This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json) Hash identifier: kEx3DE90khSchr5Wfd3H883L6kYIUlmFM+Wex/xaJyc= Subject key identifier: 27:D0:C1:4B:B4:43:F7:C5:1C:18:CE:39:B2:D2:F5:D3:8E:74:E2:F1 Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1 Certificate serial: 019B24764777099C9A228CDFB43231B5C03F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft Manifest number: 148C Signing time: Tue 16 Dec 2025 00:01:29 +0000 Manifest this update: Tue 16 Dec 2025 00:01:29 +0000 Manifest next update: Wed 17 Dec 2025 00:01:29 +0000 Files and hashes: 1: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: eXQ/fczI2jhluHj7V9Bk0+D7r0knLnd00AbvwW06Gg4=) 2: dXyGBX3mrcTpXMaGiqcXeVf8XnQ.roa (hash: d8QiTfzu03DuCut3Jg4KCED9lxPkDuht3lU67gLMMfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:47:77:09:9c:9a:22:8c:df:b4:32:31:b5:c0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1 Validity Not Before: Dec 16 00:01:29 2025 GMT Not After : Dec 17 00:01:29 2025 GMT Subject: CN=27d0c14bb443f7c51c18ce39b2d2f5d38e74e2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:b6:6c:cd:03:42:6a:4f:97:87:b3:71:98: ef:64:a6:0a:64:14:40:f4:ab:f7:83:d3:05:2f:0c: 5b:96:02:35:dc:1e:99:b8:86:7e:84:ce:8e:75:2d: c9:4e:ea:5d:05:5b:73:73:36:9d:e8:0e:73:ac:66: ce:87:a5:ca:62:44:99:ab:cb:dc:a2:95:1d:6d:af: 77:6f:1a:7e:54:f5:4c:d6:bf:ad:04:a7:b2:b0:44: f2:b7:91:ef:34:34:e1:7d:ea:72:3d:0d:b3:40:2f: 50:30:a2:47:a7:3b:76:2c:01:3a:ff:4a:63:a8:72: 56:cb:81:91:94:07:e9:d3:16:90:8a:87:f7:fc:b4: 3d:9a:de:8f:c2:55:57:55:d0:0d:20:6a:fb:eb:82: db:4f:c5:3b:ae:13:d7:bc:ff:cb:ee:0e:d5:1c:cb: 67:bb:fb:14:fb:68:06:23:0f:cd:a3:dd:20:60:59: ff:74:bf:70:d2:83:08:f9:4c:c7:de:85:f7:52:86: 19:5d:2f:6a:52:85:b7:e1:9f:9d:fb:fd:56:6f:81: 51:41:2a:38:b8:e3:f1:0d:02:ab:ae:64:0c:33:c9: 0b:8c:a4:3e:c4:53:83:f5:3f:aa:fd:32:6d:81:3d: cd:b2:a8:ed:95:17:7d:e9:74:f9:0e:b0:d2:e0:0d: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:C1:4B:B4:43:F7:C5:1C:18:CE:39:B2:D2:F5:D3:8E:74:E2:F1 X509v3 Authority Key Identifier: keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b1:e8:9f:d7:2c:e4:60:06:96:0b:b4:28:d3:f8:43:47:30: 1f:35:6d:0e:e4:c5:cb:af:04:8c:a5:e5:72:00:e0:5d:d4:69: 49:1d:76:e1:c3:e4:8a:51:d5:78:f6:66:9d:50:af:4e:9e:05: 00:3f:00:d2:4d:52:1c:14:7d:ab:f2:10:6f:8b:5d:e9:96:f5: 2e:2e:3e:3a:bb:bb:1c:8c:fd:ab:49:09:e8:36:3d:8d:fb:21: 0a:88:f5:09:9b:5f:f5:59:c4:82:3e:fe:85:b4:e6:57:12:94: ab:ff:ab:30:cb:e2:e6:01:ff:7f:e9:53:08:70:9c:61:ad:a2: 1d:f2:61:8e:5a:1e:8e:cf:46:51:88:fe:82:ca:26:a9:6f:8f: 46:33:44:9b:42:9f:48:27:a4:56:4b:ae:38:39:10:06:63:6b: 19:1b:a1:29:75:4b:14:c7:b0:14:32:34:11:ee:0a:2b:66:f5: 03:8d:d2:59:11:b0:aa:9e:72:12:45:47:b2:db:90:93:c5:7b: b7:0e:10:be:50:91:4a:31:c3:b6:f2:32:e9:11:a7:4c:ca:14: 55:87:36:fa:9f:68:e7:f6:46:e2:30:39:e4:e5:6b:eb:34:2a: 59:42:42:ff:03:06:ed:a3:46:ad:ad:96:ab:12:e1:cb:60:c5: 4c:63:ff:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdkd3CZyaIozftDIxtcA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDdmMGZkNjIyYWZkNmJkNGEyZDZjZTBmMWNiY2MwN2E5 YzQxZjEwHhcNMjUxMjE2MDAwMTI5WhcNMjUxMjE3MDAwMTI5WjAzMTEwLwYDVQQD EygyN2QwYzE0YmI0NDNmN2M1MWMxOGNlMzliMmQyZjVkMzhlNzRlMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4K2bM0DQmpPl4ezcZjvZKYKZBRA 9Kv3g9MFLwxblgI13B6ZuIZ+hM6OdS3JTupdBVtzczad6A5zrGbOh6XKYkSZq8vc opUdba93bxp+VPVM1r+tBKeysETyt5HvNDThfepyPQ2zQC9QMKJHpzt2LAE6/0pj qHJWy4GRlAfp0xaQiof3/LQ9mt6PwlVXVdANIGr764LbT8U7rhPXvP/L7g7VHMtn u/sU+2gGIw/No90gYFn/dL9w0oMI+UzH3oX3UoYZXS9qUoW34Z+d+/1Wb4FRQSo4 uOPxDQKrrmQMM8kLjKQ+xFOD9T+q/TJtgT3NsqjtlRd96XT5DrDS4A20DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfQwUu0Q/fFHBjOObLS9dOOdOLxMB8GA1UdIwQY MBaAFGXX8P1iKv1r1KLWzg8cvMB6nEHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYt OGJlNGFkNTc3NzNiLzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYtOGJlNGFkNTc3NzNi LzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrHon9cs 5GAGlgu0KNP4Q0cwHzVtDuTFy68EjKXlcgDgXdRpSR124cPkilHVePZmnVCvTp4F AD8A0k1SHBR9q/IQb4td6Zb1Li4+Oru7HIz9q0kJ6DY9jfshCoj1CZtf9VnEgj7+ hbTmVxKUq/+rMMvi5gH/f+lTCHCcYa2iHfJhjloejs9GUYj+gsomqW+PRjNEm0Kf SCekVkuuODkQBmNrGRuhKXVLFMewFDI0Ee4KK2b1A43SWRGwqp5yEkVHstuQk8V7 tw4QvlCRSjHDtvIy6RGnTMoUVYc2+p9o5/ZG4jA55OVr6zQqWUJC/wMG7aNGra2W qxLhy2DFTGP/qA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:56:29 2025 by rpki-client