This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json) Hash identifier: 4BhUZRuAJ6Zb18s6WwvhiWi/9kcBI0UxM+JKbi9KNmU= Subject key identifier: 37:9B:55:E7:D4:A6:A3:0E:CB:DB:B9:26:86:97:DC:3B:70:F3:81:2E Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d Certificate serial: 019AF12E3D25AA72E8CC347F42F2A7D483B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft Manifest number: 0679 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: sCS5wby4uHWzyVXUuhMr9Bp9FMHwllAEH0bHLfK3qfw=) 2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3d:25:aa:72:e8:cc:34:7f:42:f2:a7:d4:83:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=379b55e7d4a6a30ecbdbb9268697dc3b70f3812e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:5c:34:1a:71:f6:6e:01:f0:54:50:56:df: 65:1a:a6:65:9c:e2:00:d8:4d:be:1b:0f:96:de:46: 59:e6:19:08:cb:a6:fe:fe:44:1b:f8:a9:23:78:f4: 44:07:40:18:04:b7:d4:a6:ee:74:8a:bc:6a:42:e1: 8d:bc:a4:30:15:a6:01:9f:c4:9d:89:4c:39:fa:c7: 64:70:38:90:27:a5:b1:f1:44:98:4c:0c:88:11:92: 69:62:96:e4:53:73:0f:7c:91:a4:f2:7c:39:47:62: 21:8c:45:c5:a3:97:f3:2b:3b:32:2b:8f:5f:3e:8b: d5:ba:40:44:da:84:26:8e:12:c7:e2:3f:f3:25:59: 62:4f:93:3b:de:3b:b1:50:44:ab:39:5f:c5:7e:2c: 6e:fc:24:d6:25:db:f3:a4:e3:84:e2:a5:75:8b:42: 17:57:52:f2:af:ce:08:e8:55:f8:fe:a6:5a:56:dc: 65:be:06:00:f0:ae:bd:fe:76:2a:4e:0f:d8:01:7a: 88:50:69:37:05:6c:01:d6:85:5a:e8:fb:23:df:b2: 70:08:f9:37:92:3d:1c:ea:e2:00:e8:5f:5f:ad:e2: dd:52:70:57:e1:05:d0:aa:2f:44:16:60:bd:8c:94: f7:0b:8c:fb:f6:c7:82:43:72:a5:c6:2e:8f:46:c3: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9B:55:E7:D4:A6:A3:0E:CB:DB:B9:26:86:97:DC:3B:70:F3:81:2E X509v3 Authority Key Identifier: keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:32:ea:07:71:3b:65:07:9c:2b:dc:4d:c3:c7:70:d8:06:a0: 0a:e8:b3:01:9e:c5:53:0b:2c:d6:ee:42:85:39:53:2e:3b:78: 2c:7d:c6:5a:1a:8d:62:0f:fe:5c:4c:f2:3c:6e:ad:8e:ed:98: b6:5f:63:66:5e:60:b6:cc:b5:1d:83:28:fc:6a:ec:e4:bc:10: 87:e7:5b:fa:43:e2:d4:5f:79:fd:49:1c:43:48:cd:86:1d:9e: 26:4e:8a:ae:3d:c7:7d:f6:23:83:e5:af:a1:f8:b2:b3:ef:14: 2c:13:53:af:3e:8a:0f:f7:c1:9f:9d:d5:bc:55:40:74:cf:49: 20:8b:2a:1b:7f:41:59:2e:68:c1:da:4c:b3:cc:b6:b2:43:ce: a7:5b:01:ec:77:a5:c3:5e:10:5d:70:ac:ce:f6:5c:21:61:e7: 59:7f:ef:f8:ca:b2:63:be:df:66:d3:7f:72:55:39:b5:a5:50: c7:ad:85:d2:ac:5a:3a:62:a5:75:59:61:23:9d:14:97:35:50: c0:c4:1c:54:26:44:f1:37:74:6d:ec:c8:94:9b:a0:e9:76:8e: 3d:b2:37:21:85:d9:36:37:fb:c0:d5:f7:ee:94:17:25:23:2d: 38:74:64:d3:d3:df:2c:81:fe:e4:93:e1:d4:b9:e7:e0:dc:89: f1:cc:17:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj0lqnLozDR/QvKn1IOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODQ2Yjg0Yzc3OTA1MTIyODFmODBjMjQ4MWJlNGIzMGE2 NWQwOGQwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD EygzNzliNTVlN2Q0YTZhMzBlY2JkYmI5MjY4Njk3ZGMzYjcwZjM4MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnshcNBpx9m4B8FRQVt9lGqZlnOIA 2E2+Gw+W3kZZ5hkIy6b+/kQb+KkjePREB0AYBLfUpu50irxqQuGNvKQwFaYBn8Sd iUw5+sdkcDiQJ6Wx8USYTAyIEZJpYpbkU3MPfJGk8nw5R2IhjEXFo5fzKzsyK49f PovVukBE2oQmjhLH4j/zJVliT5M73juxUESrOV/Ffixu/CTWJdvzpOOE4qV1i0IX V1Lyr84I6FX4/qZaVtxlvgYA8K69/nYqTg/YAXqIUGk3BWwB1oVa6Psj37JwCPk3 kj0c6uIA6F9freLdUnBX4QXQqi9EFmC9jJT3C4z79seCQ3Klxi6PRsOQFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDebVefUpqMOy9u5JoaX3Dtw84EuMB8GA1UdIwQY MBaAFGeEa4THeQUSKB+Awkgb5LMKZdCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQt ODVhMGQxMjM5OTIzLzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQtODVhMGQxMjM5OTIz LzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjLqB3E7 ZQecK9xNw8dw2AagCuizAZ7FUwss1u5ChTlTLjt4LH3GWhqNYg/+XEzyPG6tju2Y tl9jZl5gtsy1HYMo/Grs5LwQh+db+kPi1F95/UkcQ0jNhh2eJk6Krj3HffYjg+Wv ofiys+8ULBNTrz6KD/fBn53VvFVAdM9JIIsqG39BWS5owdpMs8y2skPOp1sB7Hel w14QXXCszvZcIWHnWX/v+MqyY77fZtN/clU5taVQx62F0qxaOmKldVlhI50UlzVQ wMQcVCZE8Td0bezIlJug6XaOPbI3IYXZNjf7wNX37pQXJSMtOHRk09PfLIH+5JPh 1Lnn4NyJ8cwXPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:47 2025 by rpki-client