This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft File: 5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json) Hash identifier: pi8Y92dmeAmDtSLRHVu5doErXTK6eaVUJiBMtEyd6QQ= Subject key identifier: 25:16:88:BB:B8:F7:0D:17:0B:6A:11:06:F1:80:4B:BE:09:3C:80:F1 Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1 Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1 Certificate serial: 019AF509B1F678483921B45DB6BC592C424A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft Manifest number: 0F00 Signing time: Sat 06 Dec 2025 19:00:44 +0000 Manifest this update: Sat 06 Dec 2025 19:00:44 +0000 Manifest next update: Sun 07 Dec 2025 19:00:44 +0000 Files and hashes: 1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: IRXcxW/oWfc7KS8+44u7Cgcqej+r8E4SCl44ymQiZp8=) 2: iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa (hash: GfiW21oyJHRpJ2RiePVt0wuNlZL5LHM/Gp8C0SkaZrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b1:f6:78:48:39:21:b4:5d:b6:bc:59:2c:42:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1 Validity Not Before: Dec 6 19:00:44 2025 GMT Not After : Dec 7 19:00:44 2025 GMT Subject: CN=251688bbb8f70d170b6a1106f1804bbe093c80f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:94:44:b9:05:14:9b:07:e2:e0:30:1d:59: 29:df:26:97:96:d3:2a:85:8c:ee:21:9e:34:a5:a6: a8:2b:e8:97:44:42:d4:f6:c6:52:87:34:46:96:0c: 58:4a:e5:af:db:b1:fd:0b:d2:5d:92:d3:7c:93:90: 75:af:fb:88:9e:20:3d:da:d8:a6:33:12:d2:f9:29: ea:6c:19:e7:6f:c4:fd:12:bd:6a:7e:30:76:26:c6: 7c:28:8a:2e:9a:9c:f2:5c:ce:fc:f9:51:2f:6f:f9: 64:23:18:a5:eb:43:38:99:ee:82:ff:78:73:26:98: 6b:94:06:5a:eb:65:4c:34:8a:c8:f3:ce:9c:d8:89: 3b:e1:34:b9:5a:04:dd:41:26:98:36:17:bd:27:e3: 16:a4:eb:7f:d5:d7:a6:0c:db:60:2b:88:1b:28:c8: 48:40:0d:ea:17:11:95:48:23:c3:41:ae:ee:c3:95: 47:87:46:76:a0:62:69:ba:1f:86:25:66:c7:26:e6: 9c:6f:6b:e2:ff:4e:28:88:77:af:75:64:e2:17:72: e8:29:fe:de:fa:1a:ab:a1:d2:ca:ad:3e:35:80:ce: 6c:d9:6a:8b:42:77:a2:10:33:b9:3e:b0:db:b8:d3: 6b:e1:30:bf:7f:30:5f:3f:4e:ee:8f:9e:11:b8:ec: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:16:88:BB:B8:F7:0D:17:0B:6A:11:06:F1:80:4B:BE:09:3C:80:F1 X509v3 Authority Key Identifier: keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:00:b0:46:62:22:ae:0b:9f:5a:e1:23:74:54:82:8c:ec:b3: ca:7a:ed:08:0a:ce:7f:f7:df:2d:e1:72:f7:42:df:77:53:b6: 62:73:1f:08:5a:56:33:ca:55:6e:db:3d:1e:7f:40:cb:4c:de: d0:e6:94:5b:34:0e:19:63:3f:d4:15:f0:be:2d:de:d7:a2:60: 1a:3e:d8:28:8e:ae:26:6d:98:30:bc:43:2e:c2:08:1b:0b:4b: 85:87:d6:55:64:6a:66:27:26:47:f2:55:f6:65:d1:84:0b:6b: a8:62:4a:4c:4a:f6:34:a4:b0:ab:4a:14:07:2e:4f:b3:50:b7: 7e:87:61:a7:a7:9e:f4:9c:61:e3:af:17:cd:25:5e:83:fc:ef: 96:80:31:de:54:3c:60:4b:36:b5:64:5d:60:42:af:2e:bf:f9: e4:8f:67:7d:82:b3:19:7c:c0:b1:a5:d6:06:26:ca:2c:62:7f: 37:15:22:95:cc:1a:f4:9d:d9:56:4b:30:16:9c:1b:3e:1b:df: a0:e4:85:71:3d:ef:9d:05:cd:85:11:8c:a4:e9:b3:bb:15:6b: e3:5f:e3:bf:95:df:ec:1a:6d:45:ae:3b:d0:68:35:71:9c:21: 7c:89:8a:99:80:8a:46:6e:91:0b:87:12:53:93:90:89:c5:5d: ff:68:86:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbH2eEg5IbRdtrxZLEJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzkzM2MwOGFmOWMwMmRiYjBkM2U5N2YxZjkwOTMzZjUz NTZmYzEwHhcNMjUxMjA2MTkwMDQ0WhcNMjUxMjA3MTkwMDQ0WjAzMTEwLwYDVQQD EygyNTE2ODhiYmI4ZjcwZDE3MGI2YTExMDZmMTgwNGJiZTA5M2M4MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsKURLkFFJsH4uAwHVkp3yaXltMq hYzuIZ40paaoK+iXRELU9sZShzRGlgxYSuWv27H9C9JdktN8k5B1r/uIniA92tim MxLS+SnqbBnnb8T9Er1qfjB2JsZ8KIoumpzyXM78+VEvb/lkIxil60M4me6C/3hz JphrlAZa62VMNIrI886c2Ik74TS5WgTdQSaYNhe9J+MWpOt/1demDNtgK4gbKMhI QA3qFxGVSCPDQa7uw5VHh0Z2oGJpuh+GJWbHJuacb2vi/04oiHevdWTiF3LoKf7e +hqrodLKrT41gM5s2WqLQneiEDO5PrDbuNNr4TC/fzBfP07uj54RuOxTGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUWiLu49w0XC2oRBvGAS74JPIDxMB8GA1UdIwQY MBaAFOc5M8CK+cAtuw0+l/H5CTP1NW/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXprendJcjV3QzI3RFQ2WDhma0pNX1UxYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hOTVjMTQtMjAxMC00M2Y2LWFiYzgt Y2JhNzlhZjUwMDZhLzEvNXprendJcjV3QzI3RFQ2WDhma0pNX1UxYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hOTVjMTQtMjAxMC00M2Y2LWFiYzgtY2JhNzlhZjUwMDZh LzEvNXprendJcjV3QzI3RFQ2WDhma0pNX1UxYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJACwRmIi rgufWuEjdFSCjOyzynrtCArOf/ffLeFy90Lfd1O2YnMfCFpWM8pVbts9Hn9Ay0ze 0OaUWzQOGWM/1BXwvi3e16JgGj7YKI6uJm2YMLxDLsIIGwtLhYfWVWRqZicmR/JV 9mXRhAtrqGJKTEr2NKSwq0oUBy5Ps1C3fodhp6ee9Jxh468XzSVeg/zvloAx3lQ8 YEs2tWRdYEKvLr/55I9nfYKzGXzAsaXWBibKLGJ/NxUilcwa9J3ZVkswFpwbPhvf oOSFcT3vnQXNhRGMpOmzuxVr41/jv5Xf7BptRa470Gg1cZwhfImKmYCKRm6RC4cS U5OQicVd/2iGpA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:01 2025 by rpki-client