This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json) Hash identifier: uBiYX/le7B5cjAbLAhAQ5i7I0oo+etWObH2LfwvmdbI= Subject key identifier: 8A:1E:C3:0B:2E:EC:89:F6:2C:24:14:AC:60:48:25:FC:F5:C8:44:6D Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Certificate serial: 019B202AB9D9BE0333ACAEE0C050DF6B75FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft Manifest number: 170A Signing time: Mon 15 Dec 2025 04:00:29 +0000 Manifest this update: Mon 15 Dec 2025 04:00:29 +0000 Manifest next update: Tue 16 Dec 2025 04:00:29 +0000 Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=) 2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: z7VhBcDOXofqYdjRLon4y0+IvEDNaXeEGPa8TMicfTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2a:b9:d9:be:03:33:ac:ae:e0:c0:50:df:6b:75:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Validity Not Before: Dec 15 04:00:29 2025 GMT Not After : Dec 16 04:00:29 2025 GMT Subject: CN=8a1ec30b2eec89f62c2414ac604825fcf5c8446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:c6:00:c8:12:a5:a9:af:d0:21:b7:be:6a: 13:9e:65:d4:59:86:89:5d:bf:17:72:11:3e:b8:f8: cf:be:b0:ab:72:30:3d:6c:70:f5:4d:37:ad:96:6c: 2b:6b:83:c5:df:d0:31:c8:47:18:c9:51:58:73:58: ea:e4:97:f1:e4:30:59:cc:1b:f4:12:07:57:7c:4f: a7:99:06:44:a4:32:3a:80:c7:eb:85:c5:9f:b9:55: ba:3a:e6:9e:76:56:17:b3:c1:73:2b:d6:99:35:6f: 6c:44:6c:a1:39:96:9e:96:5d:39:39:53:f5:30:7d: b8:54:ad:81:6b:f0:f2:fe:10:4f:a8:c0:78:29:d8: 16:73:62:51:fe:4b:bd:1e:0e:7d:e2:33:af:23:9e: 57:fa:9b:5f:9d:ab:6b:0d:45:65:f2:c2:71:33:23: 80:a1:20:f8:04:2c:27:61:b0:ce:58:d1:9f:c2:74: be:e5:d3:31:8a:70:02:48:6f:54:6d:e3:6a:e3:3a: 6b:85:a6:ef:84:5d:1d:1c:93:e9:1f:45:9b:27:12: 58:bf:01:1c:a0:98:ff:93:ac:c7:36:cc:44:bd:66: 4a:2e:e8:cf:46:06:97:ed:a1:5e:c5:8b:1f:d4:7e: 13:70:e8:a2:81:b9:7e:46:50:63:33:ae:90:a1:87: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:C3:0B:2E:EC:89:F6:2C:24:14:AC:60:48:25:FC:F5:C8:44:6D X509v3 Authority Key Identifier: keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2c:7c:5c:3a:ff:38:58:a9:e8:47:ab:e8:8d:08:ca:2d:56: 00:c8:fb:c0:29:d8:de:66:27:29:da:ca:7c:68:84:9b:e2:1a: 81:b9:1b:38:5a:84:6f:c1:82:57:80:a0:44:44:bd:b3:8e:d1: 62:bc:10:d7:0e:18:49:12:6e:9c:d4:2f:18:d2:ba:6f:e6:16: ea:1e:a7:17:ad:7f:74:8d:3b:4b:cc:d7:ea:11:1e:eb:33:c6: 79:68:80:5d:1e:7e:05:a2:c8:cf:e7:91:0e:e7:c8:60:7a:75: 8d:62:c5:b2:58:b3:a1:83:75:ca:70:ac:44:ee:cb:18:3d:03: 09:6f:b7:65:15:06:58:d5:7c:72:b1:53:61:02:fd:09:9e:cc: e2:c9:36:ac:28:e1:72:ef:a7:67:90:cc:dc:80:20:fd:ec:3c: 2f:ca:de:42:5c:c7:4b:f0:c8:3b:10:9b:de:b9:15:b9:89:75: f3:4a:a1:54:da:10:f8:48:31:75:a1:91:97:f8:4f:56:95:7f: 41:0b:2e:7a:ea:11:68:90:ba:fa:d1:78:ff:2a:f7:bb:26:5f: e6:60:4f:b6:93:ae:ee:b9:97:ad:a1:c2:be:97:3d:56:9a:d6: ab:78:91:ea:26:09:f8:05:f9:ea:63:08:56:49:f5:da:1d:6f: 8f:55:28:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKrnZvgMzrK7gwFDfa3X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4 MTg0Y2UwHhcNMjUxMjE1MDQwMDI5WhcNMjUxMjE2MDQwMDI5WjAzMTEwLwYDVQQD Eyg4YTFlYzMwYjJlZWM4OWY2MmMyNDE0YWM2MDQ4MjVmY2Y1Yzg0NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGLGAMgSpamv0CG3vmoTnmXUWYaJ Xb8XchE+uPjPvrCrcjA9bHD1TTetlmwra4PF39AxyEcYyVFYc1jq5Jfx5DBZzBv0 EgdXfE+nmQZEpDI6gMfrhcWfuVW6OuaedlYXs8FzK9aZNW9sRGyhOZaell05OVP1 MH24VK2Ba/Dy/hBPqMB4KdgWc2JR/ku9Hg594jOvI55X+ptfnatrDUVl8sJxMyOA oSD4BCwnYbDOWNGfwnS+5dMxinACSG9UbeNq4zprhabvhF0dHJPpH0WbJxJYvwEc oJj/k6zHNsxEvWZKLujPRgaX7aFexYsf1H4TcOiigbl+RlBjM66QoYcgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoewwsu7In2LCQUrGBIJfz1yERtMB8GA1UdIwQY MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICx8XDr/ OFip6Eer6I0Iyi1WAMj7wCnY3mYnKdrKfGiEm+IagbkbOFqEb8GCV4CgRES9s47R YrwQ1w4YSRJunNQvGNK6b+YW6h6nF61/dI07S8zX6hEe6zPGeWiAXR5+BaLIz+eR DufIYHp1jWLFslizoYN1ynCsRO7LGD0DCW+3ZRUGWNV8crFTYQL9CZ7M4sk2rCjh cu+nZ5DM3IAg/ew8L8reQlzHS/DIOxCb3rkVuYl180qhVNoQ+EgxdaGRl/hPVpV/ QQsueuoRaJC6+tF4/yr3uyZf5mBPtpOu7rmXraHCvpc9VprWq3iR6iYJ+AX56mMI Vkn12h1vj1Uoeg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:02:49 2025 by rpki-client