This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json) Hash identifier: QhK6n/3EMO/w1Rg894uzQGNoQ/aOnMPw2LCPuIj8pkI= Subject key identifier: 85:D2:17:83:7D:6B:0F:FB:BB:A4:E9:CD:8C:59:60:CD:93:7C:88:4A Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F Certificate issuer: /CN=6790960ac4ba271502f1738a59490856f1975b1f Certificate serial: 019B10146E1E6501B3313D84B84B838A631D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft Manifest number: 0AA3 Signing time: Fri 12 Dec 2025 01:02:12 +0000 Manifest this update: Fri 12 Dec 2025 01:02:12 +0000 Manifest next update: Sat 13 Dec 2025 01:02:12 +0000 Files and hashes: 1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: 9RrTYS4O0z3XDpBtIZq8MB0CtwDH6zfPBgrlty2HrDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:6e:1e:65:01:b3:31:3d:84:b8:4b:83:8a:63:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f Validity Not Before: Dec 12 01:02:12 2025 GMT Not After : Dec 13 01:02:12 2025 GMT Subject: CN=85d217837d6b0ffbbba4e9cd8c5960cd937c884a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:2b:7c:fa:b7:42:b5:4a:c6:5a:1f:23:d6: 08:fc:f8:ed:5c:59:59:40:a4:d6:c2:fc:01:2b:81: 1c:9d:a8:bd:b4:12:75:b9:d9:14:b4:d1:e1:f5:30: 48:df:d8:fe:cf:f7:3e:f0:89:e4:24:44:e5:28:ae: 4a:ef:ff:7f:a8:fd:a9:47:90:d6:f7:4e:3d:65:49: 5c:3b:fb:e7:b3:ba:9a:ed:d5:50:11:09:31:d2:db: f9:6b:10:fc:1a:5f:71:35:b5:09:78:91:36:72:6e: 26:5e:ee:30:b4:91:9b:e9:9c:f7:26:a4:20:b0:25: e3:6c:a8:bb:e0:ad:58:36:46:f8:6d:bc:34:ca:8e: 80:58:a3:d6:ee:a3:58:e0:91:cc:55:8e:71:25:6f: d1:0e:d9:9b:6c:34:3f:4d:b5:31:2e:2c:6b:a7:52: 3f:0e:ef:a6:06:3b:f1:d8:b4:0d:a3:2e:26:f4:46: 12:cb:d4:b1:cb:b0:44:c6:56:47:0a:aa:71:4e:68: 5c:46:ab:55:e1:e6:34:69:cd:fb:26:7d:ed:42:60: 18:70:45:41:a0:00:e1:b1:70:4a:af:c9:a9:76:ea: a5:e0:ef:7b:02:80:b8:21:8f:9f:6c:af:85:f1:bd: 1d:fe:96:14:76:34:67:47:39:71:34:09:d3:94:aa: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:17:83:7D:6B:0F:FB:BB:A4:E9:CD:8C:59:60:CD:93:7C:88:4A X509v3 Authority Key Identifier: keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:05:a9:85:d5:6a:ca:0b:39:58:67:0e:af:df:62:fa:19:9b: b9:b5:67:3d:bc:c8:a3:a2:d0:96:81:b9:68:5f:c5:23:cb:dd: ec:b1:c5:b2:e8:c9:e7:82:b3:c3:dd:d5:92:26:80:1d:e9:39: 25:19:1e:ea:bf:a8:47:e7:3a:2d:10:08:1c:5b:ab:ab:70:91: ba:bf:24:dd:0e:4f:e5:20:d5:36:15:9d:81:06:dc:bf:e9:d8: 92:b4:3a:ed:da:45:37:96:73:15:7b:5c:e3:a7:46:be:b8:38: c1:b0:1c:c8:00:e9:f7:f4:f6:bb:0f:31:9b:88:62:f6:68:b4: 8d:aa:ab:60:26:4f:46:75:fe:49:50:f9:37:0e:03:f4:58:18: 6f:a2:10:2d:06:d6:58:b5:7c:78:f2:71:aa:6b:7a:67:da:03: 09:3b:2d:2f:af:99:f9:e2:5e:31:9c:5e:a2:7f:f7:c2:7e:cd: a4:53:3e:b0:47:65:45:11:e1:29:1b:74:e9:33:93:f6:1a:32: ee:39:12:22:d8:58:de:cf:bb:16:75:03:0b:0b:3a:85:59:11: ff:44:a9:f4:db:1e:07:24:39:99:b0:ed:a9:ff:c0:5a:46:71: 1a:72:b8:36:4e:80:65:ec:05:a0:31:0e:40:1f:0f:a4:2b:69: e1:57:bc:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFG4eZQGzMT2EuEuDimMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTA5NjBhYzRiYTI3MTUwMmYxNzM4YTU5NDkwODU2ZjE5 NzViMWYwHhcNMjUxMjEyMDEwMjEyWhcNMjUxMjEzMDEwMjEyWjAzMTEwLwYDVQQD Eyg4NWQyMTc4MzdkNmIwZmZiYmJhNGU5Y2Q4YzU5NjBjZDkzN2M4ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09krfPq3QrVKxlofI9YI/PjtXFlZ QKTWwvwBK4Ecnai9tBJ1udkUtNHh9TBI39j+z/c+8InkJETlKK5K7/9/qP2pR5DW 9049ZUlcO/vns7qa7dVQEQkx0tv5axD8Gl9xNbUJeJE2cm4mXu4wtJGb6Zz3JqQg sCXjbKi74K1YNkb4bbw0yo6AWKPW7qNY4JHMVY5xJW/RDtmbbDQ/TbUxLixrp1I/ Du+mBjvx2LQNoy4m9EYSy9Sxy7BExlZHCqpxTmhcRqtV4eY0ac37Jn3tQmAYcEVB oADhsXBKr8mpduql4O97AoC4IY+fbK+F8b0d/pYUdjRnRzlxNAnTlKpeUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXSF4N9aw/7u6TpzYxZYM2TfIhKMB8GA1UdIwQY MBaAFGeQlgrEuicVAvFzillJCFbxl1sfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYt OTI4MjhiMTUzMjEwLzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYtOTI4MjhiMTUzMjEw LzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgWphdVq ygs5WGcOr99i+hmbubVnPbzIo6LQloG5aF/FI8vd7LHFsujJ54Kzw93VkiaAHek5 JRke6r+oR+c6LRAIHFurq3CRur8k3Q5P5SDVNhWdgQbcv+nYkrQ67dpFN5ZzFXtc 46dGvrg4wbAcyADp9/T2uw8xm4hi9mi0jaqrYCZPRnX+SVD5Nw4D9FgYb6IQLQbW WLV8ePJxqmt6Z9oDCTstL6+Z+eJeMZxeon/3wn7NpFM+sEdlRRHhKRt06TOT9hoy 7jkSIthY3s+7FnUDCws6hVkR/0Sp9NseByQ5mbDtqf/AWkZxGnK4Nk6AZewFoDEO QB8PpCtp4Ve8vw== -----END CERTIFICATE-----Generated at Fri Dec 12 05:32:57 2025 by rpki-client