This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json) Hash identifier: kVUnQjGOfokNBh9pVpL/0nE7+ZA1APHcxyqhgsYm71U= Subject key identifier: 4C:36:C9:C5:0F:51:87:53:EA:F4:2F:EF:58:59:BA:36:68:4E:7C:C6 Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97 Certificate serial: 019B38335A9721025B5DAFE80669F071E404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 20:00:48 +0000 Manifest this update: Fri 19 Dec 2025 20:00:48 +0000 Manifest next update: Sat 20 Dec 2025 20:00:48 +0000 Files and hashes: 1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: tQoNrFwBOkBmfuoUuQuQvvQwPUeU/0HyiXcrVlIeB5A=) 2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=) 3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=) 4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:5a:97:21:02:5b:5d:af:e8:06:69:f0:71:e4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646579561eca5879a747025e5798487b19cd2a97 Validity Not Before: Dec 19 20:00:48 2025 GMT Not After : Dec 20 20:00:48 2025 GMT Subject: CN=4c36c9c50f518753eaf42fef5859ba36684e7cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:1e:da:41:52:4f:f9:07:80:2a:6f:f6:9a: 0f:54:89:d1:6d:a6:14:d6:a2:3e:55:d0:9a:fc:5f: cb:7a:cc:99:7d:2f:03:10:30:81:d0:ea:db:d9:e6: 87:33:2d:27:8a:c0:6d:93:2d:c4:42:5b:c6:85:ed: 68:ca:e9:10:3d:8d:81:ec:d7:77:24:4f:70:f1:46: f4:46:1d:e4:c4:39:58:6c:ce:1a:b1:86:ce:d5:b1: a2:7c:b8:cd:cd:a9:3e:ca:cf:f4:e2:b0:16:89:a9: 57:e3:5f:02:14:2d:6a:40:de:ca:2f:37:f2:53:65: 49:21:71:8b:1a:1a:c7:04:90:ca:18:55:40:4f:ee: 7c:77:34:1e:96:e6:3a:84:f6:0e:1e:24:8b:1c:81: e3:4c:94:4d:a1:fe:50:13:53:fd:56:e7:d0:a2:36: 04:88:ad:35:a6:48:9f:2b:64:2a:92:2d:b7:19:6d: da:c7:f1:7b:8e:28:70:d0:aa:73:11:69:d9:dc:7b: 73:10:42:b7:da:29:0c:c1:a0:bc:59:66:0b:d9:ba: e4:6a:8f:28:d6:69:1c:b3:3a:23:15:36:fc:2e:ca: ba:5e:00:05:18:2e:6b:7f:e6:8c:43:48:13:af:d4: 92:9d:7e:8f:73:93:5f:e5:2c:98:d0:25:2d:cb:e1: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:36:C9:C5:0F:51:87:53:EA:F4:2F:EF:58:59:BA:36:68:4E:7C:C6 X509v3 Authority Key Identifier: keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2f:50:a2:94:8d:e7:a7:bb:ac:5f:6f:98:80:3f:db:d7:3d: 83:4a:3b:89:b1:44:9d:b8:e8:44:b7:df:a9:e9:61:b4:96:75: 5d:3e:1d:cc:b0:16:b5:70:21:de:8e:de:41:0e:bd:05:d8:bf: 73:b5:c7:df:47:42:c6:1e:9c:37:6a:82:16:f0:4e:9b:71:7c: 26:22:b9:04:96:d2:be:33:42:52:2d:ea:cf:8f:cd:e6:bb:e4: 81:e6:68:e8:84:87:8d:76:d8:49:29:ce:2d:ad:14:f8:b6:97: 1e:e1:86:5f:b1:65:d0:45:aa:11:15:d8:4d:c4:41:ac:37:f3: 59:0f:14:b3:51:1a:09:2b:d6:ff:2c:41:b1:35:c4:0a:ef:51: 92:e8:77:1e:84:b1:ec:c4:d3:a4:e7:9c:37:2e:5e:95:0f:3f: c8:c7:2a:74:7c:0a:16:62:72:5c:ff:b3:77:ea:af:2c:42:87: 02:18:1d:52:31:82:14:57:97:f2:4d:bc:d9:58:c6:7a:e4:01: f7:45:eb:7c:57:d7:d1:e9:11:ee:dd:58:39:ce:0e:67:8e:6d: 15:e5:4d:0d:43:60:f8:b4:c6:dc:c7:c0:c3:8a:94:35:ca:4c: 14:4a:3a:31:8b:8c:00:75:ff:4d:36:0a:c7:91:03:4a:f4:53: b2:7d:2f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M1qXIQJbXa/oBmnwceQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj ZDJhOTcwHhcNMjUxMjE5MjAwMDQ4WhcNMjUxMjIwMjAwMDQ4WjAzMTEwLwYDVQQD Eyg0YzM2YzljNTBmNTE4NzUzZWFmNDJmZWY1ODU5YmEzNjY4NGU3Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKge2kFST/kHgCpv9poPVInRbaYU 1qI+VdCa/F/LesyZfS8DEDCB0Orb2eaHMy0nisBtky3EQlvGhe1oyukQPY2B7Nd3 JE9w8Ub0Rh3kxDlYbM4asYbO1bGifLjNzak+ys/04rAWialX418CFC1qQN7KLzfy U2VJIXGLGhrHBJDKGFVAT+58dzQeluY6hPYOHiSLHIHjTJRNof5QE1P9VufQojYE iK01pkifK2Qqki23GW3ax/F7jihw0KpzEWnZ3HtzEEK32ikMwaC8WWYL2brkao8o 1mkcszojFTb8Lsq6XgAFGC5rf+aMQ0gTr9SSnX6Pc5Nf5SyY0CUty+HjZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw2ycUPUYdT6vQv71hZujZoTnzGMB8GA1UdIwQY MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct NTVjM2QxMjllYzI4LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4 LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS9QopSN 56e7rF9vmIA/29c9g0o7ibFEnbjoRLffqelhtJZ1XT4dzLAWtXAh3o7eQQ69Bdi/ c7XH30dCxh6cN2qCFvBOm3F8JiK5BJbSvjNCUi3qz4/N5rvkgeZo6ISHjXbYSSnO La0U+LaXHuGGX7Fl0EWqERXYTcRBrDfzWQ8Us1EaCSvW/yxBsTXECu9Rkuh3HoSx 7MTTpOecNy5elQ8/yMcqdHwKFmJyXP+zd+qvLEKHAhgdUjGCFFeX8k282VjGeuQB 90XrfFfX0ekR7t1YOc4OZ45tFeVNDUNg+LTG3MfAw4qUNcpMFEo6MYuMAHX/TTYK x5EDSvRTsn0vHg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:42 2025 by rpki-client