This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json) Hash identifier: W717pyOUIa8CAJ0tvKXIWhrveZTZNYsEiaaoVxf5XvU= Subject key identifier: F2:35:9F:30:84:CF:B2:AA:A1:F0:63:81:9D:B1:DD:0D:94:47:B0:7F Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b Certificate serial: 019AF1645C509D0E8812F0200C4B81BBEE2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft Manifest number: 12F5 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=) 2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: T06RF2c+jzS+VGyROwSiZk2Yj512H/MMW7U1MvZfoCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5c:50:9d:0e:88:12:f0:20:0c:4b:81:bb:ee:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=f2359f3084cfb2aaa1f063819db1dd0d9447b07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:9a:6b:10:61:f0:4e:dd:6e:b0:cb:6e:c4: a2:f6:15:d7:f7:9f:c6:cb:4d:12:9b:7b:66:78:60: 07:1a:70:de:23:94:6b:9f:91:48:00:e3:f3:cf:d6: 87:e6:fc:eb:24:96:ac:92:da:b7:52:66:1e:b1:48: 14:44:b5:e3:b8:94:be:ea:7a:2d:67:03:38:85:80: b5:1f:61:50:59:4a:d5:d7:30:66:4a:4f:5c:0b:f2: 48:36:59:a9:34:8e:20:bb:08:17:58:19:b0:b5:79: d2:af:7d:e8:3a:b9:4a:3a:60:fe:3e:23:3c:a2:f1: 6e:47:80:07:cf:fa:c5:e0:49:a8:b1:56:3f:cd:95: c6:5c:1a:fd:22:a0:dd:44:1f:86:b3:4a:d2:8e:21: 99:4e:42:81:60:74:6f:2f:b4:1f:d7:32:ca:ae:22: fb:6c:47:71:15:08:97:94:fb:b1:49:e3:3f:5b:26: 8d:77:a0:86:cb:42:26:cd:06:86:c8:09:73:58:36: 4f:cd:07:d6:ae:a0:6a:40:92:eb:36:04:e7:d5:0f: 13:25:2d:8c:67:72:e5:9b:eb:41:ab:34:50:78:0c: 8c:34:09:46:90:2d:db:0c:ff:4b:88:84:62:5a:5a: 78:ba:9a:71:ba:a4:3e:6c:a9:e1:0d:99:fa:3f:50: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:9F:30:84:CF:B2:AA:A1:F0:63:81:9D:B1:DD:0D:94:47:B0:7F X509v3 Authority Key Identifier: keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:cd:0d:25:02:26:26:71:fc:56:63:a8:2c:b1:51:8d:06:33: 91:8a:14:a5:92:81:9b:30:13:2d:23:5e:a8:fa:2b:ab:80:f7: f6:59:4f:a6:af:33:ce:f6:07:71:75:d8:07:93:eb:17:7a:9c: 44:22:f8:a8:c8:05:fe:f9:2b:4a:10:82:36:79:a1:c8:1b:7e: 97:d0:df:8e:94:cd:e9:91:87:23:30:53:ff:15:ee:aa:a7:ed: 2b:17:e8:eb:7d:ec:f1:98:9f:0f:48:20:a1:f5:9c:4f:74:2e: b0:59:54:8a:78:8d:48:1a:2c:2d:69:c8:ac:db:4a:00:f9:12: 5e:66:3f:07:b8:65:e2:00:30:a0:7a:9a:ed:02:9f:1f:2d:f7: dd:39:d0:53:85:98:63:0c:a0:bc:0e:2d:85:42:a0:5a:ca:a8: 37:89:5a:0f:f9:6e:b1:ee:cc:2f:2c:c3:4e:85:96:df:8c:c8: eb:59:59:ed:e5:7e:18:b5:90:54:b7:eb:1a:29:ed:1b:7e:87: aa:2e:31:9c:5b:5e:60:57:83:82:a2:7b:86:35:05:8b:8d:a2: 2d:36:4e:b0:9d:2e:b4:95:d9:f9:b9:07:12:a4:e0:d2:d8:60: 74:6e:c5:c1:68:b9:3a:28:c0:90:5d:10:c8:e1:fe:6e:26:e2: 29:1b:76:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFxQnQ6IEvAgDEuBu+4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTYyNTU0MWFiZTZiNWFlOTI2NjcxZGFhOThhYzZkODA5 NGVjN2IwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD EyhmMjM1OWYzMDg0Y2ZiMmFhYTFmMDYzODE5ZGIxZGQwZDk0NDdiMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4auaaxBh8E7dbrDLbsSi9hXX95/G y00Sm3tmeGAHGnDeI5Rrn5FIAOPzz9aH5vzrJJasktq3UmYesUgURLXjuJS+6not ZwM4hYC1H2FQWUrV1zBmSk9cC/JINlmpNI4guwgXWBmwtXnSr33oOrlKOmD+PiM8 ovFuR4AHz/rF4EmosVY/zZXGXBr9IqDdRB+Gs0rSjiGZTkKBYHRvL7Qf1zLKriL7 bEdxFQiXlPuxSeM/WyaNd6CGy0ImzQaGyAlzWDZPzQfWrqBqQJLrNgTn1Q8TJS2M Z3Llm+tBqzRQeAyMNAlGkC3bDP9LiIRiWlp4uppxuqQ+bKnhDZn6P1AeSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI1nzCEz7KqofBjgZ2x3Q2UR7B/MB8GA1UdIwQY MBaAFM+WJVQavmta6SZnHaqYrG2AlOx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2Et NTlhNTg3YmRlYTNmLzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2EtNTlhNTg3YmRlYTNm LzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc0NJQIm JnH8VmOoLLFRjQYzkYoUpZKBmzATLSNeqPorq4D39llPpq8zzvYHcXXYB5PrF3qc RCL4qMgF/vkrShCCNnmhyBt+l9DfjpTN6ZGHIzBT/xXuqqftKxfo633s8ZifD0gg ofWcT3QusFlUiniNSBosLWnIrNtKAPkSXmY/B7hl4gAwoHqa7QKfHy333TnQU4WY YwygvA4thUKgWsqoN4laD/luse7MLyzDToWW34zI61lZ7eV+GLWQVLfrGintG36H qi4xnFteYFeDgqJ7hjUFi42iLTZOsJ0utJXZ+bkHEqTg0thgdG7FwWi5OijAkF0Q yOH+bibiKRt2Jw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:40 2025 by rpki-client