This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json) Hash identifier: iKRTml8NY3AXXLJ+/tEMSZFVpAJBnZ83K7R/SdI1Bg8= Subject key identifier: 1F:7F:C4:60:6A:16:C0:82:1F:63:BE:FE:27:5E:1B:59:CA:09:22:A7 Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Certificate serial: 019B1A970BA3C570E4C0F809429FCE49D1A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft Manifest number: 0F40 Signing time: Sun 14 Dec 2025 02:01:04 +0000 Manifest this update: Sun 14 Dec 2025 02:01:04 +0000 Manifest next update: Mon 15 Dec 2025 02:01:04 +0000 Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: t4nG+LFINJYVb4OL/NuyE0igJkhZwH8ZDig1z0P9494=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:0b:a3:c5:70:e4:c0:f8:09:42:9f:ce:49:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Validity Not Before: Dec 14 02:01:04 2025 GMT Not After : Dec 15 02:01:04 2025 GMT Subject: CN=1f7fc4606a16c0821f63befe275e1b59ca0922a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:94:f7:7d:4f:b0:e9:7e:31:c3:f7:5f:f6: 4e:28:0e:89:ef:53:ff:b1:f1:49:c5:35:a8:36:38: e7:e4:37:f3:41:5a:43:30:33:36:c9:d4:4e:b9:67: 7b:a0:b0:2c:72:ca:36:1f:6d:b8:89:72:af:74:eb: 9b:d8:4b:29:b6:18:66:53:9b:cb:9d:d0:5b:4c:87: 98:30:96:20:14:8f:af:2b:fb:64:59:9c:f2:c2:fb: 4d:d6:97:c3:e0:75:c9:79:42:7c:2c:05:46:fb:3f: 18:85:e4:c3:a3:c6:35:5f:1e:8a:37:e5:2b:86:7f: 39:8f:77:c8:00:ef:a0:95:ca:98:0e:3d:dc:79:03: d3:db:65:7e:f8:f4:0f:92:24:4d:64:0b:65:59:ca: a2:3d:9c:c8:a5:a9:11:87:5f:70:58:79:1b:b5:5d: 87:b9:a0:14:20:2e:c2:dc:a5:d9:14:53:c7:23:4b: 6b:90:da:35:94:af:3d:02:d6:e7:c2:4b:cd:d1:ea: 78:19:6a:50:e8:a4:d4:84:ec:d4:d1:51:26:20:5d: da:54:17:f3:64:ec:a4:42:30:df:63:ef:db:6f:13: 1a:8e:e5:ab:3f:a0:39:6a:fc:76:ff:ff:26:e5:6c: 8b:8e:37:11:f2:f4:bd:1a:2d:20:68:4f:b4:29:59: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7F:C4:60:6A:16:C0:82:1F:63:BE:FE:27:5E:1B:59:CA:09:22:A7 X509v3 Authority Key Identifier: keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bd:bb:99:a6:8f:fd:34:71:a9:11:14:76:8f:e0:0c:71:a5: 42:e0:39:61:56:8a:cc:2d:70:4e:44:03:e7:07:a4:4f:85:d4: 91:31:7d:5a:53:a5:fb:48:06:ee:cb:00:e2:b3:67:a2:31:96: 72:d7:38:5a:02:49:6e:5c:27:03:c8:0f:1c:0d:ea:7a:25:9f: 2b:70:fe:02:2e:01:5a:4c:12:bd:ee:ea:85:c5:a6:bd:1b:7d: 70:dc:1b:fd:9c:77:c3:71:55:a2:d4:c0:73:6f:c1:ec:f1:39: 0e:a4:06:79:18:90:a1:c2:b9:3f:85:a3:ae:3e:4e:d7:90:57: 0d:89:eb:5b:2a:e0:45:6b:cd:4d:b2:21:c1:14:8f:04:15:9e: e8:d0:31:0b:8d:2e:f2:3c:ad:44:e6:a0:64:ff:87:c8:64:40: 18:b2:e8:72:a2:33:32:52:81:7d:cd:12:b0:a5:29:8e:88:ca: 25:57:31:61:9e:99:af:33:39:12:00:b9:91:26:5f:45:a2:de: 1d:80:cd:1c:05:89:41:49:96:02:f5:1f:35:64:ea:7b:19:78: f4:cf:50:91:3d:8d:ca:1a:ec:81:fc:7f:73:38:76:36:f2:1c: fc:0f:01:ac:cf:c9:7f:48:c8:96:e8:8a:51:a4:c4:37:5f:68: 85:30:06:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalwujxXDkwPgJQp/OSdGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjJmMDlmYTM4YTM4YmM4MGNmZjgyZTBjN2I0N2IzNzkx NjM5OGEwHhcNMjUxMjE0MDIwMTA0WhcNMjUxMjE1MDIwMTA0WjAzMTEwLwYDVQQD EygxZjdmYzQ2MDZhMTZjMDgyMWY2M2JlZmUyNzVlMWI1OWNhMDkyMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd2U931PsOl+McP3X/ZOKA6J71P/ sfFJxTWoNjjn5DfzQVpDMDM2ydROuWd7oLAscso2H224iXKvdOub2EspthhmU5vL ndBbTIeYMJYgFI+vK/tkWZzywvtN1pfD4HXJeUJ8LAVG+z8YheTDo8Y1Xx6KN+Ur hn85j3fIAO+glcqYDj3ceQPT22V++PQPkiRNZAtlWcqiPZzIpakRh19wWHkbtV2H uaAUIC7C3KXZFFPHI0trkNo1lK89AtbnwkvN0ep4GWpQ6KTUhOzU0VEmIF3aVBfz ZOykQjDfY+/bbxMajuWrP6A5avx2//8m5WyLjjcR8vS9Gi0gaE+0KVmvswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9/xGBqFsCCH2O+/ideG1nKCSKnMB8GA1UdIwQY MBaAFGfy8J+jiji8gM/4Lgx7R7N5FjmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQt Zjk5OTdlMTkxMjZjLzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQtZjk5OTdlMTkxMjZj LzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW727maaP /TRxqREUdo/gDHGlQuA5YVaKzC1wTkQD5wekT4XUkTF9WlOl+0gG7ssA4rNnojGW ctc4WgJJblwnA8gPHA3qeiWfK3D+Ai4BWkwSve7qhcWmvRt9cNwb/Zx3w3FVotTA c2/B7PE5DqQGeRiQocK5P4Wjrj5O15BXDYnrWyrgRWvNTbIhwRSPBBWe6NAxC40u 8jytROagZP+HyGRAGLLocqIzMlKBfc0SsKUpjojKJVcxYZ6ZrzM5EgC5kSZfRaLe HYDNHAWJQUmWAvUfNWTqexl49M9QkT2Nyhrsgfx/czh2NvIc/A8BrM/Jf0jIluiK UaTEN19ohTAGAA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:11 2025 by rpki-client