This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json) Hash identifier: 7/Kxo63Zkv9fmb6LYKQB/X/I3hsuTOVOj1/U5ZOo+sI= Subject key identifier: 98:B9:2F:F3:4B:2E:A4:32:5C:79:F2:85:49:39:4B:B7:19:46:0A:26 Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc Certificate serial: 019AF12E256C56A5A361E52845ECBCC60F4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft Manifest number: 16EE Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: 67kcV3FxLkZak0up5ELHgBS5uhClll0yXqoonZxfnck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:25:6c:56:a5:a3:61:e5:28:45:ec:bc:c6:0f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=98b92ff34b2ea4325c79f28549394bb719460a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:ae:d9:b5:84:c5:e1:fa:c2:9a:50:d7:e7: dc:38:50:b0:95:81:a1:9a:ed:56:d5:27:c0:65:2b: 8d:86:3c:89:ec:36:bf:ee:51:44:5a:45:54:7f:ce: 76:6d:29:b9:e6:5a:c0:04:a7:14:8e:3d:5e:1b:e2: 6f:67:b8:f7:7a:21:30:e4:58:e6:aa:33:72:79:34: d5:b7:b0:f9:c9:f2:ab:ba:bc:40:fb:41:98:30:40: 9b:56:d9:84:16:8f:5a:6c:74:02:f5:56:c9:f2:60: 9c:9c:9f:e9:44:dd:7c:d0:fc:8a:d8:26:d2:4d:90: 00:f5:72:29:01:29:c7:c0:95:02:35:91:e5:db:82: b4:60:a8:c8:00:8e:0d:c6:20:53:7c:dc:7b:15:72: 44:0a:14:35:ec:ce:2a:72:08:6f:c9:13:23:6a:f2: a1:8d:65:5c:ea:b7:1b:cb:5d:78:02:b2:42:9c:60: 59:1a:03:63:47:de:ef:98:01:66:f3:c0:58:54:c3: c4:57:ba:d2:88:30:66:34:e8:e8:52:d0:05:5d:c4: a5:68:7d:f5:ac:1a:09:c4:f4:93:71:6c:fa:60:cf: e9:cc:9d:5f:84:00:89:a5:99:2f:ea:01:82:0c:b6: 6e:54:60:9f:ce:a3:0a:5e:47:ef:a6:6e:11:b8:6e: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B9:2F:F3:4B:2E:A4:32:5C:79:F2:85:49:39:4B:B7:19:46:0A:26 X509v3 Authority Key Identifier: keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c2:c8:87:b7:af:f3:91:99:92:b4:1a:7b:f1:d6:72:ab:55: 4c:92:7d:d3:91:f6:0f:ac:69:d2:6d:95:c7:9d:b2:a2:56:8f: ab:34:bc:91:62:66:d0:09:63:b7:46:76:b5:4f:fc:4e:94:a6: a2:c4:f6:a3:ed:7d:f2:dd:ae:fd:73:0e:5b:e1:98:61:ca:d7: be:cb:be:38:b0:01:6a:d8:29:96:d3:a8:5e:8c:60:c8:a0:29: f8:a7:9b:fc:33:fb:c7:e7:ef:85:c4:c9:bb:13:3b:31:b1:e4: 4a:87:98:8f:c0:5e:c8:fe:ea:73:6d:81:82:17:a1:65:7f:c3: 8f:c5:1f:ad:1d:96:6b:d2:ea:c1:4c:0d:1b:72:96:dc:3b:57: 90:08:3d:32:8e:60:a4:38:77:09:f4:8d:99:45:c7:6d:ee:79: e0:7c:7a:05:be:ad:96:3e:19:c6:b1:d9:0f:27:2c:1f:72:d4: 32:73:34:2d:b5:bf:ab:e5:46:aa:06:01:e3:3d:8c:3c:26:7b: 8d:ba:9f:f0:15:e5:1d:b1:6c:3e:2b:6c:0a:28:52:3e:8a:d6: 54:a8:4b:65:2e:44:0a:be:ca:f9:73:e0:6a:d3:54:52:4e:8e: 5e:0c:34:75:68:d5:6e:95:96:bd:52:66:f6:5e:0e:1d:51:0d: c4:ed:87:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiVsVqWjYeUoRey8xg9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTc1MTEwYzczOWI3NGY4NGQ0MTcwM2M0ODgyODMyNzI3 YmRkY2MwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD Eyg5OGI5MmZmMzRiMmVhNDMyNWM3OWYyODU0OTM5NGJiNzE5NDYwYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVqu2bWExeH6wppQ1+fcOFCwlYGh mu1W1SfAZSuNhjyJ7Da/7lFEWkVUf852bSm55lrABKcUjj1eG+JvZ7j3eiEw5Fjm qjNyeTTVt7D5yfKrurxA+0GYMECbVtmEFo9abHQC9VbJ8mCcnJ/pRN180PyK2CbS TZAA9XIpASnHwJUCNZHl24K0YKjIAI4NxiBTfNx7FXJEChQ17M4qcghvyRMjavKh jWVc6rcby114ArJCnGBZGgNjR97vmAFm88BYVMPEV7rSiDBmNOjoUtAFXcSlaH31 rBoJxPSTcWz6YM/pzJ1fhACJpZkv6gGCDLZuVGCfzqMKXkfvpm4RuG4YaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi5L/NLLqQyXHnyhUk5S7cZRgomMB8GA1UdIwQY MBaAFM+XURDHObdPhNQXA8SIKDJye93MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQt ZGFiNjhmZDg3ODZiLzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQtZGFiNjhmZDg3ODZi LzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsLIh7ev 85GZkrQae/HWcqtVTJJ905H2D6xp0m2Vx52yolaPqzS8kWJm0Aljt0Z2tU/8TpSm osT2o+198t2u/XMOW+GYYcrXvsu+OLABatgpltOoXoxgyKAp+Keb/DP7x+fvhcTJ uxM7MbHkSoeYj8BeyP7qc22BghehZX/Dj8UfrR2Wa9LqwUwNG3KW3DtXkAg9Mo5g pDh3CfSNmUXHbe554Hx6Bb6tlj4ZxrHZDycsH3LUMnM0LbW/q+VGqgYB4z2MPCZ7 jbqf8BXlHbFsPitsCihSPorWVKhLZS5ECr7K+XPgatNUUk6OXgw0dWjVbpWWvVJm 9l4OHVENxO2Hog== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:13 2025 by rpki-client