This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json) Hash identifier: 3F74dJ5ym54djUicQh2eLJyA+v1QwDcOhfeWD3KMOvc= Subject key identifier: 62:EA:EE:34:A6:BE:19:96:87:9B:91:CB:1B:68:DA:9B:15:3F:04:D2 Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f Certificate serial: 019B443883A8F94C0DB7785E1BF648495C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft Manifest number: 0894 Signing time: Mon 22 Dec 2025 04:01:52 +0000 Manifest this update: Mon 22 Dec 2025 04:01:52 +0000 Manifest next update: Tue 23 Dec 2025 04:01:52 +0000 Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=) 2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: 020A7SlidlOWaSU8Xr6uY4212nNJ7eIG4tFCY+8f4Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:83:a8:f9:4c:0d:b7:78:5e:1b:f6:48:49:5c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f Validity Not Before: Dec 22 04:01:52 2025 GMT Not After : Dec 23 04:01:52 2025 GMT Subject: CN=62eaee34a6be1996879b91cb1b68da9b153f04d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:4f:dd:3d:05:d3:13:e3:a1:72:ef:85:c0: f0:00:45:29:69:9a:c0:ac:c1:6b:ba:fd:dd:99:11: e7:e6:d5:8d:2f:8e:3f:68:60:82:b4:11:c0:70:b2: 50:f7:26:ee:c6:2c:56:99:a9:92:f4:a6:98:62:de: a1:72:f2:fc:42:4d:bf:ae:a6:43:76:cc:04:ea:76: 5e:30:92:ee:01:ac:2c:87:02:f9:78:2a:30:11:d5: 33:e2:5d:2f:62:f9:63:19:be:6e:4d:f1:a0:d4:8f: 3c:87:79:b8:0f:a9:dc:7c:b6:94:35:63:33:14:37: 55:de:fc:ab:28:87:e9:6f:7a:9c:0a:fb:4f:b7:f8: 3e:91:cd:74:13:96:fd:3a:e2:82:78:c8:07:1a:ca: e8:89:d8:5b:65:9e:32:05:93:c6:e6:2d:92:af:29: 38:47:44:30:ec:5d:0e:75:86:8d:b9:1a:32:ae:2a: 96:d3:c5:66:d3:5b:3c:68:8d:28:94:1e:7b:5e:a5: 46:ca:9b:52:ac:41:dc:3c:d7:f9:3e:74:df:ac:69: 4b:1d:3b:1c:dc:ea:b3:f2:92:a9:3f:4e:95:c8:9f: 32:08:a6:24:c0:17:cf:f4:a8:48:72:c3:af:38:8e: cf:db:85:50:dc:c5:e3:cd:66:03:80:f7:88:37:8d: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EA:EE:34:A6:BE:19:96:87:9B:91:CB:1B:68:DA:9B:15:3F:04:D2 X509v3 Authority Key Identifier: keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d2:a6:66:94:d3:b3:00:af:0d:a6:e7:78:75:09:20:1a:8f: db:d7:af:32:30:5b:4d:aa:dc:1b:43:6e:d1:83:b9:93:c3:15: 16:fd:8a:79:a9:fc:6f:1e:6d:b8:ea:81:07:b1:a7:dc:44:15: da:c8:df:38:2b:8f:29:08:8b:bb:30:00:62:4b:81:bf:08:b0: ee:e5:18:f7:e8:f6:0d:0c:40:eb:67:f6:68:46:7a:82:16:be: 09:56:fc:8d:95:3a:6c:eb:da:5f:9e:df:34:d6:c7:55:35:32: 02:64:b8:4a:86:75:11:66:29:1b:36:4d:e2:d1:74:46:72:d3: 4e:3a:6c:28:df:3d:b7:f9:75:9d:22:1e:07:f7:04:8b:b0:5f: 26:c8:38:73:0c:bf:79:32:3e:b9:1c:e9:2c:a3:48:31:16:da: 43:86:15:63:2a:1d:76:c3:11:8b:a4:6e:4f:40:72:2f:62:45: 34:da:3a:b0:cd:71:5f:97:33:75:da:2a:7e:3c:bb:94:71:25: 77:5b:c5:a3:ff:97:24:16:5c:06:df:f6:e9:ad:80:4b:55:9d: 2b:d9:8a:6f:d6:69:c5:2a:58:68:4f:2f:d0:1b:df:e1:29:a5: 27:b4:84:eb:cc:ef:81:64:7e:1b:3a:c3:4c:69:4b:fc:9f:a4: c0:bb:62:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOIOo+UwNt3heG/ZISVwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1 NWQxNGYwHhcNMjUxMjIyMDQwMTUyWhcNMjUxMjIzMDQwMTUyWjAzMTEwLwYDVQQD Eyg2MmVhZWUzNGE2YmUxOTk2ODc5YjkxY2IxYjY4ZGE5YjE1M2YwNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7dP3T0F0xPjoXLvhcDwAEUpaZrA rMFruv3dmRHn5tWNL44/aGCCtBHAcLJQ9ybuxixWmamS9KaYYt6hcvL8Qk2/rqZD dswE6nZeMJLuAawshwL5eCowEdUz4l0vYvljGb5uTfGg1I88h3m4D6ncfLaUNWMz FDdV3vyrKIfpb3qcCvtPt/g+kc10E5b9OuKCeMgHGsroidhbZZ4yBZPG5i2Sryk4 R0Qw7F0OdYaNuRoyriqW08Vm01s8aI0olB57XqVGyptSrEHcPNf5PnTfrGlLHTsc 3Oqz8pKpP06VyJ8yCKYkwBfP9KhIcsOvOI7P24VQ3MXjzWYDgPeIN42+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLq7jSmvhmWh5uRyxto2psVPwTSMB8GA1UdIwQY MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftKmZpTT swCvDabneHUJIBqP29evMjBbTarcG0Nu0YO5k8MVFv2Kean8bx5tuOqBB7Gn3EQV 2sjfOCuPKQiLuzAAYkuBvwiw7uUY9+j2DQxA62f2aEZ6gha+CVb8jZU6bOvaX57f NNbHVTUyAmS4SoZ1EWYpGzZN4tF0RnLTTjpsKN89t/l1nSIeB/cEi7BfJsg4cwy/ eTI+uRzpLKNIMRbaQ4YVYyoddsMRi6RuT0ByL2JFNNo6sM1xX5czddoqfjy7lHEl d1vFo/+XJBZcBt/26a2AS1WdK9mKb9ZpxSpYaE8v0Bvf4SmlJ7SE68zvgWR+GzrD TGlL/J+kwLtiig== -----END CERTIFICATE-----Generated at Mon Dec 22 07:21:13 2025 by rpki-client