This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json) Hash identifier: qAo1AcYOpNCZ5RA4e5Ut/ZPcgqzoeCqze1kzprqdsmA= Subject key identifier: D1:81:F7:CE:B0:B8:CD:F1:CC:66:23:6A:D1:4A:DD:DA:AE:30:21:F4 Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Certificate serial: 019AF23FD84919368FF8288559F3F96D476B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft Manifest number: 060E Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=) 2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: clvlKgf4ZUE4jcTb3H1uQIjqKTFso37dTl2+X73tqls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d8:49:19:36:8f:f8:28:85:59:f3:f9:6d:47:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=d181f7ceb0b8cdf1cc66236ad14adddaae3021f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:e6:49:6d:2b:e0:94:b1:57:e4:5c:26:95: 99:f2:65:69:89:20:f6:ed:91:4c:f7:67:2d:3e:26: 29:96:d6:76:57:db:b4:e5:2c:c7:af:08:73:05:bd: 46:9d:a1:22:7d:01:ca:49:e1:68:6a:41:b8:b8:f5: de:5e:36:64:59:7c:80:e2:81:67:9d:81:38:ee:1a: c3:66:ca:ae:db:51:ab:a1:ff:3d:7d:99:47:bf:bb: cf:d6:94:94:2f:1f:08:28:b9:11:6f:be:be:fe:2f: a3:db:57:c4:a4:44:fb:6f:4d:58:ce:90:4c:1a:38: 91:d7:43:fc:c1:3e:3e:a0:a6:3b:15:62:81:1f:40: 67:58:e4:30:23:fc:ac:bf:93:54:cc:5d:b0:46:f1: d8:37:40:27:d1:18:82:1f:f4:dd:7d:a0:3b:4d:b4: 55:6c:a1:30:bc:da:f2:87:70:47:00:ad:e8:40:ff: 37:a5:98:a8:77:f1:f7:93:e9:b2:3a:2e:5a:3f:7d: 7f:a6:62:01:11:36:01:ff:e6:d0:d4:cf:dd:38:df: be:55:68:a9:74:67:81:6b:29:35:1a:18:bc:d9:86: b6:03:d3:93:06:15:f2:6d:60:90:d8:8d:45:57:e4: ee:af:cb:26:d6:bb:d5:ed:94:38:8d:42:0a:c1:49: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:81:F7:CE:B0:B8:CD:F1:CC:66:23:6A:D1:4A:DD:DA:AE:30:21:F4 X509v3 Authority Key Identifier: keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0f:21:c6:e4:1e:76:e9:f5:69:7e:c9:15:05:ef:2f:eb:7e: ca:cd:36:9e:cc:f9:06:65:dc:37:e7:b3:cc:89:44:d7:09:1b: b7:36:c8:d7:8d:5f:0e:a0:c5:2f:71:32:93:56:41:8a:75:58: 9e:cc:fe:8a:33:04:9d:90:df:bb:bc:3d:32:e9:6d:a9:ef:ab: bd:60:f2:47:c4:f1:a7:a3:60:f1:73:bd:9b:70:53:0e:51:c4: 7e:5b:9a:30:93:00:2a:47:40:dc:c7:22:49:23:b4:d4:5b:42: 1e:94:35:6d:e3:b5:12:ca:f6:da:bd:39:0f:a2:c4:2c:4b:23: 29:da:e9:d8:c1:2f:a9:e2:d9:e7:c3:03:dd:e4:60:66:26:c7: 1f:20:89:90:c8:e3:14:bd:c0:af:5b:7d:cd:e2:5d:0a:a2:9b: 7c:0a:68:0c:ac:9c:77:a0:6d:4c:1e:0e:72:59:e5:11:a6:5a: 23:b7:20:44:79:e1:27:90:93:ae:7a:c6:11:1a:50:50:51:2c: 26:cc:3e:f5:e4:3e:2b:f6:ab:85:ff:18:63:d6:0a:3b:af:a2: 5a:f4:9f:2b:0d:d2:8c:41:14:bc:03:20:9a:cb:2d:94:6c:4b: b7:83:6c:00:3d:18:06:77:29:71:1b:13:42:b6:28:6b:36:f0: 70:48:be:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9hJGTaP+CiFWfP5bUdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy YmMxN2MwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EyhkMTgxZjdjZWIwYjhjZGYxY2M2NjIzNmFkMTRhZGRkYWFlMzAyMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVnmSW0r4JSxV+RcJpWZ8mVpiSD2 7ZFM92ctPiYpltZ2V9u05SzHrwhzBb1GnaEifQHKSeFoakG4uPXeXjZkWXyA4oFn nYE47hrDZsqu21Grof89fZlHv7vP1pSULx8IKLkRb76+/i+j21fEpET7b01YzpBM GjiR10P8wT4+oKY7FWKBH0BnWOQwI/ysv5NUzF2wRvHYN0An0RiCH/TdfaA7TbRV bKEwvNryh3BHAK3oQP83pZiod/H3k+myOi5aP31/pmIBETYB/+bQ1M/dON++VWip dGeBayk1Ghi82Ya2A9OTBhXybWCQ2I1FV+Tur8sm1rvV7ZQ4jUIKwUkO4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGB986wuM3xzGYjatFK3dquMCH0MB8GA1UdIwQY MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt N2FhZTUyMTc2ZDhiLzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIw8hxuQe dun1aX7JFQXvL+t+ys02nsz5BmXcN+ezzIlE1wkbtzbI141fDqDFL3Eyk1ZBinVY nsz+ijMEnZDfu7w9Multqe+rvWDyR8Txp6Ng8XO9m3BTDlHEfluaMJMAKkdA3Mci SSO01FtCHpQ1beO1Esr22r05D6LELEsjKdrp2MEvqeLZ58MD3eRgZibHHyCJkMjj FL3Ar1t9zeJdCqKbfApoDKycd6BtTB4OclnlEaZaI7cgRHnhJ5CTrnrGERpQUFEs Jsw+9eQ+K/arhf8YY9YKO6+iWvSfKw3SjEEUvAMgmsstlGxLt4NsAD0YBncpcRsT QrYoazbwcEi+dg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:32 2025 by rpki-client