This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json) Hash identifier: XN5hFcTrJNg34irEfiWgejOZZCTWbWwuxixscO5lagM= Subject key identifier: 8A:EF:60:D0:1B:44:BD:68:72:2F:16:B6:C8:6E:7B:DD:A9:71:71:88 Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Certificate serial: 019B22F58D62AC4F472FF18B871570A86C44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft Manifest number: 178E Signing time: Mon 15 Dec 2025 17:01:16 +0000 Manifest this update: Mon 15 Dec 2025 17:01:16 +0000 Manifest next update: Tue 16 Dec 2025 17:01:16 +0000 Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: No1DbBVT9vrgDRMDbQdG/C64EyW+5wBSaGvEfqMjqb0=) 2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:8d:62:ac:4f:47:2f:f1:8b:87:15:70:a8:6c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Validity Not Before: Dec 15 17:01:16 2025 GMT Not After : Dec 16 17:01:16 2025 GMT Subject: CN=8aef60d01b44bd68722f16b6c86e7bdda9717188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:80:c7:db:56:d2:65:f6:8e:c3:71:5a:16: df:18:f4:22:ef:51:f2:e3:23:f0:80:62:8d:a7:d8: 8f:e7:0d:b0:12:02:98:09:b0:b0:5e:6c:5e:9f:58: e9:32:0f:ca:73:3b:a7:b2:97:a2:52:80:03:47:50: 55:d3:2c:52:4e:16:5e:d4:87:b5:ac:5c:ae:be:16: b8:e4:07:9d:e2:eb:32:15:fb:31:b2:7c:89:90:d1: 9e:a6:0d:0b:fe:50:45:ea:84:ef:f7:2d:1b:27:f9: fb:37:83:2f:94:c0:05:75:08:bc:44:13:2a:e9:ef: 10:26:60:b9:db:a8:f9:b1:38:37:c8:8f:2b:99:04: 81:d6:ad:d8:62:4d:eb:d4:be:92:03:e2:9c:96:76: bb:bc:6e:f9:87:96:d2:a0:7a:33:11:d3:1c:39:5a: a5:12:61:62:95:0d:19:1c:7c:f9:1a:61:ae:15:ab: 65:d4:9e:13:ea:4b:40:d5:11:ba:7b:40:c6:78:a8: e0:88:b9:59:44:1c:6b:1f:b7:09:7e:39:fb:95:a4: 3f:09:ea:e5:a6:b5:d7:43:cf:1a:5f:2b:a0:05:09: b4:b6:e6:11:78:2b:ef:15:f9:63:26:41:37:8b:63: da:50:2d:c4:16:ab:11:29:bb:79:8f:8b:ad:9b:9f: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EF:60:D0:1B:44:BD:68:72:2F:16:B6:C8:6E:7B:DD:A9:71:71:88 X509v3 Authority Key Identifier: keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d4:2b:43:cd:4d:25:7d:e4:87:c9:69:4b:c5:24:00:da:c7: f1:a9:49:0e:fd:97:7e:1b:38:9f:cf:91:e8:55:7d:99:11:1d: 44:c3:49:9c:9e:eb:f4:f0:53:84:1f:65:20:79:93:2a:aa:8c: 14:25:30:c5:37:9a:01:e1:5a:24:be:3c:d1:2d:6c:71:54:c4: d2:98:e3:bf:11:e3:37:12:d9:f5:05:f2:f7:7b:25:be:2d:be: 5a:4c:e3:fd:3e:56:f3:39:12:5b:aa:ae:9d:33:21:4c:d1:9a: 8c:06:4e:e5:d6:ba:ea:07:10:2c:11:0f:94:ab:cd:3a:2c:36: 33:bb:9c:e8:42:9f:eb:d3:9b:c6:2a:4a:32:c0:8c:e6:b1:d1: 7a:96:06:0a:ae:aa:25:55:b7:2e:0e:fd:a8:b0:0c:45:cb:9f: b1:9c:07:aa:25:b8:4b:f3:29:e8:4d:fb:dc:b7:45:c0:73:09: 8d:79:93:d7:28:89:b9:20:95:65:c7:4b:33:83:b3:d6:9e:a6: d5:fa:13:f6:de:da:97:e2:be:73:13:6e:f3:84:3c:1e:fb:b7: 8e:53:2a:9e:07:f6:ca:47:1f:37:e6:29:8c:95:fd:a0:15:b7: bc:9d:d7:70:4b:df:42:a5:81:10:33:90:f7:5e:e8:37:8d:fe: 34:a0:ab:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Y1irE9HL/GLhxVwqGxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh NjcwNGQwHhcNMjUxMjE1MTcwMTE2WhcNMjUxMjE2MTcwMTE2WjAzMTEwLwYDVQQD Eyg4YWVmNjBkMDFiNDRiZDY4NzIyZjE2YjZjODZlN2JkZGE5NzE3MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UqAx9tW0mX2jsNxWhbfGPQi71Hy 4yPwgGKNp9iP5w2wEgKYCbCwXmxen1jpMg/KczunspeiUoADR1BV0yxSThZe1Ie1 rFyuvha45Aed4usyFfsxsnyJkNGepg0L/lBF6oTv9y0bJ/n7N4MvlMAFdQi8RBMq 6e8QJmC526j5sTg3yI8rmQSB1q3YYk3r1L6SA+Kclna7vG75h5bSoHozEdMcOVql EmFilQ0ZHHz5GmGuFatl1J4T6ktA1RG6e0DGeKjgiLlZRBxrH7cJfjn7laQ/Cerl prXXQ88aXyugBQm0tuYReCvvFfljJkE3i2PaUC3EFqsRKbt5j4utm5+T4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrvYNAbRL1oci8Wtshue92pcXGIMB8GA1UdIwQY MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt NjY2M2ZhYmExZGQwLzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9QrQ81N JX3kh8lpS8UkANrH8alJDv2Xfhs4n8+R6FV9mREdRMNJnJ7r9PBThB9lIHmTKqqM FCUwxTeaAeFaJL480S1scVTE0pjjvxHjNxLZ9QXy93slvi2+Wkzj/T5W8zkSW6qu nTMhTNGajAZO5da66gcQLBEPlKvNOiw2M7uc6EKf69ObxipKMsCM5rHRepYGCq6q JVW3Lg79qLAMRcufsZwHqiW4S/Mp6E373LdFwHMJjXmT1yiJuSCVZcdLM4Oz1p6m 1foT9t7al+K+cxNu84Q8Hvu3jlMqngf2ykcfN+YpjJX9oBW3vJ3XcEvfQqWBEDOQ 917oN43+NKCrjg== -----END CERTIFICATE-----Generated at Mon Dec 15 21:28:10 2025 by rpki-client