This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json) Hash identifier: N+vfSr/vvjUaiHZmXAdLa3AK11cw9CeFzratlTsbTMg= Subject key identifier: 67:F4:DE:AF:0E:8A:E2:E8:53:FF:84:65:47:D0:FD:D3:A6:78:D3:A6 Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d Certificate serial: 019AF1D253730B42159EE0F9B208069B0346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft Manifest number: 12A3 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: vmro+H1rigyerE/7uriqczn+OfHwVQB7tZAdK/CEBZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:53:73:0b:42:15:9e:e0:f9:b2:08:06:9b:03:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=67f4deaf0e8ae2e853ff846547d0fdd3a678d3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:0b:92:26:7a:a3:75:4c:08:5b:d2:46:43: 0d:9d:6d:fc:75:1e:01:90:74:b3:a0:a1:7f:4e:ea: 60:db:a0:f9:84:c5:18:cb:09:0c:a2:58:f4:a9:e3: cf:c0:1b:28:d5:56:20:61:48:e2:4f:5e:ed:e6:8f: 54:ad:75:51:43:da:82:04:8c:9e:fa:d0:49:4a:c4: c1:59:7c:b7:54:37:b0:fe:2e:e0:f3:aa:20:b9:78: a5:ee:84:b0:f9:11:2e:60:60:0f:d9:f4:3f:98:ff: 2c:ca:d9:f5:3c:99:9d:a1:67:e2:00:d6:44:d8:32: ed:f6:84:fc:54:ca:25:f0:4d:2d:a7:cb:09:5e:5d: da:ef:19:cb:9b:04:c7:2e:f0:1d:9e:14:73:f3:d0: 7f:cb:c6:cf:5d:e8:22:5e:b6:3a:13:2e:48:7e:c6: d6:cb:a1:27:8c:e2:cd:b6:66:84:a8:1f:87:71:20: 5e:18:03:b7:cf:b5:7b:49:f7:be:9a:6f:e2:5a:a9: 70:c1:60:d4:f4:9a:57:84:82:a8:43:ff:4a:f1:d8: 53:73:49:b3:60:3e:39:f2:bd:ed:ab:43:15:39:99: f6:83:25:1b:f8:68:6c:42:0e:40:88:94:38:31:7f: 6c:da:31:4e:a8:d4:37:9d:14:42:9f:a9:83:95:0b: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F4:DE:AF:0E:8A:E2:E8:53:FF:84:65:47:D0:FD:D3:A6:78:D3:A6 X509v3 Authority Key Identifier: keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:93:f9:89:24:2a:65:13:a8:80:43:7b:fa:64:5b:3d:be: 7c:89:50:5c:2f:51:42:82:16:40:2b:f8:12:40:06:8f:7d:56: 08:4e:20:97:e4:15:94:0e:1f:f6:de:d4:4b:ad:da:ba:2c:88: 2d:ac:c3:0f:8c:79:d1:4d:2a:3d:84:1f:40:cf:c7:ce:93:1a: ca:8f:0a:f2:ed:b6:c6:4a:a6:bf:21:59:46:29:3b:26:88:1a: 82:09:62:36:ac:95:d5:2c:02:ff:3a:a4:a6:3a:06:be:3c:b4: 3a:22:eb:eb:a3:14:10:be:7b:77:d8:f5:8f:6a:56:d3:be:ca: fe:0e:fe:f6:ab:4e:44:69:f3:fb:45:ee:80:dc:8e:4e:5a:26: e5:02:3e:23:9b:e3:50:8f:33:80:05:05:ff:3a:bb:d5:40:84: 6c:ff:b8:a9:ca:bf:f4:95:46:f0:8c:54:29:9c:c2:17:0b:08: 02:39:c5:e4:a6:cc:c1:92:8a:25:ab:aa:3f:53:8e:52:83:f7: 2d:c9:da:7a:57:9c:d7:98:c9:31:16:30:65:61:4c:5b:2f:e6: 3e:e4:9f:68:9d:84:c8:27:de:fd:f5:bd:f9:42:c2:88:c2:08: ba:01:cd:18:79:e6:2b:07:52:1a:b3:2a:51:91:4c:11:ce:cb: fb:73:fb:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lNzC0IVnuD5sggGmwNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzBjOWI5NDA1NzQ4ZDI2NTQ4ZmQ1ZmNhN2E2NGEwMzhk NTgxMmQwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD Eyg2N2Y0ZGVhZjBlOGFlMmU4NTNmZjg0NjU0N2QwZmRkM2E2NzhkM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulALkiZ6o3VMCFvSRkMNnW38dR4B kHSzoKF/Tupg26D5hMUYywkMolj0qePPwBso1VYgYUjiT17t5o9UrXVRQ9qCBIye +tBJSsTBWXy3VDew/i7g86oguXil7oSw+REuYGAP2fQ/mP8sytn1PJmdoWfiANZE 2DLt9oT8VMol8E0tp8sJXl3a7xnLmwTHLvAdnhRz89B/y8bPXegiXrY6Ey5IfsbW y6EnjOLNtmaEqB+HcSBeGAO3z7V7Sfe+mm/iWqlwwWDU9JpXhIKoQ/9K8dhTc0mz YD458r3tq0MVOZn2gyUb+GhsQg5AiJQ4MX9s2jFOqNQ3nRRCn6mDlQtHXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf03q8OiuLoU/+EZUfQ/dOmeNOmMB8GA1UdIwQY MBaAFGdwyblAV0jSZUj9X8p6ZKA41YEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUt MTQ4ODc4NzZhYTBlLzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUtMTQ4ODc4NzZhYTBl LzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVyT+Ykk KmUTqIBDe/pkWz2+fIlQXC9RQoIWQCv4EkAGj31WCE4gl+QVlA4f9t7US63auiyI LazDD4x50U0qPYQfQM/HzpMayo8K8u22xkqmvyFZRik7JogaggliNqyV1SwC/zqk pjoGvjy0OiLr66MUEL57d9j1j2pW077K/g7+9qtORGnz+0XugNyOTlom5QI+I5vj UI8zgAUF/zq71UCEbP+4qcq/9JVG8IxUKZzCFwsIAjnF5KbMwZKKJauqP1OOUoP3 Lcnaelec15jJMRYwZWFMWy/mPuSfaJ2EyCfe/fW9+ULCiMIIugHNGHnmKwdSGrMq UZFMEc7L+3P7kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:53 2025 by rpki-client