This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json) Hash identifier: XCgWWEzBRxXYHKhGi4ckYg7eYhqmbjMM7UpGMfE6SJQ= Subject key identifier: D0:52:2D:18:9C:44:C0:41:31:38:A0:F9:31:D8:9D:3F:95:A8:A0:2D Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c Certificate serial: 019B4E4DEA86FEEE9C1828AB8583BDF54762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft Manifest number: 0E85 Signing time: Wed 24 Dec 2025 03:01:27 +0000 Manifest this update: Wed 24 Dec 2025 03:01:27 +0000 Manifest next update: Thu 25 Dec 2025 03:01:27 +0000 Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=) 2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: 8UUGhp73rlW8vKEeprhf8bqw6Cl21XIq6fVfcQqyg1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:ea:86:fe:ee:9c:18:28:ab:85:83:bd:f5:47:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c Validity Not Before: Dec 24 03:01:27 2025 GMT Not After : Dec 25 03:01:27 2025 GMT Subject: CN=d0522d189c44c0413138a0f931d89d3f95a8a02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:56:76:8c:46:89:39:80:54:f5:40:e7:a8: 24:df:7e:0d:2d:ed:d6:95:37:c9:84:86:a3:7c:f8: 5b:fd:ba:d7:09:74:6a:f5:ec:8d:ca:58:b9:4d:c5: 8e:19:04:7b:ed:22:67:89:27:7a:02:db:47:5a:c1: ad:eb:e8:17:3d:59:27:96:36:68:10:f3:4e:3b:4f: 72:c8:77:5b:63:9d:d6:05:9e:ac:19:ae:cf:e6:d6: 16:c7:4a:61:d9:f7:22:f7:b9:b6:18:bd:e0:9b:f5: 81:8d:3a:59:27:aa:2e:3c:ca:08:20:a6:46:47:0f: ad:2e:6b:a5:04:e0:2c:6b:fa:8e:01:6f:0c:87:68: 5c:65:89:df:a1:60:3f:05:1c:73:a8:1d:02:11:26: bb:9e:56:2e:1d:ed:e2:1b:a5:f3:c3:01:f6:94:ec: 8a:d0:48:87:e8:86:74:7a:30:49:10:5f:b2:ad:83: 96:2c:11:27:db:e8:f3:49:90:04:10:89:94:35:4b: 70:b8:b2:fb:4f:29:0b:a9:74:65:b5:52:97:18:41: e6:08:77:70:23:0b:1d:07:4f:bf:48:75:6a:fc:f6: ab:69:1d:2c:c9:03:b7:cb:e4:7a:16:0b:55:cc:ae: ef:7c:02:90:25:6e:b3:51:4b:1f:0f:41:cf:59:b2: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:52:2D:18:9C:44:C0:41:31:38:A0:F9:31:D8:9D:3F:95:A8:A0:2D X509v3 Authority Key Identifier: keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:30:fc:72:24:29:3c:a1:df:39:a7:8f:f4:53:a1:94:64:14: 1f:7b:26:da:ed:d6:71:63:9b:c7:af:1c:23:64:44:17:ff:2e: 94:26:72:f3:7b:d5:ca:2f:3b:b0:a1:5d:37:12:a8:8f:f3:d6: 54:9a:9e:52:8a:70:00:e7:05:ad:4c:f3:37:a0:b3:3e:90:d4: 28:99:46:7f:94:c4:ee:37:f3:9d:99:79:90:55:52:03:aa:55: ce:15:1c:53:37:0e:73:d2:bb:f8:45:61:34:2f:45:b4:cf:fb: 9f:f3:05:01:4f:7d:47:88:34:7c:3b:91:03:d8:f8:ab:3e:0b: 63:a4:de:e3:ab:ec:5d:5e:42:1e:d1:55:a2:6c:e3:90:52:9e: 53:84:54:2a:36:87:84:91:64:cc:a5:a5:c7:1c:39:a7:f3:b2: af:01:8e:35:ac:80:f4:16:cc:de:4d:56:5e:e6:0e:80:1f:31: c3:4f:28:f6:76:8a:02:ba:70:77:9f:ad:af:8d:b2:55:f7:3f: 00:20:4a:43:b5:59:7e:56:e4:98:78:9a:9c:6c:f9:60:e4:d7: 9c:92:23:b2:7f:d3:5e:45:5b:48:b7:85:9a:e2:c5:c6:94:aa: fb:0e:38:9d:3e:f4:ec:eb:23:da:3f:40:48:9e:b2:f4:29:a8: 78:a1:50:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTeqG/u6cGCirhYO99UdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDA0NWMxM2MwM2RjYjM3M2QyYTdkODVkMWUwMWI2ZTBh YzdlMWMwHhcNMjUxMjI0MDMwMTI3WhcNMjUxMjI1MDMwMTI3WjAzMTEwLwYDVQQD EyhkMDUyMmQxODljNDRjMDQxMzEzOGEwZjkzMWQ4OWQzZjk1YThhMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsxWdoxGiTmAVPVA56gk334NLe3W lTfJhIajfPhb/brXCXRq9eyNyli5TcWOGQR77SJniSd6AttHWsGt6+gXPVknljZo EPNOO09yyHdbY53WBZ6sGa7P5tYWx0ph2fci97m2GL3gm/WBjTpZJ6ouPMoIIKZG Rw+tLmulBOAsa/qOAW8Mh2hcZYnfoWA/BRxzqB0CESa7nlYuHe3iG6XzwwH2lOyK 0EiH6IZ0ejBJEF+yrYOWLBEn2+jzSZAEEImUNUtwuLL7TykLqXRltVKXGEHmCHdw IwsdB0+/SHVq/ParaR0syQO3y+R6FgtVzK7vfAKQJW6zUUsfD0HPWbKr8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBSLRicRMBBMTig+THYnT+VqKAtMB8GA1UdIwQY MBaAFGfQRcE8A9yzc9Kn2F0eAbbgrH4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMt MTZmZjcyM2FmMzM1LzEvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMtMTZmZjcyM2FmMzM1 LzEvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjD8ciQp PKHfOaeP9FOhlGQUH3sm2u3WcWObx68cI2REF/8ulCZy83vVyi87sKFdNxKoj/PW VJqeUopwAOcFrUzzN6CzPpDUKJlGf5TE7jfznZl5kFVSA6pVzhUcUzcOc9K7+EVh NC9FtM/7n/MFAU99R4g0fDuRA9j4qz4LY6Te46vsXV5CHtFVomzjkFKeU4RUKjaH hJFkzKWlxxw5p/OyrwGONayA9BbM3k1WXuYOgB8xw08o9naKArpwd5+tr42yVfc/ ACBKQ7VZflbkmHianGz5YOTXnJIjsn/TXkVbSLeFmuLFxpSq+w44nT707Osj2j9A SJ6y9CmoeKFQ8A== -----END CERTIFICATE-----Generated at Wed Dec 24 11:12:29 2025 by rpki-client