This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json) Hash identifier: tkXGxCzRmAmGzkZ3nRU3yLQEmrwPDUFKSUmJIgxoS/4= Subject key identifier: 70:BB:16:4A:AC:6C:2A:D4:98:DF:ED:3F:57:9C:D4:59:6B:C5:77:D3 Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81 Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781 Certificate serial: 019AF19B71D55068D530AEB1B1F22FB5C202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft Manifest number: 070B Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: eRvYLQo/pkbjHeIvEabULMfhLU1xd+z2IZCeDQzhjDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:71:d5:50:68:d5:30:ae:b1:b1:f2:2f:b5:c2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=70bb164aac6c2ad498dfed3f579cd4596bc577d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:bf:9a:37:cb:5b:05:72:5e:f0:ef:77:cd: 11:c7:50:9f:88:23:dc:dc:8d:28:dc:4c:54:e6:fe: b1:90:66:7e:0b:01:1f:7c:37:9b:d7:51:82:59:85: f5:05:8f:d8:bd:18:61:90:f1:66:57:43:0d:3d:15: a7:ed:48:5f:d3:e6:1d:66:3a:36:71:a5:6b:f7:28: 9a:57:f7:3d:0a:99:41:7e:30:77:d0:35:7a:04:17: 99:3f:7e:15:c1:bc:e0:b4:57:04:86:b0:7b:a9:78: b6:05:dc:73:f0:f5:a1:54:5a:75:d8:36:1f:ec:3c: 4d:e8:60:08:2f:40:d1:23:75:eb:5a:21:97:f5:fe: fb:54:ea:48:9c:94:2a:05:02:ef:19:a8:1e:06:50: 96:7f:f9:e0:49:44:4c:f6:89:6f:79:2b:8c:1e:ad: d2:52:18:94:d3:52:fb:67:cc:91:a0:f7:81:b9:6a: 5f:86:11:55:0b:8a:7e:17:a3:b0:e3:9a:8f:43:2e: 04:3e:28:0b:84:bb:50:db:cb:65:79:fa:09:98:24: 0d:28:05:f8:4d:5b:69:fe:ea:82:85:fb:3c:6f:8b: 1b:0f:1e:74:bb:5a:c8:be:a1:e2:82:9f:f4:46:d0: 46:05:be:e3:37:89:fe:35:f9:ca:a2:7b:3a:d7:c4: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BB:16:4A:AC:6C:2A:D4:98:DF:ED:3F:57:9C:D4:59:6B:C5:77:D3 X509v3 Authority Key Identifier: keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:59:cb:ba:91:5f:ba:95:93:0b:ea:42:89:55:77:78:8d:d6: 96:40:f7:d5:64:58:1b:03:3e:4f:69:aa:1c:7b:60:c9:1a:2a: 90:34:0a:03:15:96:b6:6c:f1:cf:81:04:eb:8c:ef:05:ea:31: 56:8e:d1:ff:30:70:55:5c:42:d2:3d:01:c7:81:86:eb:f3:30: 32:e9:21:9e:e8:39:8b:ef:72:33:dc:7a:a9:74:8a:51:5a:1b: ba:06:f8:73:ee:9f:79:0a:a2:0b:9e:da:a0:99:dc:15:7b:cb: 41:9f:c3:39:e9:8f:ea:4f:00:42:37:c4:6e:ea:6f:e1:38:77: 1e:11:12:f0:27:1c:c4:36:c0:58:f7:09:24:ae:43:94:f0:e9: 95:26:82:9b:df:1d:02:ba:89:3a:45:ad:42:dc:6d:7a:61:a7: 37:c3:5a:37:84:29:44:7f:50:7e:5d:2f:8a:23:ac:8b:c9:25: 13:1b:a9:8e:ff:e7:1d:b0:6e:7b:f1:25:a5:29:ee:b3:a6:ec: 0d:d2:62:60:a7:5c:7e:e5:aa:43:d6:9f:01:6d:e3:10:33:c0: e0:9c:4d:a8:66:f9:81:46:36:e2:e1:51:b6:9a:55:fe:d5:42: 9b:a7:85:5e:b6:07:91:36:93:e8:1e:89:2f:9a:ed:63:26:46: f3:2c:18:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3HVUGjVMK6xsfIvtcICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm Y2M3ODEwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD Eyg3MGJiMTY0YWFjNmMyYWQ0OThkZmVkM2Y1NzljZDQ1OTZiYzU3N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+m/mjfLWwVyXvDvd80Rx1CfiCPc 3I0o3ExU5v6xkGZ+CwEffDeb11GCWYX1BY/YvRhhkPFmV0MNPRWn7Uhf0+YdZjo2 caVr9yiaV/c9CplBfjB30DV6BBeZP34VwbzgtFcEhrB7qXi2Bdxz8PWhVFp12DYf 7DxN6GAIL0DRI3XrWiGX9f77VOpInJQqBQLvGageBlCWf/ngSURM9olveSuMHq3S UhiU01L7Z8yRoPeBuWpfhhFVC4p+F6Ow45qPQy4EPigLhLtQ28tlefoJmCQNKAX4 TVtp/uqChfs8b4sbDx50u1rIvqHigp/0RtBGBb7jN4n+NfnKons618TylQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC7FkqsbCrUmN/tP1ec1FlrxXfTMB8GA1UdIwQY MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVnLupFf upWTC+pCiVV3eI3WlkD31WRYGwM+T2mqHHtgyRoqkDQKAxWWtmzxz4EE64zvBeox Vo7R/zBwVVxC0j0Bx4GG6/MwMukhnug5i+9yM9x6qXSKUVobugb4c+6feQqiC57a oJncFXvLQZ/DOemP6k8AQjfEbupv4Th3HhES8CccxDbAWPcJJK5DlPDplSaCm98d ArqJOkWtQtxtemGnN8NaN4QpRH9Qfl0viiOsi8klExupjv/nHbBue/ElpSnus6bs DdJiYKdcfuWqQ9afAW3jEDPA4JxNqGb5gUY24uFRtppV/tVCm6eFXrYHkTaT6B6J L5rtYyZG8ywYAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:39 2025 by rpki-client