This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json) Hash identifier: vCqBYbBSuuPdZkzkQb8UzsJ2LGQmLMzIWfQQ8um4bMQ= Subject key identifier: 9F:6C:67:02:3D:A9:13:F9:DA:77:17:15:46:14:06:76:E5:72:E0:B6 Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc Certificate serial: 019AF1D1EAE925D5F7F415A70CAD1BC45496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft Manifest number: 12AB Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=) 2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: wM9vsUzH1CFT3/ViemrE+PPOkRTnG+0FNeObjzcWYN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ea:e9:25:d5:f7:f4:15:a7:0c:ad:1b:c4:54:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=9f6c67023da913f9da77171546140676e572e0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:7c:84:e7:c1:aa:2f:ab:d0:90:9b:bd:7c: 11:a7:d3:2b:0a:6d:53:29:ae:1d:4d:03:d4:4c:2d: ed:d6:c1:5e:b1:14:61:77:b2:e1:ae:91:95:f7:74: f8:1a:e7:84:71:6e:93:ff:3b:e9:45:06:45:e8:68: 16:03:ad:34:70:c0:e0:38:e5:dd:26:ad:a4:08:03: 58:54:1e:4d:53:9b:a8:7e:44:15:c8:4f:12:6a:8a: 47:da:93:f3:97:fd:6b:54:c9:b7:8c:39:05:01:cb: 4c:a7:5f:43:67:ca:c2:3b:35:f2:87:b3:8a:0f:c3: eb:9e:e8:61:e9:4f:8d:04:2b:b7:2a:a9:c9:9d:4e: 9f:07:b8:ea:9e:c0:29:c4:46:c5:53:83:9e:72:de: c3:8c:f1:9a:7b:ba:19:6d:6b:0e:2f:99:4d:20:d7: 65:39:93:62:75:e2:1e:fa:3b:7c:3f:53:1c:26:0f: 0d:38:62:c3:53:94:03:97:37:35:d1:f7:db:9f:da: 61:b1:45:8e:a1:a0:69:8b:0e:15:44:ad:d5:0e:b7: c3:fd:ef:0f:e4:f5:cd:af:3d:aa:f9:97:5d:77:93: 83:f9:ee:d7:80:3a:2d:4b:aa:fb:27:a9:ad:bc:dd: 3c:55:39:85:03:e0:1d:70:be:f5:53:a4:9d:0a:4f: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6C:67:02:3D:A9:13:F9:DA:77:17:15:46:14:06:76:E5:72:E0:B6 X509v3 Authority Key Identifier: keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6f:96:0f:43:a1:bc:35:d0:64:b2:77:a1:69:fd:a4:af:c9: b5:fd:b4:4b:be:dd:36:02:66:11:df:2a:3e:83:d6:0d:6b:a0: a9:cc:b1:98:ba:b8:83:12:e3:95:58:ec:bc:92:2e:c5:76:27: bc:87:ea:16:35:1d:ec:b3:e0:24:09:68:99:5a:04:c0:1f:f7: 47:22:ce:d8:dc:57:f3:6f:9e:0d:a2:1f:8f:dc:9a:3a:2c:65: f5:90:11:af:9e:f4:5c:8e:13:44:d7:5c:a6:64:bf:7d:4f:49: 84:c1:8f:40:a4:35:02:61:aa:4b:3f:5d:ee:0f:e6:b7:43:71: e6:df:06:4a:70:1b:bc:a8:b6:b3:d1:d5:60:b0:96:60:71:ae: 69:0e:b9:c3:8a:67:d6:07:1a:08:53:c8:97:38:67:c0:e7:30: f0:77:3e:a8:54:3b:77:d5:cf:b7:a3:d5:19:20:c1:53:f8:74: 49:5e:cc:b9:da:e6:9a:4d:0e:98:7f:ae:86:1e:47:df:ce:6f: c8:73:6e:ba:d5:fd:d5:19:84:1f:6b:8b:3e:e6:01:10:44:87: c8:42:83:4b:59:f0:5a:0e:97:a0:b8:78:4a:84:f0:2b:40:de: 7e:be:2d:11:82:72:f5:13:e1:3c:c0:97:fa:49:af:dd:0c:51: 87:7b:c9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0erpJdX39BWnDK0bxFSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODM3NWMzMjFkZWY5MjY1OTgzZTIxOTRkNDBiYTk3YWZl N2YxY2MwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD Eyg5ZjZjNjcwMjNkYTkxM2Y5ZGE3NzE3MTU0NjE0MDY3NmU1NzJlMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupx8hOfBqi+r0JCbvXwRp9MrCm1T Ka4dTQPUTC3t1sFesRRhd7LhrpGV93T4GueEcW6T/zvpRQZF6GgWA600cMDgOOXd Jq2kCANYVB5NU5uofkQVyE8SaopH2pPzl/1rVMm3jDkFActMp19DZ8rCOzXyh7OK D8Prnuhh6U+NBCu3KqnJnU6fB7jqnsApxEbFU4Oect7DjPGae7oZbWsOL5lNINdl OZNideIe+jt8P1McJg8NOGLDU5QDlzc10ffbn9phsUWOoaBpiw4VRK3VDrfD/e8P 5PXNrz2q+Zddd5OD+e7XgDotS6r7J6mtvN08VTmFA+AdcL71U6SdCk/SVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9sZwI9qRP52ncXFUYUBnblcuC2MB8GA1UdIwQY MBaAFM+DdcMh3vkmWYPiGU1Aupev5/HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUt ZTBjN2I5NmI1N2YyLzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUtZTBjN2I5NmI1N2Yy LzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhm+WD0Oh vDXQZLJ3oWn9pK/Jtf20S77dNgJmEd8qPoPWDWugqcyxmLq4gxLjlVjsvJIuxXYn vIfqFjUd7LPgJAlomVoEwB/3RyLO2NxX82+eDaIfj9yaOixl9ZARr570XI4TRNdc pmS/fU9JhMGPQKQ1AmGqSz9d7g/mt0Nx5t8GSnAbvKi2s9HVYLCWYHGuaQ65w4pn 1gcaCFPIlzhnwOcw8Hc+qFQ7d9XPt6PVGSDBU/h0SV7Mudrmmk0OmH+uhh5H385v yHNuutX91RmEH2uLPuYBEESHyEKDS1nwWg6XoLh4SoTwK0Defr4tEYJy9RPhPMCX +kmv3QxRh3vJ4g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:14 2025 by rpki-client