This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft File: 5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json) Hash identifier: mf+87W3Fnvy6OmWIs2vRrpFr+xpAbfj0tPGzQrPU/Zo= Subject key identifier: 8D:28:C8:CF:0B:11:9B:1A:AE:21:7F:1A:97:D2:15:DE:C4:91:FC:BF Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1 Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1 Certificate serial: 019B424A5D2E2B7FFFA73FF2B36B6123A5B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft Manifest number: 0F28 Signing time: Sun 21 Dec 2025 19:02:08 +0000 Manifest this update: Sun 21 Dec 2025 19:02:08 +0000 Manifest next update: Mon 22 Dec 2025 19:02:08 +0000 Files and hashes: 1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: nTZj7ejXZxgzRJQZXD93j3D7pOHX4PW6hOnHvh+qaAQ=) 2: iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa (hash: GfiW21oyJHRpJ2RiePVt0wuNlZL5LHM/Gp8C0SkaZrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:5d:2e:2b:7f:ff:a7:3f:f2:b3:6b:61:23:a5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1 Validity Not Before: Dec 21 19:02:08 2025 GMT Not After : Dec 22 19:02:08 2025 GMT Subject: CN=8d28c8cf0b119b1aae217f1a97d215dec491fcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:da:eb:6f:b6:51:9b:62:2e:3b:5a:93:b8: cb:ba:37:f0:3e:89:ff:e9:d8:28:ef:7f:b7:fb:cb: 5e:d5:f1:44:49:60:c0:bd:e0:0b:7c:f8:16:b7:14: ec:5a:e2:3f:a5:26:ca:37:98:4f:a3:e2:07:86:0a: 87:6f:5f:7f:a5:04:e7:87:20:61:78:ef:85:81:53: c7:dd:ec:8a:f6:ba:3a:36:c9:1b:75:f8:4a:4a:3b: 39:89:fd:e1:ef:b7:38:38:5f:3d:27:62:85:78:98: ee:e0:d0:df:51:89:8c:42:d2:ff:6c:bc:ef:45:95: cc:a8:c3:bd:29:b8:f5:7c:50:43:89:ba:da:3c:57: f3:60:50:ad:c5:df:05:11:3d:43:22:f1:d1:18:52: 63:a7:8d:8c:44:04:4a:2a:7b:1f:40:62:37:14:df: 4a:e4:0c:99:d9:fb:d9:d9:ef:3c:06:41:4d:c7:52: cc:73:71:53:7b:59:07:c3:87:96:b5:a2:cb:2e:5a: 0c:95:8b:c5:bc:af:bf:52:f0:44:17:2d:98:c6:bc: aa:60:89:18:7b:03:84:f9:23:dd:9a:39:99:27:e7: 2e:c2:a7:f4:f5:67:94:fb:67:87:e3:ae:b5:1e:47: 2e:f9:cb:c0:aa:3e:ac:3c:e1:c8:69:be:d0:2c:a6: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:28:C8:CF:0B:11:9B:1A:AE:21:7F:1A:97:D2:15:DE:C4:91:FC:BF X509v3 Authority Key Identifier: keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b2:33:31:c7:64:4d:18:b9:b3:0e:1c:88:ef:36:41:1d:ab: b0:38:3c:59:72:1b:64:ec:ad:97:fe:b3:21:60:64:3f:35:bd: 99:d1:61:01:f5:3c:51:bc:f0:49:c0:37:f5:64:e9:e4:13:b1: 2b:b8:a4:d0:e4:18:06:e1:04:71:62:f5:52:28:b1:8b:d8:10: cc:28:0a:bb:ef:cf:4e:72:c8:e8:0d:a5:37:77:1f:87:85:4b: 80:f6:7a:76:fc:56:e5:7c:40:c2:85:61:35:e2:18:af:c6:2c: 74:0b:58:9b:21:01:4c:ad:e7:d6:23:d9:cd:9b:67:1e:a4:11: b2:58:4c:ee:72:ab:e6:c2:45:c9:38:38:c2:09:8e:a4:49:59: dd:d5:e1:b4:ce:09:1f:b5:a7:c4:70:80:e2:08:d0:41:b2:54: 52:df:76:d8:40:09:0f:fb:9f:35:14:19:4b:7f:49:6b:56:9c: f5:2d:dc:c4:bc:52:07:ee:53:23:15:14:ef:21:02:ce:75:f2: 7a:09:01:68:5d:64:92:53:a3:4e:4e:e3:fc:21:c8:a5:ce:10: 50:4f:86:8a:13:37:05:40:5b:02:9a:34:b2:fd:10:36:c4:51: e4:3b:62:37:13:1f:e4:47:01:d2:cd:c2:de:54:60:67:f8:b2: e6:55:a2:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSl0uK3//pz/ys2thI6W0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzkzM2MwOGFmOWMwMmRiYjBkM2U5N2YxZjkwOTMzZjUz NTZmYzEwHhcNMjUxMjIxMTkwMjA4WhcNMjUxMjIyMTkwMjA4WjAzMTEwLwYDVQQD Eyg4ZDI4YzhjZjBiMTE5YjFhYWUyMTdmMWE5N2QyMTVkZWM0OTFmY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpHa62+2UZtiLjtak7jLujfwPon/ 6dgo73+3+8te1fFESWDAveALfPgWtxTsWuI/pSbKN5hPo+IHhgqHb19/pQTnhyBh eO+FgVPH3eyK9ro6NskbdfhKSjs5if3h77c4OF89J2KFeJju4NDfUYmMQtL/bLzv RZXMqMO9Kbj1fFBDibraPFfzYFCtxd8FET1DIvHRGFJjp42MRARKKnsfQGI3FN9K 5AyZ2fvZ2e88BkFNx1LMc3FTe1kHw4eWtaLLLloMlYvFvK+/UvBEFy2YxryqYIkY ewOE+SPdmjmZJ+cuwqf09WeU+2eH4661Hkcu+cvAqj6sPOHIab7QLKZI7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0oyM8LEZsariF/GpfSFd7Ekfy/MB8GA1UdIwQY MBaAFOc5M8CK+cAtuw0+l/H5CTP1NW/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXprendJcjV3QzI3RFQ2WDhma0pNX1UxYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hOTVjMTQtMjAxMC00M2Y2LWFiYzgt Y2JhNzlhZjUwMDZhLzEvNXprendJcjV3QzI3RFQ2WDhma0pNX1UxYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hOTVjMTQtMjAxMC00M2Y2LWFiYzgtY2JhNzlhZjUwMDZh LzEvNXprendJcjV3QzI3RFQ2WDhma0pNX1UxYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7IzMcdk TRi5sw4ciO82QR2rsDg8WXIbZOytl/6zIWBkPzW9mdFhAfU8UbzwScA39WTp5BOx K7ik0OQYBuEEcWL1Uiixi9gQzCgKu+/PTnLI6A2lN3cfh4VLgPZ6dvxW5XxAwoVh NeIYr8YsdAtYmyEBTK3n1iPZzZtnHqQRslhM7nKr5sJFyTg4wgmOpElZ3dXhtM4J H7WnxHCA4gjQQbJUUt922EAJD/ufNRQZS39Ja1ac9S3cxLxSB+5TIxUU7yECznXy egkBaF1kklOjTk7j/CHIpc4QUE+GihM3BUBbApo0sv0QNsRR5DtiNxMf5EcB0s3C 3lRgZ/iy5lWixg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:13:10 2025 by rpki-client