This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json) Hash identifier: ESY9CR1wf3lxSY8AaYNFejlzxf2R2Kum6yBVdC7+cKA= Subject key identifier: AC:F5:80:54:D0:3D:04:AC:E4:43:AD:9E:33:5F:51:D1:5D:61:37:4B Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Certificate serial: 019B1A5FB16B7C012F38122A4467BDC291C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft Manifest number: 05D5 Signing time: Sun 14 Dec 2025 01:00:37 +0000 Manifest this update: Sun 14 Dec 2025 01:00:37 +0000 Manifest next update: Mon 15 Dec 2025 01:00:37 +0000 Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: q1nrlfrK8OkoMF4ZVhM5qmMiUGqVYJMacIHzvxENObA=) 2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=) 3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=) 4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:b1:6b:7c:01:2f:38:12:2a:44:67:bd:c2:91:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Validity Not Before: Dec 14 01:00:37 2025 GMT Not After : Dec 15 01:00:37 2025 GMT Subject: CN=acf58054d03d04ace443ad9e335f51d15d61374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:11:04:32:ad:68:53:b7:8e:8c:ef:1e:97: 6c:b5:ff:40:a6:3c:7f:95:50:26:d0:59:ab:e7:52: 94:f9:52:6a:aa:13:cc:ed:1d:6f:ad:23:01:fa:69: e5:50:70:24:04:42:3b:e7:98:e4:f8:3f:7b:c9:bb: 22:c1:97:8d:47:18:44:12:6c:ce:73:3b:2b:d8:92: b2:86:17:98:5a:b4:e2:1e:87:42:e7:cd:a0:26:cc: 50:55:50:e6:67:25:02:f6:0c:14:b7:f8:f1:a6:5b: a6:21:4a:ba:1b:6f:a5:05:40:a7:34:26:3d:cd:7f: 6e:b1:0a:a7:fb:a8:d0:55:8f:66:e3:d2:07:f1:e6: 0f:fa:1a:5b:48:c1:17:09:ee:db:97:8e:3d:c9:e1: c8:d8:ba:3a:a1:12:3b:83:5f:8f:28:a1:c0:f0:1c: 60:25:7b:17:46:3e:45:ad:17:08:0b:8b:fa:09:8e: 59:87:c2:4a:81:c8:a5:b2:ad:d4:ad:e3:b8:ce:7e: 7e:f1:07:ef:a9:f0:3b:ff:e7:2d:b4:1c:6c:56:1b: 1c:f6:d2:23:29:09:b9:6c:8b:3e:79:f9:dd:62:81: b9:57:f2:ea:39:76:f2:50:ec:7d:a0:b9:c9:18:80: 7b:f7:76:d0:94:7a:e7:e9:26:c1:97:be:43:36:b2: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:80:54:D0:3D:04:AC:E4:43:AD:9E:33:5F:51:D1:5D:61:37:4B X509v3 Authority Key Identifier: keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:36:d5:f2:ad:87:35:5d:7c:52:e7:87:69:c4:fc:bd:48:e2: c9:a1:ec:4c:3f:0d:fb:2e:04:a5:c3:5d:2a:aa:a4:dd:36:e6: 50:30:3c:27:55:9f:1b:75:aa:9d:d9:f3:83:67:80:db:0c:f7: 90:28:cf:9c:c2:15:df:2e:e3:e9:24:94:db:eb:95:7b:68:89: f9:2a:8e:ff:33:5e:fc:5a:6a:ea:de:eb:23:67:48:12:a4:93: 19:db:d1:b4:f1:cd:bb:22:3f:a7:24:cb:28:07:fb:05:d7:29: 97:39:9b:78:86:f1:aa:26:99:00:f0:50:21:7a:3d:5b:7d:2d: e4:67:91:4d:66:aa:3b:fd:21:92:ec:c5:d7:ee:3d:9d:dd:4f: 38:64:43:98:b2:1d:80:b8:7d:7a:ed:b2:b7:44:58:b0:b9:21: 98:06:ac:fa:f6:fc:d0:27:31:07:ae:f2:26:f0:04:b9:fd:90: 26:9d:22:ca:4e:42:37:d6:af:0c:4f:30:7e:99:37:96:69:f1: dd:1f:fe:03:72:4f:79:50:27:78:e8:82:42:1d:b0:22:68:c8: 85:fe:ea:5b:8b:53:aa:7d:3e:89:59:d8:51:20:ae:20:2f:81: cc:69:e5:f4:83:90:55:a1:fc:1f:cb:90:36:d9:77:31:82:e5: 5e:22:04:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX7FrfAEvOBIqRGe9wpHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh NmFiOGQwHhcNMjUxMjE0MDEwMDM3WhcNMjUxMjE1MDEwMDM3WjAzMTEwLwYDVQQD EyhhY2Y1ODA1NGQwM2QwNGFjZTQ0M2FkOWUzMzVmNTFkMTVkNjEzNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAproRBDKtaFO3jozvHpdstf9Apjx/ lVAm0Fmr51KU+VJqqhPM7R1vrSMB+mnlUHAkBEI755jk+D97ybsiwZeNRxhEEmzO czsr2JKyhheYWrTiHodC582gJsxQVVDmZyUC9gwUt/jxplumIUq6G2+lBUCnNCY9 zX9usQqn+6jQVY9m49IH8eYP+hpbSMEXCe7bl449yeHI2Lo6oRI7g1+PKKHA8Bxg JXsXRj5FrRcIC4v6CY5Zh8JKgcilsq3UreO4zn5+8QfvqfA7/+cttBxsVhsc9tIj KQm5bIs+efndYoG5V/LqOXbyUOx9oLnJGIB793bQlHrn6SbBl75DNrLhTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz1gFTQPQSs5EOtnjNfUdFdYTdLMB8GA1UdIwQY MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzbV8q2H NV18UueHacT8vUjiyaHsTD8N+y4EpcNdKqqk3TbmUDA8J1WfG3Wqndnzg2eA2wz3 kCjPnMIV3y7j6SSU2+uVe2iJ+SqO/zNe/Fpq6t7rI2dIEqSTGdvRtPHNuyI/pyTL KAf7BdcplzmbeIbxqiaZAPBQIXo9W30t5GeRTWaqO/0hkuzF1+49nd1POGRDmLId gLh9eu2yt0RYsLkhmAas+vb80CcxB67yJvAEuf2QJp0iyk5CN9avDE8wfpk3lmnx 3R/+A3JPeVAneOiCQh2wImjIhf7qW4tTqn0+iVnYUSCuIC+BzGnl9IOQVaH8H8uQ Ntl3MYLlXiIEKg== -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:09 2025 by rpki-client