This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft File: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json) Hash identifier: /WjfGzHevQA+u2M1oGp56w5jUDaI2GiQy03YTV8GRto= Subject key identifier: 87:14:B7:DD:4F:17:26:20:A3:DE:4C:6D:B2:2A:43:47:43:77:C9:42 Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27 Certificate issuer: /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027 Certificate serial: 019B59771C6DFEECADA765014697AE31ED22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft Manifest number: 0EA0 Signing time: Fri 26 Dec 2025 07:02:16 +0000 Manifest this update: Fri 26 Dec 2025 07:02:16 +0000 Manifest next update: Sat 27 Dec 2025 07:02:16 +0000 Files and hashes: 1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: UicGT3vgtAlAFL9N7NZFj0Ck8wI7/y5RR2vWcSYOiq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:1c:6d:fe:ec:ad:a7:65:01:46:97:ae:31:ed:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027 Validity Not Before: Dec 26 07:02:16 2025 GMT Not After : Dec 27 07:02:16 2025 GMT Subject: CN=8714b7dd4f172620a3de4c6db22a43474377c942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:b0:e8:87:02:9d:fa:21:b5:4c:6d:f3:03: 3a:3f:37:fb:cd:93:aa:fa:5b:bd:b6:86:7d:bc:f8: b5:45:28:f7:74:62:12:da:a6:ac:f4:24:2c:7c:a5: 06:17:47:bc:fb:8a:25:df:21:6b:e9:5e:8d:25:3f: 36:a7:27:69:fb:aa:79:0f:a7:55:f1:2c:f3:ee:eb: 33:3d:7e:34:a5:35:2e:8d:a3:d5:06:e0:79:51:97: 03:39:ec:6c:be:31:de:c0:b6:6d:0a:e4:fa:0c:e7: ba:1c:0e:a6:56:d3:d7:76:91:86:b5:aa:02:4d:a3: 5f:f7:5f:8c:88:d9:32:04:30:37:b4:b1:9b:74:28: 51:4b:54:7c:fe:fc:73:02:6b:53:9c:c7:98:69:08: 52:b8:b6:7d:77:bf:12:2b:e0:4a:54:e1:4f:55:d7: ff:d1:97:dd:b4:94:29:87:d6:a6:a1:47:1c:0c:00: 90:5e:ce:80:3c:dc:d3:10:fa:4b:30:89:95:8d:6e: eb:07:fb:58:70:63:df:1e:96:74:83:94:16:20:43: 32:48:a5:1f:44:bd:94:10:f9:f8:a8:b6:74:6d:f2: 68:e9:fd:a3:7b:f0:f1:5d:cd:fc:56:cd:11:cb:80: 87:34:1b:e3:54:04:0f:2a:5a:f6:a0:a5:6a:42:92: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:14:B7:DD:4F:17:26:20:A3:DE:4C:6D:B2:2A:43:47:43:77:C9:42 X509v3 Authority Key Identifier: keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2f:ed:0b:2d:b3:ce:e3:7b:32:be:ee:54:3e:b9:e8:68:f8: e6:d0:e2:a4:31:c4:1e:99:21:1c:67:6c:53:6e:6f:d4:c5:e4: f8:5b:52:09:a5:14:57:37:85:23:93:f2:5b:89:c9:39:ef:38: 9f:26:20:b5:68:84:c1:fc:0c:dc:dc:82:49:9c:37:ea:f9:e7: 84:a6:22:b1:46:ff:c3:85:e8:60:a4:ce:62:fa:43:ca:41:e5: 62:6f:6d:2f:5f:c3:7e:03:53:da:0c:24:47:77:70:a5:36:73: 58:85:9a:03:f9:0a:59:a0:5d:c0:a9:b3:85:57:8a:f8:e6:9c: 4e:89:47:9f:91:90:25:40:18:bc:a0:2f:37:ea:e2:bd:b3:31: 71:f3:73:0b:ae:3d:83:57:4d:4d:86:7c:f6:43:83:11:19:23: 5f:14:01:47:9c:94:d5:b0:f9:f6:5d:3b:d6:1e:04:5a:18:83: 5a:1a:50:e8:13:f6:67:fa:fd:bf:80:06:3c:ed:f0:31:5b:d5: 4e:c4:d7:0d:6c:3d:fa:d9:b6:0a:a8:aa:50:0f:71:00:b2:d8: d3:34:6a:74:3b:f0:b0:a7:a2:92:1d:b9:e0:da:a4:73:42:39: 6c:45:9d:10:60:cb:69:23:43:5e:c0:76:6d:a1:a7:a7:b0:e0: ef:5b:2c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxxt/uytp2UBRpeuMe0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Nzc5ODdiNGYxYzE3ZDIxNDY1YTM0YTkwYmQwMmI1MmVh NmUwMjcwHhcNMjUxMjI2MDcwMjE2WhcNMjUxMjI3MDcwMjE2WjAzMTEwLwYDVQQD Eyg4NzE0YjdkZDRmMTcyNjIwYTNkZTRjNmRiMjJhNDM0NzQzNzdjOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDCw6IcCnfohtUxt8wM6Pzf7zZOq +lu9toZ9vPi1RSj3dGIS2qas9CQsfKUGF0e8+4ol3yFr6V6NJT82pydp+6p5D6dV 8Szz7uszPX40pTUujaPVBuB5UZcDOexsvjHewLZtCuT6DOe6HA6mVtPXdpGGtaoC TaNf91+MiNkyBDA3tLGbdChRS1R8/vxzAmtTnMeYaQhSuLZ9d78SK+BKVOFPVdf/ 0ZfdtJQph9amoUccDACQXs6APNzTEPpLMImVjW7rB/tYcGPfHpZ0g5QWIEMySKUf RL2UEPn4qLZ0bfJo6f2je/DxXc38Vs0Ry4CHNBvjVAQPKlr2oKVqQpLaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcUt91PFyYgo95MbbIqQ0dDd8lCMB8GA1UdIwQY MBaAFGd3mHtPHBfSFGWjSpC9ArUupuAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUt MTVlNzM4MTFlOTU2LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUtMTVlNzM4MTFlOTU2 LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi/tCy2z zuN7Mr7uVD656Gj45tDipDHEHpkhHGdsU25v1MXk+FtSCaUUVzeFI5PyW4nJOe84 nyYgtWiEwfwM3NyCSZw36vnnhKYisUb/w4XoYKTOYvpDykHlYm9tL1/DfgNT2gwk R3dwpTZzWIWaA/kKWaBdwKmzhVeK+OacTolHn5GQJUAYvKAvN+rivbMxcfNzC649 g1dNTYZ89kODERkjXxQBR5yU1bD59l071h4EWhiDWhpQ6BP2Z/r9v4AGPO3wMVvV TsTXDWw9+tm2CqiqUA9xALLY0zRqdDvwsKeikh254Nqkc0I5bEWdEGDLaSNDXsB2 baGnp7Dg71sskw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:04 2025 by rpki-client