This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json) Hash identifier: IPdLgKcAe7AW0DjteEkRwBA6t3VRJRPYDwSioKCWVbU= Subject key identifier: 42:B1:2F:1E:29:F4:89:6A:0E:4D:94:D1:D1:75:11:0B:C6:80:5C:DA Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d Certificate serial: 019B6AD88715F83529CBF5AC9757CE82722A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft Manifest number: 06B8 Signing time: Mon 29 Dec 2025 16:02:13 +0000 Manifest this update: Mon 29 Dec 2025 16:02:13 +0000 Manifest next update: Tue 30 Dec 2025 16:02:13 +0000 Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: U2SqGx0OsQ78Ilpjb+L7Cr09xl68zS83k3bBjtfDxGU=) 2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:87:15:f8:35:29:cb:f5:ac:97:57:ce:82:72:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d Validity Not Before: Dec 29 16:02:13 2025 GMT Not After : Dec 30 16:02:13 2025 GMT Subject: CN=42b12f1e29f4896a0e4d94d1d175110bc6805cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:14:10:3c:0b:c0:43:1d:2a:33:f1:99:da: ff:1f:81:66:06:00:fd:0e:57:48:85:e6:c4:83:ab: e0:19:06:a0:46:86:da:4d:24:fa:f8:6a:f4:58:74: e1:d7:bd:f2:57:34:a1:04:86:60:ae:31:1b:2a:25: d8:2b:dd:72:7a:80:92:14:0c:45:4e:39:e1:6f:95: eb:fd:ea:f1:64:38:6b:55:91:bc:47:61:a9:11:15: 96:97:f0:9f:8d:59:1d:1d:98:64:8d:00:44:1e:eb: b8:7f:21:3d:24:2d:dd:0b:ef:47:81:e5:92:d6:38: 65:76:5c:f9:02:eb:69:79:85:5c:cd:2a:40:97:72: 7a:40:80:e8:1e:88:30:6a:82:51:b9:27:05:99:28: 43:f7:b6:ea:99:da:31:08:6d:0d:29:fd:ef:fc:b7: 10:cf:4e:ba:e5:a3:ca:56:09:5f:d7:3e:9f:42:33: 32:8b:c4:ac:8d:3e:e1:e7:be:ad:ec:95:b2:9b:be: 79:fe:f9:7a:0f:35:9b:2d:9c:e1:b2:60:33:cd:1d: 94:60:5b:58:4d:19:1e:8f:cf:f1:d7:99:9d:d0:47: a2:df:81:d1:e7:a8:95:17:78:f1:c1:d0:73:f6:95: e3:55:d7:98:5d:3b:a9:3a:c8:ae:52:09:01:15:82: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:2F:1E:29:F4:89:6A:0E:4D:94:D1:D1:75:11:0B:C6:80:5C:DA X509v3 Authority Key Identifier: keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:44:a9:4f:67:15:1d:5c:92:34:a0:42:32:3f:fa:68:87:61: 10:2d:ff:d1:6c:35:57:46:8d:b8:80:eb:21:b4:ec:6d:c6:92: 53:0d:cf:7b:b3:84:8c:7f:2b:f2:d2:25:af:5e:9d:e2:ee:83: 91:84:53:eb:71:0f:47:e8:9a:62:28:61:3e:a8:75:23:2b:74: 20:98:fc:5a:fd:87:eb:fb:fb:20:63:bc:90:ba:bb:83:45:a8: ef:1f:45:12:fa:c4:37:c3:4b:97:89:c4:a8:a4:60:c1:a3:b0: 6f:28:40:84:6c:58:3a:0e:42:17:18:fc:e4:5c:72:54:b9:e6: 5b:9f:de:ea:55:19:e7:1d:63:00:36:02:a8:45:2e:43:89:47: 3c:52:a0:c0:0b:ec:bf:cb:a0:91:c4:30:33:98:13:74:ae:f8: 9e:dc:cd:8b:c6:ab:a1:09:96:7b:8d:ca:b5:d9:15:60:26:83: 18:ca:ae:02:9f:af:88:b4:05:98:ad:71:b9:2a:ed:ff:90:89: 06:b7:62:3c:3f:d3:17:88:7e:ef:2b:f7:32:b9:a1:3a:79:71: 76:db:9d:8b:d2:f8:75:5d:f8:cc:f0:1e:2a:39:a7:3d:d8:6c: 0c:4f:f7:4c:48:4f:95:9f:a0:d2:3e:a1:ba:38:c9:3a:a8:71: ca:0b:b0:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2IcV+DUpy/Wsl1fOgnIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODQ2Yjg0Yzc3OTA1MTIyODFmODBjMjQ4MWJlNGIzMGE2 NWQwOGQwHhcNMjUxMjI5MTYwMjEzWhcNMjUxMjMwMTYwMjEzWjAzMTEwLwYDVQQD Eyg0MmIxMmYxZTI5ZjQ4OTZhMGU0ZDk0ZDFkMTc1MTEwYmM2ODA1Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98UEDwLwEMdKjPxmdr/H4FmBgD9 DldIhebEg6vgGQagRobaTST6+Gr0WHTh173yVzShBIZgrjEbKiXYK91yeoCSFAxF Tjnhb5Xr/erxZDhrVZG8R2GpERWWl/CfjVkdHZhkjQBEHuu4fyE9JC3dC+9HgeWS 1jhldlz5AutpeYVczSpAl3J6QIDoHogwaoJRuScFmShD97bqmdoxCG0NKf3v/LcQ z0665aPKVglf1z6fQjMyi8SsjT7h576t7JWym755/vl6DzWbLZzhsmAzzR2UYFtY TRkej8/x15md0Eei34HR56iVF3jxwdBz9pXjVdeYXTupOsiuUgkBFYItWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKxLx4p9IlqDk2U0dF1EQvGgFzaMB8GA1UdIwQY MBaAFGeEa4THeQUSKB+Awkgb5LMKZdCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQt ODVhMGQxMjM5OTIzLzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQtODVhMGQxMjM5OTIz LzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUSpT2cV HVySNKBCMj/6aIdhEC3/0Ww1V0aNuIDrIbTsbcaSUw3Pe7OEjH8r8tIlr16d4u6D kYRT63EPR+iaYihhPqh1Iyt0IJj8Wv2H6/v7IGO8kLq7g0Wo7x9FEvrEN8NLl4nE qKRgwaOwbyhAhGxYOg5CFxj85FxyVLnmW5/e6lUZ5x1jADYCqEUuQ4lHPFKgwAvs v8ugkcQwM5gTdK74ntzNi8aroQmWe43KtdkVYCaDGMquAp+viLQFmK1xuSrt/5CJ BrdiPD/TF4h+7yv3MrmhOnlxdtudi9L4dV34zPAeKjmnPdhsDE/3TEhPlZ+g0j6h ujjJOqhxyguwfQ== -----END CERTIFICATE-----Generated at Mon Dec 29 17:41:52 2025 by rpki-client