This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json) Hash identifier: vBpZrzGBvXcXCQ7M2/gfrWIMw4eAXfXMvfwhiUjByJE= Subject key identifier: 4E:54:47:41:52:06:AB:90:D8:FA:BA:1A:82:0F:CB:C5:8F:4F:32:B2 Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7 Certificate serial: 019B3AFD3811405503F761BFFD1F858A4AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft Manifest number: 0552 Signing time: Sat 20 Dec 2025 09:00:31 +0000 Manifest this update: Sat 20 Dec 2025 09:00:31 +0000 Manifest next update: Sun 21 Dec 2025 09:00:31 +0000 Files and hashes: 1: SYPIWFwWfIXYmXxn1AH13wYO028.roa (hash: QWvqjb5YHZY9I2Hyectp6IE4/NuwBT9jZBm7xDi/oyo=) 2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=) 3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=) 4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: egxTsIBt4a510mTormaseIhzx1vRLI2NCqxDHsJwSqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:38:11:40:55:03:f7:61:bf:fd:1f:85:8a:4a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7 Validity Not Before: Dec 20 09:00:31 2025 GMT Not After : Dec 21 09:00:31 2025 GMT Subject: CN=4e5447415206ab90d8faba1a820fcbc58f4f32b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:c7:fb:79:5f:52:5e:7d:bb:b6:f3:be:ba: 43:b1:ff:39:50:5d:19:81:92:88:45:e4:2c:d5:41: 99:af:4b:7d:5c:46:b0:5a:22:46:bf:36:22:e7:d6: 99:64:54:cc:a9:23:ed:7f:b5:4c:0e:88:1e:d5:54: c5:52:fc:a7:21:46:22:a3:c2:bc:0e:3a:9e:a7:54: b0:9d:eb:cd:98:5e:b6:d7:d1:c1:01:06:58:c6:2f: 8a:f4:1c:7b:e1:21:d2:2b:20:26:1e:45:2a:c2:39: 70:12:98:84:e9:50:64:28:2b:a5:75:32:be:e0:18: 2f:1f:15:74:52:cc:8c:e7:75:b9:6c:7e:0d:9d:f1: 57:85:e3:1b:33:45:de:6c:9c:0a:87:4f:65:1d:7c: 04:2a:46:49:52:51:a3:da:b5:8c:f6:c4:5a:dc:3a: 16:88:35:96:e1:0c:81:df:c9:c3:bf:32:8b:c3:e7: c5:9f:8b:8f:aa:be:ea:4d:69:46:cf:eb:86:b1:16: 9f:40:be:48:72:a4:fa:2c:78:43:bd:e5:a8:84:3b: 8f:6b:32:a3:5e:1b:ad:6d:da:80:df:66:c0:07:77: 65:22:f4:df:f8:53:31:55:12:9c:a2:ce:7a:0d:66: f4:9f:7f:47:9e:fb:c9:14:b0:42:61:77:52:bf:b8: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:47:41:52:06:AB:90:D8:FA:BA:1A:82:0F:CB:C5:8F:4F:32:B2 X509v3 Authority Key Identifier: keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:97:65:b1:22:0e:cb:f5:92:1f:5a:e3:64:1f:86:2d:bb:a5: 04:b1:3e:12:d2:e5:1c:d1:f4:6d:46:be:56:ce:a5:d3:d4:d4: ec:b9:9a:31:53:48:b1:41:5a:79:89:32:dd:22:21:6d:c8:f1: 09:c5:58:79:d7:af:99:51:8c:b5:35:1b:61:75:98:70:f4:54: ed:30:15:c7:c6:ae:71:5f:19:7c:a4:34:ad:70:2a:ff:96:7b: a1:31:2f:a7:d1:be:80:8c:22:0b:c5:75:20:0c:4d:ff:d3:0f: 3e:5f:c5:95:b8:a2:96:9c:63:b6:43:a3:9d:ea:02:c9:6a:2d: 1e:60:0b:d4:12:69:70:83:2b:9b:16:6a:de:d7:f1:39:c5:c8: 10:df:b3:5e:18:81:8d:79:bf:2d:2d:f2:f8:86:2b:cf:e8:99: eb:d3:fd:ee:df:ae:24:39:c1:b9:88:b1:c8:bc:a7:14:1d:e4: 5a:26:70:aa:45:68:20:b1:7f:55:9f:1a:8d:31:46:e9:c6:fe: 89:c9:c4:c3:86:c5:97:8d:a6:d6:c3:83:f5:44:73:7e:fd:16: 41:be:82:a8:0a:b5:12:b7:f9:87:99:4d:7f:bd:46:54:75:e4: aa:21:e4:b1:c6:87:11:ad:a7:ca:44:77:e6:c3:dd:7d:36:d3: 68:23:bb:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/TgRQFUD92G//R+Fikr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTgzMzI2MTY5NzY1MmMzNTU0N2U5OGZjMDVhN2UyMjk0 ZWRiYzcwHhcNMjUxMjIwMDkwMDMxWhcNMjUxMjIxMDkwMDMxWjAzMTEwLwYDVQQD Eyg0ZTU0NDc0MTUyMDZhYjkwZDhmYWJhMWE4MjBmY2JjNThmNGYzMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHfH+3lfUl59u7bzvrpDsf85UF0Z gZKIReQs1UGZr0t9XEawWiJGvzYi59aZZFTMqSPtf7VMDoge1VTFUvynIUYio8K8 Djqep1SwnevNmF6219HBAQZYxi+K9Bx74SHSKyAmHkUqwjlwEpiE6VBkKCuldTK+ 4BgvHxV0UsyM53W5bH4NnfFXheMbM0XebJwKh09lHXwEKkZJUlGj2rWM9sRa3DoW iDWW4QyB38nDvzKLw+fFn4uPqr7qTWlGz+uGsRafQL5IcqT6LHhDveWohDuPazKj XhutbdqA32bAB3dlIvTf+FMxVRKcos56DWb0n39HnvvJFLBCYXdSv7hKXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5UR0FSBquQ2Pq6GoIPy8WPTzKyMB8GA1UdIwQY MBaAFM+YMyYWl2UsNVR+mPwFp+IpTtvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMt YWU0MDFhMzdjMDQ0LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMtYWU0MDFhMzdjMDQ0 LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpdlsSIO y/WSH1rjZB+GLbulBLE+EtLlHNH0bUa+Vs6l09TU7LmaMVNIsUFaeYky3SIhbcjx CcVYedevmVGMtTUbYXWYcPRU7TAVx8aucV8ZfKQ0rXAq/5Z7oTEvp9G+gIwiC8V1 IAxN/9MPPl/FlbiilpxjtkOjneoCyWotHmAL1BJpcIMrmxZq3tfxOcXIEN+zXhiB jXm/LS3y+IYrz+iZ69P97t+uJDnBuYixyLynFB3kWiZwqkVoILF/VZ8ajTFG6cb+ icnEw4bFl42m1sOD9URzfv0WQb6CqAq1Erf5h5lNf71GVHXkqiHkscaHEa2nykR3 5sPdfTbTaCO7Ug== -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:57 2025 by rpki-client