This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft File: 5zil-TBkI5q0_3k9-Kh54bqo4cc.mft (raw, json) Hash identifier: E5evT18RBvaUvHvxkgZRT6osrHYZNPsYzVjuZIC5bmg= Subject key identifier: 82:7A:3C:80:28:33:16:90:A2:39:4D:32:DE:BE:E9:13:BF:4C:0D:CE Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7 Certificate issuer: /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7 Certificate serial: 019AF19BB1F53BB4C4B4A5E2BA8D6E5A4AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft Manifest number: 145F Signing time: Sat 06 Dec 2025 03:01:43 +0000 Manifest this update: Sat 06 Dec 2025 03:01:43 +0000 Manifest next update: Sun 07 Dec 2025 03:01:43 +0000 Files and hashes: 1: 5zil-TBkI5q0_3k9-Kh54bqo4cc.crl (hash: zdutGVjzW5e6hrEyNukgIGepE+6d1xxACDf9k0+CjkA=) 2: 8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa (hash: oPPydQy+Sv4ZpQjf6oDCm3YgcVIg/Za6wdL618vPB84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b1:f5:3b:b4:c4:b4:a5:e2:ba:8d:6e:5a:4a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7 Validity Not Before: Dec 6 03:01:43 2025 GMT Not After : Dec 7 03:01:43 2025 GMT Subject: CN=827a3c8028331690a2394d32debee913bf4c0dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:88:1e:e3:42:01:db:e8:c8:56:7c:ef:a4: da:7b:6c:8c:b5:4b:db:cc:58:43:45:4a:a4:cb:98: d6:f1:dd:08:60:57:86:31:c7:5c:46:60:8c:ac:9a: 6b:aa:9c:0a:5a:f9:42:7a:af:b1:75:92:11:28:46: d9:ff:e2:2b:d5:b5:c9:39:70:e2:16:0e:cf:7d:21: e2:a6:30:d9:8a:f5:6d:68:de:15:d7:cd:39:99:5c: f8:d7:1a:cb:9a:4c:6f:10:1a:d6:43:8b:ca:be:48: 08:23:59:0d:c8:06:9d:9d:b5:33:8f:10:f1:b8:de: 7f:c7:58:9e:44:e0:d1:40:55:6a:68:74:f8:84:24: e4:b6:22:cb:22:f7:a8:91:f7:57:c0:7e:af:f8:62: 54:2e:3d:2b:fd:55:a9:9f:af:12:c7:97:7b:5e:16: 47:fb:da:93:52:e4:a5:5a:57:c7:90:d1:24:0e:2c: ff:64:f6:5c:9d:f1:40:74:37:37:56:49:94:9d:d5: 8b:2a:0c:72:43:ad:82:02:f8:3c:7b:6a:a3:81:d4: 96:dd:a9:b5:d9:d3:d7:99:61:70:19:3a:9e:66:b4: 48:c7:8c:a0:b0:5f:e4:d9:84:cf:f3:90:f6:8a:33: 4c:e4:0f:7e:3f:5f:2b:e0:ff:a6:ad:75:81:da:fb: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7A:3C:80:28:33:16:90:A2:39:4D:32:DE:BE:E9:13:BF:4C:0D:CE X509v3 Authority Key Identifier: keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2e:dd:4b:bc:c3:dd:3b:70:7f:f5:7c:bc:e4:27:31:d4:4c: 4f:65:c1:65:8f:28:96:1a:93:fc:ab:cd:08:e0:24:be:dc:5a: 25:1d:a3:0c:33:4f:41:eb:8c:3f:0d:6a:fc:ef:87:69:cb:7f: 18:a6:60:51:c7:85:bd:57:b9:da:3d:6c:89:32:05:bf:18:b5: e3:f3:6b:a2:72:8b:55:7d:19:27:88:1b:86:33:da:af:b9:a5: 3e:df:4a:80:85:2f:b5:62:52:bf:13:aa:6c:8e:53:17:7f:ea: 08:7c:fd:e9:0f:b3:28:e7:9e:ac:85:ba:96:af:82:31:2f:be: 80:0b:06:b7:56:b3:51:27:e6:3e:6f:07:20:b8:0e:23:5a:ba: 38:95:bf:cd:cd:1e:df:fa:21:cf:5c:80:fe:89:59:36:30:74: d1:cb:3c:a6:77:f5:f3:c0:5f:2e:d3:fc:2b:8c:35:a0:d8:a5: 5f:db:6a:cd:e3:41:b6:32:71:4e:ab:c3:f7:6b:60:b3:ba:4d: 31:2e:99:9b:05:21:72:2f:f5:fb:49:f2:bc:98:ca:7e:9e:23: 6e:b2:21:29:38:d6:f9:04:8a:1d:76:82:79:89:55:01:c5:62: 2d:77:2c:61:8d:dd:de:ee:99:d1:eb:50:65:fb:87:cb:d2:cb: 87:c6:d5:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7H1O7TEtKXiuo1uWkrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzhhNWY5MzA2NDIzOWFiNGZmNzkzZGY4YTg3OWUxYmFh OGUxYzcwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD Eyg4MjdhM2M4MDI4MzMxNjkwYTIzOTRkMzJkZWJlZTkxM2JmNGMwZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvueIHuNCAdvoyFZ876Tae2yMtUvb zFhDRUqky5jW8d0IYFeGMcdcRmCMrJprqpwKWvlCeq+xdZIRKEbZ/+Ir1bXJOXDi Fg7PfSHipjDZivVtaN4V1805mVz41xrLmkxvEBrWQ4vKvkgII1kNyAadnbUzjxDx uN5/x1ieRODRQFVqaHT4hCTktiLLIveokfdXwH6v+GJULj0r/VWpn68Sx5d7XhZH +9qTUuSlWlfHkNEkDiz/ZPZcnfFAdDc3VkmUndWLKgxyQ62CAvg8e2qjgdSW3am1 2dPXmWFwGTqeZrRIx4ygsF/k2YTP85D2ijNM5A9+P18r4P+mrXWB2vubuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJ6PIAoMxaQojlNMt6+6RO/TA3OMB8GA1UdIwQY MBaAFOc4pfkwZCOatP95PfioeeG6qOHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lNzY3MDEtOTg3My00ZmUwLTliNzEt Zjg5YmNmZjY5NTlmLzEvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lNzY3MDEtOTg3My00ZmUwLTliNzEtZjg5YmNmZjY5NTlm LzEvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni7dS7zD 3Ttwf/V8vOQnMdRMT2XBZY8olhqT/KvNCOAkvtxaJR2jDDNPQeuMPw1q/O+Hact/ GKZgUceFvVe52j1siTIFvxi14/NronKLVX0ZJ4gbhjPar7mlPt9KgIUvtWJSvxOq bI5TF3/qCHz96Q+zKOeerIW6lq+CMS++gAsGt1azUSfmPm8HILgOI1q6OJW/zc0e 3/ohz1yA/olZNjB00cs8pnf188BfLtP8K4w1oNilX9tqzeNBtjJxTqvD92tgs7pN MS6ZmwUhci/1+0nyvJjKfp4jbrIhKTjW+QSKHXaCeYlVAcViLXcsYY3d3u6Z0etQ ZfuHy9LLh8bVWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:39 2025 by rpki-client