This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json) Hash identifier: IekFMH5o23kyUrRnIDAHGrmCrPUkdSyKaVQMqe6Jcps= Subject key identifier: 9E:FB:92:E8:9F:3B:7F:80:4C:EA:C6:5B:36:8E:11:1D:1F:65:1B:02 Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Certificate serial: 019B4B82FD44CCE6F8CEDD85ACB7536A0A61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 14:00:34 +0000 Manifest this update: Tue 23 Dec 2025 14:00:34 +0000 Manifest next update: Wed 24 Dec 2025 14:00:34 +0000 Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: Swe+RzJYdjyZVhHIM4ro3INcRxZ2UUC9TJ1G0YUKco0=) 2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:82:fd:44:cc:e6:f8:ce:dd:85:ac:b7:53:6a:0a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Validity Not Before: Dec 23 14:00:34 2025 GMT Not After : Dec 24 14:00:34 2025 GMT Subject: CN=9efb92e89f3b7f804ceac65b368e111d1f651b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:9e:31:2e:7b:4f:6c:60:fb:c9:49:05:2a: ae:e4:7e:85:2b:f0:a6:72:f7:77:e2:85:4a:b6:73: 6e:7b:35:81:28:de:f7:a9:58:7a:80:ef:3d:c5:e3: cf:9f:dd:57:47:fc:eb:62:9e:bc:3f:76:20:84:50: 9f:d6:bf:2b:65:fa:c3:cc:67:3a:6e:c3:d0:83:0c: d5:ff:79:92:18:7d:6d:d8:d1:b2:d4:c6:26:9f:b7: d5:b7:f1:68:f5:c0:13:28:fd:a1:2d:06:54:8c:9f: 0d:a4:b2:bc:63:62:df:66:11:b1:c2:23:a3:2a:fb: 4e:47:a7:5f:8c:a9:ad:29:4c:d5:51:89:06:7b:87: c2:f1:15:ca:06:9d:ee:30:94:cc:21:2f:e1:e0:19: 23:46:13:75:26:3d:22:6a:bc:15:df:b8:11:c8:6d: 5e:a3:e1:1e:a9:d6:03:1c:28:46:97:18:67:4e:76: f5:e0:6a:d4:95:17:e8:e3:d6:50:ec:52:13:fa:b7: a0:11:4a:84:b8:20:8f:fa:4f:07:7a:f7:26:68:15: e3:9e:b7:12:a0:b7:05:62:b0:48:cd:b0:e2:5e:aa: a2:46:66:9f:6c:84:9e:77:2c:3b:08:75:d5:74:c9: f0:04:ba:a0:a6:74:c4:26:6a:e1:cb:2f:62:94:c0: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FB:92:E8:9F:3B:7F:80:4C:EA:C6:5B:36:8E:11:1D:1F:65:1B:02 X509v3 Authority Key Identifier: keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:79:c0:14:1e:0b:5a:e5:50:10:f3:bc:49:b2:28:3f:d5:fb: 1d:98:69:a1:77:57:37:16:1c:0b:84:e4:fe:ba:b2:03:03:85: 1e:26:68:eb:eb:ed:e7:72:61:46:3e:6d:9d:09:3d:5d:ee:a1: 68:d0:2e:70:c1:87:6f:7e:0f:f7:42:3b:7b:35:7c:2b:2e:17: 85:c4:21:37:f1:bd:f7:b7:9e:65:d7:c4:16:7c:02:b5:bc:82: 56:c0:12:fa:50:2d:fb:f2:c9:1e:f8:ec:a6:ad:e0:a3:8c:90: 83:dc:0b:7e:ee:57:57:1a:21:6b:f3:df:3a:83:63:cf:73:4d: c4:a4:63:47:18:bc:1b:3a:76:ab:2d:5b:c5:9f:d2:e5:86:ae: 71:a5:03:37:cf:9d:38:9f:07:7c:d9:21:05:84:bc:45:78:a0: a8:d6:72:86:69:a2:d3:04:c3:0b:8d:c2:60:bc:49:e2:80:fb: 57:15:9d:e5:59:1a:1e:e0:46:65:b3:42:68:1a:1c:3b:79:e1: 96:33:0a:3d:22:df:52:35:18:e8:d8:51:12:ed:60:d5:da:a4: 4a:1d:54:3d:90:45:a6:66:06:85:f0:78:5e:ee:4d:27:a3:ac: 19:ae:24:01:ee:5f:48:4d:2f:29:69:61:78:99:7e:22:1f:38: 36:d7:43:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgv1EzOb4zt2FrLdTagphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGUxOWZjZWUyOWY3ZjEyZWYwNmM2MGY4NjYwZWQ3MDBm ZTkwYjkwHhcNMjUxMjIzMTQwMDM0WhcNMjUxMjI0MTQwMDM0WjAzMTEwLwYDVQQD Eyg5ZWZiOTJlODlmM2I3ZjgwNGNlYWM2NWIzNjhlMTExZDFmNjUxYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/qeMS57T2xg+8lJBSqu5H6FK/Cm cvd34oVKtnNuezWBKN73qVh6gO89xePPn91XR/zrYp68P3YghFCf1r8rZfrDzGc6 bsPQgwzV/3mSGH1t2NGy1MYmn7fVt/Fo9cATKP2hLQZUjJ8NpLK8Y2LfZhGxwiOj KvtOR6dfjKmtKUzVUYkGe4fC8RXKBp3uMJTMIS/h4BkjRhN1Jj0iarwV37gRyG1e o+EeqdYDHChGlxhnTnb14GrUlRfo49ZQ7FIT+regEUqEuCCP+k8HevcmaBXjnrcS oLcFYrBIzbDiXqqiRmafbISedyw7CHXVdMnwBLqgpnTEJmrhyy9ilMA6rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ77kuifO3+ATOrGWzaOER0fZRsCMB8GA1UdIwQY MBaAFOTeGfzuKffxLvBsYPhmDtcA/pC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODIt YjliNDQ3MzIwOGZkLzEvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODItYjliNDQ3MzIwOGZk LzEvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXnAFB4L WuVQEPO8SbIoP9X7HZhpoXdXNxYcC4Tk/rqyAwOFHiZo6+vt53JhRj5tnQk9Xe6h aNAucMGHb34P90I7ezV8Ky4XhcQhN/G997eeZdfEFnwCtbyCVsAS+lAt+/LJHvjs pq3go4yQg9wLfu5XVxoha/PfOoNjz3NNxKRjRxi8Gzp2qy1bxZ/S5YaucaUDN8+d OJ8HfNkhBYS8RXigqNZyhmmi0wTDC43CYLxJ4oD7VxWd5VkaHuBGZbNCaBocO3nh ljMKPSLfUjUY6NhREu1g1dqkSh1UPZBFpmYGhfB4Xu5NJ6OsGa4kAe5fSE0vKWlh eJl+Ih84NtdDDg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:45:43 2025 by rpki-client