This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json) Hash identifier: g8GId/3UeGiBVKq+QTNZBzxr6kL7/ZpJim02r96z0k8= Subject key identifier: EB:D1:56:CC:00:94:A9:45:96:39:8E:30:42:E4:D9:E7:AB:62:5B:1F Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Certificate serial: 019AF1D1852B2B1A123920E434704C2FD0B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=) 2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: Mm4eJwprL/JHCLndSovKdSqxHTod7mPlm3FwR/Utjrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:85:2b:2b:1a:12:39:20:e4:34:70:4c:2f:d0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=ebd156cc0094a94596398e3042e4d9e7ab625b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:32:96:ab:f3:57:eb:95:70:51:8b:29:85: 00:df:9b:89:a1:b8:e3:39:86:73:23:21:bb:58:1d: 79:44:e9:f0:b4:66:1c:b7:9a:6a:05:b2:34:cc:d9: 2a:61:76:da:ac:59:32:27:68:1c:bd:f7:04:24:a8: f2:00:bd:9f:0a:99:56:df:58:20:0f:c2:34:12:e2: f5:68:04:80:88:72:b2:4e:e9:22:81:db:7b:c6:fb: 4c:37:9c:08:f1:09:31:5c:6f:90:63:56:78:77:c6: fb:30:5f:aa:8b:ce:fc:38:4e:87:0e:93:73:a0:36: 83:fd:1a:b4:98:69:87:db:25:a6:28:53:1b:a7:11: 50:68:09:10:9f:64:6f:2f:0d:77:8f:64:00:c5:28: fe:7d:3f:cd:3a:d7:ff:9c:52:75:ff:a9:0c:46:62: 97:bf:b0:c0:e7:f0:77:68:31:ff:2e:02:7b:89:28: 27:df:ed:bd:39:b2:cc:ef:7d:71:1a:dd:ad:c8:db: c7:4a:a9:b3:9f:80:98:f9:1d:c5:e0:1e:9a:e1:f1: 85:61:93:95:73:95:bb:95:10:2d:d4:6a:b8:28:3d: 83:43:55:59:da:a7:a7:bc:89:44:4f:49:ba:16:08: 3b:9b:2b:97:6a:3f:9d:ec:1e:9f:a1:b2:b0:64:bc: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D1:56:CC:00:94:A9:45:96:39:8E:30:42:E4:D9:E7:AB:62:5B:1F X509v3 Authority Key Identifier: keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:aa:85:61:22:16:32:0c:b4:f3:65:ab:3a:c8:0b:44:f4:09: ac:0d:7b:69:f3:af:b2:7a:49:8f:74:9d:c2:e8:f1:a5:bd:c3: 78:97:5a:e2:39:2e:71:b6:ba:34:2d:58:dc:e9:7f:9b:49:e6: 82:f7:53:14:e9:2a:72:1b:f3:14:d8:cb:30:c8:26:9d:68:34: ca:51:e8:10:2f:62:24:16:ae:be:e6:fe:76:8e:d0:30:e0:13: b6:00:c5:fe:cf:db:10:c3:51:46:83:c3:03:c3:d6:e5:ab:fe: db:00:17:ea:67:17:20:09:e2:f2:db:11:c8:2d:c7:06:5c:ba: a4:af:05:ed:7e:d0:ab:ac:dd:71:25:78:cd:8c:37:1d:1a:f7: 6b:91:81:1c:3f:98:e9:30:08:c3:e4:57:e3:dd:38:47:ac:fa: 04:da:05:ac:e8:31:63:13:7f:ca:0f:5b:2b:12:cf:b2:82:77: 70:85:a9:85:be:e2:2d:75:bd:aa:7e:28:df:54:24:47:72:3a: a7:56:d0:6e:af:92:71:a4:61:17:84:a3:35:ab:db:74:75:0f: fd:e0:17:48:fc:37:41:45:8b:52:53:6a:6d:6d:db:6d:ea:34: 71:79:d2:bb:2f:cf:c8:24:74:bd:9d:dc:5b:ad:51:69:23:6c: d3:04:7b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YUrKxoSOSDkNHBML9C4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4 MTg0Y2UwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhlYmQxNTZjYzAwOTRhOTQ1OTYzOThlMzA0MmU0ZDllN2FiNjI1YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf8ylqvzV+uVcFGLKYUA35uJobjj OYZzIyG7WB15ROnwtGYct5pqBbI0zNkqYXbarFkyJ2gcvfcEJKjyAL2fCplW31gg D8I0EuL1aASAiHKyTukigdt7xvtMN5wI8QkxXG+QY1Z4d8b7MF+qi878OE6HDpNz oDaD/Rq0mGmH2yWmKFMbpxFQaAkQn2RvLw13j2QAxSj+fT/NOtf/nFJ1/6kMRmKX v7DA5/B3aDH/LgJ7iSgn3+29ObLM731xGt2tyNvHSqmzn4CY+R3F4B6a4fGFYZOV c5W7lRAt1Gq4KD2DQ1VZ2qenvIlET0m6Fgg7myuXaj+d7B6fobKwZLxQIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvRVswAlKlFljmOMELk2eerYlsfMB8GA1UdIwQY MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaqFYSIW Mgy082WrOsgLRPQJrA17afOvsnpJj3Sdwujxpb3DeJda4jkucba6NC1Y3Ol/m0nm gvdTFOkqchvzFNjLMMgmnWg0ylHoEC9iJBauvub+do7QMOATtgDF/s/bEMNRRoPD A8PW5av+2wAX6mcXIAni8tsRyC3HBly6pK8F7X7Qq6zdcSV4zYw3HRr3a5GBHD+Y 6TAIw+RX4904R6z6BNoFrOgxYxN/yg9bKxLPsoJ3cIWphb7iLXW9qn4o31QkR3I6 p1bQbq+ScaRhF4SjNavbdHUP/eAXSPw3QUWLUlNqbW3bbeo0cXnSuy/PyCR0vZ3c W61RaSNs0wR7RA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:52 2025 by rpki-client