This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json) Hash identifier: z4BcwgcUGDc5vL6kH5tUZxlx7otfRgAEbhCeNIGnOV4= Subject key identifier: C9:AF:D4:AD:05:80:28:61:68:E2:42:1B:49:F4:71:9D:6E:EE:5F:B8 Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Certificate serial: 019AF19ABE0BDD90C3640D3B558FD1B82DF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft Manifest number: 0F10 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: xXvZTXT36cwbOSRb0DRwIPm/D86H3WEfTVdo6Q7Cu6Y=) 2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:be:0b:dd:90:c3:64:0d:3b:55:8f:d1:b8:2d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=c9afd4ad0580286168e2421b49f4719d6eee5fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:4d:c5:92:e0:79:55:1c:3c:0f:b3:1f:ff: 66:7c:05:70:c8:63:c3:da:99:aa:61:04:97:a5:d1: db:2e:92:af:9f:c1:cc:98:53:a8:21:1f:89:1a:bf: 96:0a:9a:de:9c:ea:bd:2d:74:bb:91:18:64:63:a3: 4c:35:e8:85:69:53:76:e2:09:eb:14:91:7c:2c:12: 1b:c1:61:37:64:52:56:4f:8c:ac:1f:04:20:b5:87: 47:8a:39:b1:d7:7f:a9:ff:70:5d:b5:70:aa:b3:41: 7c:9b:97:b3:c0:52:ae:e9:ae:d3:3b:aa:4f:11:34: ba:24:36:32:e2:f6:24:d9:a0:c4:d6:9d:cb:3c:53: 3f:10:68:68:26:29:7c:cf:0d:f1:a8:f6:0f:b7:bc: c9:9e:00:26:ec:1a:f0:42:55:1a:f9:7b:ad:a9:ab: a8:49:4d:20:90:b6:59:3e:1e:3f:cf:b5:a5:46:ce: 4e:c8:b6:f1:45:24:f0:8c:1d:4f:3c:23:76:76:b8: 6e:0c:6e:d2:76:7d:da:17:91:e3:ec:a6:dd:e6:c0: cf:f0:1f:20:e4:26:73:2d:97:70:3f:66:98:a6:d4: 72:e8:fa:90:8d:91:96:d1:5f:12:9a:20:dd:ca:48: 56:1c:c4:c0:de:ea:5d:99:08:63:4c:6c:29:96:f7: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AF:D4:AD:05:80:28:61:68:E2:42:1B:49:F4:71:9D:6E:EE:5F:B8 X509v3 Authority Key Identifier: keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:77:78:b0:e8:b1:b5:55:48:1f:17:49:81:cb:38:19:99:6d: ff:b4:31:2f:4a:83:f8:31:f4:f9:a0:7e:4b:dd:e0:df:d6:d4: fc:3f:43:cf:8b:87:93:7a:99:bf:77:5f:9b:c8:c9:58:67:78: 1f:07:a8:f1:4b:48:99:88:67:e1:d7:4a:e5:ff:b8:de:f9:19: a3:1d:ea:f2:da:48:10:94:95:a5:6e:a4:3e:95:b5:97:22:ba: 4d:c7:10:03:94:b2:1a:a6:59:96:a0:70:14:79:eb:3a:f8:0d: 41:cc:b8:0c:a8:fe:bb:fd:6d:8b:de:bf:81:ae:3d:18:e1:38: 0b:85:de:bc:4e:6c:b8:3d:b5:bb:84:98:2a:4a:02:da:61:27: 09:eb:53:dc:7e:44:25:41:3b:f2:42:30:83:1c:2d:09:28:5b: 38:b8:d0:e2:e1:b5:a2:e1:25:a2:c9:ef:2b:89:ce:30:69:d9: c2:7a:ec:1f:6d:2d:ca:bb:e0:f4:92:2e:c2:70:be:ad:4e:83: bb:b6:90:cd:c4:66:d3:ef:01:e3:d0:70:e5:60:65:49:91:54: 3b:7d:18:8c:26:e3:8d:e0:d3:c1:46:40:47:28:5b:f0:81:27: f7:1d:56:36:df:82:4a:5d:77:7d:a6:5d:03:64:a1:e0:23:f4: 74:91:1e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr4L3ZDDZA07VY/RuC32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk OGY2MDAwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD EyhjOWFmZDRhZDA1ODAyODYxNjhlMjQyMWI0OWY0NzE5ZDZlZWU1ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSFNxZLgeVUcPA+zH/9mfAVwyGPD 2pmqYQSXpdHbLpKvn8HMmFOoIR+JGr+WCprenOq9LXS7kRhkY6NMNeiFaVN24gnr FJF8LBIbwWE3ZFJWT4ysHwQgtYdHijmx13+p/3BdtXCqs0F8m5ezwFKu6a7TO6pP ETS6JDYy4vYk2aDE1p3LPFM/EGhoJil8zw3xqPYPt7zJngAm7BrwQlUa+Xutqauo SU0gkLZZPh4/z7WlRs5OyLbxRSTwjB1PPCN2drhuDG7Sdn3aF5Hj7Kbd5sDP8B8g 5CZzLZdwP2aYptRy6PqQjZGW0V8SmiDdykhWHMTA3updmQhjTGwplve4OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmv1K0FgChhaOJCG0n0cZ1u7l+4MB8GA1UdIwQY MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct YWE5MWM5MmQ1YzQ4LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4 LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3d4sOix tVVIHxdJgcs4GZlt/7QxL0qD+DH0+aB+S93g39bU/D9Dz4uHk3qZv3dfm8jJWGd4 Hweo8UtImYhn4ddK5f+43vkZox3q8tpIEJSVpW6kPpW1lyK6TccQA5SyGqZZlqBw FHnrOvgNQcy4DKj+u/1ti96/ga49GOE4C4XevE5suD21u4SYKkoC2mEnCetT3H5E JUE78kIwgxwtCShbOLjQ4uG1ouElosnvK4nOMGnZwnrsH20tyrvg9JIuwnC+rU6D u7aQzcRm0+8B49Bw5WBlSZFUO30YjCbjjeDTwUZARyhb8IEn9x1WNt+CSl13faZd A2Sh4CP0dJEeHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:30 2025 by rpki-client