This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json) Hash identifier: 9kgQEth3SB2eydn3oVRdnIoSRXMktwIjzDhxKtal89M= Subject key identifier: B8:2A:46:4D:01:2C:2A:AA:22:B4:7C:D4:05:7B:49:35:DE:14:07:F1 Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13 Certificate serial: 019B5306722DBE2695B6869041B734AA698F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft Manifest number: 15A3 Signing time: Thu 25 Dec 2025 01:01:29 +0000 Manifest this update: Thu 25 Dec 2025 01:01:29 +0000 Manifest next update: Fri 26 Dec 2025 01:01:29 +0000 Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=) 2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: zBjZNkpu0FE+GP/j+SK2r5jzU2bnSbi5a7c8LEiY0x4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:72:2d:be:26:95:b6:86:90:41:b7:34:aa:69:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13 Validity Not Before: Dec 25 01:01:29 2025 GMT Not After : Dec 26 01:01:29 2025 GMT Subject: CN=b82a464d012c2aaa22b47cd4057b4935de1407f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:e2:ae:c7:66:dd:7f:5f:54:df:cc:96:cc: 25:47:c8:53:ea:65:b7:3b:77:d1:1a:2c:6d:d7:9f: e9:04:3f:5b:61:0c:f6:ea:7d:0f:e2:2d:17:67:3c: f9:44:2d:ac:8d:2b:19:13:cf:3e:68:98:a7:15:fc: ea:ae:83:cc:0e:95:e9:b3:b1:d5:58:29:70:db:29: 14:5f:0e:af:f8:c8:58:bf:06:f7:94:43:71:0c:89: a0:e4:5b:f0:81:5e:55:e9:28:d5:fc:54:14:07:60: 91:cd:56:91:ed:5b:aa:26:ff:70:d6:d5:12:ad:f5: 72:98:eb:92:4c:ae:4c:4d:81:b0:d9:b6:a6:e7:00: e8:9a:f7:ca:ba:c1:b2:2f:f5:08:c8:32:4e:7c:00: 0b:c7:11:46:72:10:32:0b:ef:f3:99:19:a6:d2:a7: ae:2a:b8:6a:60:f6:c8:08:33:22:36:83:9f:11:f8: be:ec:f4:ea:86:80:a3:a9:7b:45:39:20:d0:91:71: 14:d6:4e:b6:c4:20:f6:7e:7f:ea:86:88:e8:bd:08: 91:f0:de:d7:3d:43:19:5e:e7:9e:7b:ae:0b:f7:cd: 1d:35:f0:ce:b6:aa:c7:3b:8d:3f:8c:2c:d5:35:9c: 03:6a:12:01:5b:4d:bc:2c:de:61:8c:9a:00:c5:d0: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2A:46:4D:01:2C:2A:AA:22:B4:7C:D4:05:7B:49:35:DE:14:07:F1 X509v3 Authority Key Identifier: keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:83:41:45:0b:bb:5f:f2:63:94:21:b9:cd:27:80:77:93:62: f7:55:a3:d1:3d:dc:0c:d3:1e:38:ea:fc:c6:b4:af:01:89:10: d5:37:60:34:ab:33:f7:10:cb:e6:a2:45:d3:cd:e5:36:71:22: be:ed:8a:00:1c:f4:67:22:e4:8b:da:61:3a:e1:e5:5b:79:e1: 4e:c3:09:17:c3:b7:1a:01:0d:0f:66:79:84:96:5f:62:6b:6e: 8f:85:95:97:ee:ea:9b:92:fc:36:c4:a7:86:71:c3:44:af:8b: 69:c1:6a:08:30:6c:7c:13:25:a6:b9:57:43:c1:58:52:45:3d: fa:8e:e3:48:2c:b2:15:91:d4:03:34:d1:8c:a2:5b:68:6f:74: 2d:45:e6:a8:de:51:af:da:1b:f2:d6:45:73:0b:19:2f:af:f3: 98:0b:ed:04:da:d4:e7:02:23:bb:d0:9f:5a:95:08:6b:ea:ca: ee:8d:e7:9e:f2:0f:d6:85:5f:4d:e9:ab:cf:d6:78:91:e0:b2: d6:99:ff:26:d3:96:36:0c:bc:86:e2:3b:8d:53:51:6f:ed:5a: 6b:c2:b5:81:fe:37:00:70:4b:2a:0a:6a:d2:9c:6f:54:5c:17: ce:46:a2:ee:1f:a9:69:30:34:90:c8:1b:19:7f:f5:ea:d5:ce: d2:d6:13:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBnItviaVtoaQQbc0qmmPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODAwYWJhNDA2MzliZjM4ZDFlYjZjOTE1N2I5OTRmMTkz MjNiMTMwHhcNMjUxMjI1MDEwMTI5WhcNMjUxMjI2MDEwMTI5WjAzMTEwLwYDVQQD EyhiODJhNDY0ZDAxMmMyYWFhMjJiNDdjZDQwNTdiNDkzNWRlMTQwN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl7irsdm3X9fVN/MlswlR8hT6mW3 O3fRGixt15/pBD9bYQz26n0P4i0XZzz5RC2sjSsZE88+aJinFfzqroPMDpXps7HV WClw2ykUXw6v+MhYvwb3lENxDImg5FvwgV5V6SjV/FQUB2CRzVaR7VuqJv9w1tUS rfVymOuSTK5MTYGw2bam5wDomvfKusGyL/UIyDJOfAALxxFGchAyC+/zmRmm0qeu KrhqYPbICDMiNoOfEfi+7PTqhoCjqXtFOSDQkXEU1k62xCD2fn/qhojovQiR8N7X PUMZXueee64L980dNfDOtqrHO40/jCzVNZwDahIBW028LN5hjJoAxdDixQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgqRk0BLCqqIrR81AV7STXeFAfxMB8GA1UdIwQY MBaAFGeACrpAY5vzjR62yRV7mU8ZMjsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEt MjkyNjI3OTA0MDlkLzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEtMjkyNjI3OTA0MDlk LzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6oNBRQu7 X/JjlCG5zSeAd5Ni91Wj0T3cDNMeOOr8xrSvAYkQ1TdgNKsz9xDL5qJF083lNnEi vu2KABz0ZyLki9phOuHlW3nhTsMJF8O3GgEND2Z5hJZfYmtuj4WVl+7qm5L8NsSn hnHDRK+LacFqCDBsfBMlprlXQ8FYUkU9+o7jSCyyFZHUAzTRjKJbaG90LUXmqN5R r9ob8tZFcwsZL6/zmAvtBNrU5wIju9CfWpUIa+rK7o3nnvIP1oVfTemrz9Z4keCy 1pn/JtOWNgy8huI7jVNRb+1aa8K1gf43AHBLKgpq0pxvVFwXzkai7h+paTA0kMgb GX/16tXO0tYTUw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:50 2025 by rpki-client