This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json) Hash identifier: m3SfYDpp3iVVLZ8UER8r18xJc3cFEnmW5BhXhAf3NPk= Subject key identifier: 97:17:55:57:48:CA:9D:AC:04:4A:FD:86:2B:50:DF:4C:6C:36:D0:7E Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4 Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4 Certificate serial: 019AF1D1D25E8B4FA91CF815A379D082C6AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft Manifest number: 0E9B Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: UBH3ZHFNjIARCxZjJ2hz2Ey+OWR0PYugl+vs+eeNymg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d2:5e:8b:4f:a9:1c:f8:15:a3:79:d0:82:c6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=9717555748ca9dac044afd862b50df4c6c36d07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:40:23:b8:9b:db:b6:72:e2:94:4f:dd:ec: c5:3f:55:c7:4c:ae:dd:4f:1f:b8:70:e5:66:8e:4f: 1f:2a:62:ad:9c:73:5d:ae:70:2e:3b:ad:e0:1f:ee: 75:fa:df:42:87:f4:55:68:78:a9:67:e4:09:59:d0: 46:c5:29:bf:f8:b3:3e:61:fc:ba:a0:d8:f4:ee:8e: 79:0d:10:ad:7f:d1:7c:2e:c0:84:22:c8:2c:d1:ce: 43:9c:2f:9a:42:13:86:b9:5c:14:97:cc:0d:87:c7: 45:b1:44:bf:0a:6b:58:46:5c:17:0f:d5:6f:8a:54: 21:9d:f7:70:d0:31:d8:df:b9:49:d7:08:4f:c6:e6: 50:4f:cb:c3:8a:e6:ba:99:2c:57:81:08:87:19:62: cc:88:ad:3c:ae:e6:ce:af:4c:57:cc:81:65:b5:8c: d1:0c:84:9d:22:bb:41:5e:8f:71:c3:28:2c:b2:01: 0c:7b:b4:e4:be:94:4f:38:b6:ac:f5:8d:8d:a7:a7: 07:b9:47:f1:98:53:6c:49:2e:e6:ea:74:31:96:7a: 7e:c2:79:7c:f6:3f:e8:1c:97:e7:ba:f1:b4:a0:7e: 39:ee:64:c4:d2:2c:19:4f:08:34:7c:2b:4e:4d:68: 9d:19:19:83:b5:99:f5:a0:b9:b1:98:58:22:e3:08: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:17:55:57:48:CA:9D:AC:04:4A:FD:86:2B:50:DF:4C:6C:36:D0:7E X509v3 Authority Key Identifier: keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:10:1e:78:a4:2c:e0:13:93:5d:47:e7:b9:57:4e:07:41:61: 96:a9:aa:f1:30:3f:39:09:0c:31:b6:31:5a:f1:fe:c4:f1:8b: 94:f3:1e:3f:1c:bd:aa:f3:60:a7:01:e0:9a:1c:30:f6:e1:9e: d9:e0:42:fc:04:00:ad:3f:67:5a:a1:b3:fb:81:3b:76:02:18: 86:af:40:f0:58:61:32:02:27:90:32:c6:65:c9:44:42:50:04: 89:66:72:df:ff:86:15:1c:07:eb:d3:c6:3a:bf:ab:f9:65:68: ab:0d:f4:91:a3:0e:5c:5f:a9:cb:e5:23:51:8f:8a:11:69:10: 67:51:19:d7:1c:f8:9e:60:16:81:45:71:79:76:fb:d1:0c:79: e7:fc:3d:46:ea:37:92:75:80:02:69:3e:d1:39:5b:df:9d:dd: d3:29:db:59:e0:23:d6:c9:a8:e6:9a:e6:c0:89:8c:b0:be:c6: ef:26:80:de:a4:00:dc:b0:da:6c:a0:30:ba:d9:0a:ba:11:6a: 40:b1:dd:8c:83:fa:6c:69:71:1f:1b:15:77:79:a8:3c:8e:d7: f7:98:1d:c0:42:7e:35:3c:ad:19:fd:b6:7f:8a:07:6c:d2:5b: 3f:a9:e7:0e:5a:f5:4f:5c:9f:a3:27:c0:7a:dd:d4:09:24:47: 46:18:9d:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dJei0+pHPgVo3nQgsauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGM5MjNhZTNhY2UzYTEwODYwZDFmODE3YThkNzUwYzE1 MzU0YzQwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD Eyg5NzE3NTU1NzQ4Y2E5ZGFjMDQ0YWZkODYyYjUwZGY0YzZjMzZkMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP5AI7ib27Zy4pRP3ezFP1XHTK7d Tx+4cOVmjk8fKmKtnHNdrnAuO63gH+51+t9Ch/RVaHipZ+QJWdBGxSm/+LM+Yfy6 oNj07o55DRCtf9F8LsCEIsgs0c5DnC+aQhOGuVwUl8wNh8dFsUS/CmtYRlwXD9Vv ilQhnfdw0DHY37lJ1whPxuZQT8vDiua6mSxXgQiHGWLMiK08rubOr0xXzIFltYzR DISdIrtBXo9xwygssgEMe7TkvpRPOLas9Y2Np6cHuUfxmFNsSS7m6nQxlnp+wnl8 9j/oHJfnuvG0oH457mTE0iwZTwg0fCtOTWidGRmDtZn1oLmxmFgi4wjVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcXVVdIyp2sBEr9hitQ30xsNtB+MB8GA1UdIwQY MBaAFGeMkjrjrOOhCGDR+Beo11DBU1TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjkt ZGIwZDYxNmE4ODkxLzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjktZGIwZDYxNmE4ODkx LzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRAeeKQs 4BOTXUfnuVdOB0Fhlqmq8TA/OQkMMbYxWvH+xPGLlPMePxy9qvNgpwHgmhww9uGe 2eBC/AQArT9nWqGz+4E7dgIYhq9A8FhhMgInkDLGZclEQlAEiWZy3/+GFRwH69PG Or+r+WVoqw30kaMOXF+py+UjUY+KEWkQZ1EZ1xz4nmAWgUVxeXb70Qx55/w9Ruo3 knWAAmk+0Tlb353d0ynbWeAj1smo5prmwImMsL7G7yaA3qQA3LDabKAwutkKuhFq QLHdjIP6bGlxHxsVd3moPI7X95gdwEJ+NTytGf22f4oHbNJbP6nnDlr1T1yfoyfA et3UCSRHRhidLA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:17 2025 by rpki-client