This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json) Hash identifier: ZG/TFVelHChexzmF2CM7jgQ/HUglIXxd5zYXrTasiDg= Subject key identifier: E0:9D:49:4D:4E:4D:93:CB:E8:A2:33:31:75:96:86:5B:D5:9F:6D:96 Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Certificate serial: 019B3D22CD299CFDEDA6D8E8DA0669BA6251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft Manifest number: 05E7 Signing time: Sat 20 Dec 2025 19:00:49 +0000 Manifest this update: Sat 20 Dec 2025 19:00:49 +0000 Manifest next update: Sun 21 Dec 2025 19:00:49 +0000 Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: IO/xqfbGAVlRv1jMqM8GEjhpnGqZlc5rNxbCqia/4OE=) 2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=) 3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=) 4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:cd:29:9c:fd:ed:a6:d8:e8:da:06:69:ba:62:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Validity Not Before: Dec 20 19:00:49 2025 GMT Not After : Dec 21 19:00:49 2025 GMT Subject: CN=e09d494d4e4d93cbe8a233317596865bd59f6d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:7c:c0:46:6e:72:d0:e7:8b:f0:09:00:38: 90:4a:90:2b:b1:7d:a2:46:40:33:f9:86:d3:3e:83: e1:50:d6:5d:52:ca:ce:d6:35:b2:6f:2f:1f:98:61: 5c:ee:e0:fd:05:6a:13:10:30:a9:9c:d3:ba:5f:a7: 6e:c0:ee:b0:60:29:8e:0b:d0:8d:2d:ce:5d:ca:a6: e2:d9:6e:ff:54:4c:a6:65:e1:b0:e8:c5:5c:51:3d: 2b:9e:a5:eb:de:55:98:81:02:62:fa:81:1b:de:b2: 5c:8b:e7:93:21:17:10:26:29:71:a6:0a:58:b8:09: e1:22:8e:4d:43:49:88:e9:7d:e4:48:74:fd:b2:8c: b3:15:28:3e:0d:a1:d0:6c:b7:15:9c:71:0d:4b:76: 12:f1:e6:1f:ed:47:61:62:d7:b1:03:28:97:4e:e4: 3b:73:19:2d:f2:e6:a0:cf:e9:e7:2b:fe:e6:c0:28: bb:49:44:0e:37:31:a1:3a:69:95:f5:47:9a:db:4e: cb:a1:55:8d:b6:d1:77:93:8a:62:1e:9a:63:d1:29: 00:ed:73:8c:d4:12:92:cc:39:cc:72:6e:ee:f5:b4: 75:e5:81:3b:17:05:92:6f:36:bb:9b:f5:21:9c:87: 8f:a8:46:75:7c:a7:d7:b0:04:47:d9:38:64:93:e3: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9D:49:4D:4E:4D:93:CB:E8:A2:33:31:75:96:86:5B:D5:9F:6D:96 X509v3 Authority Key Identifier: keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7e:42:9e:a0:1e:2a:9b:af:c7:22:14:dd:90:9d:c7:0a:31: 20:36:89:66:90:1c:dd:3a:17:21:fa:61:17:f0:0d:78:a3:a3: a3:cf:7e:65:c7:e6:8a:14:20:1d:f0:cb:0d:22:f1:c6:3d:0d: 32:97:72:30:55:11:cb:e7:ba:a0:ee:f7:c2:0b:d5:1b:87:96: 63:b5:a8:4a:b0:e4:bb:0c:ca:a5:08:1a:bc:74:e0:92:ec:c3: 8f:80:cc:ba:3d:fb:1c:73:69:7c:f2:13:3a:82:20:3f:bb:77: 9c:07:86:6d:e7:b4:15:c2:76:a9:49:73:ff:23:ce:73:9b:cf: 1c:b1:23:16:c6:89:7d:3e:48:c0:42:0f:1c:38:d3:67:e6:a2: 9c:b3:13:d6:0c:d5:cd:24:d8:9c:d8:28:f2:c3:c7:54:24:05: b3:ec:51:49:7e:17:1f:14:e2:28:2f:d4:e8:1e:d6:e2:82:49: 3f:0f:ab:de:c9:b0:fa:ae:1e:7e:3b:44:ef:78:90:6a:ed:38: 23:76:cb:6e:22:07:6d:d9:21:1a:51:87:33:8f:41:d3:a2:47: 10:f1:eb:df:9b:22:e7:6e:67:d8:e3:d2:fb:21:05:9f:9a:c4: 05:eb:ef:aa:ab:dc:40:e0:dc:bd:b0:e9:3f:fb:74:9e:6d:84: 22:5f:de:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Is0pnP3tptjo2gZpumJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh NmFiOGQwHhcNMjUxMjIwMTkwMDQ5WhcNMjUxMjIxMTkwMDQ5WjAzMTEwLwYDVQQD EyhlMDlkNDk0ZDRlNGQ5M2NiZThhMjMzMzE3NTk2ODY1YmQ1OWY2ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcF8wEZuctDni/AJADiQSpArsX2i RkAz+YbTPoPhUNZdUsrO1jWyby8fmGFc7uD9BWoTEDCpnNO6X6duwO6wYCmOC9CN Lc5dyqbi2W7/VEymZeGw6MVcUT0rnqXr3lWYgQJi+oEb3rJci+eTIRcQJilxpgpY uAnhIo5NQ0mI6X3kSHT9soyzFSg+DaHQbLcVnHENS3YS8eYf7UdhYtexAyiXTuQ7 cxkt8uagz+nnK/7mwCi7SUQONzGhOmmV9Uea207LoVWNttF3k4piHppj0SkA7XOM 1BKSzDnMcm7u9bR15YE7FwWSbza7m/UhnIePqEZ1fKfXsARH2Thkk+NnYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCdSU1OTZPL6KIzMXWWhlvVn22WMB8GA1UdIwQY MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHX5CnqAe KpuvxyIU3ZCdxwoxIDaJZpAc3ToXIfphF/ANeKOjo89+ZcfmihQgHfDLDSLxxj0N MpdyMFURy+e6oO73wgvVG4eWY7WoSrDkuwzKpQgavHTgkuzDj4DMuj37HHNpfPIT OoIgP7t3nAeGbee0FcJ2qUlz/yPOc5vPHLEjFsaJfT5IwEIPHDjTZ+ainLMT1gzV zSTYnNgo8sPHVCQFs+xRSX4XHxTiKC/U6B7W4oJJPw+r3smw+q4efjtE73iQau04 I3bLbiIHbdkhGlGHM49B06JHEPHr35si525n2OPS+yEFn5rEBevvqqvcQODcvbDp P/t0nm2EIl/eaA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:59 2025 by rpki-client