This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json) Hash identifier: XS6qKBE/6lij0/FQmwbzvIZRPBsy3M+vRp3l5VBmdxQ= Subject key identifier: 13:77:8B:D2:9A:61:4C:38:EF:A0:DC:19:F0:22:1C:6D:25:F3:AF:6D Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13 Certificate serial: 019B5ABFE4E1C655E7A0A88AE3915A9EBEC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft Manifest number: 15A7 Signing time: Fri 26 Dec 2025 13:01:23 +0000 Manifest this update: Fri 26 Dec 2025 13:01:23 +0000 Manifest next update: Sat 27 Dec 2025 13:01:23 +0000 Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=) 2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: WVq4GYEZSNR6831fCSkse7lTysB9HsNCFfHKVO7lhAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e4:e1:c6:55:e7:a0:a8:8a:e3:91:5a:9e:be:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13 Validity Not Before: Dec 26 13:01:23 2025 GMT Not After : Dec 27 13:01:23 2025 GMT Subject: CN=13778bd29a614c38efa0dc19f0221c6d25f3af6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ef:70:a7:a3:fd:a6:d7:a6:86:0c:15:31:42: ff:90:7c:8d:c4:17:27:b0:e2:74:d9:09:ad:71:f8: 55:43:5f:f8:98:38:9b:bd:6c:25:aa:31:45:a7:35: 7b:0b:3d:cf:08:b3:8d:9c:5e:bc:3b:8a:f6:58:98: ac:74:97:8d:16:50:a0:07:3a:b3:12:6a:81:8e:0d: 78:1c:eb:3f:4f:0a:6d:3e:8e:78:33:ff:50:f5:ab: 61:fa:a8:b6:50:f1:3d:f1:30:26:0e:21:8c:47:dd: e9:63:f7:9d:f2:1a:d5:75:7a:ed:91:c4:23:4f:92: e1:89:14:b7:d5:4c:57:6b:f8:3d:1d:43:f3:45:b5: d9:0f:b0:06:f5:40:98:8d:60:84:8c:a5:01:0d:b4: c6:b9:ec:06:83:cf:89:a2:b7:e8:57:e1:d7:f8:15: 9f:b7:17:04:11:d0:35:9a:a8:8a:f6:10:1d:27:74: 06:d3:a4:c3:41:0d:a1:3a:b1:42:f1:64:0b:37:75: 87:0e:e2:76:cc:8a:05:54:2f:6e:98:50:05:22:b1: 98:92:07:eb:79:f4:7c:a1:8c:45:e2:e1:c8:a8:92: 4c:50:31:8c:ea:d9:2b:ab:c8:16:05:37:f0:a6:d6: fb:d7:d6:e4:8c:d3:88:df:17:aa:91:bd:d5:30:55: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:77:8B:D2:9A:61:4C:38:EF:A0:DC:19:F0:22:1C:6D:25:F3:AF:6D X509v3 Authority Key Identifier: keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ec:f7:c9:4b:ca:91:ec:55:68:16:cc:a6:09:43:fc:a3:7a: 28:e6:4d:cf:d4:c3:80:38:97:38:70:bf:31:66:c8:3c:9c:00: da:af:bd:04:01:c0:e7:7f:08:c0:68:7b:1f:bf:f5:23:d8:11: 8b:ef:94:40:73:b1:8a:e5:7d:e8:7e:cf:de:43:59:c2:0e:50: 1a:0e:3f:5d:12:3c:89:04:80:b6:9c:08:f1:13:46:38:90:af: 9b:b9:b1:c5:4e:ce:2f:1c:3f:01:b8:2a:db:14:f2:1a:f2:b7: af:fc:e4:9a:7a:4d:e8:ec:b6:a9:fd:9a:c1:a5:ee:71:6f:26: 7d:02:5e:46:e3:b7:00:43:06:0b:00:f5:99:1d:97:fd:ee:61: 3d:c3:45:cf:f5:0a:f8:f6:bb:f9:a4:07:d1:e5:07:f5:11:5b: ea:90:ba:5e:78:f4:3f:3a:7b:b7:a6:a9:4a:01:dd:47:1f:87: 75:bd:ae:cd:e8:9d:b3:3b:bb:97:18:ae:00:5a:e4:c9:fc:57: 22:ef:41:c9:17:90:81:cf:1d:df:b4:55:24:3f:76:26:a7:63: dc:7f:0a:0d:31:75:bb:e6:55:77:a7:27:ff:ec:db:b6:ba:85: e2:c0:1a:e9:c9:71:41:f9:a4:c8:d9:09:dd:60:a2:91:67:95: 0a:f5:fd:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+ThxlXnoKiK45Fanr7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODAwYWJhNDA2MzliZjM4ZDFlYjZjOTE1N2I5OTRmMTkz MjNiMTMwHhcNMjUxMjI2MTMwMTIzWhcNMjUxMjI3MTMwMTIzWjAzMTEwLwYDVQQD EygxMzc3OGJkMjlhNjE0YzM4ZWZhMGRjMTlmMDIyMWM2ZDI1ZjNhZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u9wp6P9ptemhgwVMUL/kHyNxBcn sOJ02QmtcfhVQ1/4mDibvWwlqjFFpzV7Cz3PCLONnF68O4r2WJisdJeNFlCgBzqz EmqBjg14HOs/TwptPo54M/9Q9ath+qi2UPE98TAmDiGMR93pY/ed8hrVdXrtkcQj T5LhiRS31UxXa/g9HUPzRbXZD7AG9UCYjWCEjKUBDbTGuewGg8+JorfoV+HX+BWf txcEEdA1mqiK9hAdJ3QG06TDQQ2hOrFC8WQLN3WHDuJ2zIoFVC9umFAFIrGYkgfr efR8oYxF4uHIqJJMUDGM6tkrq8gWBTfwptb719bkjNOI3xeqkb3VMFX+4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBN3i9KaYUw476DcGfAiHG0l869tMB8GA1UdIwQY MBaAFGeACrpAY5vzjR62yRV7mU8ZMjsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEt MjkyNjI3OTA0MDlkLzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEtMjkyNjI3OTA0MDlk LzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuz3yUvK kexVaBbMpglD/KN6KOZNz9TDgDiXOHC/MWbIPJwA2q+9BAHA538IwGh7H7/1I9gR i++UQHOxiuV96H7P3kNZwg5QGg4/XRI8iQSAtpwI8RNGOJCvm7mxxU7OLxw/Abgq 2xTyGvK3r/zkmnpN6Oy2qf2awaXucW8mfQJeRuO3AEMGCwD1mR2X/e5hPcNFz/UK +Pa7+aQH0eUH9RFb6pC6Xnj0Pzp7t6apSgHdRx+Hdb2uzeidszu7lxiuAFrkyfxX Iu9ByReQgc8d37RVJD92Jqdj3H8KDTF1u+ZVd6cn/+zbtrqF4sAa6clxQfmkyNkJ 3WCikWeVCvX9Vw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:18 2025 by rpki-client