This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json) Hash identifier: LCga2IsjhO82p24BbMq/FSk836AXB6EpMLM/5PgqGsw= Subject key identifier: 60:39:DF:41:EF:9D:0A:05:C8:6E:F2:69:12:69:01:C5:3A:51:BC:DA Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Certificate serial: 019AF61CCF48EBFC8B46AFE80B3B940C4D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft Manifest number: 16F6 Signing time: Sun 07 Dec 2025 00:01:14 +0000 Manifest this update: Sun 07 Dec 2025 00:01:14 +0000 Manifest next update: Mon 08 Dec 2025 00:01:14 +0000 Files and hashes: 1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: eNocweYLdilOZqlXU/HXAkpBkMaaFQbvWMDQqhAA66k=) 2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:cf:48:eb:fc:8b:46:af:e8:0b:3b:94:0c:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Validity Not Before: Dec 7 00:01:14 2025 GMT Not After : Dec 8 00:01:14 2025 GMT Subject: CN=6039df41ef9d0a05c86ef269126901c53a51bcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:30:19:27:ea:83:51:bd:00:26:b3:47:84: 35:f9:e0:be:a2:7d:73:57:53:ad:5e:15:33:ee:e3: 80:ec:8b:d2:b6:a0:0f:34:10:e5:03:a5:b3:37:03: 65:7c:22:81:12:7d:b2:68:e8:74:f4:39:54:ce:20: da:7e:a4:64:21:a6:cd:f0:35:de:4a:13:69:33:61: c6:65:97:7d:e4:04:1c:5d:5b:52:1a:24:f0:45:52: dd:df:3a:f8:8f:a6:cd:e6:23:b5:23:d6:0f:03:0f: 0e:3f:61:bf:8c:92:6b:2c:79:c1:1b:5e:e4:79:b1: f9:d8:c6:11:36:8d:60:ea:f7:ad:d6:21:0d:ea:c9: b9:2a:2b:7c:e0:c5:8e:d5:ea:59:22:5d:0b:93:46: 67:aa:f1:86:21:a9:d6:87:a8:20:5e:cc:08:d1:61: 6f:3d:1b:ea:66:7a:ce:ec:67:27:14:12:93:16:a3: 5a:08:b4:3d:84:fa:3b:63:77:dc:a9:0d:2b:63:8f: 86:0c:8e:9e:bf:da:30:77:85:a1:57:7f:84:7d:1e: 70:48:42:49:73:7a:1f:ad:2a:dc:c9:d9:64:d6:38: a3:71:7c:31:17:0a:92:ea:42:f2:a8:0c:f1:bf:91: f5:b7:c4:2f:1d:aa:47:54:04:f7:83:04:d7:32:fe: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:39:DF:41:EF:9D:0A:05:C8:6E:F2:69:12:69:01:C5:3A:51:BC:DA X509v3 Authority Key Identifier: keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:87:f7:8e:8c:1e:e3:10:79:80:26:e5:b6:cd:dc:a7:92:83: fc:3a:51:68:c0:7c:82:d5:e4:0b:5f:52:cc:4c:27:5a:59:e0: e1:3b:3d:e0:47:cc:cd:18:fb:64:fa:68:a2:cf:ac:b8:22:fe: 5b:b2:12:4c:02:ec:33:d4:08:e6:fc:3a:0e:8b:9d:91:7e:1f: 57:42:bb:23:3b:91:42:3d:02:2f:78:df:a5:7c:cc:99:4e:4a: 58:8b:7d:38:cd:92:15:0c:4e:69:04:65:f5:7f:08:29:e0:06: 7a:22:da:41:15:5c:5c:6e:ea:f7:2b:47:80:b1:e0:f9:ba:6c: e4:e4:ff:76:da:f6:41:df:94:e2:0b:31:01:0d:23:dc:b7:52: 78:1b:bc:c1:27:e9:b4:a6:fb:6a:a5:cd:3d:f4:11:12:ff:81: 39:de:d0:8b:b6:c9:a9:cd:0b:c3:6f:bb:e8:4a:ab:df:c2:6e: aa:7c:d0:7b:1a:91:22:09:e1:51:43:19:04:6c:af:b1:8a:d1: ee:15:81:ec:4b:8a:9d:86:cf:54:fb:38:d0:a4:59:af:e6:d2: f7:9a:d4:f8:3f:2e:71:f9:c8:83:2f:59:7c:35:8a:6f:c5:63: 35:ea:be:86:c0:ec:34:05:2b:6f:12:30:f1:df:d4:f5:b2:29: eb:38:f2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HM9I6/yLRq/oCzuUDE0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm YjgwMWYwHhcNMjUxMjA3MDAwMTE0WhcNMjUxMjA4MDAwMTE0WjAzMTEwLwYDVQQD Eyg2MDM5ZGY0MWVmOWQwYTA1Yzg2ZWYyNjkxMjY5MDFjNTNhNTFiY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmIwGSfqg1G9ACazR4Q1+eC+on1z V1OtXhUz7uOA7IvStqAPNBDlA6WzNwNlfCKBEn2yaOh09DlUziDafqRkIabN8DXe ShNpM2HGZZd95AQcXVtSGiTwRVLd3zr4j6bN5iO1I9YPAw8OP2G/jJJrLHnBG17k ebH52MYRNo1g6vet1iEN6sm5Kit84MWO1epZIl0Lk0ZnqvGGIanWh6ggXswI0WFv PRvqZnrO7GcnFBKTFqNaCLQ9hPo7Y3fcqQ0rY4+GDI6ev9owd4WhV3+EfR5wSEJJ c3ofrSrcydlk1jijcXwxFwqS6kLyqAzxv5H1t8QvHapHVAT3gwTXMv7BGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA530HvnQoFyG7yaRJpAcU6UbzaMB8GA1UdIwQY MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4f3jowe 4xB5gCblts3cp5KD/DpRaMB8gtXkC19SzEwnWlng4Ts94EfMzRj7ZPpoos+suCL+ W7ISTALsM9QI5vw6DoudkX4fV0K7IzuRQj0CL3jfpXzMmU5KWIt9OM2SFQxOaQRl 9X8IKeAGeiLaQRVcXG7q9ytHgLHg+bps5OT/dtr2Qd+U4gsxAQ0j3LdSeBu8wSfp tKb7aqXNPfQREv+BOd7Qi7bJqc0Lw2+76Eqr38JuqnzQexqRIgnhUUMZBGyvsYrR 7hWB7EuKnYbPVPs40KRZr+bS95rU+D8ucfnIgy9ZfDWKb8VjNeq+hsDsNAUrbxIw 8d/U9bIp6zjymg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:10:15 2025 by rpki-client