This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json) Hash identifier: aFDO2TaePAO14Tlm0i9qDT13C55zTaWlWnOJS74PMEs= Subject key identifier: C1:FE:F9:52:A2:A1:89:80:CB:AE:DB:96:D7:29:D5:99:27:45:31:0D Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32 Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32 Certificate serial: 019AF23FD21FA1653599C75BAF731DC0460D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: Nvd50HVecsfarsJt8iqiJNeNfCbliJwfNabHr7SgBQU=) 2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d2:1f:a1:65:35:99:c7:5b:af:73:1d:c0:46:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=c1fef952a2a18980cbaedb96d729d5992745310d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:27:c2:b4:4f:a1:3a:57:b4:f3:94:ef:34: a0:25:be:17:37:80:a9:ac:56:53:f4:fb:85:b9:e1: 0a:a3:88:63:a3:1a:e2:c4:56:87:90:90:13:af:8c: 19:9d:f2:94:c6:05:75:36:91:39:34:a3:df:ab:12: e4:9d:7d:54:7f:b8:69:9f:c9:80:25:81:58:a4:e2: d7:38:a4:93:9e:88:b4:7b:28:6f:93:62:de:62:97: 7d:34:21:d3:6d:88:18:fa:f8:6e:95:9e:a7:bb:d3: e4:a5:15:ac:05:cd:27:21:71:58:a6:c0:4a:bc:84: b0:7b:cd:dc:08:cf:50:28:56:c8:c5:59:4b:04:49: 9d:c4:93:e9:47:77:11:8d:dc:ef:28:e5:a6:3b:86: 7b:a4:c9:b2:b9:2f:a6:69:eb:f9:11:f4:38:b0:bb: 78:b4:64:d2:d1:4d:b7:5d:5f:fe:a2:6b:b6:bc:57: f1:23:ac:21:d9:ab:2b:ba:f0:36:e6:c3:b9:e3:2b: af:f6:8a:0b:83:d9:85:c0:47:60:9c:5e:68:ba:4f: cf:2e:51:15:04:25:7b:81:1f:e8:52:37:e9:8d:89: 32:57:18:d6:dc:96:69:2e:ce:4d:36:b4:4e:76:25: 77:7c:4b:86:8e:e2:42:26:54:97:ce:31:d8:e3:f4: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FE:F9:52:A2:A1:89:80:CB:AE:DB:96:D7:29:D5:99:27:45:31:0D X509v3 Authority Key Identifier: keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:23:1c:d3:54:42:91:e4:49:14:1b:23:ee:66:a9:78:2f: c2:81:d5:6e:2f:a4:c9:4e:53:df:9b:a0:ad:a1:b8:70:b3:93: 90:bb:fa:a0:ea:53:d9:9c:1a:bd:4c:df:12:b1:6a:48:36:ac: 42:4e:37:10:b1:83:e4:ba:2f:c6:64:3c:d9:ae:39:34:d3:b9: 0e:6f:16:26:21:37:a8:aa:f1:cc:e7:20:54:7c:03:5e:0d:d4: 72:ff:be:73:d3:e5:3e:f7:ef:3c:88:62:2d:9f:b3:60:0b:1b: 0a:82:e7:1d:77:3c:ac:60:a5:c3:21:f6:dd:8a:5a:21:c4:d1: a3:32:34:fd:8b:7a:f3:77:ab:1d:67:b9:0c:66:43:e2:8c:fc: bd:f8:17:78:e4:19:60:8a:2f:e7:9b:ae:a7:b8:4d:c4:11:79: b2:8f:df:53:49:ab:f0:26:3e:0a:65:ce:0a:07:bb:d0:5a:1f: 98:af:0e:93:e7:18:ee:75:a3:dc:0e:ca:17:ab:be:f6:7e:e1: 57:44:d6:5c:f6:ed:1b:12:31:96:48:e6:b5:ba:5a:e4:f6:b5: 80:b7:2e:7f:4d:c9:79:a9:5f:7f:21:33:2a:ed:08:3b:c2:d5: f8:32:c8:13:f1:0e:aa:2c:a4:bf:30:8c:ea:af:69:a8:89:ef: c0:75:f3:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9IfoWU1mcdbr3MdwEYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MWU3MTc0YmY5ZTllYTFiNjRhOTJiYTY1ZmZjZjFlOTMx Y2NlMzIwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhjMWZlZjk1MmEyYTE4OTgwY2JhZWRiOTZkNzI5ZDU5OTI3NDUzMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7knwrRPoTpXtPOU7zSgJb4XN4Cp rFZT9PuFueEKo4hjoxrixFaHkJATr4wZnfKUxgV1NpE5NKPfqxLknX1Uf7hpn8mA JYFYpOLXOKSTnoi0eyhvk2LeYpd9NCHTbYgY+vhulZ6nu9PkpRWsBc0nIXFYpsBK vISwe83cCM9QKFbIxVlLBEmdxJPpR3cRjdzvKOWmO4Z7pMmyuS+maev5EfQ4sLt4 tGTS0U23XV/+omu2vFfxI6wh2asruvA25sO54yuv9ooLg9mFwEdgnF5ouk/PLlEV BCV7gR/oUjfpjYkyVxjW3JZpLs5NNrROdiV3fEuGjuJCJlSXzjHY4/QuIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH++VKioYmAy67bltcp1ZknRTENMB8GA1UdIwQY MBaAFGYecXS/np6htkqSumX/zx6THM4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAt NmJkODQ0ZWE4NmM3LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAtNmJkODQ0ZWE4NmM3 LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGkjHNNU QpHkSRQbI+5mqXgvwoHVbi+kyU5T35ugraG4cLOTkLv6oOpT2ZwavUzfErFqSDas Qk43ELGD5LovxmQ82a45NNO5Dm8WJiE3qKrxzOcgVHwDXg3Ucv++c9PlPvfvPIhi LZ+zYAsbCoLnHXc8rGClwyH23YpaIcTRozI0/Yt683erHWe5DGZD4oz8vfgXeOQZ YIov55uup7hNxBF5so/fU0mr8CY+CmXOCge70FofmK8Ok+cY7nWj3A7KF6u+9n7h V0TWXPbtGxIxlkjmtbpa5Pa1gLcuf03JealffyEzKu0IO8LV+DLIE/EOqiykvzCM 6q9pqInvwHXz1A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:29 2025 by rpki-client