This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft File: Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json) Hash identifier: VJRS6N83C3Wyij/6ajLxWg1LMDZjsKkKF2o2QVxPvTg= Subject key identifier: 23:FB:24:90:F2:2C:79:3C:1C:4B:3C:B1:11:C1:5B:47:E5:E0:0B:41 Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5 Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5 Certificate serial: 019B37581793C0650F715D79FF86A3960B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft Manifest number: 05FE Signing time: Fri 19 Dec 2025 16:01:18 +0000 Manifest this update: Fri 19 Dec 2025 16:01:18 +0000 Manifest next update: Sat 20 Dec 2025 16:01:18 +0000 Files and hashes: 1: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: Xda2+Soc28jAqfprWOMbRJioMsEyBKta7fmwmpA4PkI=) 2: Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (hash: 5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:17:93:c0:65:0f:71:5d:79:ff:86:a3:96:0b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5 Validity Not Before: Dec 19 16:01:18 2025 GMT Not After : Dec 20 16:01:18 2025 GMT Subject: CN=23fb2490f22c793c1c4b3cb111c15b47e5e00b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:a3:d1:17:ea:96:00:a3:36:d4:c6:bb:40: e5:8c:35:b5:80:ec:b8:6d:38:fd:fd:50:6b:be:2c: b2:9d:9f:61:b5:d1:ab:3c:18:f2:92:5c:fc:a7:5c: 44:a7:b7:06:aa:ff:59:21:54:91:52:0c:db:a5:04: 61:a5:41:4a:4e:f6:71:ae:63:ee:74:88:6c:e1:b8: 4b:95:41:4a:b7:de:44:49:f6:c4:95:7f:95:20:18: c8:38:25:cc:7d:f1:38:c5:0c:13:92:95:3a:8c:1a: 56:73:04:f0:cb:90:1a:6e:95:a2:7b:74:75:8c:71: 46:d8:fe:06:27:96:cd:4b:5a:49:fe:09:d3:2d:a6: cf:ac:f0:a1:9f:56:1c:7c:4f:6b:e3:ad:bc:aa:09: 01:59:76:89:16:39:c8:25:21:58:b2:bc:b7:84:03: 7e:ef:73:db:6c:9f:4b:d5:0b:f8:55:c8:e0:7e:28: 6e:d1:e1:c9:27:5e:34:91:f7:23:b7:0b:39:3a:7f: 26:7d:65:64:b6:6a:cd:cd:17:32:9a:a7:d4:62:07: 17:13:13:b4:5f:67:36:c3:fc:59:6a:39:da:25:2e: dd:38:f5:86:fb:cf:08:60:c4:74:3d:d6:ae:b7:0d: 6f:bd:45:d6:3b:f7:c2:73:35:d5:e0:37:48:81:15: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FB:24:90:F2:2C:79:3C:1C:4B:3C:B1:11:C1:5B:47:E5:E0:0B:41 X509v3 Authority Key Identifier: keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7c:b0:10:f0:0f:8a:82:3a:e4:20:33:bb:ff:42:3e:92:a5: 1c:bc:97:9b:32:34:26:d8:d7:a2:a9:d1:4b:fb:79:ba:89:31: 7e:17:ed:2e:ee:04:c2:5a:6e:cc:af:f5:ff:08:a9:15:14:8c: f4:7e:1f:06:ab:42:59:d9:d3:1c:29:c5:30:af:b2:77:e0:42: 2d:ff:fc:3b:62:4e:1e:64:cd:4c:ee:b3:33:3d:41:31:5e:e5: d5:59:93:8f:a9:8f:bc:dc:09:bb:70:db:15:ea:c0:83:5b:c0: ae:ad:79:6c:65:7b:28:c6:aa:aa:a3:21:ff:bf:87:6f:01:23: d8:39:50:8e:7e:05:cc:9e:54:0a:68:43:3a:8b:0d:35:90:f6: ff:28:d4:d7:fc:54:87:11:fc:5c:f1:ac:d9:e1:69:ac:62:25: 7d:04:17:03:3e:39:55:9c:fe:3f:07:df:f5:94:9c:3c:2d:a6: 18:e2:6a:c9:8d:0c:91:8d:0e:c6:30:90:07:32:19:cf:4e:ff: c1:d0:66:9e:f4:02:81:6f:52:84:e7:c1:4d:b9:7f:f1:0f:5b: 19:84:39:51:32:e6:75:7b:b5:18:d6:e0:99:08:9e:ed:12:71: c7:cc:05:b0:a2:70:33:98:67:d7:fb:41:06:15:25:c4:e5:77: 2c:94:92:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WBeTwGUPcV15/4ajlgsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTc0MTJlYzRiMGI4ZmIyZGU5ZDJkZjE3YTZhYzcyODNl ZGVkYjUwHhcNMjUxMjE5MTYwMTE4WhcNMjUxMjIwMTYwMTE4WjAzMTEwLwYDVQQD EygyM2ZiMjQ5MGYyMmM3OTNjMWM0YjNjYjExMWMxNWI0N2U1ZTAwYjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5ej0RfqlgCjNtTGu0DljDW1gOy4 bTj9/VBrviyynZ9htdGrPBjyklz8p1xEp7cGqv9ZIVSRUgzbpQRhpUFKTvZxrmPu dIhs4bhLlUFKt95ESfbElX+VIBjIOCXMffE4xQwTkpU6jBpWcwTwy5AabpWie3R1 jHFG2P4GJ5bNS1pJ/gnTLabPrPChn1YcfE9r4628qgkBWXaJFjnIJSFYsry3hAN+ 73PbbJ9L1Qv4Vcjgfihu0eHJJ140kfcjtws5On8mfWVktmrNzRcymqfUYgcXExO0 X2c2w/xZajnaJS7dOPWG+88IYMR0Pdautw1vvUXWO/fCczXV4DdIgRU36QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP7JJDyLHk8HEs8sRHBW0fl4AtBMB8GA1UdIwQY MBaAFGeXQS7EsLj7LenS3xemrHKD7e21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5Mzct NTNhODYxOWI0MmY1LzEvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jYWJlYWQtZjA4YS00MTVkLTk5MzctNTNhODYxOWI0MmY1 LzEvWjVkQkxzU3d1UHN0NmRMZkY2YXNjb1B0N2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXywEPAP ioI65CAzu/9CPpKlHLyXmzI0JtjXoqnRS/t5uokxfhftLu4EwlpuzK/1/wipFRSM 9H4fBqtCWdnTHCnFMK+yd+BCLf/8O2JOHmTNTO6zMz1BMV7l1VmTj6mPvNwJu3Db FerAg1vArq15bGV7KMaqqqMh/7+HbwEj2DlQjn4FzJ5UCmhDOosNNZD2/yjU1/xU hxH8XPGs2eFprGIlfQQXAz45VZz+Pwff9ZScPC2mGOJqyY0MkY0OxjCQBzIZz07/ wdBmnvQCgW9ShOfBTbl/8Q9bGYQ5UTLmdXu1GNbgmQie7RJxx8wFsKJwM5hn1/tB BhUlxOV3LJSSQQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:48:18 2025 by rpki-client