This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json) Hash identifier: 3PbqyeAXD3vV+eawO9U0jTozhbXsVI+19HxagX22xrU= Subject key identifier: D3:1C:5B:2A:BA:E9:51:66:41:35:51:66:8F:02:BE:4B:D3:11:55:8B Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc Certificate serial: 019B42EE78CC76B3E7F2DF2D3BDEF16C5ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft Manifest number: 12D5 Signing time: Sun 21 Dec 2025 22:01:23 +0000 Manifest this update: Sun 21 Dec 2025 22:01:23 +0000 Manifest next update: Mon 22 Dec 2025 22:01:23 +0000 Files and hashes: 1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=) 2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: dKb5xagYg63E4l71iHYhWfp35FL4nSiDL1n49ECohqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:78:cc:76:b3:e7:f2:df:2d:3b:de:f1:6c:5a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc Validity Not Before: Dec 21 22:01:23 2025 GMT Not After : Dec 22 22:01:23 2025 GMT Subject: CN=d31c5b2abae95166413551668f02be4bd311558b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:3c:3a:96:60:4b:ba:ee:ac:e1:dd:58:e2: 13:3d:8c:b1:71:d1:9e:d3:67:74:c3:50:a8:2e:a4: 0c:b0:06:8e:8a:a9:a6:73:a9:e9:59:65:fe:9b:ee: a8:b7:12:38:82:76:e3:32:ca:fb:d3:8e:97:5c:e1: 69:52:02:76:bb:71:07:62:93:a5:fd:fc:e9:fb:5e: 5c:1b:c7:66:3a:d4:2a:a3:72:52:b9:63:a5:e3:d0: 63:04:22:27:31:77:f2:48:cc:ae:69:46:10:45:35: 08:17:9c:7d:7a:83:79:ee:1a:b2:63:c0:09:12:f6: 6c:25:1c:1c:57:db:2b:fa:6b:17:9f:61:f7:f0:6b: ce:26:7a:13:96:45:cf:c8:71:52:7e:31:94:ad:91: 14:27:18:3b:d2:44:b7:7c:d9:aa:32:54:f8:39:05: 6b:cc:2f:f2:6f:a9:d4:4d:2a:98:4d:d1:34:e1:30: 1c:b1:a0:5d:a0:a7:5a:00:39:14:b3:0d:39:45:a3: 56:24:18:dd:8a:e3:b9:df:59:3d:cb:d0:06:35:28: 03:6b:6f:b3:a7:e6:24:17:2e:7f:0d:9f:eb:2f:6b: 1a:1e:15:11:54:58:df:81:c0:78:0b:d8:9e:a3:4b: f9:6a:00:a3:5f:0a:3e:68:ac:fb:d9:03:16:fb:92: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:5B:2A:BA:E9:51:66:41:35:51:66:8F:02:BE:4B:D3:11:55:8B X509v3 Authority Key Identifier: keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:72:3e:4f:3c:3c:5a:7a:23:62:c7:0e:e3:ab:c8:f4:33:16: a9:30:0b:c8:10:28:d1:6c:bf:7a:80:5e:88:c4:52:cd:78:01: 50:36:5c:40:78:36:09:05:52:8f:00:28:9f:32:03:1c:16:3d: 2b:90:65:74:4b:80:f9:a8:64:14:bc:96:88:a8:c7:24:5b:58: 55:96:f0:1a:d8:b1:e0:dd:2b:4a:fe:ee:b5:fa:65:45:94:7b: 0a:bd:34:87:d3:c2:58:62:22:83:39:d5:07:ad:44:e8:16:9a: 27:1e:b3:be:c5:e6:19:0c:22:21:7d:e7:f1:0d:e2:09:60:50: 42:a5:b0:23:48:33:2b:c1:87:04:97:56:70:fa:d2:dc:84:24: 9a:65:55:15:55:03:e9:02:57:fb:af:86:6d:34:bd:88:88:ac: fc:4f:26:b1:21:1f:a5:30:a9:90:2b:5d:45:0e:75:9e:5b:a7: 8a:d7:e4:22:78:23:82:1a:0e:b0:c1:e6:08:c6:45:73:19:65: dc:59:e7:5c:1b:0c:df:3f:f7:89:70:41:85:98:41:15:64:96: 57:ea:9f:5d:15:78:e9:09:cb:a3:d0:f1:63:06:5e:0c:9c:3e: d1:5b:11:63:0d:07:98:fe:cb:03:2f:4e:f7:0f:ef:13:91:7b: 62:b0:bd:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7njMdrPn8t8tO97xbFrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODM3NWMzMjFkZWY5MjY1OTgzZTIxOTRkNDBiYTk3YWZl N2YxY2MwHhcNMjUxMjIxMjIwMTIzWhcNMjUxMjIyMjIwMTIzWjAzMTEwLwYDVQQD EyhkMzFjNWIyYWJhZTk1MTY2NDEzNTUxNjY4ZjAyYmU0YmQzMTE1NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW48OpZgS7rurOHdWOITPYyxcdGe 02d0w1CoLqQMsAaOiqmmc6npWWX+m+6otxI4gnbjMsr7046XXOFpUgJ2u3EHYpOl /fzp+15cG8dmOtQqo3JSuWOl49BjBCInMXfySMyuaUYQRTUIF5x9eoN57hqyY8AJ EvZsJRwcV9sr+msXn2H38GvOJnoTlkXPyHFSfjGUrZEUJxg70kS3fNmqMlT4OQVr zC/yb6nUTSqYTdE04TAcsaBdoKdaADkUsw05RaNWJBjdiuO531k9y9AGNSgDa2+z p+YkFy5/DZ/rL2saHhURVFjfgcB4C9ieo0v5agCjXwo+aKz72QMW+5J/2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMcWyq66VFmQTVRZo8CvkvTEVWLMB8GA1UdIwQY MBaAFM+DdcMh3vkmWYPiGU1Aupev5/HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUt ZTBjN2I5NmI1N2YyLzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUtZTBjN2I5NmI1N2Yy LzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXI+Tzw8 WnojYscO46vI9DMWqTALyBAo0Wy/eoBeiMRSzXgBUDZcQHg2CQVSjwAonzIDHBY9 K5BldEuA+ahkFLyWiKjHJFtYVZbwGtix4N0rSv7utfplRZR7Cr00h9PCWGIigznV B61E6BaaJx6zvsXmGQwiIX3n8Q3iCWBQQqWwI0gzK8GHBJdWcPrS3IQkmmVVFVUD 6QJX+6+GbTS9iIis/E8msSEfpTCpkCtdRQ51nlunitfkIngjghoOsMHmCMZFcxll 3FnnXBsM3z/3iXBBhZhBFWSWV+qfXRV46QnLo9DxYwZeDJw+0VsRYw0HmP7LAy9O 9w/vE5F7YrC93g== -----END CERTIFICATE-----Generated at Mon Dec 22 06:27:32 2025 by rpki-client