This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json) Hash identifier: 0hSPrpGyZgmTIZimHarA9nDbfypEZgqEOpu31Tw3hoM= Subject key identifier: 0A:17:38:6E:26:F9:0B:31:DF:53:17:E6:31:C9:E8:AD:CF:82:60:3C Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C Certificate issuer: /CN=674c507a0cdb531374437ebf46dd59a6bd07486c Certificate serial: 019B6EB46D5458231ABEA19A6DFFF4E5BFE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft Manifest number: 06FD Signing time: Tue 30 Dec 2025 10:01:16 +0000 Manifest this update: Tue 30 Dec 2025 10:01:16 +0000 Manifest next update: Wed 31 Dec 2025 10:01:16 +0000 Files and hashes: 1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: Y7DfRo5mE4pswkpDMVj+Lj/IBdtsDNHljifWUSBQ3j8=) 2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:6d:54:58:23:1a:be:a1:9a:6d:ff:f4:e5:bf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c Validity Not Before: Dec 30 10:01:16 2025 GMT Not After : Dec 31 10:01:16 2025 GMT Subject: CN=0a17386e26f90b31df5317e631c9e8adcf82603c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:dd:30:56:7b:09:71:14:6e:75:ee:1a:39: 96:d2:f2:18:16:16:d9:4d:e9:4b:73:ac:0c:96:37: 73:68:4d:b9:f9:87:27:40:f2:9c:28:08:9b:09:1f: af:65:44:d4:48:7d:12:27:a8:28:59:da:92:a1:8e: 55:69:48:59:25:02:36:5d:18:cb:c7:dc:4e:d7:ec: 33:ad:29:18:ff:f0:22:15:5f:c2:0e:59:e6:dc:bc: 81:27:18:85:d2:26:96:18:c7:95:14:8a:f9:b9:dc: 76:70:5f:d0:1f:87:99:75:e6:20:75:c6:75:41:db: 33:4f:ba:e7:d0:ab:f0:04:f9:97:e0:3c:14:dd:25: 1a:0d:17:aa:2a:f9:ed:18:20:a8:9a:4e:5d:90:25: 4f:13:5a:fd:50:18:41:10:18:95:ad:f3:c0:9f:61: 79:80:c4:d8:ea:52:6b:a4:1a:55:d7:83:fc:34:95: 58:b9:fa:c0:d5:d6:7a:ac:cd:ce:e8:10:59:ba:ca: 73:22:33:30:28:cb:31:27:15:ab:21:f6:c3:55:13: a5:c4:62:d4:d9:12:44:28:d7:a5:a0:7a:80:de:d4: 5a:fd:d1:5b:aa:91:5d:e4:8a:8e:fe:8e:67:e0:e0: e6:92:9a:dd:ec:b0:90:df:11:11:c3:f9:cf:b6:df: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:38:6E:26:F9:0B:31:DF:53:17:E6:31:C9:E8:AD:CF:82:60:3C X509v3 Authority Key Identifier: keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:35:6b:e4:2c:56:26:31:ec:0d:17:c7:cb:9c:24:fa:fc:33: eb:93:8f:46:cf:7b:57:d2:eb:1b:74:df:3f:88:29:f9:1f:a0: de:24:2d:0f:e9:8e:1b:8e:8a:78:b6:ec:0e:4f:e6:7f:a8:10: 2d:19:02:04:fc:ee:0e:f9:82:99:c8:88:8f:9e:fd:46:a7:78: 3e:d1:86:39:31:d4:03:52:b5:12:b0:9a:ae:4b:af:8a:8c:43: e9:7d:c3:ed:51:79:25:e8:19:66:6d:14:7f:c8:a4:cb:d4:1b: 4b:cb:82:c0:5c:cb:83:52:17:ab:d0:86:ef:cf:9d:37:41:af: 81:c6:89:44:af:47:2c:08:a6:80:62:a0:46:83:04:4d:0d:7b: 9a:b3:df:db:7a:58:a5:a8:ec:51:b3:21:c0:8a:41:3c:a2:61: 86:bf:c9:53:8a:0c:df:4a:65:17:fa:56:6a:3b:a6:96:f6:fa: 47:c7:a5:e3:61:c3:55:64:67:41:ba:42:63:2a:2d:45:e2:b9: fd:92:89:3e:56:71:a9:a1:ef:90:e4:e8:b9:8e:bd:01:72:0b: 94:1d:23:ca:5d:2a:a4:d0:4d:45:50:8f:fe:b9:24:38:2c:93: f0:9d:0f:3e:14:8f:23:b6:c5:ac:58:22:a5:b9:18:18:c5:81: db:77:7d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutG1UWCMavqGabf/05b/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NGM1MDdhMGNkYjUzMTM3NDQzN2ViZjQ2ZGQ1OWE2YmQw NzQ4NmMwHhcNMjUxMjMwMTAwMTE2WhcNMjUxMjMxMTAwMTE2WjAzMTEwLwYDVQQD EygwYTE3Mzg2ZTI2ZjkwYjMxZGY1MzE3ZTYzMWM5ZThhZGNmODI2MDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN/dMFZ7CXEUbnXuGjmW0vIYFhbZ TelLc6wMljdzaE25+YcnQPKcKAibCR+vZUTUSH0SJ6goWdqSoY5VaUhZJQI2XRjL x9xO1+wzrSkY//AiFV/CDlnm3LyBJxiF0iaWGMeVFIr5udx2cF/QH4eZdeYgdcZ1 QdszT7rn0KvwBPmX4DwU3SUaDReqKvntGCComk5dkCVPE1r9UBhBEBiVrfPAn2F5 gMTY6lJrpBpV14P8NJVYufrA1dZ6rM3O6BBZuspzIjMwKMsxJxWrIfbDVROlxGLU 2RJEKNeloHqA3tRa/dFbqpFd5IqO/o5n4ODmkprd7LCQ3xERw/nPtt+ozwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoXOG4m+Qsx31MX5jHJ6K3PgmA8MB8GA1UdIwQY MBaAFGdMUHoM21MTdEN+v0bdWaa9B0hsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2Ut NGIzNWFkNzBjYzFhLzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2UtNGIzNWFkNzBjYzFh LzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDVr5CxW JjHsDRfHy5wk+vwz65OPRs97V9LrG3TfP4gp+R+g3iQtD+mOG46KeLbsDk/mf6gQ LRkCBPzuDvmCmciIj579Rqd4PtGGOTHUA1K1ErCarkuvioxD6X3D7VF5JegZZm0U f8iky9QbS8uCwFzLg1IXq9CG78+dN0GvgcaJRK9HLAimgGKgRoMETQ17mrPf23pY pajsUbMhwIpBPKJhhr/JU4oM30plF/pWajumlvb6R8el42HDVWRnQbpCYyotReK5 /ZKJPlZxqaHvkOTouY69AXILlB0jyl0qpNBNRVCP/rkkOCyT8J0PPhSPI7bFrFgi pbkYGMWB23d9Og== -----END CERTIFICATE-----Generated at Tue Dec 30 14:59:41 2025 by rpki-client