This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json) Hash identifier: V4aTrjI/G/NQMtHNwIRXv/vsJfQ1VNdmkOiHSXWFw54= Subject key identifier: A9:3E:E0:70:BD:84:6A:4D:9B:6F:6C:1C:AA:4A:9B:DD:F2:36:79:95 Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48 Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748 Certificate serial: 019B5A1A4B7FEBB93391EDEA652681DB8550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft Manifest number: 1739 Signing time: Fri 26 Dec 2025 10:00:31 +0000 Manifest this update: Fri 26 Dec 2025 10:00:31 +0000 Manifest next update: Sat 27 Dec 2025 10:00:31 +0000 Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: Rxih09H4Ca5gR3NV02j/3+LG1aiO63kqzHiWf7AmBgA=) 2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:4b:7f:eb:b9:33:91:ed:ea:65:26:81:db:85:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748 Validity Not Before: Dec 26 10:00:31 2025 GMT Not After : Dec 27 10:00:31 2025 GMT Subject: CN=a93ee070bd846a4d9b6f6c1caa4a9bddf2367995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:f4:d6:33:eb:9e:45:7a:83:8c:e2:a4:2e: 34:79:3b:4a:dc:13:4a:05:50:ee:4e:aa:3f:1e:fc: 28:9b:5f:f5:78:1c:36:0d:c0:b9:ba:78:8a:e5:c8: 4b:c0:40:c2:2d:14:1a:74:a7:2d:76:6f:0a:76:92: be:1a:a5:11:f1:a7:eb:ed:e6:10:ff:5e:92:10:2c: 62:56:8f:de:de:2f:b3:05:8c:c6:04:43:0b:cb:15: 91:32:b0:21:48:8f:57:43:79:e9:bd:4d:68:5a:2f: 5b:bf:ec:45:5b:ab:85:66:62:43:4c:78:4a:b0:01: 90:77:f6:c9:f8:d9:7c:b1:94:46:9e:f4:ee:df:fe: ff:86:fb:a1:fa:61:76:d0:a9:ae:07:c9:79:21:35: 04:23:ea:24:bb:38:08:9c:7d:3c:c9:30:55:e9:26: 49:6e:6f:61:a6:a5:d0:ac:f3:28:89:ce:8b:09:44: 2a:0b:fc:7b:b9:8c:5e:6c:77:5b:7a:b8:5a:8b:e8: f6:cc:1e:ae:b1:93:be:70:0f:92:25:4a:cb:d6:42: a2:a8:27:5c:ba:dc:d7:66:c3:10:2a:78:3a:a5:ba: 75:d0:86:c0:7b:ea:fd:50:9b:a7:01:06:99:af:a7: 31:f4:14:cc:4a:92:1a:00:6c:69:ec:43:00:76:30: 6e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3E:E0:70:BD:84:6A:4D:9B:6F:6C:1C:AA:4A:9B:DD:F2:36:79:95 X509v3 Authority Key Identifier: keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:38:a6:b3:e3:04:41:5f:58:76:63:ee:87:22:3f:6e:7b:3c: 90:88:77:d9:85:35:59:b9:b6:90:93:b8:d9:18:44:7e:79:22: 68:4f:d0:b8:66:ad:b0:c7:51:f2:4b:86:ba:83:10:56:f5:5e: bc:84:1c:c2:c8:45:4f:92:e0:bf:89:7e:96:98:c0:b4:24:03: 73:2b:6d:c5:41:e2:31:b9:43:68:4a:a4:05:c3:11:f6:68:4e: ac:e8:60:af:5d:11:5d:97:b3:52:f3:47:9c:2b:09:93:94:5a: df:ed:a2:5d:3e:49:e4:56:13:26:46:0d:4b:2c:81:b8:d3:88: b7:2f:24:03:e3:10:ef:0c:db:a9:8e:53:ca:f2:3c:61:e2:9e: 0a:94:50:e2:02:44:68:29:9f:92:f1:c1:cf:20:35:a3:f6:e2: 40:31:23:86:f9:d0:f7:35:96:2e:7e:28:81:7e:ec:9a:5e:80: c0:a4:19:f3:de:9b:1e:b1:02:66:c5:34:94:92:6d:04:5f:4c: 38:fe:25:bf:49:e5:69:8f:77:ae:85:0e:ef:18:50:27:58:11: 03:04:94:41:32:e5:70:75:59:d6:51:b5:ff:ae:2e:4e:00:47: ec:2e:e3:25:0c:77:6e:63:93:c7:82:d7:c4:c4:a3:8d:85:6b: 76:ff:21:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGkt/67kzke3qZSaB24VQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2RmMTU1Yzg3YTU5MGFjMWU1Mzg1NDRjZjMzNTZlNGZj ODE3NDgwHhcNMjUxMjI2MTAwMDMxWhcNMjUxMjI3MTAwMDMxWjAzMTEwLwYDVQQD EyhhOTNlZTA3MGJkODQ2YTRkOWI2ZjZjMWNhYTRhOWJkZGYyMzY3OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9L01jPrnkV6g4zipC40eTtK3BNK BVDuTqo/Hvwom1/1eBw2DcC5uniK5chLwEDCLRQadKctdm8KdpK+GqUR8afr7eYQ /16SECxiVo/e3i+zBYzGBEMLyxWRMrAhSI9XQ3npvU1oWi9bv+xFW6uFZmJDTHhK sAGQd/bJ+Nl8sZRGnvTu3/7/hvuh+mF20KmuB8l5ITUEI+okuzgInH08yTBV6SZJ bm9hpqXQrPMoic6LCUQqC/x7uYxebHdberhai+j2zB6usZO+cA+SJUrL1kKiqCdc utzXZsMQKng6pbp10IbAe+r9UJunAQaZr6cx9BTMSpIaAGxp7EMAdjBuxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk+4HC9hGpNm29sHKpKm93yNnmVMB8GA1UdIwQY MBaAFOc98VXIelkKweU4VEzzNW5PyBdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQt ZGRkN2JmOTNkMzU2LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQtZGRkN2JmOTNkMzU2 LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDims+ME QV9YdmPuhyI/bns8kIh32YU1Wbm2kJO42RhEfnkiaE/QuGatsMdR8kuGuoMQVvVe vIQcwshFT5Lgv4l+lpjAtCQDcyttxUHiMblDaEqkBcMR9mhOrOhgr10RXZezUvNH nCsJk5Ra3+2iXT5J5FYTJkYNSyyBuNOIty8kA+MQ7wzbqY5TyvI8YeKeCpRQ4gJE aCmfkvHBzyA1o/biQDEjhvnQ9zWWLn4ogX7sml6AwKQZ896bHrECZsU0lJJtBF9M OP4lv0nlaY93roUO7xhQJ1gRAwSUQTLlcHVZ1lG1/64uTgBH7C7jJQx3bmOTx4LX xMSjjYVrdv8h4g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:33 2025 by rpki-client