This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json) Hash identifier: J9b45rJiSx7FcWbZdBG9T3tt81cUJZQ45BHRPIweF14= Subject key identifier: 3D:8F:6E:54:B4:CC:E3:5A:18:CF:5F:40:96:5A:52:F0:B0:55:1D:8C Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13 Certificate serial: 019AF088CB1B9C9DDAD4EF4E5BE46AF9755E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft Manifest number: 1570 Signing time: Fri 05 Dec 2025 22:01:27 +0000 Manifest this update: Fri 05 Dec 2025 22:01:27 +0000 Manifest next update: Sat 06 Dec 2025 22:01:27 +0000 Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=) 2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: SbvFlx2yob01xcxrNoGU2w8w4HhyJMDvBZpvxFY/YmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:cb:1b:9c:9d:da:d4:ef:4e:5b:e4:6a:f9:75:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13 Validity Not Before: Dec 5 22:01:27 2025 GMT Not After : Dec 6 22:01:27 2025 GMT Subject: CN=3d8f6e54b4cce35a18cf5f40965a52f0b0551d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:3a:a0:d9:89:6e:3e:1e:02:25:fb:ea:98: df:6d:ba:1d:30:6a:24:06:27:a4:53:49:56:29:63: 8d:44:bf:9c:65:29:00:2a:0b:a9:8a:a5:e2:be:8d: e8:b1:bc:32:9c:5d:87:c5:30:08:86:96:c6:f2:84: 79:c0:0d:a4:81:e1:e6:c3:75:90:38:30:0a:42:50: 7e:1f:ae:8f:13:d9:2b:19:ab:53:ef:0b:7b:eb:45: dc:36:26:19:aa:ce:7d:bc:19:40:1e:9f:74:13:bb: d4:c9:c6:5b:0c:74:2d:13:d6:0d:37:42:5d:fc:77: 65:d6:37:18:06:d3:70:b4:e8:f7:17:91:83:8b:5c: 5c:f1:3d:fa:40:ce:2c:2f:e7:91:8f:02:b1:16:a9: c5:d7:47:41:0a:b5:15:7a:9b:db:60:da:b6:9b:dd: 84:76:cd:91:38:38:e8:e4:53:db:57:8f:38:cb:41: 88:05:78:74:a1:f8:c6:eb:ae:55:0e:4b:26:03:49: 48:b1:07:7b:c8:04:2d:37:a6:00:46:18:8d:d8:e4: 54:30:0e:c1:bf:e4:0d:cb:31:08:dd:a3:af:b3:5c: 22:13:bc:b1:cf:2c:05:9f:c9:48:a7:ab:77:d3:ff: 20:7e:ee:b6:de:a2:d2:8f:a9:e6:c4:0c:c9:dc:e3: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8F:6E:54:B4:CC:E3:5A:18:CF:5F:40:96:5A:52:F0:B0:55:1D:8C X509v3 Authority Key Identifier: keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ed:7f:77:f3:24:65:81:4f:99:59:3d:d7:6b:0c:28:b4:6a: c5:fe:7c:b0:39:a8:c4:7b:76:db:cc:54:69:4f:68:11:fd:e2: 73:67:53:da:20:4b:5f:bd:2b:d0:b8:fa:b5:cf:93:c0:72:51: 21:a2:75:be:db:a2:9a:cd:92:5e:22:a4:a5:48:c4:57:d2:5c: 3b:aa:56:ac:b1:77:70:f0:ac:76:02:b6:5a:71:c4:cc:a1:9e: 14:42:78:22:02:b2:92:03:30:09:f4:b2:d8:cf:b0:06:af:cd: a7:d3:32:05:fb:51:15:ac:cf:a1:1c:fd:13:1e:98:89:2c:82: 66:f5:80:71:b0:d4:f8:fe:62:f1:b4:b8:6a:6a:2c:bb:13:ce: f1:69:ff:5c:88:b3:5b:f1:6c:66:af:37:5b:e8:20:22:ab:5b: 6d:c9:5d:61:02:21:cd:08:27:99:51:72:28:d0:51:58:7e:4e: 47:ef:f2:b9:04:74:aa:b2:ba:c4:f5:46:8b:6f:00:1a:68:b9: 2a:b1:76:45:4e:5e:8b:1b:5f:44:da:66:47:4c:02:6b:1f:93: 92:1c:04:35:8e:7e:a4:a4:79:ec:26:b4:6b:b8:67:85:35:8d: 15:4d:6a:cc:a5:77:90:0a:83:69:b2:15:96:f2:a8:54:08:c9: 50:29:8f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMsbnJ3a1O9OW+Rq+XVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODAwYWJhNDA2MzliZjM4ZDFlYjZjOTE1N2I5OTRmMTkz MjNiMTMwHhcNMjUxMjA1MjIwMTI3WhcNMjUxMjA2MjIwMTI3WjAzMTEwLwYDVQQD EygzZDhmNmU1NGI0Y2NlMzVhMThjZjVmNDA5NjVhNTJmMGIwNTUxZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA06oNmJbj4eAiX76pjfbbodMGok BiekU0lWKWONRL+cZSkAKgupiqXivo3osbwynF2HxTAIhpbG8oR5wA2kgeHmw3WQ ODAKQlB+H66PE9krGatT7wt760XcNiYZqs59vBlAHp90E7vUycZbDHQtE9YNN0Jd /Hdl1jcYBtNwtOj3F5GDi1xc8T36QM4sL+eRjwKxFqnF10dBCrUVepvbYNq2m92E ds2RODjo5FPbV484y0GIBXh0ofjG665VDksmA0lIsQd7yAQtN6YARhiN2ORUMA7B v+QNyzEI3aOvs1wiE7yxzywFn8lIp6t30/8gfu623qLSj6nmxAzJ3OOzZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2PblS0zONaGM9fQJZaUvCwVR2MMB8GA1UdIwQY MBaAFGeACrpAY5vzjR62yRV7mU8ZMjsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEt MjkyNjI3OTA0MDlkLzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEtMjkyNjI3OTA0MDlk LzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATe1/d/Mk ZYFPmVk912sMKLRqxf58sDmoxHt228xUaU9oEf3ic2dT2iBLX70r0Lj6tc+TwHJR IaJ1vtuims2SXiKkpUjEV9JcO6pWrLF3cPCsdgK2WnHEzKGeFEJ4IgKykgMwCfSy 2M+wBq/Np9MyBftRFazPoRz9Ex6YiSyCZvWAcbDU+P5i8bS4amosuxPO8Wn/XIiz W/FsZq83W+ggIqtbbcldYQIhzQgnmVFyKNBRWH5OR+/yuQR0qrK6xPVGi28AGmi5 KrF2RU5eixtfRNpmR0wCax+TkhwENY5+pKR57Ca0a7hnhTWNFU1qzKV3kAqDabIV lvKoVAjJUCmPrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:01 2025 by rpki-client