This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json) Hash identifier: fneaPf3Y44yPHW1gc5c7H6aI5P5AAv5cfaf+Oq8Hu+w= Subject key identifier: 1B:A6:38:21:06:52:81:D3:F2:A7:3C:98:E1:37:26:7C:4F:97:AB:2D Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Certificate serial: 019B4926B59F70ACE734F3CED484E992CD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft Manifest number: 14B4 Signing time: Tue 23 Dec 2025 03:00:32 +0000 Manifest this update: Tue 23 Dec 2025 03:00:32 +0000 Manifest next update: Wed 24 Dec 2025 03:00:32 +0000 Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=) 2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=) 3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=) 4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: hy3Oyk7vdGy3iFs2QX9xIIGs23oMs4fAKZ66/oleM2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:b5:9f:70:ac:e7:34:f3:ce:d4:84:e9:92:cd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Validity Not Before: Dec 23 03:00:32 2025 GMT Not After : Dec 24 03:00:32 2025 GMT Subject: CN=1ba63821065281d3f2a73c98e137267c4f97ab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:5f:db:f7:d4:74:48:66:7f:c2:54:2d:63: d3:7c:e0:1a:f7:db:85:40:42:68:b2:05:e0:8b:2a: 9d:f6:df:75:6c:b3:bb:e2:e3:0e:6a:1b:6c:0e:36: 60:a8:47:6a:a3:74:8e:6b:d8:86:92:17:66:fc:03: 21:9e:b7:c0:b8:77:2c:30:6c:7d:06:30:8f:15:2c: b9:f8:12:70:04:47:cd:02:5e:ce:47:87:4f:5b:df: 26:a0:18:04:cf:76:e7:19:9d:07:fd:b4:df:8e:66: 3d:d0:04:44:a2:3b:5d:e3:e9:4d:eb:9c:87:65:49: e4:2f:9a:0e:3f:f8:b6:d7:72:3a:10:d1:c0:9a:c9: f4:e8:34:4e:bb:1b:0f:c8:a7:90:ef:b6:ec:d2:d5: b7:08:12:93:1a:1a:dd:9c:30:b4:b6:90:75:c0:8d: b8:9d:b7:c0:d4:72:b2:dc:7c:da:7a:72:63:b1:63: d7:de:19:1b:c9:b9:30:69:fb:1e:dc:7e:06:14:fb: 17:a5:c9:96:9e:8c:8a:ed:f7:fe:28:bb:a6:3f:4a: 00:6d:de:72:22:80:a5:01:cb:08:e4:f1:9f:c0:c0: 7c:bc:35:b3:84:8a:eb:d1:9e:fa:a4:7b:0d:42:5b: 72:d1:7f:86:71:70:90:50:3a:e6:5a:d6:21:31:25: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A6:38:21:06:52:81:D3:F2:A7:3C:98:E1:37:26:7C:4F:97:AB:2D X509v3 Authority Key Identifier: keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:be:8f:28:d4:1b:0a:eb:58:b1:b9:40:9f:26:25:2b:ff:5f: b8:22:39:37:ea:96:cd:02:70:15:1b:76:bf:2d:70:2c:9a:f6: 43:3a:c8:87:50:47:b0:ce:33:54:9e:2f:99:0f:32:0f:c2:6a: 4f:be:85:e4:bc:ec:a0:a4:70:97:9e:d8:9f:42:f7:42:14:ab: 66:7b:f2:da:1c:89:88:a1:ed:04:31:e1:f6:1a:7f:54:17:98: 82:c9:bd:1c:ba:a2:7f:86:e1:e7:7b:56:09:ae:b2:c9:6f:bc: 26:cc:5b:84:b7:aa:99:ba:47:d8:7d:73:13:ab:52:8d:d1:a4: af:10:76:04:82:05:6f:4e:59:05:70:27:84:97:1e:eb:f7:3f: 54:1d:9c:76:f6:fe:b9:2b:6d:1d:c4:1f:33:6f:16:fb:3f:a0: 4c:b2:4f:a5:06:8b:57:fe:94:3a:e0:8e:0c:2e:60:c3:fe:da: fd:87:af:9d:0b:09:b0:59:a6:a2:7a:31:75:f0:2b:d0:60:60: 5f:ae:f4:06:0e:8d:95:ac:51:ca:5d:18:ca:45:c7:34:ad:a8: 7d:d6:af:c0:4a:25:c6:ca:91:14:0e:82:ce:1f:e2:23:1c:88: 93:fd:04:de:13:90:d5:c6:e9:b0:aa:4f:c8:f3:37:d0:31:06: d5:a8:51:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJrWfcKznNPPO1ITpks2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx Njk1MDYwHhcNMjUxMjIzMDMwMDMyWhcNMjUxMjI0MDMwMDMyWjAzMTEwLwYDVQQD EygxYmE2MzgyMTA2NTI4MWQzZjJhNzNjOThlMTM3MjY3YzRmOTdhYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2stf2/fUdEhmf8JULWPTfOAa99uF QEJosgXgiyqd9t91bLO74uMOahtsDjZgqEdqo3SOa9iGkhdm/AMhnrfAuHcsMGx9 BjCPFSy5+BJwBEfNAl7OR4dPW98moBgEz3bnGZ0H/bTfjmY90AREojtd4+lN65yH ZUnkL5oOP/i213I6ENHAmsn06DROuxsPyKeQ77bs0tW3CBKTGhrdnDC0tpB1wI24 nbfA1HKy3HzaenJjsWPX3hkbybkwafse3H4GFPsXpcmWnoyK7ff+KLumP0oAbd5y IoClAcsI5PGfwMB8vDWzhIrr0Z76pHsNQlty0X+GcXCQUDrmWtYhMSV4kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBumOCEGUoHT8qc8mOE3JnxPl6stMB8GA1UdIwQY MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb76PKNQb CutYsblAnyYlK/9fuCI5N+qWzQJwFRt2vy1wLJr2QzrIh1BHsM4zVJ4vmQ8yD8Jq T76F5LzsoKRwl57Yn0L3QhSrZnvy2hyJiKHtBDHh9hp/VBeYgsm9HLqif4bh53tW Ca6yyW+8JsxbhLeqmbpH2H1zE6tSjdGkrxB2BIIFb05ZBXAnhJce6/c/VB2cdvb+ uSttHcQfM28W+z+gTLJPpQaLV/6UOuCODC5gw/7a/YevnQsJsFmmonoxdfAr0GBg X670Bg6NlaxRyl0YykXHNK2ofdavwEolxsqRFA6Czh/iIxyIk/0E3hOQ1cbpsKpP yPM30DEG1ahRFA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:41:14 2025 by rpki-client