This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft File: Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json) Hash identifier: 4V2eCOiwzo2s8Ix/0/6/ztHAYll9Biw/+jADlteeupw= Subject key identifier: 60:EF:2B:13:BA:8E:5D:60:86:35:B4:A8:79:13:7C:7D:D0:E7:76:1E Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52 Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552 Certificate serial: 019B4EF25EE569EF5FADA555466614941DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft Manifest number: 15B8 Signing time: Wed 24 Dec 2025 06:01:05 +0000 Manifest this update: Wed 24 Dec 2025 06:01:05 +0000 Manifest next update: Thu 25 Dec 2025 06:01:05 +0000 Files and hashes: 1: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: k//wKCvDVYOCJjOqLjBT1kgfwL5IDcR2gpM+rbakhJ0=) 2: yojAQ3oth9lVhqX5wg8l8cBEUmI.roa (hash: o7RnG1CkyxwhqBFMnhN8mnO/r8Gaf2uetg2QG+K1/Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:5e:e5:69:ef:5f:ad:a5:55:46:66:14:94:1d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552 Validity Not Before: Dec 24 06:01:05 2025 GMT Not After : Dec 25 06:01:05 2025 GMT Subject: CN=60ef2b13ba8e5d608635b4a879137c7dd0e7761e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:4f:0b:8d:15:1b:5d:87:48:1c:36:40:39: dd:13:4d:fb:4a:da:9b:26:1d:f7:a0:a2:9a:90:a0: 72:79:4a:7c:0d:55:f8:25:4d:ba:52:09:e2:62:3c: af:39:7a:41:11:99:43:de:51:0b:55:a3:90:3c:c6: 91:4c:52:7b:87:fa:56:24:f3:79:88:7e:87:ba:ef: 8b:49:7d:bb:bb:25:af:37:4f:55:15:ca:f0:0c:a0: 64:44:5b:0e:57:05:a4:51:4a:5a:e2:d0:40:05:9a: 17:73:3a:c5:5c:d1:d2:2c:9d:a5:62:a8:a0:a6:3d: 40:1c:09:7c:c5:51:5e:83:f6:9f:b5:27:23:69:07: ba:8a:7b:6c:a2:4d:97:89:9e:d9:09:9f:b3:ab:50: e3:e1:21:19:53:1c:ea:f6:ed:20:5a:03:1b:46:ae: ef:e7:48:1f:89:a7:75:f3:e7:f6:e6:0b:b2:9e:b8: e4:7c:0d:cb:ac:0c:91:1a:ad:ba:1f:68:4b:22:d1: 44:1c:1a:af:83:0b:e9:66:51:df:81:25:f2:dc:a5: 99:76:4e:19:55:d7:d9:4c:2a:fa:bc:7f:a0:d7:ea: bd:0a:5e:a0:6f:02:a6:75:9e:f5:fb:33:53:66:cc: 86:9c:93:c5:e1:f5:ae:d1:33:e1:c5:e5:cf:40:00: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EF:2B:13:BA:8E:5D:60:86:35:B4:A8:79:13:7C:7D:D0:E7:76:1E X509v3 Authority Key Identifier: keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:62:59:54:02:36:a3:72:39:8a:b3:f9:40:af:cb:e6:4e:8e: aa:de:7a:cf:c9:66:75:66:78:36:93:3d:76:d5:f4:d2:bf:a1: 98:53:5a:6a:00:d2:22:99:f3:df:9f:01:a5:b3:78:50:e5:86: 4d:b1:ed:1a:ba:6d:d9:df:ad:24:7f:0f:e9:9d:ff:e4:82:a9: 2f:d9:ec:b8:92:74:33:86:e9:c4:34:79:41:e2:6d:a6:03:8a: 69:92:07:dc:47:43:e3:d1:ae:f7:3c:3f:7a:e9:0f:bd:d5:a7: d7:95:82:91:af:a0:08:69:bf:7f:06:77:bf:cc:5d:0e:10:97: 60:14:09:4e:a4:65:a2:a3:b9:ad:0d:f4:dd:b3:fd:a1:39:c2: 8c:41:5e:7e:cb:23:d3:db:48:96:ec:41:84:8b:70:22:51:a5: 12:98:6a:c8:83:80:78:ed:2b:25:be:40:ad:f9:8f:0e:47:b4: 86:cb:11:1c:93:89:99:9d:dd:88:af:69:81:07:5b:f2:90:f3: 30:11:99:b4:a4:28:df:e5:19:9c:1a:2f:70:f9:0e:f0:c4:28: 38:b3:19:c2:46:de:57:4a:e4:0a:92:2c:13:43:9f:48:b2:4f: f4:9f:a9:d8:82:eb:2b:4a:ac:b1:4d:d3:58:41:a5:bd:d5:9c: cd:de:6c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8l7lae9fraVVRmYUlB3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YTRlYzM4ZjJmZjY5ZDI1MDVmN2Y2MmU5NGMzYmQ3OThi NTg1NTIwHhcNMjUxMjI0MDYwMTA1WhcNMjUxMjI1MDYwMTA1WjAzMTEwLwYDVQQD Eyg2MGVmMmIxM2JhOGU1ZDYwODYzNWI0YTg3OTEzN2M3ZGQwZTc3NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuplPC40VG12HSBw2QDndE037Stqb Jh33oKKakKByeUp8DVX4JU26UgniYjyvOXpBEZlD3lELVaOQPMaRTFJ7h/pWJPN5 iH6Huu+LSX27uyWvN09VFcrwDKBkRFsOVwWkUUpa4tBABZoXczrFXNHSLJ2lYqig pj1AHAl8xVFeg/aftScjaQe6intsok2XiZ7ZCZ+zq1Dj4SEZUxzq9u0gWgMbRq7v 50gfiad18+f25guynrjkfA3LrAyRGq26H2hLItFEHBqvgwvpZlHfgSXy3KWZdk4Z VdfZTCr6vH+g1+q9Cl6gbwKmdZ71+zNTZsyGnJPF4fWu0TPhxeXPQABP2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDvKxO6jl1ghjW0qHkTfH3Q53YeMB8GA1UdIwQY MBaAFGek7Djy/2nSUF9/YulMO9eYtYVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAt ZDQyZDRlOWM3NjdkLzEvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAtZDQyZDRlOWM3Njdk LzEvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGJZVAI2 o3I5irP5QK/L5k6Oqt56z8lmdWZ4NpM9dtX00r+hmFNaagDSIpnz358BpbN4UOWG TbHtGrpt2d+tJH8P6Z3/5IKpL9nsuJJ0M4bpxDR5QeJtpgOKaZIH3EdD49Gu9zw/ eukPvdWn15WCka+gCGm/fwZ3v8xdDhCXYBQJTqRloqO5rQ303bP9oTnCjEFefssj 09tIluxBhItwIlGlEphqyIOAeO0rJb5ArfmPDke0hssRHJOJmZ3diK9pgQdb8pDz MBGZtKQo3+UZnBovcPkO8MQoOLMZwkbeV0rkCpIsE0OfSLJP9J+p2ILrK0qssU3T WEGlvdWczd5sjA== -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:41 2025 by rpki-client