This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json) Hash identifier: 4k4adVA0iVgc5vpDOCkBpZrfEWLcn3cBi/hzcTqyuUg= Subject key identifier: 93:99:2B:A2:54:85:03:4F:D9:74:FD:D9:5D:2A:22:72:CC:AE:82:35 Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Certificate serial: 019B4513A252E4706DF3AB02B33CED143812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft Manifest number: 0E4F Signing time: Mon 22 Dec 2025 08:01:13 +0000 Manifest this update: Mon 22 Dec 2025 08:01:13 +0000 Manifest next update: Tue 23 Dec 2025 08:01:13 +0000 Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: rOkqNH08CvhAowIgVALgzcSbS3Eusu9cwxJjzAjMw9U=) 2: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:a2:52:e4:70:6d:f3:ab:02:b3:3c:ed:14:38:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Validity Not Before: Dec 22 08:01:13 2025 GMT Not After : Dec 23 08:01:13 2025 GMT Subject: CN=93992ba25485034fd974fdd95d2a2272ccae8235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:cf:02:28:ce:30:7c:0d:79:e6:e6:12:28: 7d:31:1b:fe:c8:9a:8a:01:56:0b:df:b1:f4:43:92: 0a:04:6b:00:3c:e5:9e:db:ea:db:6e:93:7c:c6:a4: 57:86:4e:22:1a:b9:5d:3c:56:30:53:76:36:7a:c7: 7e:48:a9:b1:f6:c1:4c:98:d7:ae:dc:3d:6f:32:01: 93:d9:77:01:24:08:d2:6c:c9:70:8a:d1:ab:5f:88: c0:86:3f:cb:af:70:03:f6:e2:58:11:e3:77:d8:99: bc:77:08:f4:ad:93:ae:8e:f7:cb:6c:3e:54:b9:b4: 2b:49:1a:73:cc:a8:96:32:ef:ad:d6:71:64:44:cb: 86:b8:95:e1:94:6d:24:a3:a0:95:a9:9b:aa:53:c5: c2:fa:fa:ff:cc:4a:f8:64:6e:df:36:59:78:33:79: f3:71:fa:9d:b0:f7:e7:2a:57:4f:1c:fc:66:6f:93: 7e:32:ce:74:11:86:bf:dd:01:b6:1c:a2:b1:88:56: 9c:af:a8:83:e9:bf:76:94:a8:a0:08:8a:fa:3c:77: 5e:2c:32:bb:ff:54:28:36:7d:66:c8:e6:01:2c:9d: d0:d6:38:e7:b0:a6:4b:68:7c:18:16:5c:55:9e:af: 88:b2:d5:99:d6:a8:a3:b2:89:d6:2e:46:65:05:79: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:99:2B:A2:54:85:03:4F:D9:74:FD:D9:5D:2A:22:72:CC:AE:82:35 X509v3 Authority Key Identifier: keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ba:6e:b8:80:3a:63:e7:61:38:2d:87:9f:c8:9f:9d:c1:61: 73:b2:e4:88:c3:d2:5a:ee:59:e7:a9:7c:25:e3:4e:b5:4f:cf: da:85:2f:8d:fa:ac:0c:28:14:87:b7:43:10:65:31:46:a7:34: 73:66:2e:76:b4:65:20:10:05:91:e0:f0:d9:69:47:07:f1:c8: 75:a9:1e:83:b1:df:13:ed:38:2c:05:de:9e:00:2f:64:80:8f: bc:f8:59:70:22:5f:2b:33:dd:bb:00:99:b2:d2:56:5a:b5:5d: 10:8b:b3:68:6b:f1:1c:b7:7d:81:81:1e:be:04:29:33:fe:46: 7f:11:da:78:50:40:4c:03:b7:74:fc:36:6d:e8:c4:11:27:ba: a4:c9:8f:ad:db:73:bb:4c:0a:27:8e:9d:4b:c2:c1:11:4c:cb: 32:97:64:3c:d8:05:b2:58:4d:35:a6:8e:2c:e6:20:e5:a4:f6: b5:b5:39:c7:32:1a:96:14:81:31:81:30:92:02:64:cb:35:91: b2:38:1c:0f:d6:46:05:2f:6e:00:38:12:81:91:2a:ea:93:dd: f1:44:bf:35:ab:ac:03:e6:05:a5:3c:fa:0d:f3:90:ff:05:d5: f7:65:4c:de:fe:11:d0:b3:08:d8:f7:ab:5e:60:1d:20:5b:74: 7d:ca:10:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE6JS5HBt86sCszztFDgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4 OGQ0ZWMwHhcNMjUxMjIyMDgwMTEzWhcNMjUxMjIzMDgwMTEzWjAzMTEwLwYDVQQD Eyg5Mzk5MmJhMjU0ODUwMzRmZDk3NGZkZDk1ZDJhMjI3MmNjYWU4MjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooPPAijOMHwNeebmEih9MRv+yJqK AVYL37H0Q5IKBGsAPOWe2+rbbpN8xqRXhk4iGrldPFYwU3Y2esd+SKmx9sFMmNeu 3D1vMgGT2XcBJAjSbMlwitGrX4jAhj/Lr3AD9uJYEeN32Jm8dwj0rZOujvfLbD5U ubQrSRpzzKiWMu+t1nFkRMuGuJXhlG0ko6CVqZuqU8XC+vr/zEr4ZG7fNll4M3nz cfqdsPfnKldPHPxmb5N+Ms50EYa/3QG2HKKxiFacr6iD6b92lKigCIr6PHdeLDK7 /1QoNn1myOYBLJ3Q1jjnsKZLaHwYFlxVnq+IstWZ1qijsonWLkZlBXkSQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOZK6JUhQNP2XT92V0qInLMroI1MB8GA1UdIwQY MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5 LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprpuuIA6 Y+dhOC2Hn8ifncFhc7LkiMPSWu5Z56l8JeNOtU/P2oUvjfqsDCgUh7dDEGUxRqc0 c2YudrRlIBAFkeDw2WlHB/HIdakeg7HfE+04LAXengAvZICPvPhZcCJfKzPduwCZ stJWWrVdEIuzaGvxHLd9gYEevgQpM/5GfxHaeFBATAO3dPw2bejEESe6pMmPrdtz u0wKJ46dS8LBEUzLMpdkPNgFslhNNaaOLOYg5aT2tbU5xzIalhSBMYEwkgJkyzWR sjgcD9ZGBS9uADgSgZEq6pPd8US/NausA+YFpTz6DfOQ/wXV92VM3v4R0LMI2Per XmAdIFt0fcoQtQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:32:37 2025 by rpki-client