This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json) Hash identifier: 8s+AtKpPPF0yw/5lo25MkTJM4m+l8DeE8hTRKIg0iTc= Subject key identifier: 4C:EE:ED:32:79:4B:AF:74:94:3F:81:3C:A2:B4:81:D1:63:85:DA:C4 Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1 Certificate serial: 019B427FDA376A2D3A4146E6FBE1F0720040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft Manifest number: 0356 Signing time: Sun 21 Dec 2025 20:00:33 +0000 Manifest this update: Sun 21 Dec 2025 20:00:33 +0000 Manifest next update: Mon 22 Dec 2025 20:00:33 +0000 Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=) 2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: mXiZd7y3jSr4iNCDEHVGCnrqNAO6TJM+AF+Azhxqfos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:da:37:6a:2d:3a:41:46:e6:fb:e1:f0:72:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1 Validity Not Before: Dec 21 20:00:33 2025 GMT Not After : Dec 22 20:00:33 2025 GMT Subject: CN=4ceeed32794baf74943f813ca2b481d16385dac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:59:25:d8:32:8b:ec:a5:e8:44:43:d2:ca: bf:df:81:25:68:b0:91:c6:2e:48:66:02:e7:cc:cb: 35:01:bb:b0:9f:71:47:e8:f8:ca:dd:ad:68:e4:4b: a0:77:48:ad:8a:a1:a6:39:1a:f8:cc:71:7d:ec:ad: 14:a0:bb:45:96:3f:ef:83:42:56:22:61:89:54:c9: ca:62:82:1e:e9:a2:31:5c:1e:d2:ac:22:cb:96:7d: 8e:38:6c:d5:89:0d:f8:f2:79:a9:1a:c4:b1:8d:5d: 5c:72:48:ef:45:81:b3:01:40:20:99:f7:bf:29:66: 15:b9:ab:33:57:be:25:dc:f4:b1:01:4c:97:e0:c4: 83:4d:19:72:c3:f9:d4:d0:f1:1f:1d:64:e5:be:c5: a0:39:f8:d0:fa:82:59:a6:c8:ce:2f:b6:67:af:13: e5:dd:30:b6:c7:a9:e1:b5:18:75:5a:68:8a:ab:9b: 52:e7:78:d7:3c:92:08:10:fb:91:42:5d:4c:a3:34: b6:23:90:a0:30:bf:5c:7b:48:4c:b5:48:5e:08:92: b8:0c:64:77:9f:c4:71:d2:3d:d5:79:2a:b5:f1:49: 05:16:cb:73:ce:44:d7:6f:96:8b:1a:8e:93:28:b5: 00:b3:6a:41:b9:99:8a:51:b4:57:32:49:a0:b7:1f: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EE:ED:32:79:4B:AF:74:94:3F:81:3C:A2:B4:81:D1:63:85:DA:C4 X509v3 Authority Key Identifier: keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:62:31:2c:30:21:ba:10:0a:ea:c3:43:65:66:18:48:e3:3c: 30:8e:3a:44:c9:e5:2d:89:42:b8:cb:b8:79:7d:2e:6b:55:2d: 31:3b:24:97:71:62:1f:0b:4c:aa:8e:7b:cf:3e:d4:f8:35:56: 63:1f:91:8c:a3:a7:9d:1f:f3:56:b5:59:13:3b:d1:28:57:83: b0:8b:3d:6c:a5:f3:b3:55:ec:71:96:a2:cb:4a:d1:bb:b9:d8: 46:f5:d6:ce:71:27:1f:13:33:cb:8c:4d:11:5d:35:35:1c:8c: 4e:0f:91:e3:14:36:2f:eb:74:97:35:11:a5:ef:b2:19:22:01: 7b:f0:28:b2:7b:ae:7e:44:2c:13:9c:7b:d9:07:b4:0d:d2:cb: 0f:d9:76:80:35:4b:0f:94:27:78:1e:31:5e:cb:79:6b:c3:01: 51:c3:91:60:79:3d:53:36:17:38:43:af:25:f0:d5:a6:f5:d8: eb:e7:39:0a:c9:bf:9c:cc:24:47:24:22:1e:b6:55:2c:eb:0e: 53:ee:8b:2e:95:ec:f8:01:72:ae:95:d6:5b:e4:71:49:86:e4: c3:a6:7f:f0:b7:09:1e:b7:c0:59:fd:15:b2:1e:ab:32:9f:dc: 34:d6:1b:f0:1c:12:59:3b:9b:d7:87:fd:be:a7:40:05:e3:82: a6:fe:cb:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf9o3ai06QUbm++HwcgBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0 ZDIxYjEwHhcNMjUxMjIxMjAwMDMzWhcNMjUxMjIyMjAwMDMzWjAzMTEwLwYDVQQD Eyg0Y2VlZWQzMjc5NGJhZjc0OTQzZjgxM2NhMmI0ODFkMTYzODVkYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH9ZJdgyi+yl6ERD0sq/34ElaLCR xi5IZgLnzMs1Abuwn3FH6PjK3a1o5Eugd0itiqGmORr4zHF97K0UoLtFlj/vg0JW ImGJVMnKYoIe6aIxXB7SrCLLln2OOGzViQ348nmpGsSxjV1cckjvRYGzAUAgmfe/ KWYVuaszV74l3PSxAUyX4MSDTRlyw/nU0PEfHWTlvsWgOfjQ+oJZpsjOL7ZnrxPl 3TC2x6nhtRh1WmiKq5tS53jXPJIIEPuRQl1MozS2I5CgML9ce0hMtUheCJK4DGR3 n8Rx0j3VeSq18UkFFstzzkTXb5aLGo6TKLUAs2pBuZmKUbRXMkmgtx/fWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzu7TJ5S690lD+BPKK0gdFjhdrEMB8GA1UdIwQY MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGIxLDAh uhAK6sNDZWYYSOM8MI46RMnlLYlCuMu4eX0ua1UtMTskl3FiHwtMqo57zz7U+DVW Yx+RjKOnnR/zVrVZEzvRKFeDsIs9bKXzs1XscZaiy0rRu7nYRvXWznEnHxMzy4xN EV01NRyMTg+R4xQ2L+t0lzURpe+yGSIBe/AosnuufkQsE5x72Qe0DdLLD9l2gDVL D5QneB4xXst5a8MBUcORYHk9UzYXOEOvJfDVpvXY6+c5Csm/nMwkRyQiHrZVLOsO U+6LLpXs+AFyrpXWW+RxSYbkw6Z/8LcJHrfAWf0Vsh6rMp/cNNYb8BwSWTub14f9 vqdABeOCpv7LVA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:13 2025 by rpki-client