This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json) Hash identifier: 2oQz/xpdn1YbqGwj0dxNFxOPknI82FiyrQRiC0j4DGw= Subject key identifier: 5C:E0:AE:48:F3:4D:16:92:45:A5:F4:D2:40:C5:83:BD:C9:4A:B4:96 Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97 Certificate serial: 019B3A21D500B17AEC1E6DA92C345FCB8F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 05:00:54 +0000 Manifest this update: Sat 20 Dec 2025 05:00:54 +0000 Manifest next update: Sun 21 Dec 2025 05:00:54 +0000 Files and hashes: 1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: 3rxYG2Y5iF+jG2S0NdGnfny7LuozM7bFTalh9/Vz83E=) 2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=) 3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=) 4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:d5:00:b1:7a:ec:1e:6d:a9:2c:34:5f:cb:8f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646579561eca5879a747025e5798487b19cd2a97 Validity Not Before: Dec 20 05:00:54 2025 GMT Not After : Dec 21 05:00:54 2025 GMT Subject: CN=5ce0ae48f34d169245a5f4d240c583bdc94ab496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:5e:a5:cc:fa:73:81:73:4c:8a:9a:d6:70: fc:eb:d7:7a:67:08:f8:4b:3e:3c:c3:b1:b4:cf:ce: 8b:5c:8e:49:cc:88:62:13:42:95:c1:5a:f5:18:10: cb:d1:ed:5b:14:10:19:8c:a7:2a:1b:21:a7:3a:33: b4:8d:76:10:20:0f:ec:a7:b9:24:31:e0:7c:92:ea: 1f:a1:90:92:85:6f:ac:f5:95:9a:71:6a:b4:71:f6: cd:b1:3e:bd:3e:79:ba:5a:1b:63:8b:91:89:65:43: 70:e3:81:ec:60:3f:33:7d:d5:89:93:95:27:b5:4c: 5a:fd:0c:ce:4e:3f:a8:a4:64:c4:8e:bd:64:0e:04: 48:2c:54:1b:92:74:b8:61:58:33:9c:62:85:87:4d: 51:35:c8:d4:38:6a:64:ab:66:da:5a:8a:a3:bf:0d: fb:c5:c9:0a:4c:28:e0:01:63:dd:86:63:81:c6:a8: 42:04:0b:cd:d3:3c:04:e1:b5:ab:41:69:96:e1:58: 20:bf:3d:97:74:ac:70:9a:5b:3f:9d:75:05:bf:6c: 9e:69:3d:a8:29:33:ae:fc:59:b9:7b:c7:e8:00:a1: 44:13:69:ff:d3:aa:4e:7b:96:b7:3e:74:37:64:f7: 0f:a1:6c:d5:ff:56:24:59:ec:b2:2b:fd:38:52:29: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E0:AE:48:F3:4D:16:92:45:A5:F4:D2:40:C5:83:BD:C9:4A:B4:96 X509v3 Authority Key Identifier: keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:b8:9c:16:90:98:f5:86:f0:80:8e:a3:00:e3:8d:44:fe:bc: 38:d9:20:81:35:57:dd:37:7e:5b:20:0f:e2:92:de:c0:b0:36: eb:9d:de:75:cd:61:b1:5b:3f:f4:63:c9:00:07:d4:d4:2d:9b: 4a:71:65:62:9c:77:b6:52:1a:48:75:eb:8d:72:b4:74:a7:12: 98:da:84:3d:b8:0e:fe:a2:c3:4f:70:0c:6a:81:34:9f:c9:63: f7:30:85:79:89:f4:d7:2d:9b:8e:68:98:6b:b3:58:03:4a:b4: 5a:b5:7c:9f:89:8e:14:fc:23:8d:c1:df:9d:87:68:0e:49:09: 15:93:d5:5b:9c:be:71:0b:2d:be:cb:92:63:ac:b0:8e:45:51: 61:63:50:e1:2c:4f:ba:f2:e1:23:bb:14:75:c1:4d:57:f8:cd: 1e:1c:82:e0:99:8c:37:df:d4:32:0e:6b:d4:c0:59:8a:97:b4: 99:ae:54:46:1c:d3:fc:7e:9f:99:e6:8b:48:4b:24:89:26:65: b5:0f:51:88:d2:d4:aa:af:ab:8a:c4:61:f5:6e:f2:50:70:7f: e0:54:1f:fd:38:3d:00:ba:c6:43:82:27:c8:58:b0:4e:9b:f2: 3d:7f:92:35:81:8b:45:5a:8c:48:49:14:bd:7e:94:ec:9d:03: 08:bc:f4:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IdUAsXrsHm2pLDRfy4+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj ZDJhOTcwHhcNMjUxMjIwMDUwMDU0WhcNMjUxMjIxMDUwMDU0WjAzMTEwLwYDVQQD Eyg1Y2UwYWU0OGYzNGQxNjkyNDVhNWY0ZDI0MGM1ODNiZGM5NGFiNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ylepcz6c4FzTIqa1nD869d6Zwj4 Sz48w7G0z86LXI5JzIhiE0KVwVr1GBDL0e1bFBAZjKcqGyGnOjO0jXYQIA/sp7kk MeB8kuofoZCShW+s9ZWacWq0cfbNsT69Pnm6Whtji5GJZUNw44HsYD8zfdWJk5Un tUxa/QzOTj+opGTEjr1kDgRILFQbknS4YVgznGKFh01RNcjUOGpkq2baWoqjvw37 xckKTCjgAWPdhmOBxqhCBAvN0zwE4bWrQWmW4Vggvz2XdKxwmls/nXUFv2yeaT2o KTOu/Fm5e8foAKFEE2n/06pOe5a3PnQ3ZPcPoWzV/1YkWeyyK/04Uil6bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzgrkjzTRaSRaX00kDFg73JSrSWMB8GA1UdIwQY MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct NTVjM2QxMjllYzI4LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4 LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbicFpCY 9YbwgI6jAOONRP68ONkggTVX3Td+WyAP4pLewLA2653edc1hsVs/9GPJAAfU1C2b SnFlYpx3tlIaSHXrjXK0dKcSmNqEPbgO/qLDT3AMaoE0n8lj9zCFeYn01y2bjmiY a7NYA0q0WrV8n4mOFPwjjcHfnYdoDkkJFZPVW5y+cQstvsuSY6ywjkVRYWNQ4SxP uvLhI7sUdcFNV/jNHhyC4JmMN9/UMg5r1MBZipe0ma5URhzT/H6fmeaLSEskiSZl tQ9RiNLUqq+risRh9W7yUHB/4FQf/Tg9ALrGQ4InyFiwTpvyPX+SNYGLRVqMSEkU vX6U7J0DCLz0OA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:38:48 2025 by rpki-client