This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json) Hash identifier: CSO0eR7FitoN1kK08+R7txZm8LfUUUaon7NyPUmHQdY= Subject key identifier: 74:73:50:67:A4:F4:EA:A9:99:87:5C:51:41:17:45:F3:91:CB:C7:29 Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32 Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32 Certificate serial: 019B416D926D8FB9E48703B6C9DCA1485277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 15:00:58 +0000 Manifest this update: Sun 21 Dec 2025 15:00:58 +0000 Manifest next update: Mon 22 Dec 2025 15:00:58 +0000 Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: WpuCo0osLzv4l3WYHpFg0HAj52RH2a7wgx2DnV5Vp9k=) 2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:92:6d:8f:b9:e4:87:03:b6:c9:dc:a1:48:52:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32 Validity Not Before: Dec 21 15:00:58 2025 GMT Not After : Dec 22 15:00:58 2025 GMT Subject: CN=74735067a4f4eaa999875c51411745f391cbc729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:8e:eb:67:f1:e4:67:28:9e:17:a2:2e:e1: ae:d8:56:52:d5:fa:87:80:16:41:91:d4:d5:8d:01: 1e:80:1c:ba:aa:84:00:1a:a9:c2:f0:1b:92:be:28: 38:a9:6e:4a:53:f8:62:29:a9:c4:01:3c:ab:4f:ea: 96:ea:ca:0b:cf:7e:23:23:62:0c:cf:15:5d:a5:54: c8:b3:58:7e:9a:f2:05:c5:28:40:03:cb:51:f5:7f: 31:e4:1b:d3:92:dc:1c:1a:01:06:0b:c0:cd:6f:41: 62:43:53:02:34:fc:ef:46:e7:5f:4f:b5:9c:b5:cf: f7:be:42:22:ad:3f:bd:8d:96:2c:37:d6:ff:9a:cd: ee:01:7d:2c:93:fa:fc:3e:7e:3d:de:a2:c5:d5:a3: d0:7b:6d:e4:d8:b0:c3:9b:a5:e0:ac:fb:1e:af:9a: 70:45:06:35:fb:62:89:c1:05:22:1d:66:15:12:36: ae:a0:f3:dc:74:e8:44:07:d2:c0:8e:1c:9b:c4:92: a1:8b:ac:dc:a3:f1:2c:19:59:e1:56:60:76:38:74: 96:08:76:63:35:4e:b8:0c:d7:98:77:e4:ed:23:06: 1f:ea:59:0d:3e:8a:77:31:b8:69:84:ab:62:3e:a9: af:fc:f2:7f:e4:08:81:ef:6f:ef:46:ea:df:3f:3a: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:73:50:67:A4:F4:EA:A9:99:87:5C:51:41:17:45:F3:91:CB:C7:29 X509v3 Authority Key Identifier: keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:43:5c:fd:09:7f:5b:0d:a0:62:43:a4:6c:e3:8c:c4:b4:a6: c7:65:4e:60:13:4a:38:b6:fd:fc:a5:63:a4:b1:08:06:45:52: 64:7a:fc:6e:70:9b:b9:92:4b:b6:79:6b:1d:36:0d:cf:fd:5a: 37:1d:5a:b6:57:75:cf:6b:ca:52:5b:9e:3a:f4:3c:b9:24:52: 43:23:ce:ef:75:b2:d2:31:14:22:00:be:c3:25:f1:97:6e:ca: b5:f1:e6:5f:b8:6a:6c:18:97:25:ab:e0:bb:50:3f:6d:97:42: 38:b7:74:47:b5:48:73:18:44:89:e5:a6:f3:da:d1:ea:92:2e: 8e:62:26:d9:39:98:f8:bd:69:bc:9f:0d:dc:fc:e7:e5:ee:ee: 97:ba:20:fe:32:23:73:44:63:43:05:91:64:32:22:10:04:ba: 77:be:ae:29:be:18:7c:53:b7:4f:e7:35:43:b1:c4:98:5b:13: b8:dc:0d:b8:b3:34:ba:6a:f1:a7:7f:60:17:c8:3e:52:29:46: 87:31:13:ed:21:56:b0:df:d9:7b:7b:8c:47:1f:71:71:4a:f8: 06:de:65:58:34:be:9a:03:a2:b3:40:81:20:f3:7b:bf:80:48: c8:de:ad:fd:b2:fc:67:cc:8b:1c:3f:a6:94:83:d9:7b:f8:d0: b5:f0:74:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbZJtj7nkhwO2ydyhSFJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MWU3MTc0YmY5ZTllYTFiNjRhOTJiYTY1ZmZjZjFlOTMx Y2NlMzIwHhcNMjUxMjIxMTUwMDU4WhcNMjUxMjIyMTUwMDU4WjAzMTEwLwYDVQQD Eyg3NDczNTA2N2E0ZjRlYWE5OTk4NzVjNTE0MTE3NDVmMzkxY2JjNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWGO62fx5GconheiLuGu2FZS1fqH gBZBkdTVjQEegBy6qoQAGqnC8BuSvig4qW5KU/hiKanEATyrT+qW6soLz34jI2IM zxVdpVTIs1h+mvIFxShAA8tR9X8x5BvTktwcGgEGC8DNb0FiQ1MCNPzvRudfT7Wc tc/3vkIirT+9jZYsN9b/ms3uAX0sk/r8Pn493qLF1aPQe23k2LDDm6XgrPser5pw RQY1+2KJwQUiHWYVEjauoPPcdOhEB9LAjhybxJKhi6zco/EsGVnhVmB2OHSWCHZj NU64DNeYd+TtIwYf6lkNPop3MbhphKtiPqmv/PJ/5AiB72/vRurfPzq2ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRzUGek9OqpmYdcUUEXRfORy8cpMB8GA1UdIwQY MBaAFGYecXS/np6htkqSumX/zx6THM4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAt NmJkODQ0ZWE4NmM3LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAtNmJkODQ0ZWE4NmM3 LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcENc/Ql/ Ww2gYkOkbOOMxLSmx2VOYBNKOLb9/KVjpLEIBkVSZHr8bnCbuZJLtnlrHTYNz/1a Nx1atld1z2vKUlueOvQ8uSRSQyPO73Wy0jEUIgC+wyXxl27KtfHmX7hqbBiXJavg u1A/bZdCOLd0R7VIcxhEieWm89rR6pIujmIm2TmY+L1pvJ8N3Pzn5e7ul7og/jIj c0RjQwWRZDIiEAS6d76uKb4YfFO3T+c1Q7HEmFsTuNwNuLM0umrxp39gF8g+UilG hzET7SFWsN/Ze3uMRx9xcUr4Bt5lWDS+mgOis0CBIPN7v4BIyN6t/bL8Z8yLHD+m lIPZe/jQtfB0pA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:01:52 2025 by rpki-client