This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json) Hash identifier: 9F4sdv7OS/A7f6BvNhJftSbth1O7j6ex/k+L0SQjEE8= Subject key identifier: B6:3D:87:27:BC:94:75:D0:64:62:65:0B:42:7D:42:0B:B8:F2:59:04 Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16 Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816 Certificate serial: 019AF0BF626F724EBBC5B403B56F01DD7D1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft Manifest number: 0CD5 Signing time: Fri 05 Dec 2025 23:01:05 +0000 Manifest this update: Fri 05 Dec 2025 23:01:05 +0000 Manifest next update: Sat 06 Dec 2025 23:01:05 +0000 Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=) 2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: x+ZXIe/lIMcSIRd9iZOZZMhGGJL0+6mBI5xUI78vKNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:62:6f:72:4e:bb:c5:b4:03:b5:6f:01:dd:7d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816 Validity Not Before: Dec 5 23:01:05 2025 GMT Not After : Dec 6 23:01:05 2025 GMT Subject: CN=b63d8727bc9475d06462650b427d420bb8f25904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:39:bb:41:74:d6:23:41:50:79:3e:93:64: 45:a6:a9:d1:76:10:e3:43:3b:0a:83:1f:83:ce:1e: d3:05:8e:c9:c6:47:5a:3f:22:3a:d4:19:06:a1:bd: f2:e4:90:bc:01:2b:8b:67:49:c7:2d:db:b8:fc:d2: ad:10:08:81:86:b4:e8:28:b7:d5:e5:2a:0a:9f:af: 83:fb:3f:ba:c0:ab:c4:3e:50:d1:9a:a9:e4:30:b5: 4d:09:9f:f8:60:cd:5e:15:78:43:f0:40:58:80:5b: 3f:de:fc:e2:96:d6:d8:08:33:ba:b5:1f:89:35:55: 20:f1:af:9a:41:5e:b3:b8:06:6f:60:9c:2c:cf:20: 6b:15:b9:79:34:dc:cb:4b:9f:0f:71:ea:cb:f6:5b: 3e:23:e4:c3:64:a8:9a:a0:41:58:7c:94:be:dd:da: e6:da:74:07:b7:05:2b:15:35:39:ef:15:a9:64:7e: bd:0a:cf:4c:12:d4:f3:54:2c:dd:da:18:75:14:b7: 9d:3e:3e:90:71:b5:2e:31:52:1e:da:d7:65:ff:f4: 91:4b:04:d5:49:2f:ab:43:49:16:08:c4:76:5d:ed: 32:03:c4:50:76:96:33:3e:ee:e2:35:4a:40:67:82: c1:08:61:02:3f:8c:e0:9b:1a:c9:ab:97:ea:d5:c8: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3D:87:27:BC:94:75:D0:64:62:65:0B:42:7D:42:0B:B8:F2:59:04 X509v3 Authority Key Identifier: keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:db:49:4f:66:64:ad:ff:4d:7e:9a:d4:09:59:65:c2:d2:5c: 08:f7:c0:e7:b0:79:d0:71:a8:93:e1:b3:5e:e7:d5:55:b0:fe: c6:d2:b4:5e:69:91:a6:8f:12:a9:c1:65:6d:17:30:d6:ee:45: 6e:15:47:cc:e4:2f:29:81:e6:93:5d:b4:7f:b3:44:95:1a:35: 5e:37:4f:a8:bf:f2:d5:c9:32:52:90:38:39:f0:cc:c4:34:9e: 70:2f:25:b8:7a:a8:c0:fd:87:94:37:de:c5:23:02:2d:e6:b7: 5d:9e:38:66:f8:b3:6a:13:d9:9d:35:ea:68:17:fa:1d:3b:13: 3c:b5:f0:42:e9:d2:3b:f9:e6:bd:93:51:21:0b:70:88:2f:e5: 39:57:0d:1e:5f:24:8d:b7:1a:96:f6:c2:f1:2b:02:a4:6f:62: 4e:34:43:0d:4b:c6:0d:8d:07:73:30:cd:d6:6a:b2:81:ed:0e: 23:bf:c4:56:7e:f6:76:d2:f5:d5:cd:93:eb:2e:97:37:08:f4: 86:3f:45:13:dd:42:c8:24:55:18:8a:b5:6a:62:20:1b:67:b0: 77:f6:13:00:67:f6:ec:dc:84:91:fc:76:2d:7e:5f:82:65:0e: 27:cc:82:6b:e3:f9:1e:d2:a8:35:9f:dd:37:65:0e:ef:5c:99: a6:e0:b4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2Jvck67xbQDtW8B3X0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMDhmZTMzYTVmMGJhMGIyODYyNTM1MDViYmZiMjkzMjIw ZjU4MTYwHhcNMjUxMjA1MjMwMTA1WhcNMjUxMjA2MjMwMTA1WjAzMTEwLwYDVQQD EyhiNjNkODcyN2JjOTQ3NWQwNjQ2MjY1MGI0MjdkNDIwYmI4ZjI1OTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j45u0F01iNBUHk+k2RFpqnRdhDj QzsKgx+Dzh7TBY7JxkdaPyI61BkGob3y5JC8ASuLZ0nHLdu4/NKtEAiBhrToKLfV 5SoKn6+D+z+6wKvEPlDRmqnkMLVNCZ/4YM1eFXhD8EBYgFs/3vziltbYCDO6tR+J NVUg8a+aQV6zuAZvYJwszyBrFbl5NNzLS58PcerL9ls+I+TDZKiaoEFYfJS+3drm 2nQHtwUrFTU57xWpZH69Cs9MEtTzVCzd2hh1FLedPj6QcbUuMVIe2tdl//SRSwTV SS+rQ0kWCMR2Xe0yA8RQdpYzPu7iNUpAZ4LBCGECP4zgmxrJq5fq1ch2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY9hye8lHXQZGJlC0J9Qgu48lkEMB8GA1UdIwQY MBaAFM4I/jOl8LoLKGJTUFu/spMiD1gWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDct ZDhjZmU1OTFkZDllLzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDctZDhjZmU1OTFkZDll LzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9tJT2Zk rf9NfprUCVllwtJcCPfA57B50HGok+GzXufVVbD+xtK0XmmRpo8SqcFlbRcw1u5F bhVHzOQvKYHmk120f7NElRo1XjdPqL/y1ckyUpA4OfDMxDSecC8luHqowP2HlDfe xSMCLea3XZ44ZvizahPZnTXqaBf6HTsTPLXwQunSO/nmvZNRIQtwiC/lOVcNHl8k jbcalvbC8SsCpG9iTjRDDUvGDY0HczDN1mqyge0OI7/EVn72dtL11c2T6y6XNwj0 hj9FE91CyCRVGIq1amIgG2ewd/YTAGf27NyEkfx2LX5fgmUOJ8yCa+P5HtKoNZ/d N2UO71yZpuC0/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:53 2025 by rpki-client