:bb:93:69:7e: f7:8e:ee:92:41:bc:d3:3b:5c:e1:0c:25:f9:27:34: aa:3f:cd:c2:6e:e0:0b:4c:82:5c:26:cd:94:9d:ce: 68:c2:78:ee:af:27:7b:67:58:65:e6:71:e7:fb:91: fd:ed:05:67:ed:bd:35:61:9e:23:b4:33:e0:fa:a7: cd:99:02:3e:31:d8:bd:85:04:f0:99:79:91:76:75: 0b:d1:58:af:f6:03:ba:24:2c:1c:89:5d:e4:3d:ca: 6c:f7:14:1d:35:89:81:54:35:89:6a:5d:03:1a:b8: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EF:80:8F:96:B5:9E:A3:9E:D1:C6:D3:F9:8F:61:36:D7:32:57:1E X509v3 Authority Key Identifier: keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:66:bc:48:16:58:44:2b:0e:a6:3c:5c:f3:74:83:46:d6:a9: 1e:9f:a2:50:cf:74:25:83:86:10:cc:31:a5:82:87:c4:de:b0: b3:ec:db:cb:90:68:29:5f:61:2d:00:33:e0:44:33:93:b1:0c: 41:9f:39:5b:e2:7f:56:37:28:5b:33:b8:1b:4e:49:52:d5:95: 52:2c:9a:32:8c:ff:6b:87:b6:23:0d:b6:6d:e3:ff:da:05:2a: e8:9b:a1:1f:e6:96:78:c5:9b:dd:35:8a:d6:3e:89:c4:8c:9c: 66:e6:7d:6d:be:8d:54:35:8d:4c:fe:8a:ce:ab:a9:77:ed:8d: 72:83:79:b7:87:92:3a:8d:21:92:a2:03:50:4f:34:1b:16:b7: cb:aa:55:35:56:3e:03:9a:e3:11:d2:bd:b6:e4:e5:b5:aa:50: a8:c5:87:b9:f2:90:51:45:96:c3:d6:fd:64:e3:76:cf:cd:80: 10:61:a9:92:96:12:e5:4f:02:49:4f:d9:56:80:92:c8:9f:6b: 28:c2:ed:e4:10:6b:f3:33:ce:12:84:99:ac:4d:fa:2d:da:89: 4e:e3:56:26:2e:93:3a:59:46:34:8d:e6:28:8c:26:45:b0:42: 40:b3:d1:09:f3:d7:0d:d9:4c:15:be:96:16:9f:2b:ba:87:b4: 6d:f9:01:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTtL81BU/8rRJDficnsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGQ5YmEyZTM5Njg0MjNiZWZjNWVlZDA1NzE5YjMwMDA1 N2Q3Y2IwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD EygzM2VmODA4Zjk2YjU5ZWEzOWVkMWM2ZDNmOThmNjEzNmQ3MzI1NzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKzrtj9tWxTPGFj9Km65iSRswbBQ rpCMCcKQZA8YaroafyM7qel1z+thBKFmssRZaIdsHRPSp8oU9XD0qUx5ukYQ+OAd TdseRP3rr3BVAoAO9wRqNBbOvxk0LkU1t3u64vsgzr45nzPeWH39YSk8B7au4/Fl LIAAk8MlLl3pGU/uhHOdwDHNM5Wjdt584aO61buTaX73ju6SQbzTO1zhDCX5JzSq P83CbuALTIJcJs2Unc5ownjuryd7Z1hl5nHn+5H97QVn7b01YZ4jtDPg+qfNmQI+ Mdi9hQTwmXmRdnUL0Viv9gO6JCwciV3kPcps9xQdNYmBVDWJal0DGrjORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPvgI+WtZ6jntHG0/mPYTbXMlceMB8GA1UdIwQY MBaAFGeNm6LjloQjvvxe7QVxmzAAV9fLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kMTViN2YtNzA4Zi00MTU1LThkMzEt YzgwYTcyM2QzNGY3LzEvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kMTViN2YtNzA4Zi00MTU1LThkMzEtYzgwYTcyM2QzNGY3 LzEvWjQyYm91T1doQ08tX0Y3dEJYR2JNQUJYMThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABma8SBZY RCsOpjxc83SDRtapHp+iUM90JYOGEMwxpYKHxN6ws+zby5BoKV9hLQAz4EQzk7EM QZ85W+J/VjcoWzO4G05JUtWVUiyaMoz/a4e2Iw22beP/2gUq6JuhH+aWeMWb3TWK 1j6JxIycZuZ9bb6NVDWNTP6Kzqupd+2NcoN5t4eSOo0hkqIDUE80Gxa3y6pVNVY+ A5rjEdK9tuTltapQqMWHufKQUUWWw9b9ZON2z82AEGGpkpYS5U8CSU/ZVoCSyJ9r KMLt5BBr8zPOEoSZrE36LdqJTuNWJi6TOllGNI3mKIwmRbBCQLPRCfPXDdlMFb6W Fp8ruoe0bfkB4A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:37 2025 by rpki-client