This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json) Hash identifier: LMsXKbEznubzIZ8dKU0T76KoGXv/cB9/4kTgJHgL4NI= Subject key identifier: 05:40:8B:73:A1:B2:D1:1C:EA:1A:95:8B:61:9B:5A:C6:81:7A:0F:22 Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16 Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816 Certificate serial: 019B2E8B7DB0D5C628A80A9C3EAFB7CAA5B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft Manifest number: 0CF5 Signing time: Wed 17 Dec 2025 23:00:52 +0000 Manifest this update: Wed 17 Dec 2025 23:00:52 +0000 Manifest next update: Thu 18 Dec 2025 23:00:52 +0000 Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=) 2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: bYAymjSYhA3ab92ZgESDt1iJPD5am9Jxx1U3Q6ob32U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:7d:b0:d5:c6:28:a8:0a:9c:3e:af:b7:ca:a5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816 Validity Not Before: Dec 17 23:00:52 2025 GMT Not After : Dec 18 23:00:52 2025 GMT Subject: CN=05408b73a1b2d11cea1a958b619b5ac6817a0f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:54:9b:e9:91:b5:49:be:d8:34:0b:7f:65: c7:7e:66:e7:5a:1e:6b:2a:d7:de:e1:cb:7d:57:aa: 5b:f8:79:ce:b3:d9:24:d1:5d:43:20:80:98:67:d8: da:7c:5d:17:c4:1b:70:65:15:64:87:c0:70:bb:82: 17:2b:01:05:a3:01:f6:d7:14:7a:ef:64:ca:07:a0: dc:e4:fe:75:c4:1e:fd:6b:80:9f:c8:43:a1:01:5c: e3:67:09:5e:21:87:7e:68:81:8a:a2:12:4d:07:67: 70:f0:b0:64:80:08:09:d7:24:b3:f9:2b:eb:9a:23: 2f:f2:62:28:8d:3b:69:18:2a:f4:03:29:2f:93:dc: fd:e9:b2:ef:2c:dc:d5:1c:c7:d4:07:ea:03:85:80: 93:1f:f7:7e:dc:0a:a8:91:2c:68:d4:d3:e9:e0:f5: 63:4c:da:bd:0e:ef:89:86:2d:a8:61:a1:eb:88:b2: bd:e2:7f:a7:6f:5f:af:10:ab:5e:39:7b:33:d7:0a: f3:e3:3a:54:7b:53:d0:20:b6:f7:54:2a:c9:29:c4: 90:bc:46:29:42:e5:57:9d:b7:41:27:90:ae:27:f3: de:5a:6b:98:1b:e1:b9:fb:fd:21:07:22:21:e0:8a: 67:00:c9:9e:7d:3c:4b:67:66:a4:9b:45:35:d9:07: 78:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:8B:73:A1:B2:D1:1C:EA:1A:95:8B:61:9B:5A:C6:81:7A:0F:22 X509v3 Authority Key Identifier: keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c4:ee:e1:80:69:7b:e4:84:5d:71:f9:8d:90:c2:f2:3c:54: e4:de:36:09:2a:b6:f4:b4:ae:72:8c:05:be:2a:96:6a:bc:0f: 67:e0:81:c0:6c:46:c0:f2:ee:28:66:15:b7:bd:bf:d0:48:2d: b2:c5:cf:8d:cd:dd:fc:77:60:09:da:ed:4b:e0:f8:ae:d8:82: b1:28:2c:e9:ea:b4:43:1c:9f:60:1e:4b:98:01:d1:72:cc:e8: bd:1e:dd:78:78:c3:82:f1:52:c9:2c:de:ff:89:75:8a:fc:9b: 96:34:31:4f:34:af:a3:af:76:4e:0e:e2:af:a9:aa:c5:d8:29: 95:64:16:dd:33:55:13:4f:cc:c7:97:0d:cd:13:ca:d3:69:af: c6:e2:ff:77:cc:6c:a4:50:65:c9:19:89:e1:96:11:94:be:29: 14:da:23:c5:6b:59:56:d5:ad:96:82:87:cb:46:c1:d4:dc:c3: 2f:a3:80:e0:34:b3:62:6d:1b:bc:02:71:1d:d2:67:96:8b:73: ef:ca:12:b0:ab:e9:bd:0e:39:ae:4a:19:8f:ca:a7:fc:ee:e8: 92:4a:17:22:2c:63:6a:6d:7b:86:d9:ba:19:6e:b5:62:e3:fc: 24:f5:dd:f5:42:82:7e:63:23:72:d9:de:8a:b5:78:a2:82:69: cd:7b:ce:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui32w1cYoqAqcPq+3yqW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMDhmZTMzYTVmMGJhMGIyODYyNTM1MDViYmZiMjkzMjIw ZjU4MTYwHhcNMjUxMjE3MjMwMDUyWhcNMjUxMjE4MjMwMDUyWjAzMTEwLwYDVQQD EygwNTQwOGI3M2ExYjJkMTFjZWExYTk1OGI2MTliNWFjNjgxN2EwZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy5Um+mRtUm+2DQLf2XHfmbnWh5r Ktfe4ct9V6pb+HnOs9kk0V1DIICYZ9jafF0XxBtwZRVkh8Bwu4IXKwEFowH21xR6 72TKB6Dc5P51xB79a4CfyEOhAVzjZwleIYd+aIGKohJNB2dw8LBkgAgJ1ySz+Svr miMv8mIojTtpGCr0Aykvk9z96bLvLNzVHMfUB+oDhYCTH/d+3AqokSxo1NPp4PVj TNq9Du+Jhi2oYaHriLK94n+nb1+vEKteOXsz1wrz4zpUe1PQILb3VCrJKcSQvEYp QuVXnbdBJ5CuJ/PeWmuYG+G5+/0hByIh4IpnAMmefTxLZ2akm0U12Qd4iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVAi3OhstEc6hqVi2GbWsaBeg8iMB8GA1UdIwQY MBaAFM4I/jOl8LoLKGJTUFu/spMiD1gWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDct ZDhjZmU1OTFkZDllLzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDctZDhjZmU1OTFkZDll LzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMTu4YBp e+SEXXH5jZDC8jxU5N42CSq29LSucowFviqWarwPZ+CBwGxGwPLuKGYVt72/0Egt ssXPjc3d/HdgCdrtS+D4rtiCsSgs6eq0QxyfYB5LmAHRcszovR7deHjDgvFSySze /4l1ivybljQxTzSvo692Tg7ir6mqxdgplWQW3TNVE0/Mx5cNzRPK02mvxuL/d8xs pFBlyRmJ4ZYRlL4pFNojxWtZVtWtloKHy0bB1NzDL6OA4DSzYm0bvAJxHdJnlotz 78oSsKvpvQ45rkoZj8qn/O7okkoXIixjam17htm6GW61YuP8JPXd9UKCfmMjctne irV4ooJpzXvO1Q== -----END CERTIFICATE-----Generated at Thu Dec 18 05:43:26 2025 by rpki-client