This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json) Hash identifier: SrpjN2+JWTSmjtChE9FQ0lFn5suOT2uKuw7fkQNzB4w= Subject key identifier: 27:2A:DD:59:EC:9A:A3:16:2D:15:7F:B4:D1:D7:04:B0:EB:77:AF:47 Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2 Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2 Certificate serial: 019AF31BD63F09C34A4FDC376E73A12A4736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft Manifest number: 0E4C Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: 6KJ0QJBKatJk4NidMDytmT3PuN931V6M5gWUI8ZZtsQ=) 2: g-_eT5ct7bDp65zymgf5llHzTKc.roa (hash: 6qrqxL/Wtd1D30D40m2/VyQoFXL4FQNDdMtRsZ56brc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d6:3f:09:c3:4a:4f:dc:37:6e:73:a1:2a:47:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670ec53068393d90db601ec295e42908525e10c2 Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=272add59ec9aa3162d157fb4d1d704b0eb77af47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:92:19:e6:6f:d3:77:dc:26:0f:ff:3d:aa:df: 4f:1c:9c:d0:56:95:fd:fc:2b:97:bd:7e:91:ff:53: 64:e1:4c:1d:26:b9:87:90:60:9a:9e:74:17:e1:78: e6:7b:3e:4c:b3:ec:ef:23:ed:14:8d:92:2b:4a:05: 86:2f:48:f5:34:31:58:c4:04:f9:4b:11:e8:cc:86: bf:6e:ab:f9:55:7c:20:10:f8:db:77:4a:19:79:e2: 55:dc:fc:34:f5:98:c7:76:74:f2:e9:9a:c3:72:71: c6:a5:9b:b5:70:48:98:0d:1d:d8:e1:d7:5c:5d:0d: 19:8f:51:82:6d:b8:f6:29:8f:63:21:df:af:a4:b7: ce:b3:b3:f8:02:b8:d5:63:b0:41:1d:f1:e3:b4:fb: 0a:1d:b0:2b:be:25:3d:c1:24:38:0f:11:e8:9f:c5: 69:c9:d9:a7:f9:6e:9f:cb:79:57:33:7e:cd:27:0a: a5:98:7a:d9:0a:4e:06:e7:bc:76:f2:fd:d9:84:f8: 2a:a3:c3:b8:2b:73:fe:a0:7f:c1:b6:11:53:76:19: b4:0f:89:96:56:47:8e:8c:89:7f:e0:cc:d3:b9:ba: cb:6c:16:48:8f:e1:12:96:cd:01:a3:c5:71:c2:fd: 89:9b:f6:0f:e7:64:4e:3e:c7:36:37:b0:f8:76:d8: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2A:DD:59:EC:9A:A3:16:2D:15:7F:B4:D1:D7:04:B0:EB:77:AF:47 X509v3 Authority Key Identifier: keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:de:fa:b5:68:0d:02:56:e3:57:b9:2b:17:3e:d8:c1:aa:c4: c9:7e:56:93:cf:a7:bd:38:c2:20:ef:84:f0:8a:16:fb:9f:54: be:38:a8:66:21:3e:9c:07:4b:c6:6b:9b:77:86:2d:f0:27:41: 0d:0f:93:5f:15:26:17:35:cc:9a:f4:1a:27:9f:d0:d0:66:12: 09:3b:ed:03:28:b3:86:6b:ed:20:e2:ab:bc:3f:02:72:bd:3f: ab:05:5f:f0:35:72:a8:35:ab:d6:f4:8d:a6:c3:7c:45:1e:ee: 97:a0:5b:99:12:a9:76:07:de:7b:db:e5:31:b5:0d:ae:18:65: de:8c:59:19:12:cb:2a:3c:e9:d2:2e:33:fe:86:26:c0:ff:7e: ae:34:f4:1d:29:b3:66:67:f6:e3:b1:58:f9:fa:f5:a3:1d:23: eb:1d:d7:2d:b6:bb:b4:21:e8:17:57:35:8f:52:b4:95:cf:9b: 17:86:14:2f:cc:ca:7b:0b:a4:3a:7e:d6:39:f9:2a:51:0d:6a: 5f:8a:32:58:ea:10:47:2b:45:5e:3c:22:6b:db:e6:05:01:62: 44:49:c1:a1:f9:55:aa:b2:d4:1e:56:78:1f:03:51:87:a1:79: dd:36:af:70:63:27:18:79:a0:62:45:35:11:02:a4:9d:b4:ba: 70:43:60:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9Y/CcNKT9w3bnOhKkc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGVjNTMwNjgzOTNkOTBkYjYwMWVjMjk1ZTQyOTA4NTI1 ZTEwYzIwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD EygyNzJhZGQ1OWVjOWFhMzE2MmQxNTdmYjRkMWQ3MDRiMGViNzdhZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25IZ5m/Td9wmD/89qt9PHJzQVpX9 /CuXvX6R/1Nk4UwdJrmHkGCannQX4Xjmez5Ms+zvI+0UjZIrSgWGL0j1NDFYxAT5 SxHozIa/bqv5VXwgEPjbd0oZeeJV3Pw09ZjHdnTy6ZrDcnHGpZu1cEiYDR3Y4ddc XQ0Zj1GCbbj2KY9jId+vpLfOs7P4ArjVY7BBHfHjtPsKHbArviU9wSQ4DxHon8Vp ydmn+W6fy3lXM37NJwqlmHrZCk4G57x28v3ZhPgqo8O4K3P+oH/BthFTdhm0D4mW VkeOjIl/4MzTubrLbBZIj+ESls0Bo8Vxwv2Jm/YP52ROPsc2N7D4dtitwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcq3VnsmqMWLRV/tNHXBLDrd69HMB8GA1UdIwQY MBaAFGcOxTBoOT2Q22AewpXkKQhSXhDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEt NzNkMjE4YTQ5MDNlLzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEtNzNkMjE4YTQ5MDNl LzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALt76tWgN AlbjV7krFz7YwarEyX5Wk8+nvTjCIO+E8IoW+59UvjioZiE+nAdLxmubd4Yt8CdB DQ+TXxUmFzXMmvQaJ5/Q0GYSCTvtAyizhmvtIOKrvD8Ccr0/qwVf8DVyqDWr1vSN psN8RR7ul6BbmRKpdgfee9vlMbUNrhhl3oxZGRLLKjzp0i4z/oYmwP9+rjT0HSmz Zmf247FY+fr1ox0j6x3XLba7tCHoF1c1j1K0lc+bF4YUL8zKewukOn7WOfkqUQ1q X4oyWOoQRytFXjwia9vmBQFiREnBoflVqrLUHlZ4HwNRh6F53TavcGMnGHmgYkU1 EQKknbS6cENgrA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:18 2025 by rpki-client