This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft File: z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json) Hash identifier: q/DJTfJHdM514h+Fxuy+zDRRru665VdBC+iCdRJ8SZw= Subject key identifier: 2A:43:73:E0:43:C3:8E:F7:4F:6D:D9:FA:61:AC:A2:4D:B7:84:82:BA Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Certificate serial: 019AF5AE7FDCC8FD6B5EA8917457A857BA6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft Manifest number: 0A55 Signing time: Sat 06 Dec 2025 22:00:45 +0000 Manifest this update: Sat 06 Dec 2025 22:00:45 +0000 Manifest next update: Sun 07 Dec 2025 22:00:45 +0000 Files and hashes: 1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=) 2: Y_bp31HDq8uAy4l6THmKPbLCNsI.roa (hash: 9XEelD2ZciA/ZipA/uoYFFsArdGQrDybFJa5ScNreOg=) 3: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=) 4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=) 5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: H/5AdlsvCUKz66RFCwkOYz8yXdt6+LSbpYqnN1b78uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:7f:dc:c8:fd:6b:5e:a8:91:74:57:a8:57:ba:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Validity Not Before: Dec 6 22:00:45 2025 GMT Not After : Dec 7 22:00:45 2025 GMT Subject: CN=2a4373e043c38ef74f6dd9fa61aca24db78482ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:20:0b:8b:33:5b:5d:09:29:68:5f:04:f4: d2:a2:9f:d7:6f:4c:3d:86:3d:da:25:d6:45:9e:50: 19:f6:dc:f2:92:18:77:0f:78:e3:d5:7d:4b:0a:36: 11:c0:5a:c9:0f:b8:2b:05:e4:4a:42:50:99:28:49: 39:9f:1e:ce:44:85:5e:6e:9d:f5:0f:21:3e:c0:5c: ca:c4:75:34:d9:f9:0f:e1:70:d1:e8:66:c2:95:6e: aa:98:ba:7b:6a:27:ed:56:58:3b:8a:20:57:d5:cd: 42:e2:d4:0e:81:fa:40:2b:9e:32:84:d1:81:ec:4d: d3:ad:8f:20:5b:e8:2a:35:1e:51:aa:fe:48:84:25: 84:c3:95:66:2c:a7:f9:f7:22:d3:36:ec:0f:3e:80: b4:d3:7e:84:a2:da:46:d7:fd:a0:5f:68:59:a2:07: 48:26:a2:00:38:5e:fe:74:a5:53:96:41:6e:47:2f: d4:33:b8:09:f2:dc:b6:fe:21:f7:4a:30:b8:f9:5e: 94:b5:70:8c:95:ef:9b:63:44:85:6c:70:08:e6:bd: dd:9e:82:b6:31:09:4d:61:0d:dc:6c:a1:d2:18:8f: 8a:4e:3e:6b:0e:b5:b7:98:b5:8b:4c:16:83:f0:d1: 12:7e:cc:f9:35:65:4e:8b:17:a4:45:6e:7c:30:b9: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:73:E0:43:C3:8E:F7:4F:6D:D9:FA:61:AC:A2:4D:B7:84:82:BA X509v3 Authority Key Identifier: keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a5:74:f4:5b:be:07:5e:4f:87:4e:f9:f6:51:6c:bf:d9:a5: fc:94:44:b8:7f:e0:1c:28:d4:de:7d:47:c5:76:5d:7f:57:bb: 08:65:4c:ce:6f:03:6e:34:66:df:f0:7f:d5:f7:58:e5:79:96: f2:32:28:c0:96:16:48:d0:b1:23:c4:64:85:01:36:dd:e3:88: 52:ec:0d:37:9d:77:e5:62:ea:45:c7:ef:59:30:de:6d:13:e5: 6f:ce:eb:8f:d6:2b:04:57:5e:77:0c:dd:7a:9a:d5:ae:eb:f0: ae:d3:ab:fa:48:b3:6f:78:e2:d4:d2:32:db:a7:f7:5d:a0:9e: 4b:db:ce:c6:57:11:eb:e1:90:fc:a4:6f:d2:f6:c4:4c:0e:c4: ad:03:f8:12:4e:4f:18:f7:48:c1:51:e4:24:fd:ec:10:12:3c: 90:e7:d9:e7:45:2a:4b:d0:4f:47:14:24:0e:67:13:50:99:eb: b2:60:af:0c:82:d6:d7:13:45:97:e0:ab:f7:d3:eb:ca:63:29: 0f:93:a7:94:f1:72:0b:6b:93:e9:14:99:c9:bb:79:bd:05:98: d1:49:7a:08:79:ed:7d:10:09:e5:a2:30:95:d6:9a:7d:30:9b: 09:5b:1d:22:fc:a6:86:08:9f:bc:14:e9:25:fc:43:c1:47:d7: 54:86:84:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rn/cyP1rXqiRdFeoV7pqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGE3MTdmOGZhMWJiMDM1OTI3NDIyM2FjZGFlMjJiNzBl NjZiZWMwHhcNMjUxMjA2MjIwMDQ1WhcNMjUxMjA3MjIwMDQ1WjAzMTEwLwYDVQQD EygyYTQzNzNlMDQzYzM4ZWY3NGY2ZGQ5ZmE2MWFjYTI0ZGI3ODQ4MmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw4gC4szW10JKWhfBPTSop/Xb0w9 hj3aJdZFnlAZ9tzykhh3D3jj1X1LCjYRwFrJD7grBeRKQlCZKEk5nx7ORIVebp31 DyE+wFzKxHU02fkP4XDR6GbClW6qmLp7aiftVlg7iiBX1c1C4tQOgfpAK54yhNGB 7E3TrY8gW+gqNR5Rqv5IhCWEw5VmLKf59yLTNuwPPoC0036EotpG1/2gX2hZogdI JqIAOF7+dKVTlkFuRy/UM7gJ8ty2/iH3SjC4+V6UtXCMle+bY0SFbHAI5r3dnoK2 MQlNYQ3cbKHSGI+KTj5rDrW3mLWLTBaD8NESfsz5NWVOixekRW58MLnw5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpDc+BDw473T23Z+mGsok23hIK6MB8GA1UdIwQY MBaAFM9KcX+PobsDWSdCI6za4itw5mvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTkt NmFhYTZiMDIxNjBkLzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTktNmFhYTZiMDIxNjBk LzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKV09Fu+ B15Ph0759lFsv9ml/JREuH/gHCjU3n1HxXZdf1e7CGVMzm8DbjRm3/B/1fdY5XmW 8jIowJYWSNCxI8RkhQE23eOIUuwNN5135WLqRcfvWTDebRPlb87rj9YrBFdedwzd eprVruvwrtOr+kizb3ji1NIy26f3XaCeS9vOxlcR6+GQ/KRv0vbETA7ErQP4Ek5P GPdIwVHkJP3sEBI8kOfZ50UqS9BPRxQkDmcTUJnrsmCvDILW1xNFl+Cr99PrymMp D5OnlPFyC2uT6RSZybt5vQWY0Ul6CHntfRAJ5aIwldaafTCbCVsdIvymhgifvBTp JfxDwUfXVIaEcQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:30:48 2025 by rpki-client