This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json) Hash identifier: rZByud0fuDrLcb3La1jVl+74TRIFsi6yRDpK8sgHSHc= Subject key identifier: 44:A8:0E:1B:75:80:39:C1:16:28:1C:C1:F2:80:07:63:81:C3:C3:FB Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Certificate serial: 019B3D90D89B308AFB1A3D07356CC804F90E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft Manifest number: 0635 Signing time: Sat 20 Dec 2025 21:01:01 +0000 Manifest this update: Sat 20 Dec 2025 21:01:01 +0000 Manifest next update: Sun 21 Dec 2025 21:01:01 +0000 Files and hashes: 1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=) 2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: bLNysTepC4RFWJqDa9ugoapqHgHXw/KFCyTDtOJA0f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d8:9b:30:8a:fb:1a:3d:07:35:6c:c8:04:f9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c Validity Not Before: Dec 20 21:01:01 2025 GMT Not After : Dec 21 21:01:01 2025 GMT Subject: CN=44a80e1b758039c116281cc1f280076381c3c3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:13:c1:e9:0d:05:49:56:50:17:3d:33:e0: 84:fc:44:94:78:28:68:eb:a5:bf:ef:24:a5:bb:71: d7:20:cc:d0:3c:83:9a:ab:da:31:b4:e6:cc:f0:fc: 8d:e4:c0:24:22:b0:81:5d:32:09:21:73:54:39:2d: 25:a1:5a:66:2d:aa:5b:93:c0:42:79:57:7b:f9:56: 29:92:ec:58:ac:b5:95:36:42:78:c2:c9:42:12:39: 10:20:70:a1:57:d5:f2:d4:27:cd:f9:34:0c:2f:b9: d7:da:f7:88:2b:ce:74:16:d5:dd:33:92:2d:11:2b: 81:fd:3e:bd:cf:49:45:cf:ae:21:33:3e:61:4d:ff: e6:72:5a:fd:40:e3:de:a8:70:0b:3e:90:46:b6:21: 17:4f:71:a8:0a:87:7e:fc:eb:44:46:eb:4b:e6:a5: 1b:07:2a:d7:a0:27:c0:27:30:87:77:a3:05:cb:f3: d3:69:29:c3:f9:6e:d5:02:86:06:fb:83:4e:cd:e3: a8:ef:8e:89:4f:76:e8:e1:25:74:ae:d3:a4:a2:bc: 57:56:f4:31:8f:49:a3:35:a4:3d:23:64:23:1a:f8: 19:89:ab:53:a4:8b:5d:47:d3:ab:93:86:98:aa:b1: 04:fb:5a:df:3e:2e:71:12:35:71:cf:29:d7:a8:1c: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:0E:1B:75:80:39:C1:16:28:1C:C1:F2:80:07:63:81:C3:C3:FB X509v3 Authority Key Identifier: keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:14:28:72:9c:7e:69:b7:81:b4:28:04:c0:a1:f0:d4:3e:a4: 2b:0a:a2:33:cd:e5:11:d3:24:2b:a5:4a:4d:eb:c4:76:b4:9e: 9d:5c:69:ec:2d:8f:f4:41:2c:63:bc:6a:f9:76:b4:3f:3a:73: d8:60:11:96:e8:b6:2c:40:db:d4:85:6c:6c:3f:24:ff:13:bc: 7a:86:08:dd:d9:01:a6:7c:48:bb:15:7d:68:6d:31:b3:b7:3f: 48:a8:3c:9b:4d:68:1f:22:27:e6:c8:10:33:3d:35:40:95:b5: c7:a4:5b:9a:3f:c7:3a:12:7e:5b:c5:a8:33:52:77:a6:95:b0: c2:51:bf:14:01:c7:d5:fb:d5:38:eb:bd:41:07:21:f9:5e:b7: d9:c7:81:48:7a:84:35:19:fb:4f:ee:ec:6c:05:d0:4d:f7:64: 01:e0:18:82:12:03:68:2e:0f:a4:11:ee:db:05:9a:92:1d:3b: 80:93:5d:0e:f7:8a:16:d0:c8:18:28:bd:8e:0e:a6:6f:b4:51: 51:71:4d:85:f0:24:33:29:17:b6:29:2f:58:92:59:72:aa:e6: ca:d8:55:bf:92:f0:32:6e:11:65:ce:d8:d7:da:d0:8a:ab:bf: f1:97:f1:cc:15:fb:8d:93:ba:56:7d:8f:51:10:63:27:a7:63: 8e:43:3e:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNibMIr7Gj0HNWzIBPkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy YmMxN2MwHhcNMjUxMjIwMjEwMTAxWhcNMjUxMjIxMjEwMTAxWjAzMTEwLwYDVQQD Eyg0NGE4MGUxYjc1ODAzOWMxMTYyODFjYzFmMjgwMDc2MzgxYzNjM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AQTwekNBUlWUBc9M+CE/ESUeCho 66W/7ySlu3HXIMzQPIOaq9oxtObM8PyN5MAkIrCBXTIJIXNUOS0loVpmLapbk8BC eVd7+VYpkuxYrLWVNkJ4wslCEjkQIHChV9Xy1CfN+TQML7nX2veIK850FtXdM5It ESuB/T69z0lFz64hMz5hTf/mclr9QOPeqHALPpBGtiEXT3GoCod+/OtERutL5qUb ByrXoCfAJzCHd6MFy/PTaSnD+W7VAoYG+4NOzeOo746JT3bo4SV0rtOkorxXVvQx j0mjNaQ9I2QjGvgZiatTpItdR9Ork4aYqrEE+1rfPi5xEjVxzynXqBwdhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESoDht1gDnBFigcwfKAB2OBw8P7MB8GA1UdIwQY MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt N2FhZTUyMTc2ZDhiLzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExQocpx+ abeBtCgEwKHw1D6kKwqiM83lEdMkK6VKTevEdrSenVxp7C2P9EEsY7xq+Xa0Pzpz 2GARlui2LEDb1IVsbD8k/xO8eoYI3dkBpnxIuxV9aG0xs7c/SKg8m01oHyIn5sgQ Mz01QJW1x6Rbmj/HOhJ+W8WoM1J3ppWwwlG/FAHH1fvVOOu9QQch+V632ceBSHqE NRn7T+7sbAXQTfdkAeAYghIDaC4PpBHu2wWakh07gJNdDveKFtDIGCi9jg6mb7RR UXFNhfAkMykXtikvWJJZcqrmythVv5LwMm4RZc7Y19rQiqu/8ZfxzBX7jZO6Vn2P URBjJ6djjkM+2w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:21:31 2025 by rpki-client