This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json) Hash identifier: BzKgBXADA4ID0i2GWEveUkM9A1od8uTHKehI0HXR4Vg= Subject key identifier: DE:83:2F:FC:B2:36:08:8F:8C:C4:AA:92:8C:E0:C6:6B:1A:53:3A:CA Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Certificate serial: 019B0F37906FB2E1386945318A106120797A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft Manifest number: 061D Signing time: Thu 11 Dec 2025 21:00:58 +0000 Manifest this update: Thu 11 Dec 2025 21:00:58 +0000 Manifest next update: Fri 12 Dec 2025 21:00:58 +0000 Files and hashes: 1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=) 2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: m8EP1lX77GEzJbNltAYYo6rVFyL6Hx0duYwtQvcemBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:90:6f:b2:e1:38:69:45:31:8a:10:61:20:79:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Validity Not Before: Dec 11 21:00:58 2025 GMT Not After : Dec 12 21:00:58 2025 GMT Subject: CN=de832ffcb236088f8cc4aa928ce0c66b1a533aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:7c:7f:fb:8d:66:9c:0b:48:4e:7b:1b:6c: 02:08:e0:1a:33:6c:51:d3:07:c6:80:73:90:89:a4: a8:57:08:82:74:5d:7e:97:a0:ca:5a:db:11:29:8b: d0:a3:10:2a:3e:cc:d0:69:e2:76:c1:1a:86:a0:1a: 03:21:6e:dc:8f:4b:9c:82:b6:ec:94:bd:39:44:53: 7d:93:89:43:47:78:06:37:bc:e1:57:02:57:67:ab: 65:fa:5e:4b:56:71:57:e3:2a:1e:ca:83:56:8f:59: 54:27:de:dc:66:b0:c9:b4:13:91:99:47:25:5e:b1: 68:16:db:cf:cb:ff:61:fd:23:05:99:f4:54:39:76: e6:3f:e9:d4:f4:14:28:55:f3:19:97:10:66:25:67: 90:3b:96:75:46:b3:0a:00:43:df:9f:ef:d0:59:9d: 99:83:fb:f7:57:10:49:ef:44:e5:05:46:23:12:79: 5f:ba:6f:48:9e:ec:bb:e3:0b:87:98:f0:86:93:7a: 1f:d2:3c:52:92:a3:c6:95:82:e3:1d:ab:27:ad:e8: 7e:d1:fe:87:1f:fc:e0:a4:d0:3a:36:14:0e:d1:ca: a7:66:4b:b3:f4:51:0d:73:59:b0:1d:f4:fe:24:db: 47:cb:5d:5f:f6:74:1b:9b:5b:a2:d8:4e:3f:b9:e0: 9e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:83:2F:FC:B2:36:08:8F:8C:C4:AA:92:8C:E0:C6:6B:1A:53:3A:CA X509v3 Authority Key Identifier: keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a7:13:cb:10:6b:5e:df:2a:7c:56:9e:6f:5a:a8:a5:71:d9: 84:58:a4:66:76:3d:eb:e0:0b:31:5b:b3:30:db:d1:a2:45:b7: db:a9:76:f9:68:11:f9:3b:b1:48:34:c7:c6:5e:1f:0c:94:3a: 54:d9:fb:31:62:37:a4:8d:95:35:58:2c:25:dd:9a:58:2b:f2: aa:cb:7d:59:ff:e0:64:63:7c:0d:10:de:2f:1b:18:53:f9:cf: 8e:96:40:0f:e5:4e:77:be:16:b3:18:4e:55:b9:21:30:69:7d: e9:68:6e:c9:f1:9d:e5:e3:78:da:68:c7:58:23:6d:3b:7b:8b: 56:e8:d7:92:8a:c6:8a:3d:ce:b2:90:37:5d:76:c9:6f:f9:5e: 7e:0a:7c:b9:48:96:22:a4:9f:04:e7:d8:58:24:34:ad:f8:c6: ef:1e:f9:d3:1b:81:c1:ce:0b:59:40:7e:58:5d:37:4d:fb:87: c7:5b:c8:73:ec:ef:f3:f3:57:5f:2c:3b:f3:83:9b:89:2b:81: 59:a5:88:73:0b:40:62:df:e3:af:25:e8:61:f2:de:4e:cf:a2: 93:c4:a3:59:40:bd:27:6a:88:06:5b:cf:12:cf:98:b7:65:d0: d7:d1:0a:82:c0:25:12:ea:b2:be:86:9d:e2:c5:70:db:68:2e: bb:47:f2:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5BvsuE4aUUxihBhIHl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy YmMxN2MwHhcNMjUxMjExMjEwMDU4WhcNMjUxMjEyMjEwMDU4WjAzMTEwLwYDVQQD EyhkZTgzMmZmY2IyMzYwODhmOGNjNGFhOTI4Y2UwYzY2YjFhNTMzYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI98f/uNZpwLSE57G2wCCOAaM2xR 0wfGgHOQiaSoVwiCdF1+l6DKWtsRKYvQoxAqPszQaeJ2wRqGoBoDIW7cj0ucgrbs lL05RFN9k4lDR3gGN7zhVwJXZ6tl+l5LVnFX4yoeyoNWj1lUJ97cZrDJtBORmUcl XrFoFtvPy/9h/SMFmfRUOXbmP+nU9BQoVfMZlxBmJWeQO5Z1RrMKAEPfn+/QWZ2Z g/v3VxBJ70TlBUYjEnlfum9Inuy74wuHmPCGk3of0jxSkqPGlYLjHasnreh+0f6H H/zgpNA6NhQO0cqnZkuz9FENc1mwHfT+JNtHy11f9nQbm1ui2E4/ueCeNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6DL/yyNgiPjMSqkozgxmsaUzrKMB8GA1UdIwQY MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt N2FhZTUyMTc2ZDhiLzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqcTyxBr Xt8qfFaeb1qopXHZhFikZnY96+ALMVuzMNvRokW326l2+WgR+TuxSDTHxl4fDJQ6 VNn7MWI3pI2VNVgsJd2aWCvyqst9Wf/gZGN8DRDeLxsYU/nPjpZAD+VOd74WsxhO VbkhMGl96WhuyfGd5eN42mjHWCNtO3uLVujXkorGij3OspA3XXbJb/lefgp8uUiW IqSfBOfYWCQ0rfjG7x750xuBwc4LWUB+WF03TfuHx1vIc+zv8/NXXyw784ObiSuB WaWIcwtAYt/jryXoYfLeTs+ik8SjWUC9J2qIBlvPEs+Yt2XQ19EKgsAlEuqyvoad 4sVw22guu0fyeQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:41:52 2025 by rpki-client