This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json) Hash identifier: KTBEJS0TLvZBImRsNkjbIAw25a6Hm8BO7AucZxUko0s= Subject key identifier: F2:20:C7:20:2D:BB:89:3A:65:21:5B:71:A3:B0:82:35:3B:18:DB:2B Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Certificate serial: 019B435C49A57A5501BFAE247A65B8A0CF29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft Manifest number: 0638 Signing time: Mon 22 Dec 2025 00:01:20 +0000 Manifest this update: Mon 22 Dec 2025 00:01:20 +0000 Manifest next update: Tue 23 Dec 2025 00:01:20 +0000 Files and hashes: 1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=) 2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: +gzc7YMYXJnPgUheIrhG1av+O2aPycMHuhDWeeYhCko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:49:a5:7a:55:01:bf:ae:24:7a:65:b8:a0:cf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Validity Not Before: Dec 22 00:01:20 2025 GMT Not After : Dec 23 00:01:20 2025 GMT Subject: CN=f220c7202dbb893a65215b71a3b082353b18db2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:95:88:1b:82:70:58:22:a6:c0:f5:3e:1a: 57:dc:a0:dd:9e:05:95:27:73:e4:83:26:2f:59:30: 1d:9a:f8:7f:9a:c4:11:40:2f:48:e9:cd:c0:dc:85: 0e:d0:b9:c2:1b:5e:6e:05:3a:a4:c7:b5:b0:c2:45: ee:ed:22:ff:2c:cd:c6:16:c7:70:5d:22:10:45:cd: 50:48:e5:5a:66:41:1c:d6:32:8b:e0:c0:97:a1:c4: 1b:86:1e:76:fd:91:61:2e:03:51:5c:ff:5b:ad:dc: f4:dc:81:80:a4:1d:39:04:21:37:f0:07:fb:aa:3d: ce:30:c6:45:ee:6c:30:a0:96:17:e3:a5:fc:26:25: 33:3e:4e:76:58:16:a8:0e:20:39:7a:6d:23:75:63: 96:d5:4d:3f:d9:69:58:38:6d:c4:a2:93:56:5d:5f: c4:67:3a:22:8d:69:dd:ba:0d:89:ba:e0:00:8f:b1: 02:a1:37:0f:df:6e:32:88:5f:a0:75:2e:1e:40:53: e9:7e:66:f3:09:5d:3e:8d:f0:e9:98:ea:ee:bb:75: e8:06:e1:b7:3d:41:55:f6:7d:70:38:af:f1:bd:f1: 8f:36:1b:4b:72:f6:49:46:b2:c2:b5:83:81:e3:c3: a6:85:bd:f3:f4:e2:9d:09:82:4f:c8:a8:f7:e8:67: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:20:C7:20:2D:BB:89:3A:65:21:5B:71:A3:B0:82:35:3B:18:DB:2B X509v3 Authority Key Identifier: keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d9:f0:0b:b3:0d:80:ae:c8:6d:75:04:0d:a2:d1:98:3e:3d: 52:49:3b:b0:32:da:cb:a3:4a:69:22:c0:bb:7a:20:31:0c:b1: 06:32:71:a9:21:0d:87:39:c8:cd:35:a6:99:eb:1e:d3:35:87: 60:ad:7b:3d:ef:12:32:01:42:fd:04:bb:b9:4a:21:74:dc:e6: 14:7f:d8:d2:ae:79:cb:6f:99:42:bf:45:9a:fb:d0:82:44:80: d4:80:72:00:9a:96:30:64:c4:ac:9c:f3:6e:48:65:6e:c4:33: 8f:6c:71:99:43:3b:70:a5:dd:ee:01:47:b3:d2:0d:23:00:1a: cd:df:f1:a2:4c:91:aa:a6:3b:ee:ae:bb:03:05:52:aa:df:6a: b4:fb:87:bb:06:7f:ba:5f:42:0c:8b:b8:16:f4:65:e7:c8:dc: b5:f9:fd:ef:08:e7:c8:49:a2:f7:93:23:51:6e:4f:c5:88:9a: 4c:4d:d9:2b:e4:b5:8f:91:bb:a8:0e:09:79:28:b2:88:5b:83: 22:da:b5:91:5c:ed:39:e7:b9:0c:04:da:d6:c0:06:b7:7e:3a: 55:52:18:5d:da:6f:a1:4b:7a:48:a9:3e:56:56:3f:33:95:62: 36:6c:bb:ca:17:21:ff:85:c5:85:d7:66:fc:94:34:46:65:fb: 73:30:66:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXEmlelUBv64kemW4oM8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy YmMxN2MwHhcNMjUxMjIyMDAwMTIwWhcNMjUxMjIzMDAwMTIwWjAzMTEwLwYDVQQD EyhmMjIwYzcyMDJkYmI4OTNhNjUyMTViNzFhM2IwODIzNTNiMThkYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4SViBuCcFgipsD1PhpX3KDdngWV J3PkgyYvWTAdmvh/msQRQC9I6c3A3IUO0LnCG15uBTqkx7WwwkXu7SL/LM3GFsdw XSIQRc1QSOVaZkEc1jKL4MCXocQbhh52/ZFhLgNRXP9brdz03IGApB05BCE38Af7 qj3OMMZF7mwwoJYX46X8JiUzPk52WBaoDiA5em0jdWOW1U0/2WlYOG3EopNWXV/E ZzoijWndug2JuuAAj7ECoTcP324yiF+gdS4eQFPpfmbzCV0+jfDpmOruu3XoBuG3 PUFV9n1wOK/xvfGPNhtLcvZJRrLCtYOB48Omhb3z9OKdCYJPyKj36GfphwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIgxyAtu4k6ZSFbcaOwgjU7GNsrMB8GA1UdIwQY MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt N2FhZTUyMTc2ZDhiLzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdnwC7MN gK7IbXUEDaLRmD49Ukk7sDLay6NKaSLAu3ogMQyxBjJxqSENhznIzTWmmese0zWH YK17Pe8SMgFC/QS7uUohdNzmFH/Y0q55y2+ZQr9FmvvQgkSA1IByAJqWMGTErJzz bkhlbsQzj2xxmUM7cKXd7gFHs9INIwAazd/xokyRqqY77q67AwVSqt9qtPuHuwZ/ ul9CDIu4FvRl58jctfn97wjnyEmi95MjUW5PxYiaTE3ZK+S1j5G7qA4JeSiyiFuD Itq1kVztOee5DATa1sAGt346VVIYXdpvoUt6SKk+VlY/M5ViNmy7yhch/4XFhddm /JQ0RmX7czBmHA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:41 2025 by rpki-client