This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json) Hash identifier: mGVA6L07h2mB8k/IAvwhJtP238Xs4EFp4PoHTZD4s6g= Subject key identifier: CC:D0:D2:23:8C:F8:38:04:90:77:CD:C3:E7:3D:F3:30:91:13:C6:38 Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43 Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843 Certificate serial: 019AF31D1621E25E3DA6D9A36B58A86D8353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft Manifest number: 0357 Signing time: Sat 06 Dec 2025 10:02:40 +0000 Manifest this update: Sat 06 Dec 2025 10:02:40 +0000 Manifest next update: Sun 07 Dec 2025 10:02:40 +0000 Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=) 2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: iNbTa8q0Edl1LgEylY8Ob7+XoKFsbRaZVsaeATB17Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:16:21:e2:5e:3d:a6:d9:a3:6b:58:a8:6d:83:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843 Validity Not Before: Dec 6 10:02:40 2025 GMT Not After : Dec 7 10:02:40 2025 GMT Subject: CN=ccd0d2238cf838049077cdc3e73df3309113c638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:8f:f3:90:d4:4e:10:93:ae:11:e8:26:26: cc:4c:2a:1a:f9:07:b3:57:0d:38:53:31:9d:da:8d: e1:19:47:af:7b:d4:92:e5:db:6f:48:14:3b:bd:2b: 74:93:6f:59:65:10:6b:43:05:b5:3e:7c:4c:8e:11: 57:05:5b:02:cc:d3:16:d3:5f:36:b7:b6:52:f9:62: 5c:80:f1:54:c2:18:9a:f2:12:4f:87:3f:b4:28:56: 7b:f0:9c:19:db:44:af:16:11:b7:98:d8:c0:59:bc: 3d:92:3a:01:d5:0e:66:be:69:07:b3:b8:a2:87:e7: b8:8e:85:6e:b6:ee:95:e8:d3:0d:ea:e9:f7:71:b8: 3d:b6:f6:0a:62:25:44:b4:26:79:12:ab:32:bf:ca: 93:dc:13:15:e5:07:ac:05:b8:91:db:a2:bc:28:3a: cd:6b:46:19:9c:9a:20:c9:84:ec:ac:eb:6a:4b:cb: e7:fe:32:52:52:ba:6e:03:d1:2b:c9:d6:dc:9b:0a: d8:3d:57:1c:bd:f1:fc:64:dd:25:5d:b6:83:c7:6c: e4:14:46:34:5e:c4:f8:cb:13:a8:66:68:7b:50:c1: 93:84:b5:9e:3a:c1:a5:f2:e9:64:9e:6f:7e:2e:0e: f6:df:36:d4:76:df:4d:ed:ae:0e:77:c7:4a:74:3d: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:D2:23:8C:F8:38:04:90:77:CD:C3:E7:3D:F3:30:91:13:C6:38 X509v3 Authority Key Identifier: keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8e:94:02:b0:b0:45:2b:5f:fe:cc:25:9d:be:55:e7:9b:85: 59:b0:6c:cc:a8:00:51:4e:1b:13:ef:35:2a:a3:73:b9:05:ee: f1:c2:bc:cf:fc:de:9a:ab:46:cc:32:ba:ae:df:39:c1:02:b3: 52:e2:48:53:94:d2:27:c1:a3:74:d9:39:2e:bc:a8:19:c9:03: 56:7b:48:3a:ae:91:b2:8f:dc:46:63:19:74:5d:8e:1b:ea:ae: 75:9f:82:fd:e8:fd:38:a0:89:9a:41:98:77:4d:7a:33:58:78: b8:88:f4:4c:43:c2:51:cc:49:cf:53:9d:3a:6c:f1:46:eb:51: b1:a9:5c:5c:4f:6b:56:74:dd:53:63:e7:d1:ce:a9:df:0a:91: c4:dc:74:f5:20:05:5c:9e:be:0f:3e:bb:35:ff:2e:05:e6:c5: 27:a9:b0:e3:9d:9d:90:7e:18:77:e8:77:c0:e5:dd:51:aa:dc: 77:d7:b5:e5:eb:53:60:48:6a:cc:45:30:98:b9:d1:09:da:07: 0f:12:57:a8:70:4b:dc:6f:97:75:3c:44:c1:cd:ee:50:da:0e: ea:a7:ef:a9:c6:99:a8:ea:32:35:67:d6:c9:7f:c5:e6:0a:17: 26:1f:34:23:56:06:39:03:04:13:1b:ee:ed:f7:fb:29:b3:a5: 43:ce:22:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRYh4l49ptmja1iobYNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj NDE4NDMwHhcNMjUxMjA2MTAwMjQwWhcNMjUxMjA3MTAwMjQwWjAzMTEwLwYDVQQD EyhjY2QwZDIyMzhjZjgzODA0OTA3N2NkYzNlNzNkZjMzMDkxMTNjNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj6P85DUThCTrhHoJibMTCoa+Qez Vw04UzGd2o3hGUeve9SS5dtvSBQ7vSt0k29ZZRBrQwW1PnxMjhFXBVsCzNMW0182 t7ZS+WJcgPFUwhia8hJPhz+0KFZ78JwZ20SvFhG3mNjAWbw9kjoB1Q5mvmkHs7ii h+e4joVutu6V6NMN6un3cbg9tvYKYiVEtCZ5Eqsyv8qT3BMV5QesBbiR26K8KDrN a0YZnJogyYTsrOtqS8vn/jJSUrpuA9ErydbcmwrYPVccvfH8ZN0lXbaDx2zkFEY0 XsT4yxOoZmh7UMGThLWeOsGl8ulknm9+Lg723zbUdt9N7a4Od8dKdD3MpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzQ0iOM+DgEkHfNw+c98zCRE8Y4MB8GA1UdIwQY MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ46UArCw RStf/swlnb5V55uFWbBszKgAUU4bE+81KqNzuQXu8cK8z/zemqtGzDK6rt85wQKz UuJIU5TSJ8GjdNk5LryoGckDVntIOq6Rso/cRmMZdF2OG+qudZ+C/ej9OKCJmkGY d016M1h4uIj0TEPCUcxJz1OdOmzxRutRsalcXE9rVnTdU2Pn0c6p3wqRxNx09SAF XJ6+Dz67Nf8uBebFJ6mw452dkH4Yd+h3wOXdUarcd9e15etTYEhqzEUwmLnRCdoH DxJXqHBL3G+XdTxEwc3uUNoO6qfvqcaZqOoyNWfWyX/F5goXJh80I1YGOQMEExvu 7ff7KbOlQ84iNA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:47 2025 by rpki-client