This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json) Hash identifier: w21TzpxxZIXzU+xBTMX4GTotaxD857xv6ZKeQqtkJ/g= Subject key identifier: 91:14:CB:0E:6D:5E:49:D0:A3:AF:9F:4C:7A:22:05:A9:06:2A:91:1D Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d Certificate serial: 019B27E4E012C209F5C5EB1C80BDD3E121B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft Manifest number: 12BF Signing time: Tue 16 Dec 2025 16:01:09 +0000 Manifest this update: Tue 16 Dec 2025 16:01:09 +0000 Manifest next update: Wed 17 Dec 2025 16:01:09 +0000 Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: 1EqE61qB1TIdbIGr/q2XK3sDK50ImYn5sMcXX0+LXh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:e0:12:c2:09:f5:c5:eb:1c:80:bd:d3:e1:21:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d Validity Not Before: Dec 16 16:01:09 2025 GMT Not After : Dec 17 16:01:09 2025 GMT Subject: CN=9114cb0e6d5e49d0a3af9f4c7a2205a9062a911d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:c1:4c:ff:df:4e:ec:22:f9:13:96:64:02: 44:2f:a2:21:9f:ca:5d:81:5c:fb:93:9e:e6:be:dc: 59:c2:b8:53:0b:33:2f:2f:d1:a4:cd:f8:8e:71:68: 80:5c:e3:a5:b2:4c:3d:2e:bb:57:76:7d:36:8b:b9: ea:30:9d:db:70:f1:0e:22:23:ab:b2:d9:d2:1f:d1: eb:ca:ab:55:fc:37:91:fa:e0:71:8f:06:d2:07:23: 2c:a9:d0:02:ea:45:2c:07:5f:21:5f:c8:ca:2b:0c: 65:62:cd:ad:37:c0:a8:10:a6:86:ff:4b:70:65:ea: 05:3c:2a:40:94:6d:bb:0c:9c:08:bf:27:04:a5:b7: b6:90:9c:5c:3b:b2:60:dd:cd:c4:27:d0:a7:e8:24: bd:a0:60:e4:af:d4:81:a3:00:a1:db:f9:98:46:0d: ac:31:b5:c6:60:5c:9c:c9:1d:f5:0c:36:9f:f5:1b: 15:8c:e4:7e:32:da:55:75:2d:4b:e7:ae:72:a2:75: 1f:ee:2c:74:b1:bb:65:26:8f:81:b4:3a:48:d3:bc: b5:38:dd:f2:d8:a4:a2:04:62:b8:53:9b:25:44:45: 3a:42:1a:a8:1e:7d:d1:63:73:ef:25:76:42:69:e4: 93:67:05:5f:f1:1b:a5:08:4c:8f:ca:37:31:0c:6a: 3b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:14:CB:0E:6D:5E:49:D0:A3:AF:9F:4C:7A:22:05:A9:06:2A:91:1D X509v3 Authority Key Identifier: keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1f:9d:a2:3d:19:a1:74:a8:6b:6e:22:ab:3f:9a:72:06:6c: f6:55:25:3c:7b:7a:7f:44:b6:68:d6:78:a7:43:9c:e0:1e:8f: 7b:45:72:7e:97:57:cb:a4:dc:75:7f:b9:a0:c7:af:2a:27:50: bf:7e:28:cf:5d:ba:ee:c6:79:d6:a3:12:9d:ed:e9:fa:f7:fb: 7f:0d:2a:8b:26:2b:87:bc:d7:e4:2a:df:4d:9f:ce:14:d0:f4: fb:94:a3:d8:f8:c0:14:76:b4:26:ee:90:bb:45:ce:03:aa:5b: 37:6d:e1:4d:6f:85:2a:f6:7c:65:f9:a6:57:f8:a5:fb:c0:56: 95:71:e1:e4:d9:38:10:42:38:29:c7:b2:1a:19:b1:6c:34:0d: b8:d1:26:05:78:07:d0:17:f8:4d:26:98:e7:aa:34:6f:65:77: 01:fe:ff:79:a5:c8:c5:93:b6:d3:ad:9d:60:e2:f0:f7:d7:0e: f5:21:1d:9f:6c:d9:db:fa:da:7d:04:cc:55:40:8d:82:60:ea: a6:b0:a2:d4:fd:ac:97:e9:39:2b:8f:6b:a7:50:fc:ef:60:6f: 18:ca:fe:11:71:cc:0e:49:4d:dd:e5:4b:5e:0f:02:7f:5e:3b: 77:e4:c9:9d:ed:5b:be:87:d6:76:07:08:74:07:89:69:cb:d7: 1f:fc:f2:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5OASwgn1xescgL3T4SG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzBjOWI5NDA1NzQ4ZDI2NTQ4ZmQ1ZmNhN2E2NGEwMzhk NTgxMmQwHhcNMjUxMjE2MTYwMTA5WhcNMjUxMjE3MTYwMTA5WjAzMTEwLwYDVQQD Eyg5MTE0Y2IwZTZkNWU0OWQwYTNhZjlmNGM3YTIyMDVhOTA2MmE5MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+/BTP/fTuwi+ROWZAJEL6Ihn8pd gVz7k57mvtxZwrhTCzMvL9GkzfiOcWiAXOOlskw9LrtXdn02i7nqMJ3bcPEOIiOr stnSH9HryqtV/DeR+uBxjwbSByMsqdAC6kUsB18hX8jKKwxlYs2tN8CoEKaG/0tw ZeoFPCpAlG27DJwIvycEpbe2kJxcO7Jg3c3EJ9Cn6CS9oGDkr9SBowCh2/mYRg2s MbXGYFycyR31DDaf9RsVjOR+MtpVdS1L565yonUf7ix0sbtlJo+BtDpI07y1ON3y 2KSiBGK4U5slREU6QhqoHn3RY3PvJXZCaeSTZwVf8RulCEyPyjcxDGo7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEUyw5tXknQo6+fTHoiBakGKpEdMB8GA1UdIwQY MBaAFGdwyblAV0jSZUj9X8p6ZKA41YEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUt MTQ4ODc4NzZhYTBlLzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUtMTQ4ODc4NzZhYTBl LzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB+doj0Z oXSoa24iqz+acgZs9lUlPHt6f0S2aNZ4p0Oc4B6Pe0VyfpdXy6TcdX+5oMevKidQ v34oz1267sZ51qMSne3p+vf7fw0qiyYrh7zX5CrfTZ/OFND0+5Sj2PjAFHa0Ju6Q u0XOA6pbN23hTW+FKvZ8ZfmmV/il+8BWlXHh5Nk4EEI4KceyGhmxbDQNuNEmBXgH 0Bf4TSaY56o0b2V3Af7/eaXIxZO2062dYOLw99cO9SEdn2zZ2/rafQTMVUCNgmDq prCi1P2sl+k5K49rp1D872BvGMr+EXHMDklN3eVLXg8Cf147d+TJne1bvofWdgcI dAeJacvXH/zyHA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:10:45 2025 by rpki-client