This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json) Hash identifier: TJMxZWEsHFcH+5N2qw7+lLH4WQkiIbUtJLsRLRlfo2c= Subject key identifier: CA:47:6E:2A:80:CB:D8:E7:FC:B2:14:3F:45:80:89:7A:CB:59:AD:82 Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Certificate serial: 019B47388A01330487BCD5EA054BAB1C1624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft Manifest number: 14B3 Signing time: Mon 22 Dec 2025 18:00:46 +0000 Manifest this update: Mon 22 Dec 2025 18:00:46 +0000 Manifest next update: Tue 23 Dec 2025 18:00:46 +0000 Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=) 2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=) 3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=) 4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: 8trLbgm92NEsnZMnTPHKWJ3h2b2e7oie94GkNAj2PsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:8a:01:33:04:87:bc:d5:ea:05:4b:ab:1c:16:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Validity Not Before: Dec 22 18:00:46 2025 GMT Not After : Dec 23 18:00:46 2025 GMT Subject: CN=ca476e2a80cbd8e7fcb2143f4580897acb59ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:35:c9:06:50:b8:1a:7d:69:77:0f:31:92: c4:d3:55:55:81:ba:e3:70:01:41:c9:bb:27:50:bf: 09:19:15:ee:15:b1:34:63:2e:0f:ac:dd:92:1f:15: e2:57:fb:44:63:a7:59:cb:f4:0f:30:f3:7b:b1:06: f5:2f:0e:d9:6b:aa:a6:be:6c:b4:59:24:60:e6:7f: 66:3c:de:35:42:fe:0e:1a:ce:99:6e:39:d6:c3:b7: bd:86:5c:23:c6:af:1d:27:08:56:fd:84:28:7d:0d: f1:07:22:43:7e:5d:d9:33:84:32:de:8b:25:3e:aa: b8:5b:6a:7f:68:87:f1:48:78:4b:e5:59:20:36:b4: 09:14:b3:a2:89:04:bd:b9:16:d7:0f:fe:a9:4b:ff: a7:40:d5:de:68:3a:de:cf:e2:6e:24:ac:bb:cd:6d: 4e:1d:9f:44:47:ac:e2:63:8b:f8:c6:d5:e9:4c:b5: 18:47:4c:2e:3e:07:bf:c0:b3:b3:b4:fb:4e:62:86: 0f:b8:1d:32:79:60:b6:1e:1b:fe:38:bd:5b:ed:12: 2e:dc:5b:1c:39:19:65:c8:95:0f:44:e5:42:29:2c: e5:40:de:52:47:a5:09:ea:81:94:e5:03:ba:0a:05: 81:80:1e:28:5a:b5:99:a5:62:30:c1:0c:7b:f8:ad: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:47:6E:2A:80:CB:D8:E7:FC:B2:14:3F:45:80:89:7A:CB:59:AD:82 X509v3 Authority Key Identifier: keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:08:e1:43:c3:24:e7:8a:c8:6c:6e:67:a9:a2:56:97:0a:69: c6:a0:01:80:7b:35:65:d5:80:28:b7:fe:3f:dd:b2:8e:9b:11: 2a:61:d4:71:e3:71:cb:2c:a3:2c:8c:0c:77:25:26:e9:f1:4b: 34:0f:90:d4:9b:64:a3:c9:31:c6:5c:aa:9a:8e:df:2a:cd:93: 88:85:08:b0:c8:f9:ca:ee:a1:9e:03:bf:7b:7d:5c:e4:79:c2: 71:d8:2d:41:b4:c5:49:01:d4:ad:6a:5e:df:3f:4b:52:4f:4c: 3c:5e:5c:01:be:8f:78:e9:f5:98:46:46:a4:e0:e5:b0:bf:19: 5c:dc:da:18:31:21:8a:01:b3:d1:ee:5b:5d:98:a2:17:7c:bb: 89:c6:71:df:a3:5b:c5:9e:1d:23:7c:02:3e:c9:47:9d:4f:bf: 86:30:fe:7a:da:0a:21:7e:f2:3d:fc:1d:59:f9:24:a6:63:4d: 7d:c8:e2:8b:b0:e4:89:33:42:8b:49:a9:16:b3:3c:78:93:93: 4e:d1:9e:33:6b:3b:f1:a3:7b:ce:55:b7:60:27:31:fb:80:91: 2f:20:d5:ef:47:5d:76:d4:5e:e4:1f:40:a8:f4:59:53:85:55: b9:6d:c8:42:5e:3f:20:6d:45:79:3f:98:a9:fa:bd:65:47:d3: 2b:79:37:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOIoBMwSHvNXqBUurHBYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx Njk1MDYwHhcNMjUxMjIyMTgwMDQ2WhcNMjUxMjIzMTgwMDQ2WjAzMTEwLwYDVQQD EyhjYTQ3NmUyYTgwY2JkOGU3ZmNiMjE0M2Y0NTgwODk3YWNiNTlhZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooU1yQZQuBp9aXcPMZLE01VVgbrj cAFBybsnUL8JGRXuFbE0Yy4PrN2SHxXiV/tEY6dZy/QPMPN7sQb1Lw7Za6qmvmy0 WSRg5n9mPN41Qv4OGs6ZbjnWw7e9hlwjxq8dJwhW/YQofQ3xByJDfl3ZM4Qy3osl Pqq4W2p/aIfxSHhL5VkgNrQJFLOiiQS9uRbXD/6pS/+nQNXeaDrez+JuJKy7zW1O HZ9ER6ziY4v4xtXpTLUYR0wuPge/wLOztPtOYoYPuB0yeWC2Hhv+OL1b7RIu3Fsc ORllyJUPROVCKSzlQN5SR6UJ6oGU5QO6CgWBgB4oWrWZpWIwwQx7+K1BpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpHbiqAy9jn/LIUP0WAiXrLWa2CMB8GA1UdIwQY MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgjhQ8Mk 54rIbG5nqaJWlwppxqABgHs1ZdWAKLf+P92yjpsRKmHUceNxyyyjLIwMdyUm6fFL NA+Q1Jtko8kxxlyqmo7fKs2TiIUIsMj5yu6hngO/e31c5HnCcdgtQbTFSQHUrWpe 3z9LUk9MPF5cAb6PeOn1mEZGpODlsL8ZXNzaGDEhigGz0e5bXZiiF3y7icZx36Nb xZ4dI3wCPslHnU+/hjD+etoKIX7yPfwdWfkkpmNNfcjii7DkiTNCi0mpFrM8eJOT TtGeM2s78aN7zlW3YCcx+4CRLyDV70dddtRe5B9AqPRZU4VVuW3IQl4/IG1FeT+Y qfq9ZUfTK3k3+w== -----END CERTIFICATE-----Generated at Mon Dec 22 20:48:32 2025 by rpki-client