This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json) Hash identifier: N8+0+m8k8jHX+VgT89HnJtmDghIZoU9HCrYiuMtQ/IU= Subject key identifier: FB:83:73:F1:5F:97:DB:93:65:DB:E4:FE:9B:24:88:4B:77:62:B7:00 Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Certificate serial: 019B5C40245846D55EF4F9702B6DBF523B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft Manifest number: 0F62 Signing time: Fri 26 Dec 2025 20:01:05 +0000 Manifest this update: Fri 26 Dec 2025 20:01:05 +0000 Manifest next update: Sat 27 Dec 2025 20:01:05 +0000 Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: /zssYQAGbbPJnbDp7rRYMMxmDAS2eRcWuUXiypn671c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:24:58:46:d5:5e:f4:f9:70:2b:6d:bf:52:3b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Validity Not Before: Dec 26 20:01:05 2025 GMT Not After : Dec 27 20:01:05 2025 GMT Subject: CN=fb8373f15f97db9365dbe4fe9b24884b7762b700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:84:ac:b8:39:35:32:5e:9f:47:56:62:c1: ee:ae:76:55:9f:fc:d1:05:8e:e3:e8:bd:34:c0:9b: 05:bf:33:c5:60:12:f2:12:1c:b4:2a:4a:ff:c8:d8: 45:0b:8a:88:cd:06:de:f2:bb:3b:b0:e4:d1:e9:77: 15:53:08:04:37:dd:95:ca:6a:49:f0:a9:7e:b7:72: 49:30:51:b9:1a:60:9e:b8:4c:cd:9d:d1:b8:be:d0: 4d:b6:89:2b:b6:6e:e6:58:30:a2:05:8d:31:0a:d5: f1:a5:92:4e:e2:1c:3e:b0:86:cd:90:09:fb:46:89: 8d:b3:6e:b4:f9:70:69:59:87:2a:5e:aa:23:26:53: 2b:cc:ca:93:09:79:43:ce:c2:2e:bc:16:5d:bf:ab: 77:be:6e:41:bc:51:e4:79:cd:61:49:24:15:66:0b: 91:87:75:c4:40:44:4a:a4:01:e9:66:b2:22:b4:52: 1a:0c:d5:5c:51:5e:f0:18:fb:90:20:54:4d:36:66: 59:dd:5c:a6:53:e5:f2:34:f6:d5:4d:65:30:cb:99: de:5e:a2:7a:ce:c8:a1:45:7d:71:43:87:f3:94:1f: 10:b5:f6:84:4c:9c:d5:1f:a3:df:02:5e:ef:21:5a: 28:b8:0f:56:e0:97:8a:2d:e7:c4:b6:cf:ac:c5:dc: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:73:F1:5F:97:DB:93:65:DB:E4:FE:9B:24:88:4B:77:62:B7:00 X509v3 Authority Key Identifier: keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:95:6b:99:fc:09:3c:29:fe:02:9e:0a:76:8b:e4:ee:50:63: 19:31:32:1e:8d:a3:1c:b3:a2:8b:3d:87:d2:a0:fb:7c:ff:aa: 54:23:ae:03:34:9b:88:99:7e:bf:ca:81:61:99:5e:25:1f:f7: c7:2b:ad:ad:30:71:8a:99:8f:a2:94:c0:cb:b3:59:07:81:e0: 63:66:36:75:c0:2a:ba:ab:82:0d:5b:c1:5b:d1:77:2f:e4:58: d0:19:c4:52:69:8b:3a:94:45:1f:54:7d:73:37:80:d2:07:50: 15:06:46:cf:03:3e:1a:b8:ac:7f:b4:58:ac:1b:03:3c:b7:3b: 9c:d2:02:31:b2:b4:05:8e:70:6a:10:e4:62:21:40:f9:e0:c8: 6a:44:a5:2f:ac:14:2d:11:ea:63:4d:a8:ac:93:e4:99:d3:50: 42:c7:0a:f6:80:f1:82:76:c2:2b:02:dc:f3:0a:6a:95:90:b5: 72:36:87:90:33:e4:a8:ad:4d:bb:97:5b:b6:e3:c4:b0:c8:2f: 14:4c:be:f9:8a:ab:76:5f:3f:71:a0:c7:9b:2f:02:36:de:8c: 5b:8a:e6:ee:85:b2:01:a3:97:92:80:7f:ce:ab:dc:3d:29:af: 07:76:32:ef:5b:27:4d:12:f0:cc:64:ea:ff:41:d7:8a:37:f8: d6:1c:a5:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQCRYRtVe9PlwK22/UjsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjJmMDlmYTM4YTM4YmM4MGNmZjgyZTBjN2I0N2IzNzkx NjM5OGEwHhcNMjUxMjI2MjAwMTA1WhcNMjUxMjI3MjAwMTA1WjAzMTEwLwYDVQQD EyhmYjgzNzNmMTVmOTdkYjkzNjVkYmU0ZmU5YjI0ODg0Yjc3NjJiNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1OErLg5NTJen0dWYsHurnZVn/zR BY7j6L00wJsFvzPFYBLyEhy0Kkr/yNhFC4qIzQbe8rs7sOTR6XcVUwgEN92VympJ 8Kl+t3JJMFG5GmCeuEzNndG4vtBNtokrtm7mWDCiBY0xCtXxpZJO4hw+sIbNkAn7 RomNs260+XBpWYcqXqojJlMrzMqTCXlDzsIuvBZdv6t3vm5BvFHkec1hSSQVZguR h3XEQERKpAHpZrIitFIaDNVcUV7wGPuQIFRNNmZZ3VymU+XyNPbVTWUwy5neXqJ6 zsihRX1xQ4fzlB8QtfaETJzVH6PfAl7vIVoouA9W4JeKLefEts+sxdw+KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuDc/Ffl9uTZdvk/pskiEt3YrcAMB8GA1UdIwQY MBaAFGfy8J+jiji8gM/4Lgx7R7N5FjmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQt Zjk5OTdlMTkxMjZjLzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQtZjk5OTdlMTkxMjZj LzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZVrmfwJ PCn+Ap4Kdovk7lBjGTEyHo2jHLOiiz2H0qD7fP+qVCOuAzSbiJl+v8qBYZleJR/3 xyutrTBxipmPopTAy7NZB4HgY2Y2dcAququCDVvBW9F3L+RY0BnEUmmLOpRFH1R9 czeA0gdQFQZGzwM+Grisf7RYrBsDPLc7nNICMbK0BY5wahDkYiFA+eDIakSlL6wU LRHqY02orJPkmdNQQscK9oDxgnbCKwLc8wpqlZC1cjaHkDPkqK1Nu5dbtuPEsMgv FEy++Yqrdl8/caDHmy8CNt6MW4rm7oWyAaOXkoB/zqvcPSmvB3Yy71snTRLwzGTq /0HXijf41hyl9Q== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:30 2025 by rpki-client