This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json) Hash identifier: Jfuolp/dOPRZj4p09v6lYCWWRw7koKMMlFk+ozNNczA= Subject key identifier: 3E:F4:61:8B:37:A1:52:1B:D6:23:63:13:5B:BE:8E:C4:3D:98:D7:F8 Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Certificate serial: 019B364583F3C22B4B8D92D9717336A48BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft Manifest number: 1798 Signing time: Fri 19 Dec 2025 11:01:23 +0000 Manifest this update: Fri 19 Dec 2025 11:01:23 +0000 Manifest next update: Sat 20 Dec 2025 11:01:23 +0000 Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: POO8f/oyThtLrk0Dqqd3nLjdC4l9qYlkvfoJSQ71NxY=) 2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:83:f3:c2:2b:4b:8d:92:d9:71:73:36:a4:8b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Validity Not Before: Dec 19 11:01:23 2025 GMT Not After : Dec 20 11:01:23 2025 GMT Subject: CN=3ef4618b37a1521bd62363135bbe8ec43d98d7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:b4:26:b6:24:77:23:ca:0e:1e:1b:58:8e: f2:57:e5:5b:90:95:d9:7e:17:73:f1:87:bb:48:7d: 02:a7:ae:d0:21:9b:94:af:50:07:15:4a:a7:ee:6e: 94:a5:39:6b:06:08:af:21:ea:10:e8:7a:4e:e3:af: 08:d3:92:ce:38:a1:5d:80:8d:9f:bf:a1:74:5f:6e: 89:68:41:61:3c:71:15:d4:48:7d:6d:af:8d:57:0f: ae:7f:a2:3a:c3:f1:44:18:b6:0d:07:7c:3c:dc:26: 2b:0e:2c:42:ef:10:2a:01:27:1a:18:d0:a1:2a:c8: 8d:30:42:ea:22:0f:66:a9:25:ce:c5:91:9f:a6:6f: 0c:3b:2a:bf:48:7c:22:a6:d6:68:7a:88:e2:0e:31: af:50:8c:34:07:f7:45:1c:e9:bb:cb:95:75:be:b5: 87:3c:00:3e:70:e7:cd:71:1e:b6:56:dd:2d:eb:38: 20:04:30:36:f1:c2:42:41:26:29:30:73:14:c4:52: 1a:a1:32:df:60:30:66:54:d8:4f:a4:7c:82:c8:86: 56:b2:c1:24:3b:4b:0a:cc:c6:8f:fe:8a:d9:b0:ba: 4f:24:5a:01:51:61:f3:52:b6:39:a2:0b:73:74:74: 3c:37:56:80:3a:ff:1f:60:50:8a:d1:48:7c:09:f2: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F4:61:8B:37:A1:52:1B:D6:23:63:13:5B:BE:8E:C4:3D:98:D7:F8 X509v3 Authority Key Identifier: keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:81:b0:d1:30:2d:e6:37:8b:28:2f:03:10:6b:51:88:13:3b: 3b:a3:8d:0f:0a:0f:8f:24:69:bf:e8:3b:b9:b4:98:3d:ce:f5: 58:a8:9c:c8:69:08:6b:31:19:bb:69:42:08:6e:b5:76:bb:cf: cf:8c:5c:de:0e:d5:77:78:de:cf:2a:fe:17:4a:55:75:5e:13: 31:dd:79:04:9d:be:69:49:b7:6f:bd:dc:05:5d:e6:54:84:e2: 86:59:ff:e8:5d:3d:01:5e:6b:63:0b:3b:d4:53:0a:6c:a9:9f: 43:19:d8:e9:06:79:53:77:00:99:6b:52:a0:7e:83:0e:20:0f: ce:cb:bb:df:60:a0:d3:c5:5d:93:aa:c7:5a:8d:81:04:5d:67: 70:c3:f1:c5:bc:8a:54:41:9b:02:0d:b1:05:a1:0a:c4:60:c8: 98:01:0f:48:d4:19:00:81:d4:6b:b5:57:7e:cf:7a:35:81:eb: c9:54:c7:a1:f2:f5:01:1f:5e:b2:a8:9c:0c:ec:4d:62:66:24: 13:0a:51:12:2d:50:19:26:0f:2c:b0:f6:68:65:4e:c5:79:d5: 4f:41:4e:85:be:2b:e5:82:4e:1e:34:4b:70:04:01:1e:68:e7: 16:09:ca:95:14:56:98:22:84:c9:30:4f:98:84:63:fb:33:8a: c0:fe:63:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RYPzwitLjZLZcXM2pIuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh NjcwNGQwHhcNMjUxMjE5MTEwMTIzWhcNMjUxMjIwMTEwMTIzWjAzMTEwLwYDVQQD EygzZWY0NjE4YjM3YTE1MjFiZDYyMzYzMTM1YmJlOGVjNDNkOThkN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXG0JrYkdyPKDh4bWI7yV+VbkJXZ fhdz8Ye7SH0Cp67QIZuUr1AHFUqn7m6UpTlrBgivIeoQ6HpO468I05LOOKFdgI2f v6F0X26JaEFhPHEV1Eh9ba+NVw+uf6I6w/FEGLYNB3w83CYrDixC7xAqAScaGNCh KsiNMELqIg9mqSXOxZGfpm8MOyq/SHwiptZoeojiDjGvUIw0B/dFHOm7y5V1vrWH PAA+cOfNcR62Vt0t6zggBDA28cJCQSYpMHMUxFIaoTLfYDBmVNhPpHyCyIZWssEk O0sKzMaP/orZsLpPJFoBUWHzUrY5ogtzdHQ8N1aAOv8fYFCK0Uh8CfK+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD70YYs3oVIb1iNjE1u+jsQ9mNf4MB8GA1UdIwQY MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt NjY2M2ZhYmExZGQwLzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4Gw0TAt 5jeLKC8DEGtRiBM7O6ONDwoPjyRpv+g7ubSYPc71WKicyGkIazEZu2lCCG61drvP z4xc3g7Vd3jezyr+F0pVdV4TMd15BJ2+aUm3b73cBV3mVITihln/6F09AV5rYws7 1FMKbKmfQxnY6QZ5U3cAmWtSoH6DDiAPzsu732Cg08Vdk6rHWo2BBF1ncMPxxbyK VEGbAg2xBaEKxGDImAEPSNQZAIHUa7VXfs96NYHryVTHofL1AR9esqicDOxNYmYk EwpREi1QGSYPLLD2aGVOxXnVT0FOhb4r5YJOHjRLcAQBHmjnFgnKlRRWmCKEyTBP mIRj+zOKwP5joA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:12 2025 by rpki-client