This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft File: z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json) Hash identifier: eiWi/84HIV9b4HxDAPB7Q769zQsl4ZSX/tkqw6SFMC4= Subject key identifier: 23:9C:FD:9B:32:07:8E:C4:36:55:9E:AC:1A:43:A8:A7:65:F7:B2:B7 Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Certificate serial: 019B3C107B8B20F1CF1E3001F858DFF86B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft Manifest number: 0A7A Signing time: Sat 20 Dec 2025 14:01:11 +0000 Manifest this update: Sat 20 Dec 2025 14:01:11 +0000 Manifest next update: Sun 21 Dec 2025 14:01:11 +0000 Files and hashes: 1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=) 2: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=) 3: aedlYda2oVCUa1BM1GSAfkRmYaY.roa (hash: 1lOdpPJ7itskaoLnmdQoRa6VeoKX772UHHwUXEq8AJ4=) 4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=) 5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: AYbMFS4pLKskAz/A5TDIgv2FFJqkRluX/gLKBalnD5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:7b:8b:20:f1:cf:1e:30:01:f8:58:df:f8:6b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Validity Not Before: Dec 20 14:01:11 2025 GMT Not After : Dec 21 14:01:11 2025 GMT Subject: CN=239cfd9b32078ec436559eac1a43a8a765f7b2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:5f:d1:4d:80:79:36:6b:f0:c3:da:38:29: c5:76:9d:ac:b4:ae:6d:5c:c3:2d:95:44:e7:ec:86: 27:50:6e:7f:b5:ca:37:31:53:fe:ff:9a:ba:3e:a5: 18:dc:a0:60:ab:70:92:02:e0:fd:80:a4:f6:29:93: 3f:10:34:ff:46:7d:de:3f:21:b1:57:45:9c:76:ee: 8f:46:24:17:97:f3:0c:5b:91:61:e0:dd:c9:ad:dc: 3b:97:8e:d7:26:6a:14:ed:63:64:ae:bb:9c:9d:e0: 6f:6d:3c:60:1c:55:b7:12:3f:d3:fb:5c:0f:5f:74: aa:5f:af:68:5f:ef:5c:3f:cd:b5:d4:89:1f:f2:16: 54:77:cc:cb:09:98:a7:95:b6:2a:73:29:9f:20:08: 5b:08:64:93:a2:58:e7:62:d2:5e:02:75:80:00:7b: ef:ba:39:a6:9b:90:2c:b9:0c:71:f1:4c:ca:17:a3: 79:89:5e:4b:07:4e:86:7c:e4:fc:49:d6:d8:6c:0f: 44:d3:ca:2e:c8:aa:59:e4:de:ab:40:24:8d:40:a7: c0:25:f6:64:fe:cc:67:17:9a:e2:05:52:cd:bc:f5: 4e:cb:4d:8b:5d:24:11:6a:82:08:69:17:16:2b:0a: fd:c5:07:37:db:4a:59:3d:37:51:bc:e0:b4:71:0c: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9C:FD:9B:32:07:8E:C4:36:55:9E:AC:1A:43:A8:A7:65:F7:B2:B7 X509v3 Authority Key Identifier: keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:71:3e:53:f5:7d:10:f7:bb:58:b8:58:03:1b:ec:0b:a9:76: 6e:d5:69:8f:cb:a0:bb:86:bc:9a:ad:78:dd:dd:2c:92:a7:24: 7c:5f:46:09:cd:38:8c:2b:ef:66:9b:8d:85:df:3f:dc:a0:16: ed:8f:e4:27:d3:f0:ca:87:55:f6:08:fb:08:8f:5f:41:85:8b: 1f:5e:5b:ab:6d:38:82:f9:ba:c1:4a:05:14:8d:c5:fa:34:98: 80:74:35:4f:29:53:04:ad:14:4d:d0:32:77:55:f8:00:17:1c: 18:5b:98:7d:c9:06:1f:ea:5b:2a:d2:39:0a:08:bc:f3:c5:10: 0a:cd:51:79:67:91:e8:15:73:aa:c4:45:57:f0:dd:39:03:4c: 78:aa:ee:5c:df:a0:cc:15:b4:de:ce:4e:a3:58:9e:b3:6c:96: e4:7a:4b:fb:ba:82:8f:80:24:4d:14:6d:2e:a8:9d:28:db:38: 52:a0:22:5c:0f:eb:3c:32:05:36:22:15:36:83:ba:f8:70:13: 26:72:7f:eb:cf:b3:44:7d:d9:84:a1:3f:53:ec:72:13:92:52: df:9f:f2:e6:90:68:a6:af:47:a9:64:57:10:8f:c8:e9:f2:df: 02:b4:e0:aa:19:96:02:ae:08:98:1f:dd:9e:13:bc:b0:b8:da: 33:c0:b2:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHuLIPHPHjAB+Fjf+Gt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGE3MTdmOGZhMWJiMDM1OTI3NDIyM2FjZGFlMjJiNzBl NjZiZWMwHhcNMjUxMjIwMTQwMTExWhcNMjUxMjIxMTQwMTExWjAzMTEwLwYDVQQD EygyMzljZmQ5YjMyMDc4ZWM0MzY1NTllYWMxYTQzYThhNzY1ZjdiMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZf0U2AeTZr8MPaOCnFdp2stK5t XMMtlUTn7IYnUG5/tco3MVP+/5q6PqUY3KBgq3CSAuD9gKT2KZM/EDT/Rn3ePyGx V0Wcdu6PRiQXl/MMW5Fh4N3Jrdw7l47XJmoU7WNkrrucneBvbTxgHFW3Ej/T+1wP X3SqX69oX+9cP8211Ikf8hZUd8zLCZinlbYqcymfIAhbCGSToljnYtJeAnWAAHvv ujmmm5AsuQxx8UzKF6N5iV5LB06GfOT8SdbYbA9E08ouyKpZ5N6rQCSNQKfAJfZk /sxnF5riBVLNvPVOy02LXSQRaoIIaRcWKwr9xQc320pZPTdRvOC0cQxk8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOc/ZsyB47ENlWerBpDqKdl97K3MB8GA1UdIwQY MBaAFM9KcX+PobsDWSdCI6za4itw5mvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTkt NmFhYTZiMDIxNjBkLzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTktNmFhYTZiMDIxNjBk LzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3E+U/V9 EPe7WLhYAxvsC6l2btVpj8ugu4a8mq143d0skqckfF9GCc04jCvvZpuNhd8/3KAW 7Y/kJ9PwyodV9gj7CI9fQYWLH15bq204gvm6wUoFFI3F+jSYgHQ1TylTBK0UTdAy d1X4ABccGFuYfckGH+pbKtI5Cgi888UQCs1ReWeR6BVzqsRFV/DdOQNMeKruXN+g zBW03s5Oo1ies2yW5HpL+7qCj4AkTRRtLqidKNs4UqAiXA/rPDIFNiIVNoO6+HAT JnJ/68+zRH3ZhKE/U+xyE5JS35/y5pBopq9HqWRXEI/I6fLfArTgqhmWAq4ImB/d nhO8sLjaM8CycQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:13:49 2025 by rpki-client