This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json) Hash identifier: 0dftQWwFWiV222utVuhBJPwdY8WbeBOMhyUCt1QlM2Y= Subject key identifier: E2:3F:BB:48:68:36:BC:E3:E8:C6:A8:F2:8A:02:16:B0:22:6E:C8:5E Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7 Certificate serial: 019AF38997762BF5BA5BF025BBEC24833D25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 12:01:11 +0000 Manifest this update: Sat 06 Dec 2025 12:01:11 +0000 Manifest next update: Sun 07 Dec 2025 12:01:11 +0000 Files and hashes: 1: SYPIWFwWfIXYmXxn1AH13wYO028.roa (hash: QWvqjb5YHZY9I2Hyectp6IE4/NuwBT9jZBm7xDi/oyo=) 2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=) 3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=) 4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: q6p8d+gXI70aiSCtkB8y9uRRp5FuV88rN+omI/gvH/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:97:76:2b:f5:ba:5b:f0:25:bb:ec:24:83:3d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7 Validity Not Before: Dec 6 12:01:11 2025 GMT Not After : Dec 7 12:01:11 2025 GMT Subject: CN=e23fbb486836bce3e8c6a8f28a0216b0226ec85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:31:5b:71:2f:f4:f1:67:59:8d:1e:6d:18: 16:89:00:bc:fa:e9:17:bd:44:2f:e5:82:5a:38:c4: fa:54:74:e0:19:1e:73:65:be:a0:5d:5a:32:f1:38: cd:fc:cc:e6:1f:0e:56:cb:a0:73:ab:ae:15:4f:a0: 45:bf:82:64:20:02:f3:b9:85:a8:b0:e8:99:2f:2b: 1e:ea:5d:53:40:c8:d9:7f:79:88:2a:ed:49:63:64: b2:f6:e5:6b:62:dc:74:76:db:72:5d:64:a7:37:fe: 15:f4:07:3d:d5:13:61:7b:3c:73:8a:93:c9:52:95: ab:27:17:4c:b9:d1:a7:29:fa:fd:44:ea:fc:90:24: ec:b4:55:d8:6a:4b:60:39:da:1f:27:2f:cf:60:49: 0f:d3:1c:ff:d7:44:4f:ba:fd:85:3a:6c:be:f0:ce: 73:2a:d0:37:41:24:0d:05:14:67:04:4e:5e:20:6c: 56:c1:c6:23:69:5d:b8:d5:3b:ef:78:56:26:6d:25: cf:07:61:e5:04:ee:0a:90:04:64:74:1b:cc:ce:eb: 91:e7:c4:e2:cb:ef:1c:d3:68:ed:20:14:a5:3f:e5: 65:1d:84:3d:e9:07:45:14:9d:66:70:13:5f:33:94: cd:46:d5:38:b3:f9:3d:7b:74:bb:ad:f1:29:4f:93: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3F:BB:48:68:36:BC:E3:E8:C6:A8:F2:8A:02:16:B0:22:6E:C8:5E X509v3 Authority Key Identifier: keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2c:af:28:81:0a:23:b7:d1:ce:d5:34:5d:7d:fd:fc:ce:9a: fa:a0:96:f0:f6:cf:ff:18:b5:51:45:1c:37:9d:93:b7:a9:47: 8d:aa:b8:03:a2:99:83:be:27:8e:a5:09:69:f4:53:b9:8f:4e: 3b:64:b2:83:5a:5a:68:3a:8a:e0:c8:95:57:23:a0:52:9d:1a: de:33:00:67:f8:a4:85:cb:09:4f:4e:0f:5f:cb:02:8f:62:d4: 47:92:0f:97:40:10:46:72:c2:1d:d1:0a:37:5d:a5:e1:dc:4f: 54:80:7a:2a:3e:bb:c9:b8:16:f8:c8:b2:b9:78:31:a7:92:47: 7d:c9:51:06:a9:be:92:63:e8:97:66:a0:a2:da:b8:b1:ad:00: 49:c2:0f:81:71:30:92:8c:29:f9:66:d5:bc:b4:9b:71:55:67: 80:22:02:43:aa:38:00:69:44:62:7d:2a:f6:34:41:73:1e:76: 15:2c:24:10:a5:2e:13:cb:fc:95:0b:ce:6b:3c:0d:56:3d:12: 94:29:a0:3d:58:f8:d8:6f:67:2f:ed:e7:db:6b:5f:61:72:b8: b9:de:8d:5d:8f:e0:40:10:2c:f4:c4:28:a6:f4:2d:a4:28:8f: 15:c7:1a:14:18:c3:57:99:1b:64:fd:d9:2c:28:85:1c:5c:9e: f0:a1:08:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZd2K/W6W/Alu+wkgz0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTgzMzI2MTY5NzY1MmMzNTU0N2U5OGZjMDVhN2UyMjk0 ZWRiYzcwHhcNMjUxMjA2MTIwMTExWhcNMjUxMjA3MTIwMTExWjAzMTEwLwYDVQQD EyhlMjNmYmI0ODY4MzZiY2UzZThjNmE4ZjI4YTAyMTZiMDIyNmVjODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmoxW3Ev9PFnWY0ebRgWiQC8+ukX vUQv5YJaOMT6VHTgGR5zZb6gXVoy8TjN/MzmHw5Wy6Bzq64VT6BFv4JkIALzuYWo sOiZLyse6l1TQMjZf3mIKu1JY2Sy9uVrYtx0dttyXWSnN/4V9Ac91RNhezxzipPJ UpWrJxdMudGnKfr9ROr8kCTstFXYaktgOdofJy/PYEkP0xz/10RPuv2FOmy+8M5z KtA3QSQNBRRnBE5eIGxWwcYjaV241TvveFYmbSXPB2HlBO4KkARkdBvMzuuR58Ti y+8c02jtIBSlP+VlHYQ96QdFFJ1mcBNfM5TNRtU4s/k9e3S7rfEpT5Ni3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI/u0hoNrzj6Mao8ooCFrAibsheMB8GA1UdIwQY MBaAFM+YMyYWl2UsNVR+mPwFp+IpTtvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMt YWU0MDFhMzdjMDQ0LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMtYWU0MDFhMzdjMDQ0 LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciyvKIEK I7fRztU0XX39/M6a+qCW8PbP/xi1UUUcN52Tt6lHjaq4A6KZg74njqUJafRTuY9O O2Syg1paaDqK4MiVVyOgUp0a3jMAZ/ikhcsJT04PX8sCj2LUR5IPl0AQRnLCHdEK N12l4dxPVIB6Kj67ybgW+MiyuXgxp5JHfclRBqm+kmPol2agotq4sa0AScIPgXEw kowp+WbVvLSbcVVngCICQ6o4AGlEYn0q9jRBcx52FSwkEKUuE8v8lQvOazwNVj0S lCmgPVj42G9nL+3n22tfYXK4ud6NXY/gQBAs9MQopvQtpCiPFccaFBjDV5kbZP3Z LCiFHFye8KEIuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:47 2025 by rpki-client