This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json) Hash identifier: hjocYWaNbocVbV6EvyxsPEvDy2N2BlzVHcR6iSspj0U= Subject key identifier: 96:DD:4F:AC:B8:AB:42:9A:A6:E7:90:DD:34:86:59:FA:12:E9:5B:AA Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc Certificate serial: 019B4437C177538557C97CE04A6D788106F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft Manifest number: 1719 Signing time: Mon 22 Dec 2025 04:01:03 +0000 Manifest this update: Mon 22 Dec 2025 04:01:03 +0000 Manifest next update: Tue 23 Dec 2025 04:01:03 +0000 Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: bkWXIfZBULkTOd71zVd2SsTC5WDzIVKgfBbG6zc/vgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:c1:77:53:85:57:c9:7c:e0:4a:6d:78:81:06:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc Validity Not Before: Dec 22 04:01:03 2025 GMT Not After : Dec 23 04:01:03 2025 GMT Subject: CN=96dd4facb8ab429aa6e790dd348659fa12e95baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:e2:4d:70:c0:a4:3a:4c:ce:c8:08:58:82: 7c:03:7a:3c:87:05:64:c9:7a:56:55:92:0e:3f:bd: 89:5f:44:e5:22:fd:3b:51:52:83:d9:9f:27:52:72: 12:52:14:ea:98:0a:a8:ca:2c:cc:31:11:2f:0a:45: 20:1f:19:dc:3c:ff:d0:fd:e3:36:e2:53:54:ea:e9: 72:2a:b2:93:6b:6a:cf:e6:9e:a1:f5:d7:03:d9:15: aa:bd:34:99:25:38:29:9c:a0:79:b9:8d:a7:61:05: fe:7d:60:7e:91:08:c4:13:f0:2b:81:9d:4e:e5:c9: 0a:e2:56:47:b3:28:e9:e3:3d:db:cd:9a:b2:f1:94: 48:cb:cf:2d:01:69:69:b5:cd:15:cb:35:94:18:b5: 4c:8d:18:c8:4b:c5:97:b2:b2:69:38:57:0c:0d:7a: 2d:13:5d:67:68:e3:aa:c1:d3:08:89:39:d7:7e:14: b8:bf:8d:bf:a0:d5:44:fc:a9:25:94:16:a5:d8:83: ca:dd:05:78:0b:b4:fe:3f:48:a5:91:92:09:33:73: 4e:8b:d2:12:90:9c:b6:9b:2f:44:81:48:24:b2:83: cb:1b:18:96:b7:80:8b:92:0d:d7:d2:4b:05:16:d4: 42:5f:ec:e1:35:89:30:b2:7d:95:52:9f:00:a2:b3: 37:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:4F:AC:B8:AB:42:9A:A6:E7:90:DD:34:86:59:FA:12:E9:5B:AA X509v3 Authority Key Identifier: keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2b:60:0a:41:a3:e9:61:56:c1:a8:94:e5:37:87:96:03:e2: c9:f9:90:e2:c9:c3:78:5a:73:cb:6a:dd:3c:61:c0:30:f1:b6: 01:cd:47:26:26:32:48:d8:05:9b:65:45:0c:90:80:89:da:2e: f7:da:ff:60:f1:97:cd:c5:4b:97:e3:a9:9c:1c:32:b3:71:d4: cc:72:60:72:6c:bd:eb:2e:60:26:58:55:cc:e0:99:f2:df:60: ce:b1:24:3c:b4:06:8a:e3:82:90:4f:a2:a7:9f:d8:1a:0d:0c: 58:ac:34:0d:0e:eb:c7:d4:96:97:a6:5d:9f:00:d9:ff:b4:df: 58:f3:e1:ff:48:f6:f6:19:1b:e4:70:73:36:d1:6e:ba:c8:4b: f0:39:a8:2b:88:15:53:c2:57:ff:c4:db:ac:46:1e:5e:31:94: ac:62:40:08:a5:64:38:12:cc:48:b0:b1:07:21:dc:9c:9c:ed: 7f:59:80:e6:69:7e:58:83:8c:a0:e5:d7:b1:55:8d:54:ba:dc: 06:04:18:2d:d8:4d:f6:d9:71:08:2f:87:f3:13:f0:d4:1f:96: af:b3:4e:25:91:86:f4:44:e7:0a:85:92:5b:30:be:ab:ef:cc: ca:36:bd:88:78:ad:4a:59:d8:10:00:32:71:af:5a:2e:c6:d7: 02:f2:f8:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN8F3U4VXyXzgSm14gQb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTc1MTEwYzczOWI3NGY4NGQ0MTcwM2M0ODgyODMyNzI3 YmRkY2MwHhcNMjUxMjIyMDQwMTAzWhcNMjUxMjIzMDQwMTAzWjAzMTEwLwYDVQQD Eyg5NmRkNGZhY2I4YWI0MjlhYTZlNzkwZGQzNDg2NTlmYTEyZTk1YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnXiTXDApDpMzsgIWIJ8A3o8hwVk yXpWVZIOP72JX0TlIv07UVKD2Z8nUnISUhTqmAqoyizMMREvCkUgHxncPP/Q/eM2 4lNU6ulyKrKTa2rP5p6h9dcD2RWqvTSZJTgpnKB5uY2nYQX+fWB+kQjEE/ArgZ1O 5ckK4lZHsyjp4z3bzZqy8ZRIy88tAWlptc0VyzWUGLVMjRjIS8WXsrJpOFcMDXot E11naOOqwdMIiTnXfhS4v42/oNVE/KkllBal2IPK3QV4C7T+P0ilkZIJM3NOi9IS kJy2my9EgUgksoPLGxiWt4CLkg3X0ksFFtRCX+zhNYkwsn2VUp8AorM3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbdT6y4q0KapueQ3TSGWfoS6VuqMB8GA1UdIwQY MBaAFM+XURDHObdPhNQXA8SIKDJye93MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQt ZGFiNjhmZDg3ODZiLzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQtZGFiNjhmZDg3ODZi LzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXStgCkGj 6WFWwaiU5TeHlgPiyfmQ4snDeFpzy2rdPGHAMPG2Ac1HJiYySNgFm2VFDJCAidou 99r/YPGXzcVLl+OpnBwys3HUzHJgcmy96y5gJlhVzOCZ8t9gzrEkPLQGiuOCkE+i p5/YGg0MWKw0DQ7rx9SWl6ZdnwDZ/7TfWPPh/0j29hkb5HBzNtFuushL8DmoK4gV U8JX/8TbrEYeXjGUrGJACKVkOBLMSLCxByHcnJztf1mA5ml+WIOMoOXXsVWNVLrc BgQYLdhN9tlxCC+H8xPw1B+Wr7NOJZGG9ETnCoWSWzC+q+/Myja9iHitSlnYEAAy ca9aLsbXAvL48w== -----END CERTIFICATE-----Generated at Mon Dec 22 09:45:20 2025 by rpki-client