This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json) Hash identifier: Iz9JDPvZyG3cYOA1SEnsr+qCCE1BpehvjfEKuDu0efs= Subject key identifier: 71:3E:4E:AF:D1:D8:F6:9A:7B:80:73:61:7A:F7:D2:32:B1:E4:7C:5A Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56 Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56 Certificate serial: 019B27AD93A159A6F5C51B3F8439A4918172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft Manifest number: 0DFE Signing time: Tue 16 Dec 2025 15:00:45 +0000 Manifest this update: Tue 16 Dec 2025 15:00:45 +0000 Manifest next update: Wed 17 Dec 2025 15:00:45 +0000 Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: inx/Pj3CGZlsjYEeAtbpBE28v+fed3BM2hiEeUuEiYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:93:a1:59:a6:f5:c5:1b:3f:84:39:a4:91:81:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56 Validity Not Before: Dec 16 15:00:45 2025 GMT Not After : Dec 17 15:00:45 2025 GMT Subject: CN=713e4eafd1d8f69a7b8073617af7d232b1e47c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:f3:53:f6:3b:cb:ed:c6:a1:6b:50:2a:dd: 14:c0:2a:56:da:e8:23:85:c3:d4:a3:b9:8d:e7:5c: bb:67:ee:cd:02:40:81:48:65:9a:23:7b:ab:be:29: 22:31:c7:69:3c:72:9e:f2:a3:3e:9e:1d:a4:03:bf: 8b:f8:a8:f9:ee:c9:48:17:49:ea:97:41:b8:66:08: 26:f2:4d:08:ef:b4:d6:ae:d5:bc:fc:7b:23:37:2e: 8c:5d:1f:07:5f:78:3e:86:ab:f8:81:86:8c:a9:ee: 0f:6c:ca:c0:a2:d0:ff:cb:f0:1d:eb:c4:12:10:8c: 73:23:9d:27:e2:21:37:cd:ff:cc:25:3a:6d:88:1c: d7:0d:97:33:e5:62:5b:35:13:49:90:86:df:7e:91: f2:92:da:12:8a:ae:0b:ef:f6:61:da:32:f1:d6:df: d6:0d:c0:16:2a:6f:56:a9:70:f9:38:ff:51:d3:69: f7:a1:c7:cb:c9:0c:fe:b5:d0:8f:c8:36:8f:8a:50: 73:37:5c:46:28:ed:77:40:12:7a:6c:c1:bd:be:28: 29:b4:3e:fe:0b:77:a2:d7:dd:dc:e7:3c:a6:55:90: ed:fb:58:1b:33:8f:4a:7f:a1:71:f3:7e:f4:96:32: 03:fa:89:ef:d5:ea:e8:27:73:14:f6:bd:4e:bb:eb: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3E:4E:AF:D1:D8:F6:9A:7B:80:73:61:7A:F7:D2:32:B1:E4:7C:5A X509v3 Authority Key Identifier: keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2f:72:ac:44:18:df:fb:6d:38:f3:97:7e:b7:22:99:70:1c: c6:2e:9e:34:66:b2:f1:8e:0c:1e:f1:f1:1f:ff:ce:b8:7e:30: f6:e2:9d:48:72:e8:ce:1c:67:55:aa:5e:26:e3:22:03:f2:31: 19:a5:a2:25:aa:0c:82:7c:c0:f8:f2:bc:ca:3e:b0:89:53:53: 71:bf:7e:39:86:cb:68:10:3c:f8:ab:a3:83:49:e6:1d:bc:f4: 1f:d9:1c:12:59:98:c0:e0:d8:c5:99:22:ae:f4:1f:4d:e8:ee: e9:0a:dc:8c:e8:a5:2c:df:ae:09:8d:40:42:4b:c5:69:8b:06: e0:fd:8f:13:87:cc:3b:8a:f4:45:b7:21:88:34:8b:c4:0c:09: 1f:b3:d9:b4:b3:4b:1f:7e:10:56:60:ec:25:c4:f6:d0:96:e4: 79:bf:2c:72:07:37:1a:8a:bd:5f:e3:05:95:2e:41:f6:24:81: 3f:b4:4c:a4:6b:f2:9d:24:78:0a:9d:16:6e:f5:be:0e:9d:e4: cb:29:49:27:f8:71:07:2c:32:fe:a7:b7:4c:cb:60:f2:e1:68: e3:64:95:fc:b2:b4:3e:1e:66:2d:0b:04:2b:b8:0c:af:e6:95: 63:a8:9c:e1:1a:f1:72:26:4e:18:00:91:6d:8a:ef:09:20:73: c9:24:1b:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrZOhWab1xRs/hDmkkYFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NmZiYjU3N2M5M2RjNDVkNDhmMDE5OWIxOWQxY2E3YTIx MzdjNTYwHhcNMjUxMjE2MTUwMDQ1WhcNMjUxMjE3MTUwMDQ1WjAzMTEwLwYDVQQD Eyg3MTNlNGVhZmQxZDhmNjlhN2I4MDczNjE3YWY3ZDIzMmIxZTQ3YzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i/zU/Y7y+3GoWtQKt0UwCpW2ugj hcPUo7mN51y7Z+7NAkCBSGWaI3urvikiMcdpPHKe8qM+nh2kA7+L+Kj57slIF0nq l0G4Zggm8k0I77TWrtW8/HsjNy6MXR8HX3g+hqv4gYaMqe4PbMrAotD/y/Ad68QS EIxzI50n4iE3zf/MJTptiBzXDZcz5WJbNRNJkIbffpHyktoSiq4L7/Zh2jLx1t/W DcAWKm9WqXD5OP9R02n3ocfLyQz+tdCPyDaPilBzN1xGKO13QBJ6bMG9vigptD7+ C3ei193c5zymVZDt+1gbM49Kf6Fx8370ljID+onv1eroJ3MU9r1Ou+vowQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE+Tq/R2Paae4BzYXr30jKx5HxaMB8GA1UdIwQY MBaAFGdvu1d8k9xF1I8BmbGdHKeiE3xWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjItN1YzeVQzRVhVandHWnNaMGNwNklUZkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84YTEwN2UtYWI4Yi00M2UyLTk3MWYt MWNkZTczMWU2ZmRmLzEvWjItN1YzeVQzRVhVandHWnNaMGNwNklUZkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy84YTEwN2UtYWI4Yi00M2UyLTk3MWYtMWNkZTczMWU2ZmRm LzEvWjItN1YzeVQzRVhVandHWnNaMGNwNklUZkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKC9yrEQY 3/ttOPOXfrcimXAcxi6eNGay8Y4MHvHxH//OuH4w9uKdSHLozhxnVapeJuMiA/Ix GaWiJaoMgnzA+PK8yj6wiVNTcb9+OYbLaBA8+Kujg0nmHbz0H9kcElmYwODYxZki rvQfTeju6QrcjOilLN+uCY1AQkvFaYsG4P2PE4fMO4r0RbchiDSLxAwJH7PZtLNL H34QVmDsJcT20Jbkeb8scgc3Goq9X+MFlS5B9iSBP7RMpGvynSR4Cp0WbvW+Dp3k yylJJ/hxBywy/qe3TMtg8uFo42SV/LK0Ph5mLQsEK7gMr+aVY6ic4RrxciZOGACR bYrvCSBzySQbTw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:31:24 2025 by rpki-client