This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json) Hash identifier: 0kG+5oRhLEBqhMRYc4vIVMbdEyW5LBOOIXmk1qxrnAo= Subject key identifier: 83:AC:A7:86:2B:9C:65:F6:3F:DB:10:0B:BD:FA:12:B0:B5:A3:8B:71 Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63 Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63 Certificate serial: 019B0E5BBE339D7FF9D749203C1F29790A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft Manifest number: 1680 Signing time: Thu 11 Dec 2025 17:00:52 +0000 Manifest this update: Thu 11 Dec 2025 17:00:52 +0000 Manifest next update: Fri 12 Dec 2025 17:00:52 +0000 Files and hashes: 1: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: GLA8pwyjVL4hLCfjU60wNQB7ZCYKDExPYMfh9PswmSg=) 2: lHo6E8O3jVZPWE_3CSGUh-yWmns.roa (hash: EcydcckC44FXLMG0RzB+bDpZsk7fNTw0ZBUYetuTeMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:be:33:9d:7f:f9:d7:49:20:3c:1f:29:79:0a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63 Validity Not Before: Dec 11 17:00:52 2025 GMT Not After : Dec 12 17:00:52 2025 GMT Subject: CN=83aca7862b9c65f63fdb100bbdfa12b0b5a38b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:f4:99:06:93:e5:b4:23:e9:51:11:e8:58: 69:74:da:3b:7f:42:65:e8:5f:cf:99:1c:62:d8:4b: e7:ab:f7:f2:fd:e3:a3:26:57:27:9c:3d:d1:93:5e: 08:63:7e:9a:d5:c7:97:ce:ed:01:97:aa:df:ba:80: 84:ed:d3:30:9f:94:bc:59:2d:00:65:5c:16:2a:b9: ee:f9:4f:3e:f1:40:81:3d:4b:5b:b8:e8:df:12:4e: 6a:63:65:19:42:98:f6:f4:95:c4:ba:46:aa:35:e3: 40:6d:e9:6d:74:41:67:7f:d3:cc:4c:6f:52:2f:90: ac:74:85:33:6a:75:46:77:05:8a:02:3e:b4:7f:1d: d4:8e:f2:dc:85:ca:d4:50:19:1e:3e:90:ff:f2:8a: 1a:e6:0c:76:22:22:50:30:32:d6:4b:f6:d2:5b:fc: 7c:d0:4a:70:e9:f0:8c:85:17:c2:1a:32:8d:9b:e2: 86:dc:b4:d7:d7:cc:ca:b4:d8:c9:4d:1d:cd:ce:34: f4:6c:5c:84:dd:64:0c:73:3d:d6:fb:89:43:86:ba: 1d:0b:81:43:93:69:7b:ff:fa:f1:d8:a8:98:4b:ac: 44:7e:6e:1c:39:26:ef:3a:b0:0b:97:af:67:f5:c7: 74:f1:9c:85:96:27:80:9e:3c:8d:68:23:d2:a3:da: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AC:A7:86:2B:9C:65:F6:3F:DB:10:0B:BD:FA:12:B0:B5:A3:8B:71 X509v3 Authority Key Identifier: keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:bf:a5:60:6f:db:fb:f6:40:08:d2:3a:92:0d:44:4a:31:8a: 6c:60:5a:1d:32:33:bf:36:7d:a9:ca:52:2d:ca:c1:93:58:c3: da:5e:1d:3d:80:8a:57:c6:43:dd:95:61:98:73:d2:24:65:36: 68:b9:fe:eb:2d:d3:54:b1:82:1a:ec:da:21:b0:8d:89:6d:fd: 3f:6a:22:5a:07:39:51:ac:b4:56:e9:93:9f:b4:4f:43:3a:70: 7a:16:87:53:f7:df:6c:84:e7:d9:12:21:2d:da:25:f1:4f:d6: 3f:e8:06:af:43:6d:c1:87:c2:ea:67:00:25:c1:4d:cd:91:11: 19:7a:9f:79:d0:85:a5:b1:5c:6a:db:0b:63:b3:49:74:93:0b: 00:61:95:1d:ee:0e:04:b8:89:f1:55:d0:8e:2c:82:98:4e:8a: d0:72:80:8d:84:89:12:0c:0e:c2:54:73:ce:cf:79:e2:e4:0d: e9:2e:01:79:65:8b:a0:cf:5b:36:37:c6:a1:8f:04:9d:96:17: 7b:a5:0f:08:4d:c1:78:59:8b:29:e9:7f:d2:01:87:c1:29:cf: 28:39:e1:21:08:76:2b:09:86:da:31:86:d2:6c:b6:10:b4:99: c3:92:a2:54:5e:cc:7e:5f:5c:11:10:bd:e2:58:6c:2a:19:9e: a5:9f:f1:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW74znX/510kgPB8peQoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzI1YTQxZjFjNTIyOGUxMGVhOTQxY2U3MDc4ZjQzY2Q5 MDliNjMwHhcNMjUxMjExMTcwMDUyWhcNMjUxMjEyMTcwMDUyWjAzMTEwLwYDVQQD Eyg4M2FjYTc4NjJiOWM2NWY2M2ZkYjEwMGJiZGZhMTJiMGI1YTM4YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke/0mQaT5bQj6VER6FhpdNo7f0Jl 6F/PmRxi2Evnq/fy/eOjJlcnnD3Rk14IY36a1ceXzu0Bl6rfuoCE7dMwn5S8WS0A ZVwWKrnu+U8+8UCBPUtbuOjfEk5qY2UZQpj29JXEukaqNeNAbeltdEFnf9PMTG9S L5CsdIUzanVGdwWKAj60fx3UjvLchcrUUBkePpD/8ooa5gx2IiJQMDLWS/bSW/x8 0Epw6fCMhRfCGjKNm+KG3LTX18zKtNjJTR3NzjT0bFyE3WQMcz3W+4lDhrodC4FD k2l7//rx2KiYS6xEfm4cOSbvOrALl69n9cd08ZyFlieAnjyNaCPSo9pAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOsp4YrnGX2P9sQC736ErC1o4txMB8GA1UdIwQY MBaAFGfCWkHxxSKOEOqUHOcHj0PNkJtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYt ZmM5MTBjMGIxOWFlLzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYtZmM5MTBjMGIxOWFl LzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr+lYG/b +/ZACNI6kg1ESjGKbGBaHTIzvzZ9qcpSLcrBk1jD2l4dPYCKV8ZD3ZVhmHPSJGU2 aLn+6y3TVLGCGuzaIbCNiW39P2oiWgc5Uay0VumTn7RPQzpwehaHU/ffbITn2RIh Ldol8U/WP+gGr0NtwYfC6mcAJcFNzZERGXqfedCFpbFcatsLY7NJdJMLAGGVHe4O BLiJ8VXQjiyCmE6K0HKAjYSJEgwOwlRzzs954uQN6S4BeWWLoM9bNjfGoY8EnZYX e6UPCE3BeFmLKel/0gGHwSnPKDnhIQh2KwmG2jGG0my2ELSZw5KiVF7Mfl9cERC9 4lhsKhmepZ/xqA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:38 2025 by rpki-client