This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json) Hash identifier: 5J+qS58VIDMq0tW+WgsSFKi2StmuT+2iVr7WB2S9tRI= Subject key identifier: 7F:3F:41:59:81:D9:11:B7:A3:AF:4F:8D:95:55:58:03:91:48:71:78 Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Certificate serial: 019B75922654DA8D74DB12B616D09D1BE132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft Manifest number: 14CB Signing time: Wed 31 Dec 2025 18:01:10 +0000 Manifest this update: Wed 31 Dec 2025 18:01:10 +0000 Manifest next update: Thu 01 Jan 2026 18:01:10 +0000 Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=) 2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=) 3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=) 4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: JtanndIxTnIH7VPZ7+GaOhHSPI+D7ITuuvI3ud+XySc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:92:26:54:da:8d:74:db:12:b6:16:d0:9d:1b:e1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Validity Not Before: Dec 31 18:01:10 2025 GMT Not After : Jan 1 18:01:10 2026 GMT Subject: CN=7f3f415981d911b7a3af4f8d9555580391487178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:90:92:a0:9b:2d:8b:32:15:9c:e8:65:65: fa:74:58:3b:a2:b6:e8:08:37:e2:37:48:1e:4b:25: 15:61:27:f6:ca:56:87:f3:0d:d6:1c:23:24:95:2c: 33:c2:12:30:4f:eb:36:50:13:3b:57:49:cf:cd:cb: 42:53:35:77:27:97:2f:bd:57:54:e0:c5:46:90:d2: 63:51:8d:d3:fb:74:8a:8b:63:7f:0c:de:64:40:fc: 8f:45:60:10:6b:3b:76:2c:e2:df:c6:69:30:11:26: 47:76:63:2d:35:f6:5c:5e:bb:36:6b:f7:30:cd:39: 43:cd:f8:1e:6e:f1:cd:81:65:e7:3c:5c:ae:dc:1d: af:45:b9:22:08:6e:99:3b:2c:d1:88:57:ec:e1:9e: c3:15:9d:ed:c8:be:71:d4:d1:da:86:0b:38:4a:c1: 8f:e0:31:f9:8f:67:29:fa:fd:6e:12:85:c4:1a:d8: 73:61:e6:57:d8:b4:68:dc:47:f2:60:8d:ed:3b:92: b5:5b:d9:e1:54:83:8d:2e:a7:ae:29:f3:88:11:b9: df:08:e6:d1:61:ed:ea:b0:bf:ce:24:67:7a:03:cf: 14:37:2a:ea:db:8b:84:90:25:06:b3:c3:31:0c:f4: 84:63:ec:97:1a:4a:e7:d6:c4:de:89:a1:fb:54:10: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3F:41:59:81:D9:11:B7:A3:AF:4F:8D:95:55:58:03:91:48:71:78 X509v3 Authority Key Identifier: keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2c:22:93:33:28:5c:48:94:ba:02:11:17:da:7f:8c:f9:00: af:69:a0:31:c9:95:17:c9:47:c0:f4:c3:32:3b:0d:14:b1:03: c1:69:6a:21:bf:78:e2:63:0e:30:3b:84:49:ef:b4:fb:01:8a: 8e:cb:f2:66:bb:44:93:5c:8d:6d:78:e0:45:a9:e7:6c:80:4a: 06:5b:f8:5f:e9:82:fd:c7:dd:cd:df:23:98:4b:f6:32:a4:3a: 2a:30:51:65:10:7a:41:02:14:04:63:50:b3:9a:57:36:4c:49: f6:4d:9c:51:c9:52:74:ee:25:9b:83:bd:23:a1:9c:4c:b6:cd: 97:a1:02:99:cb:dc:f8:35:b2:9a:36:59:28:48:bd:d7:21:f0: d1:d8:eb:8e:03:2b:0d:34:cc:82:a2:17:5d:52:76:36:1e:1b: e7:a7:17:3c:2c:4a:a2:ba:7f:e6:11:36:35:2d:b1:71:1f:5e: 94:6a:05:b4:1d:15:b7:7f:2a:a1:4c:98:ad:f2:cd:df:d9:dc: 85:5b:99:b4:7e:57:fb:b9:f9:17:a9:ec:f4:f3:96:86:a8:30: 6e:2a:85:44:e0:3d:fc:60:0d:19:ef:25:0c:79:27:a0:01:3e: a1:5a:9f:61:b0:72:bd:76:b8:f4:32:b6:35:20:9c:85:60:05: 5f:83:bb:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1kiZU2o102xK2FtCdG+EyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx Njk1MDYwHhcNMjUxMjMxMTgwMTEwWhcNMjYwMTAxMTgwMTEwWjAzMTEwLwYDVQQD Eyg3ZjNmNDE1OTgxZDkxMWI3YTNhZjRmOGQ5NTU1NTgwMzkxNDg3MTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOKQkqCbLYsyFZzoZWX6dFg7orbo CDfiN0geSyUVYSf2ylaH8w3WHCMklSwzwhIwT+s2UBM7V0nPzctCUzV3J5cvvVdU 4MVGkNJjUY3T+3SKi2N/DN5kQPyPRWAQazt2LOLfxmkwESZHdmMtNfZcXrs2a/cw zTlDzfgebvHNgWXnPFyu3B2vRbkiCG6ZOyzRiFfs4Z7DFZ3tyL5x1NHahgs4SsGP 4DH5j2cp+v1uEoXEGthzYeZX2LRo3EfyYI3tO5K1W9nhVIONLqeuKfOIEbnfCObR Ye3qsL/OJGd6A88UNyrq24uEkCUGs8MxDPSEY+yXGkrn1sTeiaH7VBACfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8/QVmB2RG3o69PjZVVWAORSHF4MB8GA1UdIwQY MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiwikzMo XEiUugIRF9p/jPkAr2mgMcmVF8lHwPTDMjsNFLEDwWlqIb944mMOMDuESe+0+wGK jsvyZrtEk1yNbXjgRannbIBKBlv4X+mC/cfdzd8jmEv2MqQ6KjBRZRB6QQIUBGNQ s5pXNkxJ9k2cUclSdO4lm4O9I6GcTLbNl6ECmcvc+DWymjZZKEi91yHw0djrjgMr DTTMgqIXXVJ2Nh4b56cXPCxKorp/5hE2NS2xcR9elGoFtB0Vt38qoUyYrfLN39nc hVuZtH5X+7n5F6ns9POWhqgwbiqFROA9/GANGe8lDHknoAE+oVqfYbByvXa49DK2 NSCchWAFX4O7Aw== -----END CERTIFICATE-----Generated at Thu Jan 1 03:54:35 2026 by rpki-client