This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json) Hash identifier: +TC9CQB1YP9tp4bA4WgtzlgE2irK/vkPLaCC3BziV24= Subject key identifier: 20:C1:03:E0:E6:DA:9C:7C:11:8C:A7:73:50:4E:D3:55:77:74:F9:15 Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Certificate serial: 019AF2099B429FF24AD18D82B22ECE8D8A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft Manifest number: 0E24 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: vvuEAA6OGOOdcW7gXcE9HN8/h4yXjhKE9vdYAB9aI1Q=) 2: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9b:42:9f:f2:4a:d1:8d:82:b2:2e:ce:8d:8a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=20c103e0e6da9c7c118ca773504ed3557774f915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:d8:35:24:40:4e:55:7f:3c:a7:e9:ec:21: 54:60:a6:f3:64:9c:ec:e7:9d:79:8c:f9:cf:25:c3: b5:b3:e0:0c:c7:08:56:61:13:16:93:78:50:fc:8e: c0:d8:a3:dc:e4:57:6a:e1:ab:b1:a7:6b:2f:ae:49: 43:d0:6d:3b:aa:a5:4a:05:86:d0:6d:fe:cd:6f:87: 9b:97:e0:bd:dc:02:8d:ff:d7:3a:58:da:f4:3e:bb: 4c:34:40:cf:92:5b:79:84:33:bc:49:5e:73:93:30: cd:71:03:dd:28:6c:ec:03:81:57:c3:fa:5a:b3:11: 34:9b:15:ed:13:3a:b0:d3:33:e7:f0:d9:e4:1d:82: 95:c7:f8:37:cb:33:f8:80:e6:be:e3:b7:52:30:e1: 8f:4d:5c:6c:2e:4c:ca:54:8d:ce:2f:e2:67:3e:bf: 53:67:85:11:af:66:b3:0d:7e:2a:1e:e6:52:69:7d: fa:b5:9b:9a:f3:35:02:6f:46:a9:41:97:4d:3a:a0: 40:41:d9:96:75:cb:22:ab:b7:26:58:ae:83:c2:28: 49:3e:70:e7:f0:cb:d6:2c:da:16:dd:92:b0:3d:38: 13:ea:1a:37:fd:01:44:28:51:47:ae:96:80:2c:e7: e2:11:cf:63:52:d7:82:a4:24:fa:1d:89:cc:83:db: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C1:03:E0:E6:DA:9C:7C:11:8C:A7:73:50:4E:D3:55:77:74:F9:15 X509v3 Authority Key Identifier: keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:34:fc:94:ae:80:53:ab:5e:a2:da:dc:bf:24:89:c2:ce:74: 25:3b:7a:9f:7c:fc:47:ae:0d:55:41:1d:c7:90:a8:5c:0c:5f: 61:e9:e5:56:77:9b:9b:4c:74:88:9f:45:7a:62:fc:c8:e6:57: d3:6f:c3:ad:1d:74:5e:78:c0:2d:fc:14:4e:8e:f9:32:31:58: 05:74:99:c3:96:ea:af:ed:55:31:0a:f2:39:dd:4f:16:b1:ee: 10:8b:e8:0f:1b:31:99:4e:0b:5a:35:4d:f6:ee:ab:ab:54:59: 7d:7b:b5:b9:a8:ae:54:06:09:cb:18:59:19:87:71:4b:35:73: e7:e3:16:f1:2f:42:95:40:c8:57:04:be:2f:ec:89:65:14:64: f5:80:2b:39:68:5e:9e:49:c1:01:fa:50:0a:92:d1:48:0c:b7: a2:8f:5b:4c:ee:10:db:4e:25:dd:27:4b:bd:6e:c4:79:05:50: e7:8d:6b:3d:27:1a:4c:ea:ac:19:20:d6:96:8c:11:1c:5f:78: bd:5d:1c:ef:94:16:0e:33:e0:b9:0c:59:45:24:52:b3:ae:e4: 79:62:ce:42:7d:a7:73:91:71:aa:e4:3e:cd:e3:59:a3:a4:13: 09:59:c6:a1:bc:1b:17:f1:ff:65:89:ff:f9:8f:e5:0c:06:93: 06:7b:4c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZtCn/JK0Y2Csi7OjYpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4 OGQ0ZWMwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EygyMGMxMDNlMGU2ZGE5YzdjMTE4Y2E3NzM1MDRlZDM1NTc3NzRmOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutjYNSRATlV/PKfp7CFUYKbzZJzs 5515jPnPJcO1s+AMxwhWYRMWk3hQ/I7A2KPc5Fdq4auxp2svrklD0G07qqVKBYbQ bf7Nb4ebl+C93AKN/9c6WNr0PrtMNEDPklt5hDO8SV5zkzDNcQPdKGzsA4FXw/pa sxE0mxXtEzqw0zPn8NnkHYKVx/g3yzP4gOa+47dSMOGPTVxsLkzKVI3OL+JnPr9T Z4URr2azDX4qHuZSaX36tZua8zUCb0apQZdNOqBAQdmWdcsiq7cmWK6DwihJPnDn 8MvWLNoW3ZKwPTgT6ho3/QFEKFFHrpaALOfiEc9jUteCpCT6HYnMg9v1gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDBA+Dm2px8EYync1BO01V3dPkVMB8GA1UdIwQY MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5 LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzT8lK6A U6teotrcvySJws50JTt6n3z8R64NVUEdx5CoXAxfYenlVnebm0x0iJ9FemL8yOZX 02/DrR10XnjALfwUTo75MjFYBXSZw5bqr+1VMQryOd1PFrHuEIvoDxsxmU4LWjVN 9u6rq1RZfXu1uaiuVAYJyxhZGYdxSzVz5+MW8S9ClUDIVwS+L+yJZRRk9YArOWhe nknBAfpQCpLRSAy3oo9bTO4Q204l3SdLvW7EeQVQ541rPScaTOqsGSDWlowRHF94 vV0c75QWDjPguQxZRSRSs67keWLOQn2nc5FxquQ+zeNZo6QTCVnGobwbF/H/ZYn/ +Y/lDAaTBntMQg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:33 2025 by rpki-client