This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json) Hash identifier: csYnVaWjK2HDdekIT8+EHUnc/VvAP5/LArQq7raBMGM= Subject key identifier: C5:74:DE:75:39:A4:DE:C9:EA:E1:C7:6F:E0:01:B4:11:8A:3D:E8:A6 Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Certificate serial: 019AF49BB832FA251F1559FC7E094808BD67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:37 +0000 Manifest this update: Sat 06 Dec 2025 17:00:37 +0000 Manifest next update: Sun 07 Dec 2025 17:00:37 +0000 Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: vfrSCXBuw89eRua++pTGbZ+TiF3crOgicW9+strxGb8=) 2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b8:32:fa:25:1f:15:59:fc:7e:09:48:08:bd:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Validity Not Before: Dec 6 17:00:37 2025 GMT Not After : Dec 7 17:00:37 2025 GMT Subject: CN=c574de7539a4dec9eae1c76fe001b4118a3de8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:78:bd:64:21:9a:f5:23:7d:29:c8:ca:e8: 78:57:3d:7d:17:b8:1b:cf:cd:b5:0d:11:af:de:14: 17:dc:e3:d9:58:f8:29:a7:e0:be:32:8d:28:d1:9d: d2:69:2f:a3:08:80:45:f8:9e:48:1b:45:b6:f5:ce: f7:89:2c:dc:3c:62:12:a0:39:67:5c:34:cd:74:d7: 01:c7:63:82:70:ee:b6:67:a9:4c:43:fd:6e:d5:5a: 1f:e9:cd:4e:e7:3c:ac:57:83:8b:ff:31:d8:c4:49: b6:71:92:8f:cf:7d:bb:37:4f:b0:0e:08:ed:9b:40: 01:1c:c1:70:7d:6b:eb:82:62:d6:57:4b:ce:71:b0: 5f:fd:bc:14:b6:cf:82:51:69:29:63:d0:fa:95:a3: 20:20:b8:9a:7d:7c:e6:52:43:98:cb:7f:74:a1:68: b8:cb:48:56:95:1f:2f:65:37:11:78:11:3e:12:2b: ef:74:f5:9b:d3:8f:d9:88:ad:58:c4:38:85:2d:ff: 14:41:72:20:08:bc:fc:f7:e6:51:0d:df:d1:8b:15: c8:1b:b8:5e:74:e1:3b:c2:e8:a5:50:31:16:48:e0: b9:ed:24:00:25:52:73:69:c9:e3:b4:01:4d:51:0d: 0a:c9:92:a1:b7:ac:65:88:9a:c5:31:04:b0:0e:e5: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:74:DE:75:39:A4:DE:C9:EA:E1:C7:6F:E0:01:B4:11:8A:3D:E8:A6 X509v3 Authority Key Identifier: keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:68:4f:6e:bb:2c:54:3d:e2:2a:ca:d9:3d:ad:b4:f0:6f:0e: 08:36:e2:a3:7a:0c:08:3b:86:fd:86:66:54:22:b2:5f:14:1b: 1b:c4:72:05:73:f6:d5:67:43:a0:56:21:ce:9b:2e:45:06:14: 24:7b:5c:c3:ed:cc:e6:ac:e4:6a:29:37:0a:b1:11:de:cd:f8: bb:43:34:0d:63:04:a6:58:63:14:3d:0c:63:16:c0:4e:a2:3f: bf:5e:82:59:24:57:92:c9:29:0e:c7:a4:f7:74:f8:9b:11:e9: 0a:fa:8c:39:c4:f0:28:c4:d2:7a:b2:f0:f1:41:d3:4b:a6:23: bb:c3:65:30:d2:c0:f6:45:cf:be:c5:8c:73:85:c8:db:32:0e: 11:05:85:8f:a4:6b:da:d3:38:b9:78:2c:a5:05:f7:4e:1f:46: fc:d5:b0:a9:39:c8:32:e4:b8:9c:80:28:1f:9a:fc:9b:cb:0c: 9e:e2:83:cf:6f:7d:6a:22:a1:a8:e3:3c:18:c4:14:89:b9:49: 57:12:35:65:37:5a:c9:0b:66:50:70:9f:08:0a:9e:f0:26:d7: b2:a0:36:20:c9:bf:1e:47:e4:65:e9:69:0e:41:71:c5:90:c0: 9c:6c:10:de:aa:36:a2:8e:07:a9:b9:99:f2:42:53:95:9f:55: ab:60:77:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7gy+iUfFVn8fglICL1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGUxOWZjZWUyOWY3ZjEyZWYwNmM2MGY4NjYwZWQ3MDBm ZTkwYjkwHhcNMjUxMjA2MTcwMDM3WhcNMjUxMjA3MTcwMDM3WjAzMTEwLwYDVQQD EyhjNTc0ZGU3NTM5YTRkZWM5ZWFlMWM3NmZlMDAxYjQxMThhM2RlOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8h4vWQhmvUjfSnIyuh4Vz19F7gb z821DRGv3hQX3OPZWPgpp+C+Mo0o0Z3SaS+jCIBF+J5IG0W29c73iSzcPGISoDln XDTNdNcBx2OCcO62Z6lMQ/1u1Vof6c1O5zysV4OL/zHYxEm2cZKPz327N0+wDgjt m0ABHMFwfWvrgmLWV0vOcbBf/bwUts+CUWkpY9D6laMgILiafXzmUkOYy390oWi4 y0hWlR8vZTcReBE+EivvdPWb04/ZiK1YxDiFLf8UQXIgCLz89+ZRDd/RixXIG7he dOE7wuilUDEWSOC57SQAJVJzacnjtAFNUQ0KyZKht6xliJrFMQSwDuVqLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV03nU5pN7J6uHHb+ABtBGKPeimMB8GA1UdIwQY MBaAFOTeGfzuKffxLvBsYPhmDtcA/pC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODIt YjliNDQ3MzIwOGZkLzEvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODItYjliNDQ3MzIwOGZk LzEvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2hPbrss VD3iKsrZPa208G8OCDbio3oMCDuG/YZmVCKyXxQbG8RyBXP21WdDoFYhzpsuRQYU JHtcw+3M5qzkaik3CrER3s34u0M0DWMEplhjFD0MYxbATqI/v16CWSRXkskpDsek 93T4mxHpCvqMOcTwKMTSerLw8UHTS6Yju8NlMNLA9kXPvsWMc4XI2zIOEQWFj6Rr 2tM4uXgspQX3Th9G/NWwqTnIMuS4nIAoH5r8m8sMnuKDz299aiKhqOM8GMQUiblJ VxI1ZTdayQtmUHCfCAqe8CbXsqA2IMm/HkfkZelpDkFxxZDAnGwQ3qo2oo4HqbmZ 8kJTlZ9Vq2B3Mw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:06 2025 by rpki-client