This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json) Hash identifier: 78B+JquhP6MYx8oQgB/YzZlNUfOUftHjrv690qYd0pw= Subject key identifier: D3:81:08:80:25:AB:AD:D2:EB:0D:5A:98:A3:39:41:D2:93:E7:F3:92 Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C Certificate issuer: /CN=674c507a0cdb531374437ebf46dd59a6bd07486c Certificate serial: 019B3C7F1DA708A7258E84FB60136D4AE2D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft Manifest number: 06E3 Signing time: Sat 20 Dec 2025 16:02:02 +0000 Manifest this update: Sat 20 Dec 2025 16:02:02 +0000 Manifest next update: Sun 21 Dec 2025 16:02:02 +0000 Files and hashes: 1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: jD2ALgP2F7U3iL1aFa+A4Po00oPObx3QvAuOm/8CAIY=) 2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:1d:a7:08:a7:25:8e:84:fb:60:13:6d:4a:e2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c Validity Not Before: Dec 20 16:02:02 2025 GMT Not After : Dec 21 16:02:02 2025 GMT Subject: CN=d381088025abadd2eb0d5a98a33941d293e7f392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:c4:a1:3e:87:a0:90:64:91:c9:73:33:99: 1e:6c:3f:be:a8:d8:f6:f0:d1:35:fd:c3:64:64:ce: a8:32:ed:9f:85:bf:78:5b:f9:ec:82:76:14:16:b4: c0:d9:bd:b8:37:8f:6a:06:fe:c7:46:67:26:22:b5: e1:9a:4c:88:53:45:40:5c:73:aa:c4:35:9b:ec:09: 48:16:c2:d4:de:cb:0a:15:05:8f:dd:5b:91:4a:83: 6e:d9:a5:7b:7c:c0:ca:b3:52:83:fe:a8:e0:d9:ce: 85:d3:b4:c4:7e:31:89:5e:dc:49:87:d6:cc:e4:a1: 75:c8:bc:c6:e7:af:f9:3e:86:f9:9e:04:fb:c3:f0: df:ab:4d:28:d8:73:82:f2:b6:76:77:b4:7c:e7:13: 69:65:c1:3b:d5:60:d2:f4:7a:9e:af:b7:4a:20:2a: 2e:d8:2f:02:7b:52:fc:07:a1:95:5a:05:71:a5:b0: e7:73:2c:7f:1f:a9:d9:b8:e8:00:55:7f:8a:00:3d: 57:91:2a:5d:f5:f6:1f:b7:1f:3b:60:87:f9:1a:0d: f9:f0:83:52:fc:9d:2c:45:0e:dd:39:9c:c0:e3:0e: 46:d3:df:64:0e:2c:c5:5b:30:74:9f:32:20:69:77: 42:45:ea:3a:f2:dd:59:49:02:4e:07:b6:77:0e:52: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:81:08:80:25:AB:AD:D2:EB:0D:5A:98:A3:39:41:D2:93:E7:F3:92 X509v3 Authority Key Identifier: keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b5:06:77:aa:38:46:2f:e9:57:8e:3d:2f:89:c3:9c:b2:a0: ba:0d:54:ce:1c:d3:cb:cd:49:9f:0c:ad:f4:62:d9:5d:59:5f: 99:a6:9e:23:ea:3b:ed:fd:ee:0b:bc:1a:83:44:c4:f5:c5:93: 7b:a3:a2:d8:05:c4:1a:f6:c1:db:ec:0e:c1:a6:ed:ce:0f:13: b3:ae:db:1f:c3:44:56:89:f7:1d:5a:79:3c:3b:4f:3f:2b:f6: 3b:69:d5:61:f5:0f:05:ec:9a:33:e1:57:c6:63:7d:dd:eb:3b: c1:c1:d8:09:c4:0a:87:2c:b4:31:a7:67:d7:fc:89:7b:a3:85: 33:6c:cf:4e:52:2a:02:ed:1a:10:5c:6a:63:1d:69:3e:ed:e4: 2a:8d:44:cb:0d:7d:fa:a8:25:58:d9:ca:0f:3a:3a:a2:80:58: c9:c8:ad:21:4f:bc:e9:ba:20:4b:66:09:b7:46:f5:8f:96:4e: 6e:e4:de:94:5a:f2:83:df:49:0b:2c:f1:c3:30:ae:bf:db:21: e1:ba:42:b8:88:f5:74:d4:90:f8:77:57:5a:7d:58:66:7c:5c: 2a:71:44:43:83:6d:19:0e:12:ca:01:b5:92:fb:f1:c8:97:8c: fc:b3:cd:7f:1c:36:b4:32:3f:2c:ff:e1:e5:1e:0a:49:94:84: 18:3e:0a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fx2nCKcljoT7YBNtSuLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NGM1MDdhMGNkYjUzMTM3NDQzN2ViZjQ2ZGQ1OWE2YmQw NzQ4NmMwHhcNMjUxMjIwMTYwMjAyWhcNMjUxMjIxMTYwMjAyWjAzMTEwLwYDVQQD EyhkMzgxMDg4MDI1YWJhZGQyZWIwZDVhOThhMzM5NDFkMjkzZTdmMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4LEoT6HoJBkkclzM5kebD++qNj2 8NE1/cNkZM6oMu2fhb94W/nsgnYUFrTA2b24N49qBv7HRmcmIrXhmkyIU0VAXHOq xDWb7AlIFsLU3ssKFQWP3VuRSoNu2aV7fMDKs1KD/qjg2c6F07TEfjGJXtxJh9bM 5KF1yLzG56/5Pob5ngT7w/Dfq00o2HOC8rZ2d7R85xNpZcE71WDS9Hqer7dKICou 2C8Ce1L8B6GVWgVxpbDncyx/H6nZuOgAVX+KAD1XkSpd9fYftx87YIf5Gg358INS /J0sRQ7dOZzA4w5G099kDizFWzB0nzIgaXdCReo68t1ZSQJOB7Z3DlK8HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOBCIAlq63S6w1amKM5QdKT5/OSMB8GA1UdIwQY MBaAFGdMUHoM21MTdEN+v0bdWaa9B0hsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2Ut NGIzNWFkNzBjYzFhLzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2UtNGIzNWFkNzBjYzFh LzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbUGd6o4 Ri/pV449L4nDnLKgug1UzhzTy81Jnwyt9GLZXVlfmaaeI+o77f3uC7wag0TE9cWT e6Oi2AXEGvbB2+wOwabtzg8Ts67bH8NEVon3HVp5PDtPPyv2O2nVYfUPBeyaM+FX xmN93es7wcHYCcQKhyy0Madn1/yJe6OFM2zPTlIqAu0aEFxqYx1pPu3kKo1Eyw19 +qglWNnKDzo6ooBYycitIU+86bogS2YJt0b1j5ZObuTelFryg99JCyzxwzCuv9sh 4bpCuIj1dNSQ+HdXWn1YZnxcKnFEQ4NtGQ4SygG1kvvxyJeM/LPNfxw2tDI/LP/h 5R4KSZSEGD4K2A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:36 2025 by rpki-client