This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json) Hash identifier: LAyGO+y6lFqsWBcphWqVkISS9QcGOSaWM0AruU0ThHU= Subject key identifier: 68:30:5A:53:13:A5:FD:7A:ED:C4:52:A5:12:39:73:9F:E1:76:7D:89 Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3 Certificate serial: 019B3E6CE735EA7AD459E273517C3F6754F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft Manifest number: 031F Signing time: Sun 21 Dec 2025 01:01:23 +0000 Manifest this update: Sun 21 Dec 2025 01:01:23 +0000 Manifest next update: Mon 22 Dec 2025 01:01:23 +0000 Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=) 2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: MJiT19IV02w/j+dTRoFZBkrySPW3N+cy8Or+SEory5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e7:35:ea:7a:d4:59:e2:73:51:7c:3f:67:54:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3 Validity Not Before: Dec 21 01:01:23 2025 GMT Not After : Dec 22 01:01:23 2025 GMT Subject: CN=68305a5313a5fd7aedc452a51239739fe1767d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:92:f2:18:3e:3c:61:77:dd:43:76:23:ad: b7:63:fc:9b:b2:32:26:3a:7d:02:23:6a:61:9e:46: ab:ea:7e:df:fb:0f:4d:fc:3d:05:b9:27:a3:41:a4: 88:70:56:af:c9:7c:1e:e3:d3:1d:69:f0:fa:b6:97: 0b:83:a0:69:e6:82:40:ee:07:d9:1f:2d:91:89:36: ce:ef:ef:35:99:9a:0d:08:66:49:1a:79:32:d0:c1: 5e:fb:43:83:c2:f0:f8:c6:02:3f:43:02:bd:cc:91: 99:ca:87:83:83:5c:8c:b6:e3:6a:1e:50:f4:55:d8: a1:07:49:4a:af:1a:c6:28:8d:ed:d8:7e:29:3f:cf: 37:b2:e3:c9:75:76:20:5d:1d:fe:5b:0a:0b:d8:6a: 76:e9:2b:e5:32:57:aa:3b:54:e1:bd:e9:55:32:db: 41:31:cc:9d:da:8c:9d:cc:50:2e:f9:5c:87:6d:a3: 0f:79:8a:1b:c5:04:a7:96:0e:6a:e7:9e:06:e2:74: 0a:0d:50:bf:80:aa:11:29:d0:7f:8e:d3:65:5a:ba: bb:94:46:4c:ef:4c:d9:49:35:fc:92:71:27:3c:55: a0:69:fd:5d:4e:06:28:9b:42:6e:e5:65:aa:5e:84: 4b:61:e0:01:27:5f:a2:2a:6e:90:ba:4b:4b:94:2e: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:30:5A:53:13:A5:FD:7A:ED:C4:52:A5:12:39:73:9F:E1:76:7D:89 X509v3 Authority Key Identifier: keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:34:99:7c:d4:82:60:43:14:ff:cb:6c:db:6e:2e:e5:59:3c: 9f:62:4a:e2:72:b1:6b:bf:3d:7d:57:51:4a:1d:13:f8:11:64: a7:b1:09:63:1b:e1:6d:7d:cc:2b:ba:09:c8:7a:f3:d1:ca:56: 90:6d:7d:f8:d9:9f:59:f6:6f:f9:b4:65:78:5c:1a:73:a8:a8: cc:23:20:2d:4b:3a:7e:be:35:17:ad:6b:11:cb:43:ff:3a:61: 28:f7:11:82:9b:31:81:76:e3:f7:a7:3c:b4:41:c0:32:a1:c5: b7:19:0b:54:85:76:51:c9:b5:b5:d0:e3:c4:03:72:87:ae:31: 31:57:8a:3d:13:b9:72:68:90:5a:29:86:3b:1c:e9:45:b8:42: 5e:92:e1:b3:8d:dd:9c:4e:92:80:d3:a3:15:76:d5:c4:93:f2: 44:c5:06:21:fc:06:87:2a:43:72:d9:a5:41:1a:b3:a8:22:bd: 1d:bc:b6:93:b7:40:a4:08:8f:47:9d:d3:10:23:c8:db:4d:b6: c1:92:41:d0:57:4f:7f:a1:d8:a1:be:a8:2a:0e:c9:c5:56:ab: d2:cc:16:85:3d:3a:ea:2d:61:fb:50:9a:65:b2:67:b0:90:f1: 7c:b3:82:11:24:0f:a5:ee:0d:57:54:66:4b:23:7b:fa:f5:37: 31:1e:d3:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOc16nrUWeJzUXw/Z1T1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj NTQ1YzMwHhcNMjUxMjIxMDEwMTIzWhcNMjUxMjIyMDEwMTIzWjAzMTEwLwYDVQQD Eyg2ODMwNWE1MzEzYTVmZDdhZWRjNDUyYTUxMjM5NzM5ZmUxNzY3ZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoqS8hg+PGF33UN2I623Y/ybsjIm On0CI2phnkar6n7f+w9N/D0FuSejQaSIcFavyXwe49MdafD6tpcLg6Bp5oJA7gfZ Hy2RiTbO7+81mZoNCGZJGnky0MFe+0ODwvD4xgI/QwK9zJGZyoeDg1yMtuNqHlD0 VdihB0lKrxrGKI3t2H4pP883suPJdXYgXR3+WwoL2Gp26SvlMleqO1ThvelVMttB Mcyd2oydzFAu+VyHbaMPeYobxQSnlg5q554G4nQKDVC/gKoRKdB/jtNlWrq7lEZM 70zZSTX8knEnPFWgaf1dTgYom0Ju5WWqXoRLYeABJ1+iKm6QuktLlC6q8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgwWlMTpf167cRSpRI5c5/hdn2JMB8GA1UdIwQY MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTSZfNSC YEMU/8ts224u5Vk8n2JK4nKxa789fVdRSh0T+BFkp7EJYxvhbX3MK7oJyHrz0cpW kG19+NmfWfZv+bRleFwac6iozCMgLUs6fr41F61rEctD/zphKPcRgpsxgXbj96c8 tEHAMqHFtxkLVIV2Ucm1tdDjxANyh64xMVeKPRO5cmiQWimGOxzpRbhCXpLhs43d nE6SgNOjFXbVxJPyRMUGIfwGhypDctmlQRqzqCK9Hby2k7dApAiPR53TECPI2022 wZJB0FdPf6HYob6oKg7JxVar0swWhT066i1h+1CaZbJnsJDxfLOCESQPpe4NV1Rm SyN7+vU3MR7TvA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:12:59 2025 by rpki-client