This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json) Hash identifier: Iz7V3VtycBeV7qEcz7/AfrGjzhJ7Qb69TeZmxpLTpGI= Subject key identifier: 92:D7:FF:52:E3:08:87:0A:C1:86:DC:2F:72:D6:3B:24:85:D6:AF:58 Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C Certificate issuer: /CN=674c507a0cdb531374437ebf46dd59a6bd07486c Certificate serial: 019AF31C92750A27AFAE508069F88FE204E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 10:02:07 +0000 Manifest this update: Sat 06 Dec 2025 10:02:07 +0000 Manifest next update: Sun 07 Dec 2025 10:02:07 +0000 Files and hashes: 1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: 7jByi4O5b/FTdw05QUKarXZ0LEMNPbsmD106R/A2MAE=) 2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:92:75:0a:27:af:ae:50:80:69:f8:8f:e2:04:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c Validity Not Before: Dec 6 10:02:07 2025 GMT Not After : Dec 7 10:02:07 2025 GMT Subject: CN=92d7ff52e308870ac186dc2f72d63b2485d6af58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:7a:83:d3:09:37:78:6d:00:5a:56:8f:6b: 64:52:9b:be:4e:94:7d:f7:5d:90:00:8e:10:07:9e: b6:82:4a:23:a3:38:6e:aa:be:56:92:cc:7a:9a:bb: 8d:47:5f:f2:fc:d8:67:58:4e:07:bf:a2:ee:3d:3f: 49:a1:30:9f:7a:92:35:8a:d0:2e:36:07:f0:24:4b: 08:89:1c:88:55:05:3d:b4:4a:d0:a9:27:1b:00:30: 75:a7:7b:25:e3:3b:e6:da:40:79:ca:84:81:b8:25: 4e:75:4e:e1:62:b3:57:ac:c6:3c:82:91:d9:84:14: 18:23:ed:61:c9:5e:0f:f6:ed:5b:30:1c:a2:7c:07: 89:26:4f:96:4c:ed:e1:05:8f:00:88:ed:c8:51:e0: fb:ad:4d:6d:59:50:47:a2:06:ef:c1:6b:bf:09:38: fd:2e:4b:0c:98:38:04:6d:0c:b3:b1:98:d6:a5:35: 95:45:31:7e:e9:fa:3d:21:f1:e1:2b:f7:6d:4b:fe: 03:af:6a:6d:1b:48:7a:21:93:3e:6c:48:05:3e:a9: 54:93:2a:8e:56:e7:8c:d7:cf:fc:8f:81:62:a9:68: eb:a9:82:77:0a:22:db:5e:b2:61:4e:12:65:41:9e: ee:b4:7c:3a:7b:de:29:6b:e4:d7:30:74:74:31:75: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D7:FF:52:E3:08:87:0A:C1:86:DC:2F:72:D6:3B:24:85:D6:AF:58 X509v3 Authority Key Identifier: keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:54:69:61:6f:e1:02:0f:a1:2a:90:60:ae:34:92:49:9b:58: 4a:5d:84:86:da:8b:f2:e7:99:ff:33:5f:6c:42:87:e6:c7:3f: cf:13:45:4d:da:ca:27:92:04:39:27:7f:7a:a4:4c:35:17:ea: da:ea:5a:15:ef:b8:d2:bb:5c:b8:25:75:b4:6a:c2:48:b3:20: 70:0a:2a:15:c2:92:f2:d3:46:aa:68:38:64:b3:5c:7c:a9:27: cf:01:08:48:30:f0:52:bb:9c:4b:73:7a:48:0f:4e:66:f5:cd: ad:14:7b:4d:8c:90:38:94:74:32:34:c5:d3:cb:18:36:bd:04: 03:6f:54:eb:87:5f:6c:e3:22:7e:71:67:23:63:4a:f3:d1:6e: 7a:d4:cf:2b:27:87:b5:25:45:01:31:5a:7c:7d:83:ca:12:5d: 0b:7b:57:38:5a:a1:2c:0b:e5:b3:f8:52:ae:46:2f:0a:46:d0: 8f:9a:dd:48:a1:91:cc:a0:be:b4:b4:d2:d6:90:a7:64:34:87: 4e:ad:13:aa:f6:c5:dc:aa:c5:cf:d6:cb:7f:36:e8:b6:30:6f: 3d:23:e3:fd:66:c0:a1:f3:4f:f5:59:ac:c2:93:d1:75:61:83: fe:72:bb:ec:9f:c5:a5:87:47:38:fd:f8:cb:86:38:e9:8f:13: b0:81:dc:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJJ1CievrlCAafiP4gTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NGM1MDdhMGNkYjUzMTM3NDQzN2ViZjQ2ZGQ1OWE2YmQw NzQ4NmMwHhcNMjUxMjA2MTAwMjA3WhcNMjUxMjA3MTAwMjA3WjAzMTEwLwYDVQQD Eyg5MmQ3ZmY1MmUzMDg4NzBhYzE4NmRjMmY3MmQ2M2IyNDg1ZDZhZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMR6g9MJN3htAFpWj2tkUpu+TpR9 912QAI4QB562gkojozhuqr5Wksx6mruNR1/y/NhnWE4Hv6LuPT9JoTCfepI1itAu NgfwJEsIiRyIVQU9tErQqScbADB1p3sl4zvm2kB5yoSBuCVOdU7hYrNXrMY8gpHZ hBQYI+1hyV4P9u1bMByifAeJJk+WTO3hBY8AiO3IUeD7rU1tWVBHogbvwWu/CTj9 LksMmDgEbQyzsZjWpTWVRTF+6fo9IfHhK/dtS/4Dr2ptG0h6IZM+bEgFPqlUkyqO VueM18/8j4FiqWjrqYJ3CiLbXrJhThJlQZ7utHw6e94pa+TXMHR0MXWAWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLX/1LjCIcKwYbcL3LWOySF1q9YMB8GA1UdIwQY MBaAFGdMUHoM21MTdEN+v0bdWaa9B0hsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2Ut NGIzNWFkNzBjYzFhLzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMGZhMDAtYWQ2Yi00Yjc2LTg2M2UtNGIzNWFkNzBjYzFh LzEvWjB4UWVnemJVeE4wUTM2X1J0MVpwcjBIU0d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlRpYW/h Ag+hKpBgrjSSSZtYSl2EhtqL8ueZ/zNfbEKH5sc/zxNFTdrKJ5IEOSd/eqRMNRfq 2upaFe+40rtcuCV1tGrCSLMgcAoqFcKS8tNGqmg4ZLNcfKknzwEISDDwUrucS3N6 SA9OZvXNrRR7TYyQOJR0MjTF08sYNr0EA29U64dfbOMifnFnI2NK89FuetTPKyeH tSVFATFafH2DyhJdC3tXOFqhLAvls/hSrkYvCkbQj5rdSKGRzKC+tLTS1pCnZDSH Tq0TqvbF3KrFz9bLfzbotjBvPSPj/WbAofNP9VmswpPRdWGD/nK77J/FpYdHOP34 y4Y46Y8TsIHcOA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:53 2025 by rpki-client