This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json) Hash identifier: Sslwbm6ybayT3MnBlwkkHOe4EkPuXjQuHa/eWesh1wU= Subject key identifier: 84:64:5C:70:B6:EF:D2:C3:4A:23:E8:C9:A2:7C:A1:1D:83:08:6A:87 Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Certificate serial: 019B4E4E1BB06DAB3B99C8258951F3FC4E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft Manifest number: 0F40 Signing time: Wed 24 Dec 2025 03:01:40 +0000 Manifest this update: Wed 24 Dec 2025 03:01:40 +0000 Manifest next update: Thu 25 Dec 2025 03:01:40 +0000 Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: Ti5BvRsGgqaZJrtyjyswI/VqjI9W8OPa58YUeZoXaZw=) 2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:1b:b0:6d:ab:3b:99:c8:25:89:51:f3:fc:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Validity Not Before: Dec 24 03:01:40 2025 GMT Not After : Dec 25 03:01:40 2025 GMT Subject: CN=84645c70b6efd2c34a23e8c9a27ca11d83086a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:3e:8e:20:a6:98:a5:45:24:d1:fd:59:76: 1e:54:59:20:25:00:23:36:1c:6d:07:24:d4:6a:f9: 9f:52:d9:be:f0:de:06:27:d8:26:23:66:7e:89:5a: aa:ba:04:13:79:46:05:72:2a:5e:7e:e5:5a:f6:5c: ec:9d:bb:01:db:28:a2:c2:86:e4:70:eb:7b:57:2a: 1d:db:8a:68:8e:00:f4:0a:1e:d6:2f:c9:21:5d:eb: 83:25:9e:78:f8:b6:35:71:8c:6d:1e:ad:68:c2:6f: 80:fb:c7:07:1b:77:c2:f2:d0:a7:81:99:ec:ef:ab: 5c:3c:b2:cd:38:72:cd:76:15:a8:60:da:7d:57:a4: f2:1b:35:c5:93:82:49:88:6d:0e:3f:1f:46:0c:d8: aa:b8:bc:e0:ed:ca:6f:8d:22:40:d2:a7:ce:d1:16: b7:a3:b4:81:49:08:e9:1f:53:2b:03:25:ef:f7:bd: 07:e6:27:1a:04:21:f6:7a:d2:69:6b:3d:f4:04:1c: b6:93:21:b0:ef:3f:ec:8b:d4:6f:f8:ac:2d:c1:71: 51:9c:cb:17:e0:0b:92:01:51:93:d7:32:d8:b0:35: d9:1a:d0:08:0f:8c:be:f0:46:5e:3a:8d:49:78:91: 6b:28:0e:25:ff:d1:1c:b5:10:d2:06:fb:e0:48:9d: bb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:5C:70:B6:EF:D2:C3:4A:23:E8:C9:A2:7C:A1:1D:83:08:6A:87 X509v3 Authority Key Identifier: keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a1:e4:af:85:bd:8f:87:90:1a:5a:fd:89:cc:02:c1:a5:6a: a8:62:61:e3:8e:52:84:43:57:2b:50:33:dd:db:c0:39:0a:50: c6:ec:25:24:8f:a8:2a:de:27:99:2f:bb:65:eb:e1:e1:c1:7c: ea:b8:7f:84:cb:8a:5d:5b:df:64:e7:a6:06:b0:64:b4:f6:22: 46:d3:7b:b8:be:e6:6e:96:57:c6:ee:02:63:66:f8:f9:49:87: 45:38:80:f7:51:b6:d5:b8:bc:78:a4:d2:a3:78:98:c4:ab:73: 80:d5:f7:9d:4c:c7:42:22:5d:05:23:41:f8:80:c1:63:9a:e8: ba:39:5a:aa:4b:55:cc:0c:c1:06:0f:a0:bb:fd:d9:99:b9:7b: 44:9d:1f:02:3a:46:82:c4:9f:bd:9d:32:f5:9f:79:21:df:07: f2:e0:cf:29:d3:c2:da:15:70:9e:e3:c9:fa:bf:ef:53:cf:a2: aa:3c:1c:1d:3b:80:5c:89:db:2e:70:d2:0e:87:63:8e:5b:4c: 9a:88:76:e8:51:e0:8a:1b:19:22:bb:a7:a7:05:a0:2f:a0:71: 56:8d:99:85:1d:ad:fb:ea:64:f5:ac:5b:36:7a:5c:9c:46:79: ac:63:80:bd:c6:e9:4e:f2:fd:48:e9:fa:95:5f:77:f0:e7:70: 79:f6:b8:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOThuwbas7mcgliVHz/E5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk OGY2MDAwHhcNMjUxMjI0MDMwMTQwWhcNMjUxMjI1MDMwMTQwWjAzMTEwLwYDVQQD Eyg4NDY0NWM3MGI2ZWZkMmMzNGEyM2U4YzlhMjdjYTExZDgzMDg2YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGQ+jiCmmKVFJNH9WXYeVFkgJQAj NhxtByTUavmfUtm+8N4GJ9gmI2Z+iVqqugQTeUYFcipefuVa9lzsnbsB2yiiwobk cOt7Vyod24pojgD0Ch7WL8khXeuDJZ54+LY1cYxtHq1owm+A+8cHG3fC8tCngZns 76tcPLLNOHLNdhWoYNp9V6TyGzXFk4JJiG0OPx9GDNiquLzg7cpvjSJA0qfO0Ra3 o7SBSQjpH1MrAyXv970H5icaBCH2etJpaz30BBy2kyGw7z/si9Rv+KwtwXFRnMsX 4AuSAVGT1zLYsDXZGtAID4y+8EZeOo1JeJFrKA4l/9EctRDSBvvgSJ27bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRkXHC279LDSiPoyaJ8oR2DCGqHMB8GA1UdIwQY MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct YWE5MWM5MmQ1YzQ4LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4 LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaHkr4W9 j4eQGlr9icwCwaVqqGJh445ShENXK1Az3dvAOQpQxuwlJI+oKt4nmS+7Zevh4cF8 6rh/hMuKXVvfZOemBrBktPYiRtN7uL7mbpZXxu4CY2b4+UmHRTiA91G21bi8eKTS o3iYxKtzgNX3nUzHQiJdBSNB+IDBY5roujlaqktVzAzBBg+gu/3Zmbl7RJ0fAjpG gsSfvZ0y9Z95Id8H8uDPKdPC2hVwnuPJ+r/vU8+iqjwcHTuAXInbLnDSDodjjltM moh26FHgihsZIrunpwWgL6BxVo2ZhR2t++pk9axbNnpcnEZ5rGOAvcbpTvL9SOn6 lV938Odwefa49A== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:01 2025 by rpki-client