This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json) Hash identifier: LGFF4P8saik7bm/FGtKKeqvVwQtQOIWw6oWYdUn+7RU= Subject key identifier: 57:6B:25:46:22:07:BF:9C:44:06:67:1E:A7:7C:27:37:9F:89:65:4E Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8 Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8 Certificate serial: 019AF208A6F62EC71D79FB8695138AA988C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft Manifest number: 11C0 Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: Vj7xZ3mLystmlgptOwoPc+NVpiG09ctBBg4qcKcu8DE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a6:f6:2e:c7:1d:79:fb:86:95:13:8a:a9:88:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8 Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=576b25462207bf9c4406671ea77c27379f89654e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:71:6c:a2:13:ed:c3:fc:ec:6f:1b:37:25: d8:22:ca:7b:67:e6:c8:eb:fd:aa:b1:ca:c9:97:3d: 46:30:93:88:ba:9c:0f:4b:55:8c:95:02:77:d6:3f: b9:0a:18:ab:1c:66:64:5a:f2:b3:91:12:2b:99:93: d1:6b:1b:73:08:2e:9f:47:b1:35:48:0e:ff:27:50: 33:0c:55:64:75:91:39:67:0e:2d:90:09:74:6a:58: 85:08:40:26:8f:8b:71:55:42:4f:86:f5:a3:b3:a3: 2a:58:f9:33:53:46:fb:e3:b2:e4:a9:c7:4f:bb:5f: 9f:2e:55:05:8c:44:d7:f1:bf:6a:fe:eb:96:34:1d: e1:8f:ec:5a:4f:17:7b:0b:23:78:d8:85:b4:06:44: e0:8c:2a:5b:60:d4:46:46:e6:73:e4:16:18:2b:50: 54:40:69:7f:25:52:a8:5d:fb:55:ef:35:f2:02:17: 18:a3:7f:86:0c:e5:b7:84:5a:ba:c7:df:27:5e:26: 52:19:a2:66:26:d0:d6:7b:84:94:da:60:ee:ac:db: 29:b8:1e:b0:c0:eb:c6:d1:66:0e:85:dc:29:7f:9d: 28:e6:0c:3c:83:ba:d4:d0:19:58:58:c6:50:fe:6d: f5:4c:87:c1:4d:ec:a1:8a:66:f9:1b:29:ae:40:7f: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6B:25:46:22:07:BF:9C:44:06:67:1E:A7:7C:27:37:9F:89:65:4E X509v3 Authority Key Identifier: keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e6:8b:ee:73:59:af:9a:4f:09:6b:9a:d9:94:38:f7:18:10: 19:72:ac:7d:2b:1d:c3:42:4f:58:a7:13:83:6e:dd:4b:ef:25: a7:0d:d8:75:d9:b8:97:b8:5f:03:70:c1:35:67:73:dd:0d:cb: 09:d4:b5:ff:a0:b2:8b:2d:a5:31:d1:11:0d:c9:cb:ab:2f:f5: 95:6b:af:29:41:42:5f:39:06:5a:3b:45:70:fa:97:10:6f:88: 73:be:c7:3d:8b:c2:60:5b:16:91:6f:57:96:71:32:3b:ba:26: 45:7a:e5:a9:f9:fe:2d:1d:22:26:48:5c:58:ff:93:4c:d4:e8: b7:4d:5d:6a:c1:be:b0:f6:7f:57:48:a2:13:7e:26:78:7b:33: 0e:ba:4f:e0:46:c9:91:20:ed:f7:6a:b0:84:76:29:e4:1a:e6: 82:32:65:78:a8:96:f9:43:9e:48:4d:9b:7d:21:73:4f:ac:a1: b4:d2:fe:c3:9e:d3:db:bd:ad:d7:c5:f2:af:e0:d6:56:1a:96: c8:3b:75:2a:82:cb:9f:b2:a8:f0:27:c4:2f:f9:df:2f:67:81: 75:0c:03:2e:76:ef:eb:09:c4:59:71:3d:df:c5:18:02:99:0e: 30:9d:ca:d3:bd:81:8e:c1:e4:ae:9e:11:1d:84:c1:cb:30:40: df:99:2b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKb2LscdefuGlROKqYjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OWJkNzhlMzgxOTc3MGMxMTZlNTc3YmFjZmFkMTk5MzM5 MmJkYjgwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD Eyg1NzZiMjU0NjIyMDdiZjljNDQwNjY3MWVhNzdjMjczNzlmODk2NTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxapxbKIT7cP87G8bNyXYIsp7Z+bI 6/2qscrJlz1GMJOIupwPS1WMlQJ31j+5ChirHGZkWvKzkRIrmZPRaxtzCC6fR7E1 SA7/J1AzDFVkdZE5Zw4tkAl0aliFCEAmj4txVUJPhvWjs6MqWPkzU0b747LkqcdP u1+fLlUFjETX8b9q/uuWNB3hj+xaTxd7CyN42IW0BkTgjCpbYNRGRuZz5BYYK1BU QGl/JVKoXftV7zXyAhcYo3+GDOW3hFq6x98nXiZSGaJmJtDWe4SU2mDurNspuB6w wOvG0WYOhdwpf50o5gw8g7rU0BlYWMZQ/m31TIfBTeyhimb5GymuQH8ExQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdrJUYiB7+cRAZnHqd8JzefiWVOMB8GA1UdIwQY MBaAFGeb1444GXcMEW5Xe6z60Zkzkr24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2It YWZiNTU4YTVlODQxLzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2ItYWZiNTU4YTVlODQx LzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOaL7nNZ r5pPCWua2ZQ49xgQGXKsfSsdw0JPWKcTg27dS+8lpw3Yddm4l7hfA3DBNWdz3Q3L CdS1/6Cyiy2lMdERDcnLqy/1lWuvKUFCXzkGWjtFcPqXEG+Ic77HPYvCYFsWkW9X lnEyO7omRXrlqfn+LR0iJkhcWP+TTNTot01dasG+sPZ/V0iiE34meHszDrpP4EbJ kSDt92qwhHYp5BrmgjJleKiW+UOeSE2bfSFzT6yhtNL+w57T272t18Xyr+DWVhqW yDt1KoLLn7Ko8CfEL/nfL2eBdQwDLnbv6wnEWXE938UYApkOMJ3K072BjsHkrp4R HYTByzBA35krqA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:13 2025 by rpki-client