This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json) Hash identifier: xueWoBrEfp+ITzhZz74nqAm6UYkpeuNcjDmRGLANgSM= Subject key identifier: F0:CC:90:00:86:BD:69:89:A7:75:66:CD:24:E6:F3:30:11:06:B2:79 Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Certificate serial: 019B243E98BF74CDB0D38BEF9F5E3B915995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft Manifest number: 0E3E Signing time: Mon 15 Dec 2025 23:00:40 +0000 Manifest this update: Mon 15 Dec 2025 23:00:40 +0000 Manifest next update: Tue 16 Dec 2025 23:00:40 +0000 Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: oHorlu6f2kFGWxORC9C6lKZ+0vWBa7Fq6JFEWkHdHvU=) 2: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:98:bf:74:cd:b0:d3:8b:ef:9f:5e:3b:91:59:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Validity Not Before: Dec 15 23:00:40 2025 GMT Not After : Dec 16 23:00:40 2025 GMT Subject: CN=f0cc900086bd6989a77566cd24e6f3301106b279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:e8:a6:f2:7b:b3:1b:5d:43:05:12:76:fb: 76:28:c6:7d:b9:f6:58:61:0a:e0:ec:a9:e9:87:13: 20:7a:5f:75:d6:28:b7:4a:f7:1f:6c:44:ac:87:2b: 5c:2b:ff:18:17:4d:80:51:7a:16:47:b6:a2:b8:7f: 2b:59:6a:0b:f3:30:77:9a:8f:96:d9:ff:c0:64:97: c4:45:e3:24:08:5c:c2:24:f6:0d:dc:d0:49:7b:0b: db:49:c1:1e:6c:b2:75:a4:bc:23:7f:2c:e4:0f:e6: cc:78:18:73:c0:16:92:7a:c3:7c:34:d8:9d:c6:68: 77:b5:20:8b:e1:27:57:10:24:6a:91:a1:3c:ae:6e: 23:33:6b:80:06:93:86:ee:44:fa:e9:61:9e:9f:97: f7:4b:58:22:87:2e:e0:72:73:2a:ed:e0:06:41:6b: b1:cd:82:c1:6f:5c:76:9c:72:11:ec:1c:cf:76:8e: c8:18:c5:19:23:14:e4:cb:be:ee:dd:8f:7b:20:7e: b7:38:87:85:17:0a:f9:73:24:4b:b4:da:43:ee:a2: f3:cc:90:18:fd:6e:08:b5:9c:20:e6:10:af:a4:3f: cc:a9:7f:74:f1:6d:d6:96:b7:b7:41:1f:d0:43:c3: bb:a8:10:20:46:1a:d2:29:1e:d1:86:76:45:a8:a8: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CC:90:00:86:BD:69:89:A7:75:66:CD:24:E6:F3:30:11:06:B2:79 X509v3 Authority Key Identifier: keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c6:fa:53:7c:8f:93:66:9a:be:ed:82:31:cc:2d:3a:93:d2: 72:42:07:53:fb:79:bd:f1:a5:c6:86:d5:0d:a3:25:5f:2c:66: 29:d7:8e:45:f2:92:7e:9a:75:66:1c:5f:ff:7c:c5:fa:f6:cd: aa:19:0a:53:ec:98:ba:d9:a6:91:8b:ae:88:5a:11:06:31:ff: c0:50:91:e0:41:f4:4b:30:2a:5c:75:3c:a2:93:d0:e1:82:27: 65:90:05:80:b5:f1:21:2d:87:df:d6:d1:f8:f7:35:24:6c:78: 7b:00:dd:2f:13:7a:b4:e5:7c:36:e0:26:db:85:0d:9a:38:fe: 39:e6:dc:f0:aa:79:09:d5:c3:7a:30:b6:4c:a8:18:03:5a:7a: d9:fd:12:4e:ec:43:44:41:63:47:cf:f0:87:e8:27:33:4e:ea: 24:fb:47:72:fe:93:7e:35:4a:66:2b:41:f4:e3:c3:9e:a2:01: aa:9d:da:d0:bf:8b:f6:56:d2:19:99:58:61:57:8a:7d:dc:7a: 03:b3:32:b8:09:a6:9e:2e:f7:6d:6a:60:05:01:22:23:30:b6: 2f:6a:9c:05:b2:f2:c0:98:59:7f:b8:d0:a4:9a:fb:87:2c:6c: bd:9c:b9:0b:14:e1:6c:98:a7:34:34:f2:02:a4:d1:c7:c7:e7: 2d:38:87:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPpi/dM2w04vvn147kVmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4 OGQ0ZWMwHhcNMjUxMjE1MjMwMDQwWhcNMjUxMjE2MjMwMDQwWjAzMTEwLwYDVQQD EyhmMGNjOTAwMDg2YmQ2OTg5YTc3NTY2Y2QyNGU2ZjMzMDExMDZiMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjPopvJ7sxtdQwUSdvt2KMZ9ufZY YQrg7KnphxMgel911ii3SvcfbESshytcK/8YF02AUXoWR7aiuH8rWWoL8zB3mo+W 2f/AZJfEReMkCFzCJPYN3NBJewvbScEebLJ1pLwjfyzkD+bMeBhzwBaSesN8NNid xmh3tSCL4SdXECRqkaE8rm4jM2uABpOG7kT66WGen5f3S1gihy7gcnMq7eAGQWux zYLBb1x2nHIR7BzPdo7IGMUZIxTky77u3Y97IH63OIeFFwr5cyRLtNpD7qLzzJAY /W4ItZwg5hCvpD/MqX908W3Wlre3QR/QQ8O7qBAgRhrSKR7RhnZFqKgWswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDMkACGvWmJp3VmzSTm8zARBrJ5MB8GA1UdIwQY MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5 LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcb6U3yP k2aavu2CMcwtOpPSckIHU/t5vfGlxobVDaMlXyxmKdeORfKSfpp1Zhxf/3zF+vbN qhkKU+yYutmmkYuuiFoRBjH/wFCR4EH0SzAqXHU8opPQ4YInZZAFgLXxIS2H39bR +Pc1JGx4ewDdLxN6tOV8NuAm24UNmjj+Oebc8Kp5CdXDejC2TKgYA1p62f0STuxD REFjR8/wh+gnM07qJPtHcv6TfjVKZitB9OPDnqIBqp3a0L+L9lbSGZlYYVeKfdx6 A7MyuAmmni73bWpgBQEiIzC2L2qcBbLywJhZf7jQpJr7hyxsvZy5CxThbJinNDTy AqTRx8fnLTiHjA== -----END CERTIFICATE-----Generated at Tue Dec 16 08:35:03 2025 by rpki-client