This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json) Hash identifier: woHib345Rk9/IeySMyFlGVBfcwcBByl5QANwGGTe2y4= Subject key identifier: D4:B9:36:44:A3:9A:8B:43:3E:CD:09:39:E9:AE:A3:D0:55:50:B2:28 Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Certificate serial: 019B2C2FACF9E465C97D6640D8B9C10AF49F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft Manifest number: 0738 Signing time: Wed 17 Dec 2025 12:01:20 +0000 Manifest this update: Wed 17 Dec 2025 12:01:20 +0000 Manifest next update: Thu 18 Dec 2025 12:01:20 +0000 Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=) 2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=) 3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: mParVMGYO8ZUa5XmnorFqsnMygwLUv+V8ms44flpK+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:ac:f9:e4:65:c9:7d:66:40:d8:b9:c1:0a:f4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Validity Not Before: Dec 17 12:01:20 2025 GMT Not After : Dec 18 12:01:20 2025 GMT Subject: CN=d4b93644a39a8b433ecd0939e9aea3d05550b228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:ac:e3:65:44:ce:b0:58:d6:39:60:53:a0: da:b1:9a:81:de:b6:8a:09:e4:73:88:11:9e:e4:b4: e7:e6:c4:e9:a8:26:dd:f3:58:ba:b4:40:94:78:39: 16:8e:da:e5:49:86:dd:b5:50:d4:d8:8e:35:8d:43: 96:6d:7e:53:a0:1f:be:92:93:07:84:2f:16:cb:82: 21:f5:07:d2:10:50:46:aa:13:7a:e9:b1:3d:1a:12: 98:5b:26:a4:e6:c9:bd:61:d4:4e:8a:e0:6a:ec:6a: 94:e8:0e:35:64:62:b2:43:f0:b3:61:2e:75:ae:f8: 5b:52:41:77:c9:0e:72:06:68:39:80:eb:45:10:0a: 4f:8b:06:71:59:71:ae:8d:a5:29:5e:e8:36:a3:4b: 08:87:67:f6:96:e2:d3:d9:30:62:f2:ff:e8:51:cf: 78:06:97:9c:df:06:52:20:20:cd:3b:7a:46:75:a6: d3:a1:34:54:04:02:e6:4d:97:55:03:37:7d:0f:d1: 7d:3e:b3:86:23:80:76:22:0a:d0:da:9d:7b:9e:c1: fe:97:5d:f2:af:62:03:7d:a9:e2:22:38:08:ec:49: cb:74:16:66:93:61:cd:10:42:2d:33:67:60:1d:99: 24:f1:a1:f6:a9:18:b5:d6:d0:1f:4f:ab:16:38:5b: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:36:44:A3:9A:8B:43:3E:CD:09:39:E9:AE:A3:D0:55:50:B2:28 X509v3 Authority Key Identifier: keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:cb:04:74:a4:72:ac:34:c6:4b:d5:a3:32:dc:2f:f3:f4:75: c7:6a:94:92:b0:0f:cc:d6:62:a1:42:ec:24:f8:c3:9d:2e:db: 0b:73:08:20:a9:d6:01:73:93:9c:18:04:5d:74:95:5a:20:29: 2c:09:dc:47:66:dd:03:af:05:7d:2d:30:a1:24:51:d8:94:5e: dc:52:13:7e:85:0b:5e:81:ae:c8:86:64:b1:b5:e8:05:75:a9: 98:e1:16:1e:39:7a:e3:dd:ef:0c:a9:04:fa:dd:f9:44:49:fc: e7:3c:77:a0:3d:0a:92:f4:b3:21:df:fe:71:79:f6:06:68:52: 51:1d:05:96:66:14:1c:48:03:5c:8c:6d:ef:30:18:8a:e2:40: 2d:3e:49:b3:9c:9f:84:21:e7:7b:bb:36:bb:ff:bc:b3:3a:d5: cb:c9:e0:e5:2d:b4:15:0d:7c:62:8e:ce:2b:1f:b6:95:67:65: 87:36:44:ba:0c:9e:ef:bf:31:99:d8:1c:61:f2:9b:3c:bc:4f: 3a:a8:5c:e3:24:e7:09:ac:33:7f:c1:5b:76:d4:ef:af:fd:e8: 66:a2:63:12:4a:f5:df:f4:dc:6d:88:16:f7:1b:b9:eb:a0:bd: a0:60:f1:44:5f:f9:04:29:e2:55:7b:10:17:0e:e4:d7:e1:74: 64:aa:3b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6z55GXJfWZA2LnBCvSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm NDI3NzUwHhcNMjUxMjE3MTIwMTIwWhcNMjUxMjE4MTIwMTIwWjAzMTEwLwYDVQQD EyhkNGI5MzY0NGEzOWE4YjQzM2VjZDA5MzllOWFlYTNkMDU1NTBiMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV+s42VEzrBY1jlgU6DasZqB3raK CeRziBGe5LTn5sTpqCbd81i6tECUeDkWjtrlSYbdtVDU2I41jUOWbX5ToB++kpMH hC8Wy4Ih9QfSEFBGqhN66bE9GhKYWyak5sm9YdROiuBq7GqU6A41ZGKyQ/CzYS51 rvhbUkF3yQ5yBmg5gOtFEApPiwZxWXGujaUpXug2o0sIh2f2luLT2TBi8v/oUc94 Bpec3wZSICDNO3pGdabToTRUBALmTZdVAzd9D9F9PrOGI4B2IgrQ2p17nsH+l13y r2IDfaniIjgI7EnLdBZmk2HNEEItM2dgHZkk8aH2qRi11tAfT6sWOFsDSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS5NkSjmotDPs0JOemuo9BVULIoMB8GA1UdIwQY MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt YTRkMzU5ZDkxMjUxLzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA48sEdKRy rDTGS9WjMtwv8/R1x2qUkrAPzNZioULsJPjDnS7bC3MIIKnWAXOTnBgEXXSVWiAp LAncR2bdA68FfS0woSRR2JRe3FITfoULXoGuyIZksbXoBXWpmOEWHjl6493vDKkE +t35REn85zx3oD0KkvSzId/+cXn2BmhSUR0FlmYUHEgDXIxt7zAYiuJALT5Js5yf hCHne7s2u/+8szrVy8ng5S20FQ18Yo7OKx+2lWdlhzZEugye778xmdgcYfKbPLxP Oqhc4yTnCawzf8FbdtTvr/3oZqJjEkr13/TcbYgW9xu566C9oGDxRF/5BCniVXsQ Fw7k1+F0ZKo7tQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:42 2025 by rpki-client