This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json) Hash identifier: IpGH65utFqnxDVurxFhtHgo1OLwkTrbO0VX8bb6NCuI= Subject key identifier: 13:23:66:1A:D6:8E:DB:61:0D:B9:90:7B:CB:D3:1F:F7:BE:26:06:DB Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7 Certificate serial: 019B40C8EF18DDB5A2AC62DEF0E39CAD139D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft Manifest number: 0555 Signing time: Sun 21 Dec 2025 12:01:08 +0000 Manifest this update: Sun 21 Dec 2025 12:01:08 +0000 Manifest next update: Mon 22 Dec 2025 12:01:08 +0000 Files and hashes: 1: SYPIWFwWfIXYmXxn1AH13wYO028.roa (hash: QWvqjb5YHZY9I2Hyectp6IE4/NuwBT9jZBm7xDi/oyo=) 2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=) 3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=) 4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: o/9xKQ8DvvxDKKgYyL/xF5eJfuuOvAD8R9U0Ie1aGOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ef:18:dd:b5:a2:ac:62:de:f0:e3:9c:ad:13:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7 Validity Not Before: Dec 21 12:01:08 2025 GMT Not After : Dec 22 12:01:08 2025 GMT Subject: CN=1323661ad68edb610db9907bcbd31ff7be2606db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:4a:4c:54:bb:ef:91:44:fd:eb:55:f1:2d: 04:81:13:c1:f5:40:d8:c2:d3:05:79:7f:04:fa:e2: f9:75:e4:3e:b4:c9:10:2b:17:0d:bc:63:a3:96:69: ff:3a:ae:07:cc:c4:d7:4a:c9:18:a1:82:cc:a3:1b: b8:60:9e:65:16:07:92:44:8a:56:f1:43:0d:6b:80: 6c:c8:c4:ff:8a:d2:fc:05:7e:57:20:3c:b6:13:73: 31:cc:41:32:c1:2c:53:e0:57:7a:8a:3e:a2:07:c5: c4:c8:a1:b9:97:a5:dc:35:ff:cb:92:41:bc:bd:9b: d5:c7:04:f6:84:b3:6b:6c:b3:2b:2d:98:57:c7:cf: 5a:9c:ae:fa:f5:4a:db:dd:50:4b:75:51:11:4c:43: c1:92:cf:02:59:d8:a7:22:d2:0e:67:a2:70:74:56: 17:ce:ca:91:d2:dd:9a:45:1e:5b:87:47:6f:c0:c9: 82:1d:3c:19:a0:f3:f5:21:5c:0e:dc:5b:3b:c8:ce: 21:bb:6a:a4:a3:75:5b:a5:be:37:5e:35:d8:f3:4d: 3b:e9:7b:d3:a6:01:d4:b4:ff:ea:f5:4a:46:84:0c: 83:15:bf:51:cd:25:b0:29:05:12:cb:db:21:7d:56: ac:21:81:dd:76:57:fb:5f:0f:37:b7:86:a2:f8:80: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:23:66:1A:D6:8E:DB:61:0D:B9:90:7B:CB:D3:1F:F7:BE:26:06:DB X509v3 Authority Key Identifier: keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:24:9f:48:73:9c:f0:e0:53:62:72:9e:a4:1c:30:59:f7:1e: 84:3d:e3:bd:1a:6e:65:d1:91:d7:14:36:bc:9b:00:ed:d3:28: ac:a7:66:e0:f1:db:d7:69:97:df:77:fb:4c:27:5e:13:98:9c: cc:4e:15:00:34:b9:d4:a5:22:98:72:d8:00:63:f7:2c:39:e4: 16:ab:a0:ab:8f:5b:a6:64:b1:5c:de:b3:7b:ee:c1:8d:50:17: 9d:c7:79:92:dd:40:bb:be:0f:68:c1:1e:df:aa:eb:2f:bc:83: d5:db:bf:68:e1:95:4a:89:a6:9a:e3:cd:ee:07:c0:c9:5a:78: 3d:75:71:6a:67:55:fb:f5:59:18:dc:17:6f:96:e6:01:28:ae: 71:03:54:ed:cb:49:af:22:94:63:aa:24:f3:f7:87:49:a4:7d: 49:6d:9f:5d:25:63:e2:76:97:26:2a:7a:2b:49:7c:e5:2d:8d: 34:09:f4:81:c6:4c:65:f3:28:21:5e:d0:26:f8:8c:f6:75:fe: f4:d5:fe:27:30:1d:ae:3a:86:0e:51:8a:2b:4b:38:71:77:63: 9d:f3:24:f1:c8:6e:f7:58:6b:6c:32:42:e3:db:2c:f9:06:08: 07:90:3d:c8:da:5c:c0:00:1d:2b:8b:4e:d2:9a:81:00:51:10: 67:4e:da:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyO8Y3bWirGLe8OOcrROdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTgzMzI2MTY5NzY1MmMzNTU0N2U5OGZjMDVhN2UyMjk0 ZWRiYzcwHhcNMjUxMjIxMTIwMTA4WhcNMjUxMjIyMTIwMTA4WjAzMTEwLwYDVQQD EygxMzIzNjYxYWQ2OGVkYjYxMGRiOTkwN2JjYmQzMWZmN2JlMjYwNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw1KTFS775FE/etV8S0EgRPB9UDY wtMFeX8E+uL5deQ+tMkQKxcNvGOjlmn/Oq4HzMTXSskYoYLMoxu4YJ5lFgeSRIpW 8UMNa4BsyMT/itL8BX5XIDy2E3MxzEEywSxT4Fd6ij6iB8XEyKG5l6XcNf/LkkG8 vZvVxwT2hLNrbLMrLZhXx89anK769Urb3VBLdVERTEPBks8CWdinItIOZ6JwdFYX zsqR0t2aRR5bh0dvwMmCHTwZoPP1IVwO3Fs7yM4hu2qko3Vbpb43XjXY80076XvT pgHUtP/q9UpGhAyDFb9RzSWwKQUSy9shfVasIYHddlf7Xw83t4ai+ICVnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMjZhrWjtthDbmQe8vTH/e+JgbbMB8GA1UdIwQY MBaAFM+YMyYWl2UsNVR+mPwFp+IpTtvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMt YWU0MDFhMzdjMDQ0LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMtYWU0MDFhMzdjMDQ0 LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCSfSHOc 8OBTYnKepBwwWfcehD3jvRpuZdGR1xQ2vJsA7dMorKdm4PHb12mX33f7TCdeE5ic zE4VADS51KUimHLYAGP3LDnkFqugq49bpmSxXN6ze+7BjVAXncd5kt1Au74PaMEe 36rrL7yD1du/aOGVSommmuPN7gfAyVp4PXVxamdV+/VZGNwXb5bmASiucQNU7ctJ ryKUY6ok8/eHSaR9SW2fXSVj4naXJip6K0l85S2NNAn0gcZMZfMoIV7QJviM9nX+ 9NX+JzAdrjqGDlGKK0s4cXdjnfMk8chu91hrbDJC49ss+QYIB5A9yNpcwAAdK4tO 0pqBAFEQZ07aMg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:49 2025 by rpki-client