This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json) Hash identifier: rnRiZYzWrPKvA8vKzpkNHiyU1xeF/uRuIcms8KFjMXc= Subject key identifier: F8:2A:91:31:07:1E:5A:00:12:DE:8F:31:0E:79:6A:7F:BC:21:39:FF Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21 Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821 Certificate serial: 019AF42DC4E670AE2F74384527F8D2A92205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 15:00:31 +0000 Manifest this update: Sat 06 Dec 2025 15:00:31 +0000 Manifest next update: Sun 07 Dec 2025 15:00:31 +0000 Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=) 2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: OxuN/n62DIHNFsGSjOzEtly2KxSXSk2fuaqECHisp/I=) 3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c4:e6:70:ae:2f:74:38:45:27:f8:d2:a9:22:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821 Validity Not Before: Dec 6 15:00:31 2025 GMT Not After : Dec 7 15:00:31 2025 GMT Subject: CN=f82a9131071e5a0012de8f310e796a7fbc2139ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:91:d8:9d:1e:63:30:10:86:32:e5:f9:eb: 6b:9c:db:d1:48:59:f8:f9:93:6f:66:fe:d9:b9:2f: c7:d6:33:3b:d3:c4:f2:e7:04:10:5a:04:8f:61:64: 33:64:67:19:d6:79:39:73:c3:b0:e7:09:7f:a9:63: 85:06:3d:47:33:7b:d8:5f:8c:e3:82:00:e7:fd:2f: d7:6b:e0:e2:60:98:07:be:bd:40:a0:64:dc:d6:62: 92:8e:86:d6:21:bc:16:0d:9d:6d:31:e1:fe:e8:81: ff:03:96:54:24:17:cb:03:e1:72:f3:67:e8:e4:fb: 19:15:ad:31:6e:95:77:c5:c3:57:55:54:4c:a3:04: 29:dc:25:18:f3:a4:f3:a5:52:39:49:cf:25:9b:1f: 8f:61:43:7b:16:cb:b0:ed:2c:85:0d:6a:4f:3e:8c: c5:05:58:53:6f:59:f5:79:20:0d:17:73:2f:81:92: 81:2c:86:83:02:28:8b:85:99:54:4d:17:86:0b:43: a6:de:2d:06:78:d8:04:ac:eb:13:34:58:ef:fe:d3: 79:87:f4:cd:16:f6:c0:68:42:a8:ab:a7:aa:06:ac: 10:fe:20:b5:6d:3e:d9:03:15:99:5a:d6:b1:7e:2d: f5:04:5a:27:97:14:11:18:49:cc:6c:d9:de:8a:9a: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2A:91:31:07:1E:5A:00:12:DE:8F:31:0E:79:6A:7F:BC:21:39:FF X509v3 Authority Key Identifier: keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d1:99:c7:a5:8b:49:f6:a4:de:a1:cf:6e:53:2a:5f:1b:fb: 58:b7:ec:f7:fa:95:86:b4:dd:72:a4:60:3a:17:da:45:13:d7: 46:dd:11:ca:03:fb:d4:bb:f7:2e:19:55:7a:ea:4d:54:0f:fe: 25:9e:33:5e:33:ab:44:4b:97:35:00:f5:cd:17:d2:23:cf:1b: 06:88:55:3c:ca:eb:e8:a1:bd:37:26:75:f9:82:5e:30:66:18: 2d:d1:43:0f:84:dc:60:e9:a0:ce:52:b2:6a:44:ca:32:fb:b7: 4c:ae:05:8e:e1:f0:ed:20:6a:36:77:8a:2d:45:64:f2:75:ab: b6:7f:e6:cf:eb:27:43:f6:26:fc:33:89:b4:47:bf:db:dc:cd: ec:82:1c:49:78:8f:42:5f:04:ee:03:8b:8a:05:ee:9e:57:05: ea:ec:50:c2:0a:76:45:27:b0:f3:fe:ee:cc:82:76:db:4c:4c: 13:d7:14:cb:1e:c0:f7:a1:62:78:71:73:02:7f:87:ff:fc:85: 47:3e:f8:9e:d8:82:2e:b3:1a:ec:ce:51:cb:aa:be:ef:4a:5a: 55:57:91:b1:ee:5e:ff:1d:4e:6f:e3:cc:06:0c:f9:32:51:24: 5a:aa:48:5d:a3:c7:ca:0b:dc:8e:57:27:40:77:58:8f:4e:51: 22:6c:a8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcTmcK4vdDhFJ/jSqSIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NGE2MWE4YTljOTdjMDNjZGViZTA1ZjgyNTU4ZTUxZGJm OTA4MjEwHhcNMjUxMjA2MTUwMDMxWhcNMjUxMjA3MTUwMDMxWjAzMTEwLwYDVQQD EyhmODJhOTEzMTA3MWU1YTAwMTJkZThmMzEwZTc5NmE3ZmJjMjEzOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42GR2J0eYzAQhjLl+etrnNvRSFn4 +ZNvZv7ZuS/H1jM708Ty5wQQWgSPYWQzZGcZ1nk5c8Ow5wl/qWOFBj1HM3vYX4zj ggDn/S/Xa+DiYJgHvr1AoGTc1mKSjobWIbwWDZ1tMeH+6IH/A5ZUJBfLA+Fy82fo 5PsZFa0xbpV3xcNXVVRMowQp3CUY86TzpVI5Sc8lmx+PYUN7Fsuw7SyFDWpPPozF BVhTb1n1eSANF3MvgZKBLIaDAiiLhZlUTReGC0Om3i0GeNgErOsTNFjv/tN5h/TN FvbAaEKoq6eqBqwQ/iC1bT7ZAxWZWtaxfi31BFonlxQRGEnMbNneiprwTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgqkTEHHloAEt6PMQ55an+8ITn/MB8GA1UdIwQY MBaAFGdKYaipyXwDzevgX4JVjlHb+QghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmIt NGM4NmNiZTAzNjEwLzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmItNGM4NmNiZTAzNjEw LzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9GZx6WL Sfak3qHPblMqXxv7WLfs9/qVhrTdcqRgOhfaRRPXRt0RygP71Lv3LhlVeupNVA/+ JZ4zXjOrREuXNQD1zRfSI88bBohVPMrr6KG9NyZ1+YJeMGYYLdFDD4TcYOmgzlKy akTKMvu3TK4FjuHw7SBqNneKLUVk8nWrtn/mz+snQ/Ym/DOJtEe/29zN7IIcSXiP Ql8E7gOLigXunlcF6uxQwgp2RSew8/7uzIJ220xME9cUyx7A96FieHFzAn+H//yF Rz74ntiCLrMa7M5Ry6q+70paVVeRse5e/x1Ob+PMBgz5MlEkWqpIXaPHygvcjlcn QHdYj05RImyoSw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:42 2025 by rpki-client