This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json) Hash identifier: bxpb3Hj1ullPnAbuEpPxv+mCaRwWeub5YSXUlvzpP/Y= Subject key identifier: D4:82:19:EF:1D:5F:21:A2:92:4F:CC:BA:51:8B:C1:B7:C1:30:47:FB Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80 Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180 Certificate serial: 019AF1D1DA1EBE5474A2799D97A1175770E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: 2WLuO4/LsqZ5bv1AeQHLMvTSSzETtwrvcA7yL8YdFmE=) 2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=) 3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:da:1e:be:54:74:a2:79:9d:97:a1:17:57:70:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=d48219ef1d5f21a2924fccba518bc1b7c13047fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:fb:fa:81:9a:15:94:62:2f:b2:11:3a:97: b3:ab:70:4c:d1:f8:96:1b:0c:d5:88:11:26:e3:62: eb:6b:87:91:e8:59:72:c3:28:16:b8:92:db:2a:b3: 67:18:2a:3f:39:39:3b:c8:bc:79:ae:8f:5b:37:77: e1:e3:db:3a:fb:44:88:99:0d:f6:57:b4:64:5b:6b: 47:36:79:c2:be:4f:aa:ae:3c:4f:1c:33:2a:14:1a: 96:7a:df:ec:7e:cf:33:d6:be:ec:92:ce:8a:d5:68: 7f:1f:98:5c:f4:33:ae:4d:a8:7d:df:21:6f:25:fd: 30:dc:69:e3:a7:94:cb:82:b4:d9:8b:d7:ce:fb:2d: c7:31:e6:60:35:4b:5f:ec:5e:0d:3a:03:da:0b:c3: 12:0c:83:f6:92:a4:f3:71:b1:06:c7:08:7b:ce:61: 63:80:27:c0:a0:94:bb:3b:d1:49:06:9b:27:e5:46: 06:31:7f:c6:51:a7:25:1b:ab:65:d2:90:3f:02:b9: 76:dc:af:10:5f:0f:6e:75:dd:60:3c:cc:05:f6:a9: 56:f4:bc:bd:06:ba:cf:45:e8:33:3d:93:01:46:5b: be:f8:df:e1:c2:3e:35:66:73:b1:21:66:b1:d7:fd: de:89:37:83:bb:31:fc:4d:51:7b:a4:c7:6b:ec:56: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:82:19:EF:1D:5F:21:A2:92:4F:CC:BA:51:8B:C1:B7:C1:30:47:FB X509v3 Authority Key Identifier: keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7c:95:7c:7e:17:22:0c:86:58:3b:f0:8b:cf:ca:ca:e9:a8: 10:f0:44:d9:ec:e7:64:38:a8:96:b8:83:6b:d0:04:a6:10:ac: c3:87:93:5f:4d:5c:1a:0a:58:89:fb:98:ab:b4:06:f1:24:ce: ce:51:ac:f7:31:d1:bd:15:2e:4e:13:73:27:ed:bb:56:b9:05: 3f:6a:31:97:0b:1a:97:cd:4c:10:98:24:6e:c9:09:ff:ac:71: 23:86:01:75:c7:41:c8:57:7e:7d:36:29:ae:af:59:eb:14:35: 7c:f5:98:4c:1c:ea:e9:77:c9:f7:2b:14:c3:18:01:80:dd:09: 03:42:ab:40:c3:0e:42:29:e7:89:cd:eb:6f:d2:0c:3c:8c:9b: 7e:12:d5:b4:9e:6f:1b:f3:25:c9:b1:58:a9:75:06:f2:56:51: ec:8f:a9:2f:7e:b8:84:09:66:2c:1b:29:d1:b6:b2:ed:2c:90: d0:73:31:76:77:41:b9:38:96:ba:df:25:7b:ec:8b:b7:86:e5: 3e:40:1e:94:1b:3e:1c:a4:92:83:a8:4c:64:00:6e:01:2a:e2: de:8f:e1:24:49:a5:ea:9f:a6:e5:01:cb:1a:fd:d9:09:dd:98: 4e:1d:61:01:ce:b8:94:d9:0c:99:77:ec:6e:ef:c9:56:87:9f: 3b:bd:f7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0doevlR0onmdl6EXV3DlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTIwNDIwZjcyMmY3ZDdmM2M0YjI1YTgwZTE3ZDcyOTAx NzExODAwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhkNDgyMTllZjFkNWYyMWEyOTI0ZmNjYmE1MThiYzFiN2MxMzA0N2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpL7+oGaFZRiL7IROpezq3BM0fiW GwzViBEm42Lra4eR6FlywygWuJLbKrNnGCo/OTk7yLx5ro9bN3fh49s6+0SImQ32 V7RkW2tHNnnCvk+qrjxPHDMqFBqWet/sfs8z1r7sks6K1Wh/H5hc9DOuTah93yFv Jf0w3Gnjp5TLgrTZi9fO+y3HMeZgNUtf7F4NOgPaC8MSDIP2kqTzcbEGxwh7zmFj gCfAoJS7O9FJBpsn5UYGMX/GUaclG6tl0pA/Arl23K8QXw9udd1gPMwF9qlW9Ly9 BrrPRegzPZMBRlu++N/hwj41ZnOxIWax1/3eiTeDuzH8TVF7pMdr7FZ3RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSCGe8dXyGikk/MulGLwbfBMEf7MB8GA1UdIwQY MBaAFGeSBCD3IvfX88SyWoDhfXKQFxGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUt NWVkMDg5YzFhZmVkLzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUtNWVkMDg5YzFhZmVk LzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHyVfH4X IgyGWDvwi8/KyumoEPBE2eznZDiolriDa9AEphCsw4eTX01cGgpYifuYq7QG8STO zlGs9zHRvRUuThNzJ+27VrkFP2oxlwsal81MEJgkbskJ/6xxI4YBdcdByFd+fTYp rq9Z6xQ1fPWYTBzq6XfJ9ysUwxgBgN0JA0KrQMMOQinnic3rb9IMPIybfhLVtJ5v G/MlybFYqXUG8lZR7I+pL364hAlmLBsp0bay7SyQ0HMxdndBuTiWut8le+yLt4bl PkAelBs+HKSSg6hMZABuASri3o/hJEml6p+m5QHLGv3ZCd2YTh1hAc64lNkMmXfs bu/JVoefO733sA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:04 2025 by rpki-client