This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json) Hash identifier: Nbn0AvzCDSul+KNQbGTNwMK2VhPxEQCMKTslkEj3qd4= Subject key identifier: B4:B7:50:79:64:10:B5:A4:92:26:56:17:00:15:5E:5F:B2:C1:EE:19 Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97 Certificate serial: 019AAD2761EBEE82DEB0062D1B7B076E16BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft Manifest number: 173F Signing time: Sat 22 Nov 2025 20:00:30 +0000 Manifest this update: Sat 22 Nov 2025 20:00:30 +0000 Manifest next update: Sun 23 Nov 2025 20:00:30 +0000 Files and hashes: 1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: aKcrEUtwcph0la6reP37pn25a71VqmTuluAowkAj288=) 2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=) 3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=) 4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:61:eb:ee:82:de:b0:06:2d:1b:7b:07:6e:16:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646579561eca5879a747025e5798487b19cd2a97 Validity Not Before: Nov 22 20:00:30 2025 GMT Not After : Nov 23 20:00:30 2025 GMT Subject: CN=b4b750796410b5a49226561700155e5fb2c1ee19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:21:f4:09:c2:21:21:2b:a5:51:dd:ad:e7:d6: dc:ad:b3:f8:fd:2a:0f:51:5d:ee:31:83:04:d8:a2: 88:0e:69:a9:73:0c:44:e1:d0:67:4f:cc:24:b6:25: 0f:ce:83:a0:8d:d3:ce:01:89:8c:ff:42:04:a7:b2: b8:00:0b:d1:6a:67:9e:7f:cc:44:88:bb:38:cf:f8: e6:8a:aa:09:be:98:e1:10:90:22:10:d9:4c:e8:16: 56:98:a8:e6:1c:0b:5c:f7:fa:6c:50:5b:3f:d7:a3: 41:e3:66:c3:15:21:bb:39:70:5c:77:b1:40:ae:e3: 00:67:55:57:2d:e8:83:4d:4b:22:c6:9a:d3:82:5e: f0:23:37:fe:c5:5a:15:92:81:48:d1:a7:20:fb:50: c0:91:8a:d5:03:78:6b:61:2d:bb:9a:48:d5:90:50: 8f:ae:af:d3:df:7c:6c:14:df:c8:00:c6:86:a7:29: eb:26:4b:62:e9:0f:eb:05:fb:43:0f:55:10:df:2c: 2c:79:21:8c:89:8c:03:ed:2f:89:22:5c:e9:25:af: 93:29:b6:60:6a:29:f9:8d:c6:a1:c9:23:9f:ad:2e: aa:93:2f:fe:cc:1b:41:ff:f9:ac:46:a9:44:f3:b0: ec:29:b5:58:48:2c:71:71:84:60:ae:f1:67:41:af: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B7:50:79:64:10:B5:A4:92:26:56:17:00:15:5E:5F:B2:C1:EE:19 X509v3 Authority Key Identifier: keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d8:e2:78:7b:07:87:da:e4:49:87:cd:bb:6f:ea:08:f5:9f: 3d:0a:2d:55:74:58:e8:e1:d4:57:07:e5:b2:0a:3c:fb:fe:e7: 19:2d:82:4e:74:45:13:36:d6:7c:fb:7c:ba:94:79:bd:ab:53: e2:a6:62:46:1c:58:71:17:f3:c1:71:3f:60:05:ee:4b:90:4d: 2c:e1:82:02:40:67:0d:a5:39:49:f4:9f:c0:10:cd:d3:40:3b: 7f:83:97:f8:dc:b6:ba:1d:cf:dd:eb:e4:b0:a2:b0:84:e6:2a: ee:59:6d:a9:55:ad:39:2e:aa:b6:53:2f:d0:e0:7a:a5:16:35: db:41:2b:0f:13:5b:33:03:6c:77:a0:bc:a7:b2:37:0d:b8:71: 25:11:63:8f:0d:68:a3:b7:54:d2:3a:9a:fe:fd:b1:eb:3a:ae: b5:92:aa:c6:25:da:7a:ce:fe:1b:2d:c6:9b:d0:58:35:aa:8d: 4a:ea:af:18:05:7c:81:a2:7d:ca:ba:83:71:07:29:5f:f7:3d: 67:cf:28:8f:41:a3:f5:08:55:cd:92:d4:8c:c7:9c:f8:0b:30: b5:51:fb:07:63:cb:ac:e2:7b:dc:b5:a0:ae:a3:d4:7c:42:40: 60:a3:95:a0:7e:7e:47:a8:35:5d:95:f6:fd:7c:46:43:fa:ad: 4f:05:b4:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ2Hr7oLesAYtG3sHbha7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj ZDJhOTcwHhcNMjUxMTIyMjAwMDMwWhcNMjUxMTIzMjAwMDMwWjAzMTEwLwYDVQQD EyhiNGI3NTA3OTY0MTBiNWE0OTIyNjU2MTcwMDE1NWU1ZmIyYzFlZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSH0CcIhISulUd2t59bcrbP4/SoP UV3uMYME2KKIDmmpcwxE4dBnT8wktiUPzoOgjdPOAYmM/0IEp7K4AAvRameef8xE iLs4z/jmiqoJvpjhEJAiENlM6BZWmKjmHAtc9/psUFs/16NB42bDFSG7OXBcd7FA ruMAZ1VXLeiDTUsixprTgl7wIzf+xVoVkoFI0acg+1DAkYrVA3hrYS27mkjVkFCP rq/T33xsFN/IAMaGpynrJkti6Q/rBftDD1UQ3ywseSGMiYwD7S+JIlzpJa+TKbZg ain5jcahySOfrS6qky/+zBtB//msRqlE87DsKbVYSCxxcYRgrvFnQa8PEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS3UHlkELWkkiZWFwAVXl+ywe4ZMB8GA1UdIwQY MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct NTVjM2QxMjllYzI4LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4 LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtjieHsH h9rkSYfNu2/qCPWfPQotVXRY6OHUVwflsgo8+/7nGS2CTnRFEzbWfPt8upR5vatT 4qZiRhxYcRfzwXE/YAXuS5BNLOGCAkBnDaU5SfSfwBDN00A7f4OX+Ny2uh3P3evk sKKwhOYq7lltqVWtOS6qtlMv0OB6pRY120ErDxNbMwNsd6C8p7I3DbhxJRFjjw1o o7dU0jqa/v2x6zqutZKqxiXaes7+Gy3Gm9BYNaqNSuqvGAV8gaJ9yrqDcQcpX/c9 Z88oj0Gj9QhVzZLUjMec+AswtVH7B2PLrOJ73LWgrqPUfEJAYKOVoH5+R6g1XZX2 /XxGQ/qtTwW0cw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:40:32 2025 by rpki-client