This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft File: Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft (raw, json) Hash identifier: OhQIy2PtqfHFB2uUCDgXzgCeERRRCVFv58GoN/sNXc4= Subject key identifier: B2:D7:04:EF:51:F5:D9:F6:4D:A4:E7:AE:87:86:1A:E6:82:07:F9:F5 Authority key identifier: 67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE Certificate issuer: /CN=67de8e2e1981aedc93e185e8fefe6e3495905bee Certificate serial: 019B5AF6B79A9AD5A806BCA8442A51B6CC42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft Manifest number: 73 Signing time: Fri 26 Dec 2025 14:01:16 +0000 Manifest this update: Fri 26 Dec 2025 14:01:16 +0000 Manifest next update: Sat 27 Dec 2025 14:01:16 +0000 Files and hashes: 1: Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl (hash: 2kIPVy/o+LSVPXDKGBJsm1w7239FIv2pr968L5Zkl1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:b7:9a:9a:d5:a8:06:bc:a8:44:2a:51:b6:cc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67de8e2e1981aedc93e185e8fefe6e3495905bee Validity Not Before: Dec 26 14:01:16 2025 GMT Not After : Dec 27 14:01:16 2025 GMT Subject: CN=b2d704ef51f5d9f64da4e7ae87861ae68207f9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:af:ec:02:ed:72:21:55:6c:23:63:70:43: 81:09:7e:dc:d7:c0:fa:61:c8:e7:0c:ef:3e:91:31: b2:13:93:b1:37:e8:6d:ca:de:4b:cc:e0:87:c0:bb: 04:10:c5:60:5d:19:67:02:dd:c5:a7:8a:6e:9c:fe: 99:a2:3b:4a:d6:db:3a:0e:c3:53:4c:7d:2a:b5:be: 00:a1:36:df:4c:00:ba:88:50:63:48:1b:28:da:2e: c5:70:05:69:a8:83:57:9c:23:12:eb:ea:20:91:ac: 39:3f:87:31:c2:25:12:3e:cf:8f:51:e2:e5:24:1b: ac:be:b2:e1:d3:6f:48:ed:38:ab:f9:7a:72:64:21: 69:ae:9d:ee:a8:c4:ba:6d:79:24:53:de:2a:1c:17: d0:24:ca:88:c6:64:b9:24:47:1a:c1:68:83:48:ad: 5b:0c:72:be:d7:a7:11:65:6a:a1:27:15:07:aa:f8: 52:45:01:28:05:02:45:d0:ac:7c:7c:8d:58:19:d9: a1:43:c0:c0:66:31:96:08:93:b8:56:3c:20:9e:30: 83:4a:74:2f:99:21:2c:3a:58:33:44:f5:dd:ef:f3: cf:91:b7:e7:83:0c:69:a9:31:69:fe:f5:ab:1c:36: 71:5f:c9:2e:9c:0f:06:26:dd:96:7a:f6:05:30:2f: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D7:04:EF:51:F5:D9:F6:4D:A4:E7:AE:87:86:1A:E6:82:07:F9:F5 X509v3 Authority Key Identifier: keyid:67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d5:7c:e9:9d:2e:f0:c9:fd:e4:b2:d1:26:82:cf:dc:10:0c: 80:a3:d3:47:58:cf:48:f8:b0:65:7d:e9:21:72:8f:a5:7b:c2: e5:d8:a1:fb:56:ca:40:14:20:21:b2:46:d0:3e:ee:a8:fd:8d: 8c:e2:5a:84:a1:01:e8:bb:de:3c:43:e0:7a:e5:48:65:54:bf: 12:0d:fe:0a:bc:f4:81:44:9d:47:8e:06:ec:ba:dd:1d:39:d5: 95:20:0a:4c:04:35:77:41:75:b1:77:06:e9:0b:7b:5d:43:c5: aa:d7:1d:bc:94:e6:0d:a2:05:dd:2d:ff:84:ef:28:0c:ec:98: e0:54:25:7a:60:3e:1b:ad:d5:00:50:4f:9c:bb:e1:57:3d:8e: d7:e8:6d:eb:4e:68:d3:cb:a4:e5:86:dd:b7:06:45:28:f6:1e: 32:a7:42:a8:1a:59:c8:b5:a6:3d:a5:0d:05:84:88:da:86:ba: df:f8:b4:ba:7f:84:6e:46:f1:74:4a:96:48:19:45:86:67:8a: db:3b:56:98:e1:33:ca:9b:1a:5e:af:19:50:f6:b7:9e:fc:a9: e2:aa:89:52:15:7b:90:3c:ea:72:b9:b3:af:03:d2:6e:2f:6a: 44:ba:21:24:07:1c:4e:22:0f:f9:89:60:56:25:8f:14:05:1e: fa:78:ec:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9reamtWoBryoRCpRtsxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGU4ZTJlMTk4MWFlZGM5M2UxODVlOGZlZmU2ZTM0OTU5 MDViZWUwHhcNMjUxMjI2MTQwMTE2WhcNMjUxMjI3MTQwMTE2WjAzMTEwLwYDVQQD EyhiMmQ3MDRlZjUxZjVkOWY2NGRhNGU3YWU4Nzg2MWFlNjgyMDdmOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+iv7ALtciFVbCNjcEOBCX7c18D6 YcjnDO8+kTGyE5OxN+htyt5LzOCHwLsEEMVgXRlnAt3Fp4punP6ZojtK1ts6DsNT TH0qtb4AoTbfTAC6iFBjSBso2i7FcAVpqINXnCMS6+ogkaw5P4cxwiUSPs+PUeLl JBusvrLh029I7Tir+XpyZCFprp3uqMS6bXkkU94qHBfQJMqIxmS5JEcawWiDSK1b DHK+16cRZWqhJxUHqvhSRQEoBQJF0Kx8fI1YGdmhQ8DAZjGWCJO4VjwgnjCDSnQv mSEsOlgzRPXd7/PPkbfngwxpqTFp/vWrHDZxX8kunA8GJt2WevYFMC+5kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLXBO9R9dn2TaTnroeGGuaCB/n1MB8GA1UdIwQY MBaAFGfeji4Zga7ck+GF6P7+bjSVkFvuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjk2T0xobUJydHlUNFlYb192NXVOSldRVy00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZmRmMWEtMzFiMS00ZGNiLTk2ZGMt YjNmOWM3Nzc4OWI3LzEvWjk2T0xobUJydHlUNFlYb192NXVOSldRVy00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xZmRmMWEtMzFiMS00ZGNiLTk2ZGMtYjNmOWM3Nzc4OWI3 LzEvWjk2T0xobUJydHlUNFlYb192NXVOSldRVy00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9V86Z0u 8Mn95LLRJoLP3BAMgKPTR1jPSPiwZX3pIXKPpXvC5dih+1bKQBQgIbJG0D7uqP2N jOJahKEB6LvePEPgeuVIZVS/Eg3+Crz0gUSdR44G7LrdHTnVlSAKTAQ1d0F1sXcG 6Qt7XUPFqtcdvJTmDaIF3S3/hO8oDOyY4FQlemA+G63VAFBPnLvhVz2O1+ht605o 08uk5YbdtwZFKPYeMqdCqBpZyLWmPaUNBYSI2oa63/i0un+EbkbxdEqWSBlFhmeK 2ztWmOEzypsaXq8ZUPa3nvyp4qqJUhV7kDzqcrmzrwPSbi9qRLohJAccTiIP+Ylg ViWPFAUe+njsFQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client