This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json) Hash identifier: R2eKpG0/EgoqI77n3WkyUysmQrpO8ifJETA53ARFysU= Subject key identifier: AD:0B:C8:76:76:48:03:16:CD:B3:15:31:77:C9:5D:D9:D1:E6:4B:C7 Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F Certificate issuer: /CN=6790960ac4ba271502f1738a59490856f1975b1f Certificate serial: 019AF50A9B3BEA41F243A3D91F3DDE1AB080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft Manifest number: 0A95 Signing time: Sat 06 Dec 2025 19:01:44 +0000 Manifest this update: Sat 06 Dec 2025 19:01:44 +0000 Manifest next update: Sun 07 Dec 2025 19:01:44 +0000 Files and hashes: 1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: eBQeeFRr/66rLfk1HWAvljV2qwvmOMCVeiFBxILf478=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:9b:3b:ea:41:f2:43:a3:d9:1f:3d:de:1a:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f Validity Not Before: Dec 6 19:01:44 2025 GMT Not After : Dec 7 19:01:44 2025 GMT Subject: CN=ad0bc87676480316cdb3153177c95dd9d1e64bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:03:fd:4a:6e:7b:01:76:67:ac:e0:a4:90: a9:26:3d:56:12:0c:1e:65:2d:f4:bf:0d:f5:cc:10: d7:65:9d:b0:57:fc:1b:1f:0f:7e:5a:37:3d:12:01: 75:91:f4:85:fb:23:59:e2:d1:cc:27:24:7d:61:0c: fa:1f:fc:74:28:0a:c9:0c:d0:d0:4d:7b:26:b3:44: f1:dc:12:6e:1d:ac:1a:5a:91:e6:9a:95:54:43:55: e5:bb:91:40:90:d1:e3:18:a4:6d:4f:59:bf:97:61: bb:88:96:94:e9:0d:ba:84:1e:2d:76:6b:71:a2:1e: d3:e2:a2:18:71:1b:8d:ba:5f:e1:54:2a:8f:5d:9e: 5f:68:e4:ba:04:64:7f:37:d6:8f:b8:8b:97:ec:01: 82:5a:38:36:d5:0a:f9:b7:d2:a1:bd:f3:74:20:f4: f3:0c:d1:2c:84:4f:83:87:bb:84:bd:a5:40:24:0d: 7e:34:35:1c:c0:5f:bc:1d:a7:5b:e1:64:c9:25:f8: ad:c5:7f:a8:bc:25:3f:dc:d3:76:be:41:f8:b9:0e: a1:35:7e:50:dc:80:94:8a:07:99:88:a0:33:7a:7f: ff:92:ca:a3:f9:87:1f:b4:4c:d0:af:b3:d7:06:8e: c1:9e:78:f1:88:01:0a:72:2b:50:26:7f:60:26:fa: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:C8:76:76:48:03:16:CD:B3:15:31:77:C9:5D:D9:D1:E6:4B:C7 X509v3 Authority Key Identifier: keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ef:51:48:af:6a:32:d1:39:62:7d:0c:62:f4:57:bd:f0:48: 6f:05:f0:fb:11:b2:62:67:95:2c:cc:83:25:4d:23:a6:61:69: 0b:92:18:9f:dd:f7:7e:84:29:33:39:71:8a:e9:fa:95:05:39: 36:07:8c:43:f6:35:58:db:09:43:54:96:91:cc:ad:70:9c:11: a2:1e:a0:9e:43:43:8a:12:65:78:a8:e9:14:a6:77:c1:df:d9: 87:38:ef:cf:bb:67:b1:7b:18:ff:e9:86:2e:f8:07:0b:bd:3d: b9:7a:ab:36:66:f7:16:39:45:0b:88:b8:58:e3:b6:f0:48:d8: 48:4b:f2:8d:da:c0:83:ab:cc:24:c6:b1:d8:ba:c9:ab:16:5d: 18:35:ae:4b:9c:2b:44:1c:40:c0:1c:2f:cc:0c:ea:7e:c6:c0: 7e:00:27:8c:58:69:41:54:5c:66:e4:f6:d2:40:1f:1d:9b:0d: 5c:c4:4d:23:e8:52:33:81:d3:15:cb:86:f0:26:ce:a6:04:ba: d7:3f:fd:6d:01:98:f0:3b:c7:82:8a:8b:81:68:55:a3:6e:34: 83:b2:30:7e:52:24:35:e4:cc:a3:a1:0e:21:53:34:03:a3:66: 4b:19:50:cc:b3:f2:c3:a0:24:fd:6c:a3:c4:d2:cf:19:61:f4: ae:2c:68:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cps76kHyQ6PZHz3eGrCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTA5NjBhYzRiYTI3MTUwMmYxNzM4YTU5NDkwODU2ZjE5 NzViMWYwHhcNMjUxMjA2MTkwMTQ0WhcNMjUxMjA3MTkwMTQ0WjAzMTEwLwYDVQQD EyhhZDBiYzg3Njc2NDgwMzE2Y2RiMzE1MzE3N2M5NWRkOWQxZTY0YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSUD/UpuewF2Z6zgpJCpJj1WEgwe ZS30vw31zBDXZZ2wV/wbHw9+Wjc9EgF1kfSF+yNZ4tHMJyR9YQz6H/x0KArJDNDQ TXsms0Tx3BJuHawaWpHmmpVUQ1Xlu5FAkNHjGKRtT1m/l2G7iJaU6Q26hB4tdmtx oh7T4qIYcRuNul/hVCqPXZ5faOS6BGR/N9aPuIuX7AGCWjg21Qr5t9KhvfN0IPTz DNEshE+Dh7uEvaVAJA1+NDUcwF+8Hadb4WTJJfitxX+ovCU/3NN2vkH4uQ6hNX5Q 3ICUigeZiKAzen//ksqj+YcftEzQr7PXBo7BnnjxiAEKcitQJn9gJvrGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0LyHZ2SAMWzbMVMXfJXdnR5kvHMB8GA1UdIwQY MBaAFGeQlgrEuicVAvFzillJCFbxl1sfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYt OTI4MjhiMTUzMjEwLzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYtOTI4MjhiMTUzMjEw LzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFe9RSK9q MtE5Yn0MYvRXvfBIbwXw+xGyYmeVLMyDJU0jpmFpC5IYn933foQpMzlxiun6lQU5 NgeMQ/Y1WNsJQ1SWkcytcJwRoh6gnkNDihJleKjpFKZ3wd/Zhzjvz7tnsXsY/+mG LvgHC709uXqrNmb3FjlFC4i4WOO28EjYSEvyjdrAg6vMJMax2LrJqxZdGDWuS5wr RBxAwBwvzAzqfsbAfgAnjFhpQVRcZuT20kAfHZsNXMRNI+hSM4HTFcuG8CbOpgS6 1z/9bQGY8DvHgoqLgWhVo240g7IwflIkNeTMo6EOIVM0A6NmSxlQzLPyw6Ak/Wyj xNLPGWH0rixoyA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:46 2025 by rpki-client