This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json) Hash identifier: 7D92L2q7B/GBhHpyrA8wD1YgPv8AW1zNi1jm9DPL7DM= Subject key identifier: 18:70:B2:10:B5:FA:67:03:53:B0:16:34:C6:BF:F1:03:9A:1E:A5:54 Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8 Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8 Certificate serial: 019B48EFD4F7FEBBD35AA0C41BA5CCDDD4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft Manifest number: 11ED Signing time: Tue 23 Dec 2025 02:00:35 +0000 Manifest this update: Tue 23 Dec 2025 02:00:35 +0000 Manifest next update: Wed 24 Dec 2025 02:00:35 +0000 Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: AwMDbPYRAUhbI0VroaGdeuGuKzlAKj7JaPcDtWe3Z5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:d4:f7:fe:bb:d3:5a:a0:c4:1b:a5:cc:dd:d4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8 Validity Not Before: Dec 23 02:00:35 2025 GMT Not After : Dec 24 02:00:35 2025 GMT Subject: CN=1870b210b5fa670353b01634c6bff1039a1ea554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:3e:de:80:91:4d:7d:c5:45:72:c5:f4:bb: 7c:da:30:f1:9e:ba:4a:2c:75:4f:4b:ed:ce:ad:01: 84:82:dc:90:1b:bb:04:1f:9a:d5:73:86:32:58:5b: 5e:a4:3d:a2:fb:c0:ea:23:17:a3:10:67:9a:1e:7e: 21:e3:d3:06:e7:77:8c:eb:ff:6a:cb:10:86:e0:7f: db:7b:3b:d3:24:b1:03:0d:92:c4:ae:c1:03:1b:0e: 96:a4:e1:a9:e3:39:3d:55:f0:d1:3f:cb:52:e1:eb: 0e:1a:bb:97:f2:b3:42:07:f6:36:29:78:a2:48:d9: b5:1f:8d:3c:e1:61:26:10:5f:59:15:72:06:2b:4e: 4b:fb:7b:d6:17:79:5f:77:aa:2f:7d:f0:28:c6:3b: db:c5:e2:9c:25:22:91:e2:6f:65:5c:2d:d3:ba:95: aa:38:de:70:59:6b:39:75:9b:fa:6e:0a:61:ae:1d: 80:5e:d8:ac:58:0b:55:1f:61:5b:bb:b8:7c:ec:ae: 9a:f4:9e:e1:a5:46:0b:a9:bd:11:4a:b9:96:c3:91: 44:6c:df:4c:e9:df:39:ff:f8:19:42:5b:17:38:2c: 43:2b:f7:5e:9b:c9:60:c4:c6:90:67:21:2e:3f:8b: 55:92:bf:a3:5a:c6:ca:62:4d:88:74:45:c6:91:3b: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:70:B2:10:B5:FA:67:03:53:B0:16:34:C6:BF:F1:03:9A:1E:A5:54 X509v3 Authority Key Identifier: keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5d:f6:f0:70:af:58:22:6f:d9:21:ba:ad:a3:c2:cd:c7:8d: 6a:b3:a5:cc:8b:58:00:46:32:65:49:65:02:56:42:e8:2c:ed: d5:e2:cc:ad:c6:15:91:02:30:1d:52:f9:b6:dc:c5:e3:d7:c4: b0:26:d2:40:64:40:65:31:7c:5f:b9:58:b5:16:64:f6:77:a8: f1:5a:75:5b:96:68:c4:9a:55:27:a0:b7:7e:2f:ec:c4:d0:b1: 57:b8:67:ba:bf:26:c6:8b:26:72:12:d8:64:d8:bf:43:6d:4a: 21:76:78:60:6a:b4:3b:6f:6a:37:07:df:c2:95:63:14:c8:0c: f1:6c:da:7b:b1:bc:87:7b:14:64:72:37:9d:72:4e:91:cf:ff: 55:ad:fb:86:86:ef:74:55:af:36:9d:93:e1:ae:dd:4a:9c:42: 38:54:bf:7b:81:e4:1f:73:35:f9:73:d4:a7:98:f4:e4:ab:af: c3:4b:da:d1:1a:53:f6:92:4c:19:42:c4:34:57:88:50:0f:e2: d2:1f:2b:a2:de:45:c4:5d:65:89:ed:6b:07:9c:58:f2:75:e3: 07:de:6a:80:c0:80:4f:2c:4a:38:ad:cd:51:9d:06:35:6e:98: 84:2d:4e:3a:4f:b4:97:c3:77:3e:4b:9f:3c:05:74:f3:0f:f9: 37:16:f0:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI79T3/rvTWqDEG6XM3dT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OWJkNzhlMzgxOTc3MGMxMTZlNTc3YmFjZmFkMTk5MzM5 MmJkYjgwHhcNMjUxMjIzMDIwMDM1WhcNMjUxMjI0MDIwMDM1WjAzMTEwLwYDVQQD EygxODcwYjIxMGI1ZmE2NzAzNTNiMDE2MzRjNmJmZjEwMzlhMWVhNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshw+3oCRTX3FRXLF9Lt82jDxnrpK LHVPS+3OrQGEgtyQG7sEH5rVc4YyWFtepD2i+8DqIxejEGeaHn4h49MG53eM6/9q yxCG4H/bezvTJLEDDZLErsEDGw6WpOGp4zk9VfDRP8tS4esOGruX8rNCB/Y2KXii SNm1H4084WEmEF9ZFXIGK05L+3vWF3lfd6ovffAoxjvbxeKcJSKR4m9lXC3TupWq ON5wWWs5dZv6bgphrh2AXtisWAtVH2Fbu7h87K6a9J7hpUYLqb0RSrmWw5FEbN9M 6d85//gZQlsXOCxDK/dem8lgxMaQZyEuP4tVkr+jWsbKYk2IdEXGkTt3kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhwshC1+mcDU7AWNMa/8QOaHqVUMB8GA1UdIwQY MBaAFGeb1444GXcMEW5Xe6z60Zkzkr24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2It YWZiNTU4YTVlODQxLzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2ItYWZiNTU4YTVlODQx LzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV328HCv WCJv2SG6raPCzceNarOlzItYAEYyZUllAlZC6Czt1eLMrcYVkQIwHVL5ttzF49fE sCbSQGRAZTF8X7lYtRZk9neo8Vp1W5ZoxJpVJ6C3fi/sxNCxV7hnur8mxosmchLY ZNi/Q21KIXZ4YGq0O29qNwffwpVjFMgM8Wzae7G8h3sUZHI3nXJOkc//Va37hobv dFWvNp2T4a7dSpxCOFS/e4HkH3M1+XPUp5j05Kuvw0va0RpT9pJMGULENFeIUA/i 0h8rot5FxF1lie1rB5xY8nXjB95qgMCATyxKOK3NUZ0GNW6YhC1OOk+0l8N3Pkuf PAV08w/5Nxbwmg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:16:31 2025 by rpki-client