This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json) Hash identifier: P12C4j1WaCU10WcvOkbSQQNOAZbtxwIV8M+pgyw1xgw= Subject key identifier: FD:43:97:30:8A:50:87:F3:6D:87:EA:EF:2A:BF:1B:F8:A0:BC:61:20 Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48 Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748 Certificate serial: 019B337B90F5B945B401E772F67BEBD5E39C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft Manifest number: 1725 Signing time: Thu 18 Dec 2025 22:01:34 +0000 Manifest this update: Thu 18 Dec 2025 22:01:34 +0000 Manifest next update: Fri 19 Dec 2025 22:01:34 +0000 Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: LVPvqzSeYhoQPV4wCREoC9KJszPQfM2Ht8a8Uf6My9U=) 2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:90:f5:b9:45:b4:01:e7:72:f6:7b:eb:d5:e3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748 Validity Not Before: Dec 18 22:01:34 2025 GMT Not After : Dec 19 22:01:34 2025 GMT Subject: CN=fd4397308a5087f36d87eaef2abf1bf8a0bc6120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:f3:d2:56:1f:4d:83:71:69:b5:ba:d8:6d: 19:a5:9c:c0:09:fb:4b:29:80:7f:d6:72:11:5c:9e: 5b:96:88:82:9c:2a:5f:ce:d9:b6:45:30:e8:4d:08: 3b:5f:93:3a:1a:97:49:64:16:2f:68:6c:41:1b:e8: 68:f5:ea:18:b5:95:c9:f8:c6:49:0e:59:41:46:50: 0a:5b:e3:be:40:0c:d9:1f:6b:17:16:5d:02:c9:61: 4f:d6:51:1b:52:fc:a4:b3:ac:e2:a7:75:14:d6:52: 09:6c:d6:03:d3:45:2f:44:0b:94:b7:10:05:89:dd: 47:7e:de:ae:66:18:75:ba:06:96:46:4e:7a:58:cb: d1:d2:2e:8c:16:b7:a9:aa:6a:04:3f:8a:95:93:ff: 31:29:33:f7:68:cf:a4:2d:cd:f0:7e:29:8e:7d:96: cb:bf:8e:99:ae:a9:76:80:2a:9e:12:a2:ff:11:88: a9:2b:8e:2a:85:7c:c7:5a:b9:36:33:b7:db:f2:4e: 88:14:7b:ee:42:41:d7:5b:eb:d6:fb:b5:4d:bc:39: 85:e4:5c:4a:42:08:f4:58:41:51:0c:c0:01:d8:94: 37:cd:19:6e:48:22:81:e0:c1:e5:33:fb:8f:9a:40: db:20:4c:44:fb:58:b7:e1:87:68:3f:a0:63:99:67: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:43:97:30:8A:50:87:F3:6D:87:EA:EF:2A:BF:1B:F8:A0:BC:61:20 X509v3 Authority Key Identifier: keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0d:67:9f:5c:58:b1:2a:48:a5:dc:9c:31:c6:2c:e3:e4:80: 82:38:95:58:9c:6e:ac:01:fa:3a:3c:f8:fb:10:f5:42:f7:c0: f4:07:53:fa:82:cb:29:b8:6c:85:f2:fe:6e:a2:21:80:c4:47: 6e:91:b1:dd:ff:da:a4:a9:2b:d5:4a:72:a4:69:b8:23:dc:57: ee:a1:8f:a7:4d:ad:db:0b:e5:67:a3:90:69:a8:d3:5b:89:b5: 66:b5:e3:ce:5a:74:05:ed:df:90:6d:77:40:1b:2e:1b:50:92: 38:b2:e0:3c:93:a7:4e:21:1e:47:42:d6:ad:ba:9e:4b:ed:1b: 6b:26:31:e1:a7:b9:8f:da:b9:d0:4e:5d:b1:44:33:96:0e:9b: 30:57:04:58:f1:40:c1:b1:4d:2e:e0:9e:ea:79:c3:57:b7:fd: da:e5:ef:8e:33:31:e3:93:b7:2e:f5:3c:2a:b7:3b:e4:29:a0: 3c:e3:aa:da:97:cb:e1:a1:20:32:f9:03:11:a9:a9:f3:7d:c5: 73:00:0f:a6:ec:03:19:29:92:df:7a:8e:b5:92:8f:56:29:77: e6:2d:08:ec:aa:6b:19:0b:bb:ed:b6:16:bb:e2:66:02:67:07: af:1f:e8:6b:72:fe:ed:0e:3a:98:9e:1f:98:49:3a:b7:47:7a: a2:81:96:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze5D1uUW0Aedy9nvr1eOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2RmMTU1Yzg3YTU5MGFjMWU1Mzg1NDRjZjMzNTZlNGZj ODE3NDgwHhcNMjUxMjE4MjIwMTM0WhcNMjUxMjE5MjIwMTM0WjAzMTEwLwYDVQQD EyhmZDQzOTczMDhhNTA4N2YzNmQ4N2VhZWYyYWJmMWJmOGEwYmM2MTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh07z0lYfTYNxabW62G0ZpZzACftL KYB/1nIRXJ5bloiCnCpfztm2RTDoTQg7X5M6GpdJZBYvaGxBG+ho9eoYtZXJ+MZJ DllBRlAKW+O+QAzZH2sXFl0CyWFP1lEbUvyks6zip3UU1lIJbNYD00UvRAuUtxAF id1Hft6uZhh1ugaWRk56WMvR0i6MFrepqmoEP4qVk/8xKTP3aM+kLc3wfimOfZbL v46Zrql2gCqeEqL/EYipK44qhXzHWrk2M7fb8k6IFHvuQkHXW+vW+7VNvDmF5FxK Qgj0WEFRDMAB2JQ3zRluSCKB4MHlM/uPmkDbIExE+1i34YdoP6BjmWcgNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1DlzCKUIfzbYfq7yq/G/igvGEgMB8GA1UdIwQY MBaAFOc98VXIelkKweU4VEzzNW5PyBdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQt ZGRkN2JmOTNkMzU2LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQtZGRkN2JmOTNkMzU2 LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjw1nn1xY sSpIpdycMcYs4+SAgjiVWJxurAH6Ojz4+xD1QvfA9AdT+oLLKbhshfL+bqIhgMRH bpGx3f/apKkr1UpypGm4I9xX7qGPp02t2wvlZ6OQaajTW4m1ZrXjzlp0Be3fkG13 QBsuG1CSOLLgPJOnTiEeR0LWrbqeS+0bayYx4ae5j9q50E5dsUQzlg6bMFcEWPFA wbFNLuCe6nnDV7f92uXvjjMx45O3LvU8Krc75CmgPOOq2pfL4aEgMvkDEamp833F cwAPpuwDGSmS33qOtZKPVil35i0I7KprGQu77bYWu+JmAmcHrx/oa3L+7Q46mJ4f mEk6t0d6ooGWng== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:42 2025 by rpki-client