This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json) Hash identifier: VWcecaKyN4C5FAK2MfWeDvhfDh7dv2X1NzaeNi/X9K0= Subject key identifier: 95:45:E1:DD:AB:68:90:72:80:5F:B8:AD:E9:C3:5D:64:5F:EB:28:46 Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af Certificate serial: 019AF19B602414B8E7E2E541DDC77578149F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft Manifest number: 0F42 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: gSRZ6sIAVIeMGU4Cw1+fB3GyfmO6EEo7dbLM/HZzOEU=) 2: nlxhNU09PYV8ICYRds67uFQ8SD4.roa (hash: 5Mkpw05F7xKd7rn+KAmOk8IiGnvRNLjGed3AF2L+Quk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:60:24:14:b8:e7:e2:e5:41:dd:c7:75:78:14:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=9545e1ddab689072805fb8ade9c35d645feb2846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:a6:aa:7e:9c:03:5b:d4:27:8f:e1:6e:60: 3a:ba:a6:00:dc:a7:de:81:5c:79:c4:8c:0f:0d:e0: 7a:89:2c:84:31:84:37:61:55:81:1b:16:97:f4:69: 1d:c6:06:3c:73:3d:90:8a:f5:39:95:fc:12:ad:02: f0:59:a0:19:7f:4b:89:8d:03:3e:bb:98:72:64:aa: 01:5a:c9:ee:de:94:67:71:bf:a5:c9:a3:12:e7:7e: fe:f1:d2:c7:97:04:29:f4:e5:a4:8a:b5:9b:4e:f9: 41:72:7e:1d:87:6f:48:ed:39:83:b6:31:c2:27:a2: 25:b4:af:60:15:9d:80:13:c2:8f:7a:e7:2a:3d:f8: 83:4b:30:96:e6:4b:e0:50:9b:25:74:ca:5e:47:fe: f4:7c:a0:3f:0b:34:98:88:34:01:a1:b8:46:79:b2: a5:66:c3:66:3b:37:bb:d6:53:22:7b:7d:7d:9f:8a: b1:28:73:7f:64:d0:20:29:87:6e:83:73:ff:8d:23: 64:49:c9:60:db:a3:75:58:17:bc:11:8e:9d:3a:28: 3a:3f:b0:b1:35:a2:6c:5f:5a:27:14:9b:95:1c:4e: 96:74:a7:34:95:c9:be:25:86:13:4c:a7:08:71:3c: 26:39:fa:6b:5c:30:75:03:67:be:2d:4f:4c:6f:38: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:45:E1:DD:AB:68:90:72:80:5F:B8:AD:E9:C3:5D:64:5F:EB:28:46 X509v3 Authority Key Identifier: keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:05:3f:0f:cc:0f:83:d4:10:2a:0b:43:35:f8:3e:de:56:d0: 11:1c:54:c4:2e:d4:0a:5a:34:a0:b8:fa:f6:34:a6:16:6d:ba: 57:6a:b3:af:8f:f6:98:ec:70:74:a9:bb:9d:bf:8a:6c:31:39: 67:9c:bc:5d:77:4a:5a:f1:76:67:f6:5e:c3:92:fc:47:08:04: f5:62:fd:c7:87:cb:3f:c2:bd:b1:21:64:2d:11:f3:b9:62:e7: ec:f0:42:91:f9:1e:49:ea:6f:b8:53:2c:2b:08:a8:53:8f:bc: 6d:cd:80:7a:11:5e:17:ff:36:61:68:3e:7b:b0:97:aa:f1:ea: 95:15:f5:87:55:f9:83:0b:3a:d2:2a:48:75:49:55:68:87:96: 3d:72:8c:2d:c3:5a:8b:6b:f3:c7:32:1d:60:4c:bd:5a:f6:cf: 20:ba:81:21:4a:b6:84:79:5a:c1:7f:85:92:e5:18:aa:5e:4b: 0e:33:2b:89:07:00:ff:45:fc:70:c3:88:6f:3a:b7:0a:83:25: c7:90:2d:29:69:09:23:0d:a2:3b:e6:7a:dc:78:55:cc:88:76: b5:e9:9e:67:b3:36:a6:06:f7:61:39:b7:df:f0:30:f3:63:26: 1c:18:31:c9:73:3c:ac:22:9c:1e:74:cb:4f:23:a1:14:34:43: 91:27:d5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2AkFLjn4uVB3cd1eBSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2U1NTQ3YWViYzE3YTQ4MmI4Y2QxZWU4MTdkZDhjZWZm NmEzYWYwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD Eyg5NTQ1ZTFkZGFiNjg5MDcyODA1ZmI4YWRlOWMzNWQ2NDVmZWIyODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13emqn6cA1vUJ4/hbmA6uqYA3Kfe gVx5xIwPDeB6iSyEMYQ3YVWBGxaX9GkdxgY8cz2QivU5lfwSrQLwWaAZf0uJjQM+ u5hyZKoBWsnu3pRncb+lyaMS537+8dLHlwQp9OWkirWbTvlBcn4dh29I7TmDtjHC J6IltK9gFZ2AE8KPeucqPfiDSzCW5kvgUJsldMpeR/70fKA/CzSYiDQBobhGebKl ZsNmOze71lMie319n4qxKHN/ZNAgKYdug3P/jSNkSclg26N1WBe8EY6dOig6P7Cx NaJsX1onFJuVHE6WdKc0lcm+JYYTTKcIcTwmOfprXDB1A2e+LU9MbzgmwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVF4d2raJBygF+4renDXWRf6yhGMB8GA1UdIwQY MBaAFOM+VUeuvBekgrjNHugX3Yzv9qOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zOWE0N2YtMWJmZC00NDBlLWI0ZWYt YjA3MDFiOGI0MGM3LzEvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zOWE0N2YtMWJmZC00NDBlLWI0ZWYtYjA3MDFiOGI0MGM3 LzEvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQU/D8wP g9QQKgtDNfg+3lbQERxUxC7UClo0oLj69jSmFm26V2qzr4/2mOxwdKm7nb+KbDE5 Z5y8XXdKWvF2Z/Zew5L8RwgE9WL9x4fLP8K9sSFkLRHzuWLn7PBCkfkeSepvuFMs KwioU4+8bc2AehFeF/82YWg+e7CXqvHqlRX1h1X5gws60ipIdUlVaIeWPXKMLcNa i2vzxzIdYEy9WvbPILqBIUq2hHlawX+FkuUYql5LDjMriQcA/0X8cMOIbzq3CoMl x5AtKWkJIw2iO+Z63HhVzIh2temeZ7M2pgb3YTm33/Aw82MmHBgxyXM8rCKcHnTL TyOhFDRDkSfVqw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:51 2025 by rpki-client