This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json) Hash identifier: 5rnPO3IkVzdYWfpImFf1eng9VLPobQqC8f1nVdlUiAY= Subject key identifier: 75:45:AD:FA:3C:C4:04:80:07:6E:34:79:95:CB:79:84:43:32:0E:96 Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13 Certificate serial: 019B30438A6A9DC820F56DF1F3A2BF562D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft Manifest number: 1591 Signing time: Thu 18 Dec 2025 07:01:31 +0000 Manifest this update: Thu 18 Dec 2025 07:01:31 +0000 Manifest next update: Fri 19 Dec 2025 07:01:31 +0000 Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=) 2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: anqnZKo6e0b7Ff3PPF/8yoOGejRsMXEg/B6UxHlkwVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:8a:6a:9d:c8:20:f5:6d:f1:f3:a2:bf:56:2d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13 Validity Not Before: Dec 18 07:01:31 2025 GMT Not After : Dec 19 07:01:31 2025 GMT Subject: CN=7545adfa3cc40480076e347995cb798443320e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:33:24:59:3e:76:47:4f:5e:dd:07:7b:04: 82:95:25:9c:16:fd:0d:da:8a:f6:30:7c:05:58:2d: 2c:6d:2f:fe:79:5d:32:f6:d8:ac:e1:4c:5c:e7:11: 1a:02:3a:d3:5b:3e:a8:4a:04:b4:3f:19:76:60:ef: bb:1a:35:9d:f1:73:f7:f3:27:5d:ff:b8:19:0c:88: 63:48:47:fd:a0:51:d1:26:73:f9:d1:9b:f5:da:0d: 95:bf:27:3d:03:5d:13:68:aa:ba:04:c8:ab:c4:d5: 58:41:0f:6b:e9:a1:7b:39:3a:d5:e9:a4:dd:21:bd: 03:a8:56:8a:8b:0f:72:1a:7d:15:e3:e8:a1:b1:57: 78:12:e5:d7:9e:25:97:b2:56:aa:48:5f:47:d1:0c: 38:c9:4b:e4:24:a8:8d:40:c5:55:3f:c9:1e:1d:36: c1:2c:73:69:f1:38:7f:90:10:97:12:3a:fe:06:1b: 36:30:86:30:2b:6f:e9:0b:df:ec:12:da:e3:e5:3a: fc:22:21:f8:64:07:af:b4:37:cb:12:3b:c4:03:62: d1:70:13:03:e6:4b:d8:fb:5d:83:1f:32:0a:78:9c: 33:a2:80:29:e3:44:05:73:bf:ad:d4:fa:47:7a:a3: dd:79:cc:96:d3:43:7b:62:84:6d:18:17:50:c9:bc: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:45:AD:FA:3C:C4:04:80:07:6E:34:79:95:CB:79:84:43:32:0E:96 X509v3 Authority Key Identifier: keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9f:a1:cc:52:5a:7d:3e:ac:88:51:ef:66:c8:f6:1d:96:be: d4:dc:5e:7c:49:b8:4f:84:97:42:9c:fa:3c:58:dd:2c:c6:91: 49:23:e1:d2:1e:ec:cd:4f:0f:a2:3e:7a:6e:89:68:e2:ac:c6: 55:50:ae:ff:93:8b:34:0f:a3:e8:3b:f0:9f:60:c0:30:dc:12: f6:31:e9:6d:11:86:f2:e6:a7:e9:e5:3a:88:3c:b7:02:07:ef: 34:c3:fa:92:0f:c3:21:3d:38:2a:56:cc:5d:57:eb:5f:d7:72: a0:6f:94:89:16:ef:72:4b:5f:a9:5e:77:2e:e0:59:58:b9:17: cc:b7:63:32:a3:65:8f:88:60:52:25:22:1e:60:1d:3f:40:3f: 64:b9:e4:9a:3b:c3:96:40:aa:d9:da:91:b3:d8:9d:b6:c2:5c: 5a:e8:96:13:a4:29:b5:c3:0a:e6:20:ac:43:64:e4:c3:34:b0: 7a:f8:7b:c8:f0:0c:b3:a2:87:30:92:31:34:a5:ee:d3:ff:00: ea:5d:0b:46:ff:d4:d2:ea:41:fb:39:4b:39:b0:27:b3:9d:26: c0:87:24:1c:17:e4:5a:a3:9c:34:4a:59:64:91:03:c9:58:21: 86:3a:5d:27:79:d8:f0:be:ae:15:fa:c6:d3:09:8f:42:24:91: 0b:ab:69:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ4pqncgg9W3x86K/Vi1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODAwYWJhNDA2MzliZjM4ZDFlYjZjOTE1N2I5OTRmMTkz MjNiMTMwHhcNMjUxMjE4MDcwMTMxWhcNMjUxMjE5MDcwMTMxWjAzMTEwLwYDVQQD Eyg3NTQ1YWRmYTNjYzQwNDgwMDc2ZTM0Nzk5NWNiNzk4NDQzMzIwZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TMzJFk+dkdPXt0HewSClSWcFv0N 2or2MHwFWC0sbS/+eV0y9tis4Uxc5xEaAjrTWz6oSgS0Pxl2YO+7GjWd8XP38ydd /7gZDIhjSEf9oFHRJnP50Zv12g2Vvyc9A10TaKq6BMirxNVYQQ9r6aF7OTrV6aTd Ib0DqFaKiw9yGn0V4+ihsVd4EuXXniWXslaqSF9H0Qw4yUvkJKiNQMVVP8keHTbB LHNp8Th/kBCXEjr+Bhs2MIYwK2/pC9/sEtrj5Tr8IiH4ZAevtDfLEjvEA2LRcBMD 5kvY+12DHzIKeJwzooAp40QFc7+t1PpHeqPdecyW00N7YoRtGBdQybzNcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVFrfo8xASAB240eZXLeYRDMg6WMB8GA1UdIwQY MBaAFGeACrpAY5vzjR62yRV7mU8ZMjsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEt MjkyNjI3OTA0MDlkLzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEtMjkyNjI3OTA0MDlk LzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5+hzFJa fT6siFHvZsj2HZa+1NxefEm4T4SXQpz6PFjdLMaRSSPh0h7szU8Poj56bolo4qzG VVCu/5OLNA+j6Dvwn2DAMNwS9jHpbRGG8uan6eU6iDy3AgfvNMP6kg/DIT04KlbM XVfrX9dyoG+UiRbvcktfqV53LuBZWLkXzLdjMqNlj4hgUiUiHmAdP0A/ZLnkmjvD lkCq2dqRs9idtsJcWuiWE6QptcMK5iCsQ2TkwzSwevh7yPAMs6KHMJIxNKXu0/8A 6l0LRv/U0upB+zlLObAns50mwIckHBfkWqOcNEpZZJEDyVghhjpdJ3nY8L6uFfrG 0wmPQiSRC6tpNg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:42:30 2025 by rpki-client