This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json) Hash identifier: K29VLauDlEws50zgULd4S4ZDjwloO08PTFqzjZEi91w= Subject key identifier: 30:4A:00:05:3A:1A:04:73:50:B9:FA:99:C4:8C:77:F2:82:18:8D:B6 Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01 Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01 Certificate serial: 019B424A76F669DD7A22711E638A0998646A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:02:14 +0000 Manifest this update: Sun 21 Dec 2025 19:02:14 +0000 Manifest next update: Mon 22 Dec 2025 19:02:14 +0000 Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: 0eFr1f1Za5j9pD+CBuNkBlwGoBlRheTnTQHpLqXWIqU=) 2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=) 3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:76:f6:69:dd:7a:22:71:1e:63:8a:09:98:64:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01 Validity Not Before: Dec 21 19:02:14 2025 GMT Not After : Dec 22 19:02:14 2025 GMT Subject: CN=304a00053a1a047350b9fa99c48c77f282188db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:d5:f1:3a:b3:be:1e:af:f4:f8:90:3a:b9: b8:c3:fd:37:54:bb:ce:bd:07:48:85:8b:73:62:79: 2f:53:fb:7d:18:76:78:dc:aa:60:96:64:77:00:1a: 6f:64:c4:c5:7d:3c:91:c5:a8:d0:7e:66:fe:9e:45: 6e:df:37:5a:4b:7e:e4:4b:fc:02:3d:b3:60:2c:37: 24:49:57:50:4e:c1:03:3f:c8:f4:96:87:ed:a4:f1: 62:8e:2a:fc:94:86:19:5b:ea:f7:66:2b:ec:4e:d9: 0a:b9:d6:45:71:aa:2f:26:26:96:d0:4a:ad:8a:96: 67:91:5f:07:97:8b:d9:00:4e:71:75:7a:39:17:94: 53:65:ed:4e:ab:4d:0d:5d:87:2e:a5:47:4d:7d:d7: 74:98:76:03:c8:e0:6a:3f:30:9f:1a:f7:29:10:69: 35:fd:8b:fd:d4:92:db:0d:c7:d0:69:19:40:eb:b9: f7:99:e6:cb:3b:d4:10:7c:22:42:08:e4:08:82:43: 12:26:1d:65:b1:ec:19:12:6a:f4:12:d9:15:21:45: 8a:32:e7:b2:60:03:a6:3d:87:71:0b:0c:9c:f5:2f: 22:17:6a:2d:c3:82:e3:29:77:ad:73:a5:c8:d7:21: c1:bd:b8:ef:af:d0:1e:32:c9:9f:ca:70:22:10:ff: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:00:05:3A:1A:04:73:50:B9:FA:99:C4:8C:77:F2:82:18:8D:B6 X509v3 Authority Key Identifier: keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d6:08:7a:8b:22:05:a9:72:77:50:d6:eb:f4:7f:51:d8:ab: f2:f7:16:11:42:e9:fa:70:5c:87:88:d8:f0:77:57:ac:ee:5c: 89:9b:7e:6e:93:47:a4:b9:84:5b:32:a4:67:92:ad:80:a1:39: 98:5b:c6:e9:cf:97:74:7f:7c:e0:87:41:ec:90:75:91:ce:89: 78:69:87:de:58:8e:d6:9f:6b:c5:1d:52:cc:52:5d:14:2a:ee: e0:f3:79:32:e2:e2:45:8e:40:56:eb:d5:16:85:b6:dc:66:2b: 92:eb:6d:ab:ad:15:66:b4:63:da:e9:70:be:34:77:91:ae:1a: 2d:9d:a7:d5:aa:a8:4f:dc:18:f3:4d:35:b9:8b:4d:61:a0:62: 31:e5:3f:38:27:5b:aa:da:85:9a:a3:eb:fb:03:2f:58:60:9c: 1c:39:1b:c9:2f:73:78:1f:85:2f:e2:d1:84:37:09:ad:a5:92: f8:b1:cf:c7:48:29:de:a6:d2:30:a6:cf:f8:3f:05:a4:c5:dd: cf:ee:14:68:d7:94:7d:ef:fe:c5:5e:bc:f0:67:28:0e:bf:c8: 01:85:19:7d:8e:64:73:87:2a:e1:0e:39:3a:aa:c2:08:4a:f5: 0d:e2:77:21:52:f9:f4:73:aa:f6:75:98:4c:21:9b:a4:e3:f5: e2:cc:96:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSnb2ad16InEeY4oJmGRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2NmOTQzM2ViODBmZTkwMjcwODQ1MjlhMjU0MTJkZGZl NWJkMDEwHhcNMjUxMjIxMTkwMjE0WhcNMjUxMjIyMTkwMjE0WjAzMTEwLwYDVQQD EygzMDRhMDAwNTNhMWEwNDczNTBiOWZhOTljNDhjNzdmMjgyMTg4ZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxvV8Tqzvh6v9PiQOrm4w/03VLvO vQdIhYtzYnkvU/t9GHZ43KpglmR3ABpvZMTFfTyRxajQfmb+nkVu3zdaS37kS/wC PbNgLDckSVdQTsEDP8j0loftpPFijir8lIYZW+r3ZivsTtkKudZFcaovJiaW0Eqt ipZnkV8Hl4vZAE5xdXo5F5RTZe1Oq00NXYcupUdNfdd0mHYDyOBqPzCfGvcpEGk1 /Yv91JLbDcfQaRlA67n3mebLO9QQfCJCCOQIgkMSJh1lsewZEmr0EtkVIUWKMuey YAOmPYdxCwyc9S8iF2otw4LjKXetc6XI1yHBvbjvr9AeMsmfynAiEP/moQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBKAAU6GgRzULn6mcSMd/KCGI22MB8GA1UdIwQY MBaAFOc8+UM+uA/pAnCEUpolQS3f5b0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUt NzA0ZjI2MzM4OWUyLzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUtNzA0ZjI2MzM4OWUy LzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9YIeosi Balyd1DW6/R/Udir8vcWEULp+nBch4jY8HdXrO5ciZt+bpNHpLmEWzKkZ5KtgKE5 mFvG6c+XdH984IdB7JB1kc6JeGmH3liO1p9rxR1SzFJdFCru4PN5MuLiRY5AVuvV FoW23GYrkuttq60VZrRj2ulwvjR3ka4aLZ2n1aqoT9wY8001uYtNYaBiMeU/OCdb qtqFmqPr+wMvWGCcHDkbyS9zeB+FL+LRhDcJraWS+LHPx0gp3qbSMKbP+D8FpMXd z+4UaNeUfe/+xV688GcoDr/IAYUZfY5kc4cq4Q45OqrCCEr1DeJ3IVL59HOq9nWY TCGbpOP14syW3g== -----END CERTIFICATE-----Generated at Sun Dec 21 22:52:12 2025 by rpki-client