This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json) Hash identifier: 7ojSswMePU9N6tr0ajzi0IeaMO4uyEE68wMVzT/27Tk= Subject key identifier: FF:44:4C:90:A3:A1:F4:F5:1A:4A:22:74:2D:A0:7B:60:2B:C2:60:CD Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Certificate serial: 019AF42DF745977C595EA858C301648880A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft Manifest number: 1488 Signing time: Sat 06 Dec 2025 15:00:44 +0000 Manifest this update: Sat 06 Dec 2025 15:00:44 +0000 Manifest next update: Sun 07 Dec 2025 15:00:44 +0000 Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=) 2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=) 3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=) 4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: HP7drqvF7c2DJlr6ynny/BxP1FQ2vcBC0nfHIj3hA3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f7:45:97:7c:59:5e:a8:58:c3:01:64:88:80:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Validity Not Before: Dec 6 15:00:44 2025 GMT Not After : Dec 7 15:00:44 2025 GMT Subject: CN=ff444c90a3a1f4f51a4a22742da07b602bc260cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:20:4f:2d:6e:f3:05:61:69:0d:7b:28:d3: d3:13:e7:92:39:60:4d:f6:00:b4:86:87:ae:d8:8a: 75:da:ed:34:11:59:ef:94:0f:c2:72:a0:f9:57:92: 42:86:0d:e1:25:2b:e6:37:ef:6a:de:06:31:ec:89: a7:b5:4e:55:29:0a:5e:23:91:d1:33:c1:b8:88:45: 57:c3:4a:8e:14:7f:70:17:f9:75:23:79:fe:67:e0: 9d:9d:91:9a:97:81:83:fc:17:ad:cf:01:0d:0c:6b: cb:c0:c1:e0:a6:b1:59:64:69:8a:88:39:82:08:67: 29:1a:21:dd:e7:2d:52:81:af:b8:63:a4:0a:b9:4b: 5b:ab:62:6d:c8:29:b2:a6:c9:e0:48:c1:90:61:58: aa:28:b1:89:f2:93:ac:42:e4:50:69:f2:21:26:11: 65:69:5a:90:74:8f:3a:30:1c:7b:83:3f:98:ed:7a: ef:84:da:3b:6e:b1:2c:58:27:9d:cd:24:aa:71:cd: 49:33:87:fc:cf:37:4a:20:04:0c:20:75:cc:d6:26: 7a:79:6e:2c:6e:22:2f:ac:8a:b7:5e:19:88:d6:cb: 79:6e:8f:85:69:17:ed:fa:92:5d:fb:36:fd:f4:4f: 38:60:97:ce:b2:9d:3a:ba:d9:cd:7a:0b:3e:f1:31: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:44:4C:90:A3:A1:F4:F5:1A:4A:22:74:2D:A0:7B:60:2B:C2:60:CD X509v3 Authority Key Identifier: keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:38:ec:e0:5b:14:0b:35:81:05:b6:67:dd:06:61:51:f0:cc: 25:bc:7a:ab:b1:29:2d:5a:f8:56:80:14:dd:96:ee:db:89:be: bd:a5:60:32:43:ad:6b:47:87:ab:40:45:72:e3:ce:82:f4:c0: ab:80:9b:78:25:37:25:d7:46:e0:bc:e4:50:27:40:5f:df:21: dd:79:a5:33:00:d3:ca:5f:97:3f:56:86:af:67:6a:6e:54:9c: 4b:be:92:cd:12:32:41:f2:12:60:c7:e0:c1:af:2a:29:4d:53: ca:fc:b2:ca:6e:40:8f:f9:cf:ec:9e:bd:74:9a:c5:6a:b9:f7: c6:ce:55:38:2f:0f:e8:4f:ba:92:c8:df:23:1c:0c:f5:98:94: f0:13:5a:6f:1f:89:a0:ab:35:65:52:d7:3c:ae:62:d0:a9:7f: e7:7c:24:b4:cb:7a:04:79:f3:50:4a:27:40:4a:c2:54:45:08: 29:89:ea:4a:7d:f9:98:c2:1e:9b:73:9c:1f:a2:f8:ec:50:7a: ad:07:e8:fe:91:a3:13:1c:a4:58:8d:5c:6f:93:b9:93:67:50: 66:fc:84:9f:25:9b:78:d0:7e:a0:23:ab:a8:fc:94:df:32:94: d0:a3:34:6e:29:82:90:73:a6:40:41:7c:6e:c8:95:9d:48:4d: 1a:59:d6:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfdFl3xZXqhYwwFkiIChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx Njk1MDYwHhcNMjUxMjA2MTUwMDQ0WhcNMjUxMjA3MTUwMDQ0WjAzMTEwLwYDVQQD EyhmZjQ0NGM5MGEzYTFmNGY1MWE0YTIyNzQyZGEwN2I2MDJiYzI2MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk0gTy1u8wVhaQ17KNPTE+eSOWBN 9gC0hoeu2Ip12u00EVnvlA/CcqD5V5JChg3hJSvmN+9q3gYx7ImntU5VKQpeI5HR M8G4iEVXw0qOFH9wF/l1I3n+Z+CdnZGal4GD/BetzwENDGvLwMHgprFZZGmKiDmC CGcpGiHd5y1Sga+4Y6QKuUtbq2JtyCmypsngSMGQYViqKLGJ8pOsQuRQafIhJhFl aVqQdI86MBx7gz+Y7XrvhNo7brEsWCedzSSqcc1JM4f8zzdKIAQMIHXM1iZ6eW4s biIvrIq3XhmI1st5bo+FaRft+pJd+zb99E84YJfOsp06utnNegs+8THL5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9ETJCjofT1GkoidC2ge2ArwmDNMB8GA1UdIwQY MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTjs4FsU CzWBBbZn3QZhUfDMJbx6q7EpLVr4VoAU3Zbu24m+vaVgMkOta0eHq0BFcuPOgvTA q4CbeCU3JddG4LzkUCdAX98h3XmlMwDTyl+XP1aGr2dqblScS76SzRIyQfISYMfg wa8qKU1Tyvyyym5Aj/nP7J69dJrFarn3xs5VOC8P6E+6ksjfIxwM9ZiU8BNabx+J oKs1ZVLXPK5i0Kl/53wktMt6BHnzUEonQErCVEUIKYnqSn35mMIem3OcH6L47FB6 rQfo/pGjExykWI1cb5O5k2dQZvyEnyWbeNB+oCOrqPyU3zKU0KM0bimCkHOmQEF8 bsiVnUhNGlnWGw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:05 2025 by rpki-client