This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json) Hash identifier: UlpihocnCZaU883B3z18Sy7PratB8cJXJh/XCQRPIBc= Subject key identifier: 4D:3C:09:47:F4:8F:BB:A6:A7:F8:57:8F:B8:91:D8:1C:BD:59:CA:A9 Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42 Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42 Certificate serial: 019AF3F79F87296F7513F50DDB859F0445E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:22 +0000 Manifest this update: Sat 06 Dec 2025 14:01:22 +0000 Manifest next update: Sun 07 Dec 2025 14:01:22 +0000 Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: Dx1LHrWL23TnfVMmVXZ+AojN7jE4jVveAqA2z/2H87o=) 2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:9f:87:29:6f:75:13:f5:0d:db:85:9f:04:45:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42 Validity Not Before: Dec 6 14:01:22 2025 GMT Not After : Dec 7 14:01:22 2025 GMT Subject: CN=4d3c0947f48fbba6a7f8578fb891d81cbd59caa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:82:f5:05:11:ab:b1:11:de:3c:13:e1:95: 6b:9c:0f:d3:ae:6c:26:5a:9b:98:be:90:3c:e4:ab: 12:41:d2:9e:ee:a7:df:e6:3f:76:fd:c3:2b:ff:f1: 82:b2:bf:81:5f:0a:30:57:3f:04:ca:56:d1:a4:cb: 35:8e:d4:e3:bb:e8:6a:72:e7:a6:14:55:11:4c:c6: d6:60:8e:21:a9:ba:00:f8:51:36:c3:6c:21:53:74: a9:9c:4e:46:6e:42:fa:00:55:32:ec:28:d6:22:f5: 79:6d:2e:18:62:6b:6e:4d:16:d6:f4:c7:a7:ac:46: 2d:8f:00:e6:46:13:36:58:51:c4:23:7f:5f:df:37: b2:83:d9:41:31:10:7b:d9:97:0e:25:6f:58:4d:57: 33:f3:4b:00:5d:45:7f:89:50:de:8e:de:55:c4:37: 40:9d:b2:2c:db:11:da:34:28:de:2d:bb:45:72:04: 38:74:d2:31:83:11:1b:b1:ea:7e:47:a8:e5:40:68: 7e:bc:f5:82:ce:eb:73:8f:f2:09:04:87:b5:4e:24: 7e:e2:3e:e2:27:8d:54:1c:23:c1:e7:c5:9a:1f:7a: 51:a0:0a:a2:a9:f2:ad:35:39:a4:af:4e:81:05:9e: 12:bc:89:95:fa:d2:65:db:dd:d8:e5:a9:0a:4d:9a: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3C:09:47:F4:8F:BB:A6:A7:F8:57:8F:B8:91:D8:1C:BD:59:CA:A9 X509v3 Authority Key Identifier: keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:38:69:0a:13:ec:2a:a3:80:b2:db:0d:3d:01:26:df:be:e0: af:7a:94:01:db:36:f1:02:25:f6:47:e7:96:81:dc:99:ec:5c: a3:14:0e:78:f2:23:f2:df:5b:78:9e:e5:ed:e9:d3:2a:b2:a6: 54:ca:74:cf:3b:73:a9:b9:e3:69:db:60:c8:ad:32:0f:d5:72: df:9a:6c:bb:12:85:a1:86:36:69:dc:f3:b7:70:59:f5:2d:00: 02:33:86:05:27:cc:da:b2:27:2e:c7:5b:d4:d1:16:a9:90:89: 0d:51:4d:7e:cb:f2:6f:78:cd:be:60:f9:0b:93:31:22:e2:d6: a7:e7:9b:97:03:00:ae:ba:c7:9e:be:98:15:91:12:71:5a:0e: 75:23:05:20:7a:a2:9c:cd:0d:41:be:2c:4e:c7:8d:c9:c6:15: 48:6a:0c:80:63:0c:63:fa:17:fc:ba:ac:e8:28:ee:ab:7f:a1: e3:44:97:71:b0:6a:80:14:3e:9c:78:03:28:b4:17:e7:88:69: 66:19:bb:3c:77:81:ab:e4:2e:0a:c0:03:e2:12:f7:b5:05:8e: d5:6c:61:5c:8a:bc:ee:a5:50:74:cc:17:6a:e8:2b:48:29:40: 4d:08:92:21:f6:86:45:33:bc:57:2c:9d:53:63:e0:e5:a8:27: be:35:bd:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95+HKW91E/UN24WfBEXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzdjOWE0NDJhOGI0YTRjOTEyZjExYmMyYjZkM2NmMTAw YWRmNDIwHhcNMjUxMjA2MTQwMTIyWhcNMjUxMjA3MTQwMTIyWjAzMTEwLwYDVQQD Eyg0ZDNjMDk0N2Y0OGZiYmE2YTdmODU3OGZiODkxZDgxY2JkNTljYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaeC9QURq7ER3jwT4ZVrnA/Trmwm WpuYvpA85KsSQdKe7qff5j92/cMr//GCsr+BXwowVz8EylbRpMs1jtTju+hqcuem FFURTMbWYI4hqboA+FE2w2whU3SpnE5GbkL6AFUy7CjWIvV5bS4YYmtuTRbW9Men rEYtjwDmRhM2WFHEI39f3zeyg9lBMRB72ZcOJW9YTVcz80sAXUV/iVDejt5VxDdA nbIs2xHaNCjeLbtFcgQ4dNIxgxEbsep+R6jlQGh+vPWCzutzj/IJBIe1TiR+4j7i J41UHCPB58WaH3pRoAqiqfKtNTmkr06BBZ4SvImV+tJl293Y5akKTZpf+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE08CUf0j7ump/hXj7iR2By9WcqpMB8GA1UdIwQY MBaAFOc3yaRCqLSkyRLxG8K2088QCt9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTIt MzFmNjAzNzNhMDkyLzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTItMzFmNjAzNzNhMDky LzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzhpChPs KqOAstsNPQEm377gr3qUAds28QIl9kfnloHcmexcoxQOePIj8t9beJ7l7enTKrKm VMp0zztzqbnjadtgyK0yD9Vy35psuxKFoYY2adzzt3BZ9S0AAjOGBSfM2rInLsdb 1NEWqZCJDVFNfsvyb3jNvmD5C5MxIuLWp+eblwMArrrHnr6YFZEScVoOdSMFIHqi nM0NQb4sTseNycYVSGoMgGMMY/oX/Lqs6Cjuq3+h40SXcbBqgBQ+nHgDKLQX54hp Zhm7PHeBq+QuCsAD4hL3tQWO1WxhXIq87qVQdMwXaugrSClATQiSIfaGRTO8Vyyd U2Pg5agnvjW9DA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:38 2025 by rpki-client