This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json) Hash identifier: tGsWvFItY2l8xcrYc6aqgci3EalntpHmy7wUpkkibjM= Subject key identifier: D7:D0:5E:38:28:E2:C7:80:0C:DD:A7:3F:9B:AD:04:79:B4:34:5F:A1 Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Certificate serial: 019AF577585EDD7F28E74B7E37C6AF0D7EAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft Manifest number: 0F12 Signing time: Sat 06 Dec 2025 21:00:30 +0000 Manifest this update: Sat 06 Dec 2025 21:00:30 +0000 Manifest next update: Sun 07 Dec 2025 21:00:30 +0000 Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: nK+YyPTijj+M0I4F9/SHqvNHLlB9nCuxX3GwDfKP2tE=) 2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:58:5e:dd:7f:28:e7:4b:7e:37:c6:af:0d:7e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Validity Not Before: Dec 6 21:00:30 2025 GMT Not After : Dec 7 21:00:30 2025 GMT Subject: CN=d7d05e3828e2c7800cdda73f9bad0479b4345fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:76:46:46:8b:ed:8e:34:1b:40:3f:36:9e: 4c:a5:fd:74:92:c4:ee:55:1b:ee:cf:c7:9f:0e:76: 3f:17:aa:d6:4f:9b:1d:f2:5f:42:16:30:6b:18:0c: 5f:95:23:22:17:6b:f5:41:58:2c:b5:69:97:d1:55: 01:1b:9b:40:fd:dd:e7:16:96:a8:32:7e:d0:6d:36: 49:be:a7:92:f3:a2:e1:24:8f:5b:cb:3a:12:41:89: b2:01:18:06:13:a8:8f:2e:bd:6b:1a:7a:f3:c6:3f: 4a:8f:b5:13:4e:7e:d6:87:bf:43:d3:3d:04:72:1a: 91:d9:97:a3:f1:30:46:22:42:94:4a:ce:d8:35:da: 9d:ae:e7:ef:e1:c2:8f:14:3e:e7:25:83:ce:97:e9: 80:cd:55:73:14:f6:77:82:ac:af:4d:48:ee:4d:28: d6:3d:21:c6:79:5a:d9:0e:48:61:d7:ca:f0:bd:6a: e7:c3:dd:ae:17:ce:00:3a:dc:6d:31:f0:21:9c:0a: cf:b4:4c:1b:58:2d:e7:dd:14:d5:fc:c0:c6:47:38: f9:e0:fe:fd:87:88:31:61:20:f3:d4:bc:0e:d4:92: 0f:00:41:0a:38:05:ce:ee:b2:ef:a5:4f:aa:63:d5: ec:7d:cb:50:0c:02:4e:e6:06:73:8c:8e:a6:70:d8: 9f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D0:5E:38:28:E2:C7:80:0C:DD:A7:3F:9B:AD:04:79:B4:34:5F:A1 X509v3 Authority Key Identifier: keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:31:3b:3f:c4:88:27:83:32:58:25:a3:29:2f:81:53:50:50: ee:2b:60:78:84:93:32:8d:f7:ab:69:a6:b4:b6:3b:47:d8:fb: e3:53:c5:7b:9f:d0:75:b6:3d:c4:ff:64:88:c4:19:3e:8b:00: cf:b5:5c:d1:80:d8:a3:58:fc:3f:9c:13:71:87:01:89:f6:56: 17:5c:d0:4a:dd:ab:9f:67:a1:11:8e:c7:fa:ab:f8:92:1d:84: b2:d6:04:8d:e9:a5:c8:5c:e7:9a:d7:6c:f8:4a:03:ba:1d:23: 7c:2c:ae:1d:ee:d4:5f:aa:01:4f:ca:a5:8d:04:dd:19:94:38: 36:6c:1f:5d:37:61:67:df:57:8c:8b:c8:a0:a3:98:73:2e:e3: 86:c6:af:ae:ae:a4:d0:a2:34:c1:d3:b5:e2:09:3a:3a:12:44: 57:21:2b:05:62:8b:71:f0:62:6c:5a:59:18:81:42:74:db:60: 57:bb:86:f8:6c:89:4c:e8:c0:2f:8e:f4:8a:1a:31:db:e1:a5: 17:9c:8d:46:93:f7:ed:6d:ee:96:0a:83:0d:e6:77:ec:f4:37: c0:a7:8c:23:5d:16:6d:77:b4:27:54:4b:5c:f4:c4:90:6a:a6: a9:33:f6:b0:7d:95:93:77:eb:e4:a2:53:04:9c:14:e5:ee:de: 4a:d5:b2:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1he3X8o50t+N8avDX6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk OGY2MDAwHhcNMjUxMjA2MjEwMDMwWhcNMjUxMjA3MjEwMDMwWjAzMTEwLwYDVQQD EyhkN2QwNWUzODI4ZTJjNzgwMGNkZGE3M2Y5YmFkMDQ3OWI0MzQ1ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG12RkaL7Y40G0A/Np5Mpf10ksTu VRvuz8efDnY/F6rWT5sd8l9CFjBrGAxflSMiF2v1QVgstWmX0VUBG5tA/d3nFpao Mn7QbTZJvqeS86LhJI9byzoSQYmyARgGE6iPLr1rGnrzxj9Kj7UTTn7Wh79D0z0E chqR2Zej8TBGIkKUSs7YNdqdrufv4cKPFD7nJYPOl+mAzVVzFPZ3gqyvTUjuTSjW PSHGeVrZDkhh18rwvWrnw92uF84AOtxtMfAhnArPtEwbWC3n3RTV/MDGRzj54P79 h4gxYSDz1LwO1JIPAEEKOAXO7rLvpU+qY9XsfctQDAJO5gZzjI6mcNifZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfQXjgo4seADN2nP5utBHm0NF+hMB8GA1UdIwQY MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct YWE5MWM5MmQ1YzQ4LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4 LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzE7P8SI J4MyWCWjKS+BU1BQ7itgeISTMo33q2mmtLY7R9j741PFe5/QdbY9xP9kiMQZPosA z7Vc0YDYo1j8P5wTcYcBifZWF1zQSt2rn2ehEY7H+qv4kh2EstYEjemlyFznmtds +EoDuh0jfCyuHe7UX6oBT8qljQTdGZQ4NmwfXTdhZ99XjIvIoKOYcy7jhsavrq6k 0KI0wdO14gk6OhJEVyErBWKLcfBibFpZGIFCdNtgV7uG+GyJTOjAL470ihox2+Gl F5yNRpP37W3ulgqDDeZ37PQ3wKeMI10WbXe0J1RLXPTEkGqmqTP2sH2Vk3fr5KJT BJwU5e7eStWypg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:29 2025 by rpki-client