This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json) Hash identifier: 5ZsoDihSqKEe0i81vFHBXvxv9DgEBXocOt4JDBNrch8= Subject key identifier: 4D:1C:C5:68:9A:9A:3B:3D:6E:0B:CC:73:10:DB:AE:62:D5:36:DE:A8 Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc Certificate serial: 019B3E6D8FD7A58B2B0F175C01E4B19780F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft Manifest number: 1716 Signing time: Sun 21 Dec 2025 01:02:06 +0000 Manifest this update: Sun 21 Dec 2025 01:02:06 +0000 Manifest next update: Mon 22 Dec 2025 01:02:06 +0000 Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: V2fLwdoioeiqu508eLWIznsHhqL35QALrGIILseJuPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:8f:d7:a5:8b:2b:0f:17:5c:01:e4:b1:97:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc Validity Not Before: Dec 21 01:02:06 2025 GMT Not After : Dec 22 01:02:06 2025 GMT Subject: CN=4d1cc5689a9a3b3d6e0bcc7310dbae62d536dea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:0b:8c:d4:4f:ea:7e:7a:e3:e5:9f:3c:ab: 52:6b:1f:b4:af:b7:a0:23:4a:04:b2:ac:de:41:a4: 79:3e:9c:61:1a:37:e4:7e:4c:f0:31:20:0a:5e:a3: 29:2d:a1:5b:70:97:3e:23:4a:28:f7:5b:90:c6:84: b1:ae:8a:e8:4b:6b:a9:8a:f5:21:21:f5:39:f6:8e: 83:3f:24:2c:17:61:06:4a:19:e8:00:03:b1:2d:1b: 32:dd:f1:71:5f:c2:7f:1a:f6:21:88:a3:32:3c:27: e5:03:53:48:f6:3a:d5:87:c3:cd:b8:de:26:b5:2b: 83:45:d8:60:11:9a:35:5a:e2:db:3f:18:c3:89:c6: 9c:77:bf:73:d6:a1:ad:d2:b2:71:58:5f:70:ac:a4: 83:50:69:0d:62:15:75:35:43:ad:e4:f7:d1:44:6b: 0e:4c:f2:50:b6:e6:b7:95:62:e7:2a:62:5e:95:31: eb:69:52:b5:46:da:ad:9b:ef:99:7d:90:9c:f1:98: 4e:b5:2b:91:cd:de:23:9e:11:c6:11:81:18:cc:2f: fe:75:c4:35:02:37:e8:35:dc:fb:e1:13:7b:d3:94: fa:89:fe:31:f4:5b:38:0c:4f:45:d6:dd:d8:3b:dd: 19:f4:8d:c8:63:2a:c7:e0:84:4e:39:39:6f:db:cd: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1C:C5:68:9A:9A:3B:3D:6E:0B:CC:73:10:DB:AE:62:D5:36:DE:A8 X509v3 Authority Key Identifier: keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6f:92:27:0a:1f:99:0b:1f:72:9d:2e:3e:c0:58:11:6d:5b: dc:38:c9:3d:91:de:d8:19:60:5a:8a:5a:77:96:8f:7b:35:d5: ff:8a:11:1c:70:81:d2:81:42:74:6e:79:53:a7:ef:c4:c3:9a: 73:2d:01:d4:24:51:39:b8:f4:26:02:7f:97:89:21:5c:37:62: 47:2d:36:c4:6b:c0:fe:56:98:75:43:fe:b7:a4:a2:e8:9e:1d: 1e:ec:d4:ac:36:0a:69:2e:4b:a5:d6:8a:a0:b0:9b:41:10:a6: d0:2b:8b:36:d1:91:3e:3c:be:26:f4:62:d9:e5:3f:cb:57:e2: 13:3f:d0:40:88:26:3e:7d:3b:4f:3e:2d:d3:7b:db:0c:2c:40: b1:27:d5:f1:b0:fc:49:1a:28:28:c1:35:18:93:ce:ff:6a:52: a4:1d:74:a2:b6:30:2a:df:7e:87:d4:29:db:c3:67:a6:d4:98: 92:22:5c:f0:f5:f5:52:13:84:ba:13:b3:b0:03:bd:57:f2:57: 6a:9f:c8:fc:ab:6d:23:06:35:bc:16:d2:5c:2b:9d:3a:85:2d: 03:d4:2e:69:91:59:e2:1e:dc:9b:51:0b:9d:94:08:ae:aa:c8: 4c:f2:a0:ce:33:5b:54:4b:87:9e:44:fb:36:24:bf:e3:88:86: 32:99:22:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bY/XpYsrDxdcAeSxl4DwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTc1MTEwYzczOWI3NGY4NGQ0MTcwM2M0ODgyODMyNzI3 YmRkY2MwHhcNMjUxMjIxMDEwMjA2WhcNMjUxMjIyMDEwMjA2WjAzMTEwLwYDVQQD Eyg0ZDFjYzU2ODlhOWEzYjNkNmUwYmNjNzMxMGRiYWU2MmQ1MzZkZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KsLjNRP6n564+WfPKtSax+0r7eg I0oEsqzeQaR5PpxhGjfkfkzwMSAKXqMpLaFbcJc+I0oo91uQxoSxroroS2upivUh IfU59o6DPyQsF2EGShnoAAOxLRsy3fFxX8J/GvYhiKMyPCflA1NI9jrVh8PNuN4m tSuDRdhgEZo1WuLbPxjDicacd79z1qGt0rJxWF9wrKSDUGkNYhV1NUOt5PfRRGsO TPJQtua3lWLnKmJelTHraVK1Rtqtm++ZfZCc8ZhOtSuRzd4jnhHGEYEYzC/+dcQ1 AjfoNdz74RN705T6if4x9Fs4DE9F1t3YO90Z9I3IYyrH4IROOTlv2838vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0cxWiamjs9bgvMcxDbrmLVNt6oMB8GA1UdIwQY MBaAFM+XURDHObdPhNQXA8SIKDJye93MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQt ZGFiNjhmZDg3ODZiLzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQtZGFiNjhmZDg3ODZi LzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW+SJwof mQsfcp0uPsBYEW1b3DjJPZHe2BlgWopad5aPezXV/4oRHHCB0oFCdG55U6fvxMOa cy0B1CRRObj0JgJ/l4khXDdiRy02xGvA/laYdUP+t6Si6J4dHuzUrDYKaS5LpdaK oLCbQRCm0CuLNtGRPjy+JvRi2eU/y1fiEz/QQIgmPn07Tz4t03vbDCxAsSfV8bD8 SRooKME1GJPO/2pSpB10orYwKt9+h9Qp28NnptSYkiJc8PX1UhOEuhOzsAO9V/JX ap/I/KttIwY1vBbSXCudOoUtA9QuaZFZ4h7cm1ELnZQIrqrITPKgzjNbVEuHnkT7 NiS/44iGMpkikQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:24:48 2025 by rpki-client