This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json) Hash identifier: j0xuiW9B0drusYu6IRBVYwoc11IBz4Dsj6RLlyRSDHk= Subject key identifier: A3:9E:63:38:DD:76:DB:57:0E:E2:68:43:75:CA:82:0C:9A:5B:4A:6D Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc Certificate serial: 019B3D2363FBCCC14A224A2CB5D260D4EA65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft Manifest number: 12D2 Signing time: Sat 20 Dec 2025 19:01:27 +0000 Manifest this update: Sat 20 Dec 2025 19:01:27 +0000 Manifest next update: Sun 21 Dec 2025 19:01:27 +0000 Files and hashes: 1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=) 2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: Ag1/8HyP/llnV24f7E1IUYbFyZ2H0wmFoJ/grHas3cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:63:fb:cc:c1:4a:22:4a:2c:b5:d2:60:d4:ea:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc Validity Not Before: Dec 20 19:01:27 2025 GMT Not After : Dec 21 19:01:27 2025 GMT Subject: CN=a39e6338dd76db570ee2684375ca820c9a5b4a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:70:d0:d3:72:93:10:a8:72:4c:73:f1:59: da:7a:82:2d:48:77:08:66:0f:7f:f4:16:d1:f6:db: fd:ee:f8:83:77:de:07:11:d8:3d:7d:00:ba:46:aa: 5a:59:0b:fb:fc:3c:4d:bc:07:93:9e:cf:de:4d:60: 12:2a:d9:bc:38:40:f7:b1:9b:d4:93:c1:39:0a:19: 59:af:98:6a:c8:c7:f3:9e:d2:a2:46:2a:87:0f:49: ac:c9:43:50:1c:ee:25:e7:24:e6:75:79:12:e1:79: fa:44:26:c5:ea:76:b7:8a:73:d0:a5:a4:45:05:be: 16:f4:c5:79:dc:e1:de:fb:ab:d5:67:61:0a:ba:11: 40:3b:de:fa:85:41:66:0f:38:59:d8:35:3f:25:c5: 4c:e9:54:98:72:d6:3b:e3:5b:2f:60:55:47:b2:11: 34:a5:ba:da:19:68:e9:66:cd:85:1c:29:3d:66:1f: 2c:59:3b:67:4a:2c:e7:1e:fb:32:8a:d3:45:70:ae: ab:33:83:f6:30:9e:28:50:af:44:da:99:9a:e6:84: 5e:ad:eb:ee:c7:5c:c7:cb:05:cd:22:c4:43:1e:53: eb:96:b1:f6:6b:7b:f0:ae:f1:52:3f:64:e5:d0:74: 0c:b9:80:04:fa:04:81:07:64:06:7f:8e:d8:03:fa: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:63:38:DD:76:DB:57:0E:E2:68:43:75:CA:82:0C:9A:5B:4A:6D X509v3 Authority Key Identifier: keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9e:d4:ea:c3:95:df:9a:a6:fe:67:0a:36:21:e1:61:58:9e: f0:7d:72:b6:6a:e6:02:41:56:66:60:3c:c8:0e:68:26:58:a5: d0:d9:25:e1:bf:68:c6:85:e0:e3:8a:f8:c6:be:c0:9e:3c:44: 58:d8:55:a6:0c:61:be:e2:a2:93:0a:f6:f1:19:24:79:c3:a2: b2:af:c7:cf:d2:bf:09:35:fd:8c:0b:f1:fb:3f:ae:44:9f:cd: f3:05:0f:cf:b4:10:d0:9e:9d:ff:77:a9:6b:44:de:33:b3:06: c6:e5:ac:99:0c:83:39:70:5e:43:51:9c:23:05:c8:d8:fb:13: 60:3f:a0:b9:c6:bc:79:ce:6c:bb:3e:c9:d3:5a:bb:93:62:ed: e5:3b:f2:a1:a8:ff:42:2d:5a:5d:0a:96:ef:db:8b:dc:40:15: 4a:ac:4b:68:4a:79:5d:b5:74:f3:44:4c:77:bf:49:1e:ed:4a: 04:f4:28:80:ea:e9:09:d7:b2:c2:33:be:d4:06:3b:87:0b:70: cc:95:c5:90:2d:a4:c3:2d:e9:10:e2:7b:ea:bd:8e:42:26:dc: 35:47:59:04:b2:e9:92:f1:64:85:a6:79:4d:6c:d1:23:24:a1: bf:02:cb:45:cd:6d:4e:49:07:cf:48:c8:f6:6e:70:b3:32:15: d2:77:26:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2P7zMFKIkostdJg1OplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODM3NWMzMjFkZWY5MjY1OTgzZTIxOTRkNDBiYTk3YWZl N2YxY2MwHhcNMjUxMjIwMTkwMTI3WhcNMjUxMjIxMTkwMTI3WjAzMTEwLwYDVQQD EyhhMzllNjMzOGRkNzZkYjU3MGVlMjY4NDM3NWNhODIwYzlhNWI0YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdw0NNykxCockxz8VnaeoItSHcI Zg9/9BbR9tv97viDd94HEdg9fQC6RqpaWQv7/DxNvAeTns/eTWASKtm8OED3sZvU k8E5ChlZr5hqyMfzntKiRiqHD0msyUNQHO4l5yTmdXkS4Xn6RCbF6na3inPQpaRF Bb4W9MV53OHe+6vVZ2EKuhFAO976hUFmDzhZ2DU/JcVM6VSYctY741svYFVHshE0 pbraGWjpZs2FHCk9Zh8sWTtnSiznHvsyitNFcK6rM4P2MJ4oUK9E2pma5oRerevu x1zHywXNIsRDHlPrlrH2a3vwrvFSP2Tl0HQMuYAE+gSBB2QGf47YA/oe/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOeYzjddttXDuJoQ3XKggyaW0ptMB8GA1UdIwQY MBaAFM+DdcMh3vkmWYPiGU1Aupev5/HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUt ZTBjN2I5NmI1N2YyLzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUtZTBjN2I5NmI1N2Yy LzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZ7U6sOV 35qm/mcKNiHhYVie8H1ytmrmAkFWZmA8yA5oJlil0Nkl4b9oxoXg44r4xr7AnjxE WNhVpgxhvuKikwr28RkkecOisq/Hz9K/CTX9jAvx+z+uRJ/N8wUPz7QQ0J6d/3ep a0TeM7MGxuWsmQyDOXBeQ1GcIwXI2PsTYD+guca8ec5suz7J01q7k2Lt5Tvyoaj/ Qi1aXQqW79uL3EAVSqxLaEp5XbV080RMd79JHu1KBPQogOrpCdeywjO+1AY7hwtw zJXFkC2kwy3pEOJ76r2OQibcNUdZBLLpkvFkhaZ5TWzRIyShvwLLRc1tTkkHz0jI 9m5wszIV0ncmYg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:11:38 2025 by rpki-client