This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft File: z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json) Hash identifier: pCrUqmMNU0Yt6CvPun4BxC8615k2OP0Nu2up8Ch3a/c= Subject key identifier: 0A:76:E5:F7:37:E9:FB:12:A6:76:EF:FF:C0:2F:44:C6:B4:2E:90:42 Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Certificate serial: 019B24E3F9C4546CF78B5FC2195EFD7FB750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft Manifest number: 0A6E Signing time: Tue 16 Dec 2025 02:01:18 +0000 Manifest this update: Tue 16 Dec 2025 02:01:18 +0000 Manifest next update: Wed 17 Dec 2025 02:01:18 +0000 Files and hashes: 1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=) 2: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=) 3: aedlYda2oVCUa1BM1GSAfkRmYaY.roa (hash: 1lOdpPJ7itskaoLnmdQoRa6VeoKX772UHHwUXEq8AJ4=) 4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=) 5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: INuzL4+3JY9ZG+GgM4NvvLg5ZH+Vh9FRIPo0Du6H17E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:f9:c4:54:6c:f7:8b:5f:c2:19:5e:fd:7f:b7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Validity Not Before: Dec 16 02:01:18 2025 GMT Not After : Dec 17 02:01:18 2025 GMT Subject: CN=0a76e5f737e9fb12a676efffc02f44c6b42e9042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:51:a5:58:3b:ad:01:7a:b0:c1:ea:c7:1c: 8a:1c:98:a5:10:e2:8c:10:eb:9c:7e:d0:1e:12:5b: c7:bd:68:90:56:9a:28:7b:9f:09:c8:fe:3f:15:69: 36:ec:e9:d7:5a:d5:7f:7d:9b:d7:fc:ba:8b:25:8a: ad:ff:92:ac:42:25:6e:50:f0:cc:f8:d3:46:f8:74: d6:f5:ae:39:a2:21:ff:c6:51:e8:0a:1d:d6:2e:01: cb:72:60:b0:14:29:ea:b2:10:a9:32:73:9b:dc:3a: bb:c0:d8:14:e7:7b:bc:d3:fd:fa:36:cb:5b:f8:f5: 09:6e:ed:ce:33:88:49:b7:97:bf:f3:a3:0f:1f:8d: a5:52:4c:b1:0b:a0:5e:63:69:c7:80:7d:0e:65:49: ce:eb:20:86:76:66:01:5d:8f:ba:b6:d7:0c:46:1c: a7:3b:fc:d3:c8:76:2f:74:04:1e:52:76:51:ad:41: 91:d7:73:2e:58:33:4d:62:41:d3:b2:2e:8c:a2:93: a2:18:63:ab:42:3b:93:5f:72:b0:5e:6e:83:60:9e: 9c:fc:8e:4b:cd:b8:93:75:2c:ac:2e:6b:f4:ea:94: e1:fa:5a:5b:9c:90:b0:e0:da:73:79:51:90:9e:f8: 2d:61:31:c6:23:94:c1:d8:f2:dc:65:9c:06:2a:f9: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:76:E5:F7:37:E9:FB:12:A6:76:EF:FF:C0:2F:44:C6:B4:2E:90:42 X509v3 Authority Key Identifier: keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5e:d5:34:6e:f8:2b:44:a9:3b:50:f8:23:1c:46:d9:43:7a: fb:6f:bb:37:a6:14:f4:61:94:bb:c0:57:d3:61:52:a2:a3:d2: 33:4e:a4:73:73:a1:c0:26:0f:1a:dd:0f:cb:00:3c:80:85:32: c1:3a:d6:7d:b5:ab:86:d6:e2:23:00:a8:e6:84:20:5d:62:e4: 29:d8:a9:fb:6e:44:c5:3d:de:bb:81:5a:4c:b2:50:d2:b4:96: 37:1c:e3:21:c8:6b:20:01:6e:36:c1:1e:6a:dc:af:ee:98:98: 1d:b4:d9:4e:8f:aa:dc:12:31:59:ff:56:71:96:bb:9b:ee:05: 01:92:ad:20:46:0a:1f:69:23:02:a6:32:42:bd:3b:33:8e:97: 2c:8a:6a:3a:5b:bb:1a:6b:28:5a:1e:ce:4f:47:d9:12:1e:84: 83:64:f3:30:0c:16:b1:12:60:ec:13:64:b0:06:58:dc:06:45: 10:cd:bf:bd:c0:7f:4f:74:09:f4:e1:92:3c:60:db:f2:02:06: dc:25:52:02:3c:df:6e:96:58:8b:5e:04:81:ae:e7:d3:e5:5e: bf:0e:0b:9a:07:c8:df:22:bc:82:66:c1:1d:d7:a8:87:23:d8: 2b:02:6f:23:79:f7:08:c4:69:71:b4:43:60:d3:ad:9c:8b:c7: 9d:0b:79:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4/nEVGz3i1/CGV79f7dQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGE3MTdmOGZhMWJiMDM1OTI3NDIyM2FjZGFlMjJiNzBl NjZiZWMwHhcNMjUxMjE2MDIwMTE4WhcNMjUxMjE3MDIwMTE4WjAzMTEwLwYDVQQD EygwYTc2ZTVmNzM3ZTlmYjEyYTY3NmVmZmZjMDJmNDRjNmI0MmU5MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O1RpVg7rQF6sMHqxxyKHJilEOKM EOucftAeElvHvWiQVpooe58JyP4/FWk27OnXWtV/fZvX/LqLJYqt/5KsQiVuUPDM +NNG+HTW9a45oiH/xlHoCh3WLgHLcmCwFCnqshCpMnOb3Dq7wNgU53u80/36Nstb +PUJbu3OM4hJt5e/86MPH42lUkyxC6BeY2nHgH0OZUnO6yCGdmYBXY+6ttcMRhyn O/zTyHYvdAQeUnZRrUGR13MuWDNNYkHTsi6MopOiGGOrQjuTX3KwXm6DYJ6c/I5L zbiTdSysLmv06pTh+lpbnJCw4NpzeVGQnvgtYTHGI5TB2PLcZZwGKvnwuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp25fc36fsSpnbv/8AvRMa0LpBCMB8GA1UdIwQY MBaAFM9KcX+PobsDWSdCI6za4itw5mvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTkt NmFhYTZiMDIxNjBkLzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTktNmFhYTZiMDIxNjBk LzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASV7VNG74 K0SpO1D4IxxG2UN6+2+7N6YU9GGUu8BX02FSoqPSM06kc3OhwCYPGt0PywA8gIUy wTrWfbWrhtbiIwCo5oQgXWLkKdip+25ExT3eu4FaTLJQ0rSWNxzjIchrIAFuNsEe atyv7piYHbTZTo+q3BIxWf9WcZa7m+4FAZKtIEYKH2kjAqYyQr07M46XLIpqOlu7 GmsoWh7OT0fZEh6Eg2TzMAwWsRJg7BNksAZY3AZFEM2/vcB/T3QJ9OGSPGDb8gIG 3CVSAjzfbpZYi14Ega7n0+Vevw4LmgfI3yK8gmbBHdeohyPYKwJvI3n3CMRpcbRD YNOtnIvHnQt5aQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:11:19 2025 by rpki-client