This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft File: zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json) Hash identifier: MlfHMFN/WTH43Bve71hMLzJbayHUpmlOELWDWWD1mAc= Subject key identifier: C6:95:3C:39:2E:07:D6:35:AE:D5:46:C3:96:8A:1B:6D:06:AB:4D:37 Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95 Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595 Certificate serial: 019AF1D1CD2A82DE6A2BF708FD14663EDCD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft Manifest number: 0F29 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: ke5imTlr7fT0_-DE8h9O78Ggh4s.roa (hash: 05xyuy/re9IJXLD81+YTPEcHrtJ82VFe2mcpWEaKIAc=) 2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: wjIUZPe+bd8Q/R2SgrdPJLpEnt5EAsHjFcQPnSuqEIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cd:2a:82:de:6a:2b:f7:08:fd:14:66:3e:dc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=c6953c392e07d635aed546c3968a1b6d06ab4d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:a2:47:92:81:84:0c:1c:94:97:0d:47:b7: c1:c7:7a:c4:50:55:1e:e2:15:46:96:79:b1:af:6a: 26:c4:80:dc:eb:b2:0d:44:1a:71:60:7e:b8:8c:b2: bf:01:00:1d:b0:b7:0b:e6:62:5d:22:e5:1f:86:dd: 7e:6f:15:8c:21:b2:14:d1:f4:82:fd:63:91:2e:d0: 2f:a4:6c:94:82:0a:15:fd:2e:5a:87:b4:29:73:e1: 09:07:5a:28:57:b0:09:4b:de:93:2e:84:a2:67:7f: 1d:7f:f2:4d:58:7f:ce:a9:9a:e5:55:81:74:aa:87: 05:41:10:0f:13:ff:45:8e:5f:e6:35:9a:91:36:3b: 35:c5:09:f5:81:8d:88:31:bf:1f:d3:4e:a3:1c:21: 8e:83:c2:b3:02:f0:9d:0e:12:fd:55:52:7c:1b:14: 91:ec:80:9f:77:be:fb:5e:7b:dd:b4:a1:a2:25:2c: 83:18:63:86:c5:4a:83:ad:be:1d:f1:8e:ab:69:d2: d2:25:6b:3c:64:6a:d3:6a:f9:2e:b2:68:37:a4:8e: f3:21:5e:10:65:f2:7a:48:f3:6c:9e:90:00:93:ed: ad:53:ca:b0:d5:dc:b7:66:3d:1b:67:c5:68:4d:e5: 4f:bc:7a:20:b3:1a:d4:a6:0b:83:e4:44:34:dc:8f: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:95:3C:39:2E:07:D6:35:AE:D5:46:C3:96:8A:1B:6D:06:AB:4D:37 X509v3 Authority Key Identifier: keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:75:40:c3:c4:85:1c:78:27:1e:08:b1:52:38:67:d6:f8:de: cb:22:34:ef:fe:26:db:90:2c:e8:8f:00:8f:f8:7b:f9:d0:ba: 1b:b4:c6:7e:34:eb:30:89:84:3c:89:5a:0a:04:f4:19:3a:7b: 0a:65:2c:32:38:e0:23:88:04:5b:6a:09:4d:70:c3:d5:d5:bc: 3b:18:5b:a2:fc:8e:90:f7:98:e2:ff:97:99:44:45:2e:a3:8c: 63:f3:51:44:c3:8e:59:41:61:a6:72:a6:19:9e:1a:9b:48:5c: 84:e2:13:aa:82:61:ac:e2:ec:a6:8b:1f:1b:b9:50:44:35:19: ba:62:26:ea:6f:38:33:53:08:84:bb:05:1a:29:9d:da:7b:38: 2c:bd:64:1c:cf:9d:85:d9:cf:58:2a:58:55:0e:d1:1e:69:3a: 7f:a0:25:b0:5f:27:8f:ae:05:77:3d:6e:5c:11:9e:a6:b9:bb: 97:48:ad:7f:1d:da:81:29:a5:a6:7b:9a:4c:f8:ce:c5:cb:a4: f8:ce:c7:dd:18:9e:3b:5e:f4:db:af:51:18:38:f3:b8:a5:46: b9:93:6a:3a:0a:57:d2:09:d2:9c:83:5d:46:4f:b4:d3:9e:4d: 7b:e5:02:c3:99:c1:d1:1b:7e:0c:70:74:ce:df:af:34:b0:bf: 3b:36:cf:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c0qgt5qK/cI/RRmPtzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMWU1NmU0YzRjNGE1MThmMjM4OGE1YWNiNWFmMDQ1MmNj MmE1OTUwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EyhjNjk1M2MzOTJlMDdkNjM1YWVkNTQ2YzM5NjhhMWI2ZDA2YWI0ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA332iR5KBhAwclJcNR7fBx3rEUFUe 4hVGlnmxr2omxIDc67INRBpxYH64jLK/AQAdsLcL5mJdIuUfht1+bxWMIbIU0fSC /WORLtAvpGyUggoV/S5ah7Qpc+EJB1ooV7AJS96TLoSiZ38df/JNWH/OqZrlVYF0 qocFQRAPE/9Fjl/mNZqRNjs1xQn1gY2IMb8f006jHCGOg8KzAvCdDhL9VVJ8GxSR 7ICfd777XnvdtKGiJSyDGGOGxUqDrb4d8Y6radLSJWs8ZGrTavkusmg3pI7zIV4Q ZfJ6SPNsnpAAk+2tU8qw1dy3Zj0bZ8VoTeVPvHogsxrUpguD5EQ03I+6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaVPDkuB9Y1rtVGw5aKG20Gq003MB8GA1UdIwQY MBaAFM0eVuTExKUY8jiKWsta8EUswqWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelI1VzVNVEVwUmp5T0lwYXkxcndSU3pDcFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jMDg3ZTktZDExZC00NGE2LThjNGQt Mjg1N2YxNzAzN2ExLzEvelI1VzVNVEVwUmp5T0lwYXkxcndSU3pDcFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jMDg3ZTktZDExZC00NGE2LThjNGQtMjg1N2YxNzAzN2Ex LzEvelI1VzVNVEVwUmp5T0lwYXkxcndSU3pDcFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknVAw8SF HHgnHgixUjhn1vjeyyI07/4m25As6I8Aj/h7+dC6G7TGfjTrMImEPIlaCgT0GTp7 CmUsMjjgI4gEW2oJTXDD1dW8OxhbovyOkPeY4v+XmURFLqOMY/NRRMOOWUFhpnKm GZ4am0hchOITqoJhrOLsposfG7lQRDUZumIm6m84M1MIhLsFGimd2ns4LL1kHM+d hdnPWCpYVQ7RHmk6f6AlsF8nj64Fdz1uXBGeprm7l0itfx3agSmlpnuaTPjOxcuk +M7H3RieO170269RGDjzuKVGuZNqOgpX0gnSnINdRk+0055Ne+UCw5nB0Rt+DHB0 zt+vNLC/OzbP+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:34 2025 by rpki-client