This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json) Hash identifier: 158bIvYAqOWBu6UsamHCC91V24A1QXjUz2VJRUB2+Aw= Subject key identifier: E5:64:08:A0:AF:84:7C:12:61:C5:BD:BA:0A:38:7F:6A:64:87:79:54 Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Certificate serial: 019B3BA25D11EA7722602DF39817F92CDCF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 12:00:54 +0000 Manifest this update: Sat 20 Dec 2025 12:00:54 +0000 Manifest next update: Sun 21 Dec 2025 12:00:54 +0000 Files and hashes: 1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: QI1/TNXmQR+fXI/Ts7cEXsNXZcCjbtimuq6jV7OV/J0=) 2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:5d:11:ea:77:22:60:2d:f3:98:17:f9:2c:dc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Validity Not Before: Dec 20 12:00:54 2025 GMT Not After : Dec 21 12:00:54 2025 GMT Subject: CN=e56408a0af847c1261c5bdba0a387f6a64877954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:09:ce:35:17:38:de:d0:0a:88:3f:b1:f0: cd:5b:9d:17:d8:f1:7e:9b:eb:bc:a8:81:ff:49:f7: 0e:d2:ff:5e:fb:ef:ef:ed:f4:b1:ee:0e:93:df:92: 2a:04:42:2f:ea:33:d9:31:e9:4f:39:f4:bf:f1:c6: 38:54:d2:ea:40:f2:ea:35:c7:d1:2d:c4:6e:d6:5a: f5:07:bf:20:d6:57:b0:52:fa:ce:ce:59:75:1e:e6: 3c:fd:62:6d:33:e3:78:b4:41:80:5a:e7:62:74:ec: 03:89:f2:43:5e:d5:ca:29:23:20:2b:15:e9:38:8a: 12:11:2f:30:10:4a:95:fe:31:19:fa:80:7c:73:06: 36:4d:2c:d5:42:1c:5d:1d:6b:21:77:54:48:fa:c1: 96:3b:6d:f8:51:7e:87:16:86:97:74:31:7b:68:1c: 02:68:08:27:1e:2c:fc:d7:bb:96:9d:3d:fe:ed:fc: e5:a3:86:df:1c:7d:40:a0:19:93:69:24:55:d4:ea: 2c:96:4d:79:23:ff:9d:03:b9:02:18:8f:53:9c:45: 2f:60:c5:c1:36:65:74:ff:b6:1f:7e:44:d2:76:1b: 67:e2:02:b7:07:e2:80:bf:cc:90:c3:8c:35:e8:35: 05:0d:b4:39:20:0b:97:93:f6:02:27:6c:5c:d4:31: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:64:08:A0:AF:84:7C:12:61:C5:BD:BA:0A:38:7F:6A:64:87:79:54 X509v3 Authority Key Identifier: keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0e:48:94:ac:5f:a7:08:aa:05:b8:34:70:6a:f9:e9:34:52: 42:a5:34:fe:b4:b4:ec:80:b5:f9:84:3b:be:cf:2b:d3:eb:6d: f4:07:af:0b:bc:63:86:b4:65:af:3a:f2:75:50:7a:f4:cd:68: 0c:12:bc:c4:e1:92:c3:e3:e0:ff:b0:88:cd:04:61:fa:7c:e0: 43:32:cb:4e:ee:77:af:85:88:c8:7f:6f:ea:f0:40:d6:a8:1a: f0:00:0a:59:ed:cf:18:e3:7b:07:07:43:5e:48:70:7d:8a:9d: 9b:0e:fa:4b:9c:f9:3b:5e:b3:22:5e:ef:d9:3d:d3:6b:c9:64: 28:74:71:ab:bc:5c:dc:b4:fa:34:40:c7:c7:6c:a5:0f:82:0e: 9d:b2:52:1d:3a:68:2c:10:d4:27:22:a1:36:d2:a9:10:0a:e3: 05:99:03:2e:81:4d:b9:e6:3c:86:de:e4:35:16:aa:fb:c6:31: 05:fc:59:d6:95:4b:e4:ec:6f:69:3c:33:6e:45:85:4a:27:89: 65:3c:ca:9c:5f:66:51:53:6e:07:9a:02:43:a3:f4:cf:ca:b7: f0:4c:17:4d:6e:7d:94:4e:7e:14:3f:99:e1:e3:6d:bc:3b:b4: c9:52:fe:48:a9:f7:a4:a4:70:1d:c5:3c:37:1f:6c:37:e1:05: 2c:48:0d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ol0R6nciYC3zmBf5LNzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm YjgwMWYwHhcNMjUxMjIwMTIwMDU0WhcNMjUxMjIxMTIwMDU0WjAzMTEwLwYDVQQD EyhlNTY0MDhhMGFmODQ3YzEyNjFjNWJkYmEwYTM4N2Y2YTY0ODc3OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6AJzjUXON7QCog/sfDNW50X2PF+ m+u8qIH/SfcO0v9e++/v7fSx7g6T35IqBEIv6jPZMelPOfS/8cY4VNLqQPLqNcfR LcRu1lr1B78g1lewUvrOzll1HuY8/WJtM+N4tEGAWudidOwDifJDXtXKKSMgKxXp OIoSES8wEEqV/jEZ+oB8cwY2TSzVQhxdHWshd1RI+sGWO234UX6HFoaXdDF7aBwC aAgnHiz817uWnT3+7fzlo4bfHH1AoBmTaSRV1Ooslk15I/+dA7kCGI9TnEUvYMXB NmV0/7YffkTSdhtn4gK3B+KAv8yQw4w16DUFDbQ5IAuXk/YCJ2xc1DFqhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVkCKCvhHwSYcW9ugo4f2pkh3lUMB8GA1UdIwQY MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw5IlKxf pwiqBbg0cGr56TRSQqU0/rS07IC1+YQ7vs8r0+tt9AevC7xjhrRlrzrydVB69M1o DBK8xOGSw+Pg/7CIzQRh+nzgQzLLTu53r4WIyH9v6vBA1qga8AAKWe3PGON7BwdD XkhwfYqdmw76S5z5O16zIl7v2T3Ta8lkKHRxq7xc3LT6NEDHx2ylD4IOnbJSHTpo LBDUJyKhNtKpEArjBZkDLoFNueY8ht7kNRaq+8YxBfxZ1pVL5OxvaTwzbkWFSieJ ZTzKnF9mUVNuB5oCQ6P0z8q38EwXTW59lE5+FD+Z4eNtvDu0yVL+SKn3pKRwHcU8 Nx9sN+EFLEgN5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:55 2025 by rpki-client