This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json) Hash identifier: N5Cg1GufsHM2I9DwGsUElYX/1IXvmgb1SUsSpLfVano= Subject key identifier: C2:E2:84:02:08:8D:B8:7B:E7:74:33:5D:76:1B:B0:32:3E:62:61:5E Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d Certificate serial: 019B5117C2C5BDF025D1635D391FCA852FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft Manifest number: 178E Signing time: Wed 24 Dec 2025 16:01:10 +0000 Manifest this update: Wed 24 Dec 2025 16:01:10 +0000 Manifest next update: Thu 25 Dec 2025 16:01:10 +0000 Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: Xt/5l9OzoYwMyaFxptOeaMb19rrWn5OkdQ+Sp2Zvihk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:c2:c5:bd:f0:25:d1:63:5d:39:1f:ca:85:2f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d Validity Not Before: Dec 24 16:01:10 2025 GMT Not After : Dec 25 16:01:10 2025 GMT Subject: CN=c2e28402088db87be774335d761bb0323e62615e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:ff:90:4e:f9:cb:ac:9c:5e:90:ce:86:cf: e5:b1:86:51:75:67:0f:69:96:17:52:ee:1e:91:9e: 67:88:eb:9b:a9:9a:76:53:da:cb:85:e9:da:14:40: 19:9e:84:38:82:f0:3a:ac:bd:f7:78:ed:18:de:b5: 6a:50:a2:df:50:05:e1:6e:ac:d2:b3:a9:e4:71:a2: 8c:ac:26:37:85:07:69:15:be:3b:61:d2:f1:c2:b7: 99:24:8e:a9:fe:d4:d2:62:4d:79:ad:fb:b7:4f:12: f0:3f:41:35:c5:32:0e:38:bf:de:85:72:41:3c:26: 3a:11:b6:69:e2:9a:24:9c:c2:cb:ae:be:fa:97:ae: 61:1e:d9:86:dd:46:45:fe:45:e7:34:4f:17:f8:21: 5c:95:8e:8a:1b:48:bc:94:38:28:38:41:95:fa:a5: ed:b7:dc:6f:ac:5a:fd:41:c8:99:6a:db:13:88:ff: 67:47:e8:f8:1e:b4:3a:63:d3:a5:77:aa:f2:38:1a: d6:29:fd:78:76:d3:b6:5c:ce:9b:60:20:ef:43:62: 1a:18:09:ce:ee:f1:a9:50:10:76:a6:d1:ac:32:27: 82:79:9b:6d:f5:04:f7:f4:87:4a:ce:61:87:53:de: a6:d1:2e:5a:29:77:18:b1:62:15:4d:09:2b:79:2f: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E2:84:02:08:8D:B8:7B:E7:74:33:5D:76:1B:B0:32:3E:62:61:5E X509v3 Authority Key Identifier: keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:7a:b2:c7:3e:0f:40:46:e8:42:be:fe:ce:e4:ad:c2:02:46: 35:62:e2:84:b6:c7:31:db:ea:48:19:a1:36:45:c0:2d:5c:f8: fa:15:74:f6:7a:d9:45:35:42:92:89:e7:cd:75:bd:87:4a:04: ac:86:57:72:1b:c4:db:89:b4:67:14:31:ea:bc:66:bf:aa:89: e4:95:da:99:18:52:67:59:ff:4f:16:1d:01:12:bc:18:05:b1: 79:e0:cd:4a:71:a6:83:32:4d:c5:dc:a6:77:2a:27:3b:26:93: d0:8b:96:61:d8:32:87:3a:8f:92:7b:6d:be:c7:2f:5c:0e:4f: 75:4e:fb:44:a0:e2:b9:04:5b:92:16:95:32:c6:71:4f:e2:f3: 01:1d:d1:37:4b:18:9c:89:f2:a7:90:85:3e:7a:ec:a2:12:3f: 4e:be:3b:40:94:0c:01:ca:2d:a2:43:67:94:30:09:d7:73:b6: 4f:5c:33:9d:3e:c2:65:c2:30:a8:2f:c2:35:02:86:7d:41:0b: 6f:1b:82:3f:9a:90:fd:a7:a5:3b:dd:50:9f:01:d7:d6:31:41: c5:ed:b0:d4:32:ba:18:63:34:c3:bd:36:c4:26:bf:29:0b:a6: b5:22:27:d4:75:67:9f:13:8c:ab:f8:5a:85:11:4b:c4:91:c6: ac:33:ad:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF8LFvfAl0WNdOR/KhS/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODY0NDc3ZmU5NDhiZjQ3YjkxNzk3MThjMzY5OGVlZmY1 ODExMWQwHhcNMjUxMjI0MTYwMTEwWhcNMjUxMjI1MTYwMTEwWjAzMTEwLwYDVQQD EyhjMmUyODQwMjA4OGRiODdiZTc3NDMzNWQ3NjFiYjAzMjNlNjI2MTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGz/kE75y6ycXpDOhs/lsYZRdWcP aZYXUu4ekZ5niOubqZp2U9rLhenaFEAZnoQ4gvA6rL33eO0Y3rVqUKLfUAXhbqzS s6nkcaKMrCY3hQdpFb47YdLxwreZJI6p/tTSYk15rfu3TxLwP0E1xTIOOL/ehXJB PCY6EbZp4poknMLLrr76l65hHtmG3UZF/kXnNE8X+CFclY6KG0i8lDgoOEGV+qXt t9xvrFr9QciZatsTiP9nR+j4HrQ6Y9Old6ryOBrWKf14dtO2XM6bYCDvQ2IaGAnO 7vGpUBB2ptGsMieCeZtt9QT39IdKzmGHU96m0S5aKXcYsWIVTQkreS+d7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLihAIIjbh753QzXXYbsDI+YmFeMB8GA1UdIwQY MBaAFGeGRHf+lIv0e5F5cYw2mO7/WBEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgt ODM0YWU0N2FkNDdiLzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgtODM0YWU0N2FkNDdi LzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Hqyxz4P QEboQr7+zuStwgJGNWLihLbHMdvqSBmhNkXALVz4+hV09nrZRTVCkonnzXW9h0oE rIZXchvE24m0ZxQx6rxmv6qJ5JXamRhSZ1n/TxYdARK8GAWxeeDNSnGmgzJNxdym dyonOyaT0IuWYdgyhzqPknttvscvXA5PdU77RKDiuQRbkhaVMsZxT+LzAR3RN0sY nInyp5CFPnrsohI/Tr47QJQMAcotokNnlDAJ13O2T1wznT7CZcIwqC/CNQKGfUEL bxuCP5qQ/aelO91QnwHX1jFBxe2w1DK6GGM0w702xCa/KQumtSIn1HVnnxOMq/ha hRFLxJHGrDOt+g== -----END CERTIFICATE-----Generated at Wed Dec 24 20:03:39 2025 by rpki-client