This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json) Hash identifier: /nGR3pt9hUkK1MSt8Xtpyrdr0Va5N6w7lp3d/zE//48= Subject key identifier: 11:2C:F9:58:65:E4:B6:D3:58:6D:F1:AE:9B:33:E3:33:F9:CD:AD:EA Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f Certificate serial: 019B559900C131FAAE45809A0F802952D80D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft Manifest number: 089D Signing time: Thu 25 Dec 2025 13:00:49 +0000 Manifest this update: Thu 25 Dec 2025 13:00:49 +0000 Manifest next update: Fri 26 Dec 2025 13:00:49 +0000 Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=) 2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: ENow3iUFXydIFSonLy2HeVmjN6fzNDIu52da7gCQEMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:00:c1:31:fa:ae:45:80:9a:0f:80:29:52:d8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f Validity Not Before: Dec 25 13:00:49 2025 GMT Not After : Dec 26 13:00:49 2025 GMT Subject: CN=112cf95865e4b6d3586df1ae9b33e333f9cdadea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:c0:e8:c5:fa:2c:00:a6:52:6f:4f:49:f9: 52:65:0f:3a:2a:14:be:2e:39:cb:20:ad:1b:31:ba: 71:0f:15:dd:47:ec:f8:c6:6f:92:25:99:9f:70:2e: 37:d7:42:e2:c2:f5:d5:cc:ad:85:a5:4d:27:20:6f: 45:1c:9b:6e:4e:39:f9:6e:49:af:5b:5e:1d:82:97: b9:94:de:58:c9:e2:e3:f2:a4:13:1d:45:da:57:bd: 75:3d:32:c4:1c:14:9c:84:a3:c9:04:9d:91:67:15: 58:45:5e:a2:fb:1d:95:74:b1:4c:eb:b2:db:19:d0: 60:b0:8c:8e:25:1c:5b:33:e2:61:de:e7:b6:93:b2: 64:82:09:92:84:c4:ab:f4:59:3f:74:48:f5:9c:4e: 2d:e2:1a:6b:b4:55:c4:20:d4:81:6e:fe:ae:b6:9a: e3:3e:6d:a4:f5:e9:7c:e2:47:e7:0e:36:d1:1f:12: f6:10:28:2d:0d:d5:89:e3:ba:ff:96:66:e2:eb:0e: 42:a8:17:5b:4e:b5:87:fa:19:bd:94:db:e4:b8:12: d1:0c:12:bf:09:30:19:c4:4b:94:67:5f:47:ba:19: 77:14:d9:ca:13:55:81:e1:9e:68:ec:52:23:06:a7: 59:6e:1d:17:1b:a4:65:6f:95:80:5d:d3:36:13:e8: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2C:F9:58:65:E4:B6:D3:58:6D:F1:AE:9B:33:E3:33:F9:CD:AD:EA X509v3 Authority Key Identifier: keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:aa:90:3c:e9:c1:4a:57:65:40:d9:5e:1f:24:4c:66:da:f3: ab:f6:52:f1:8c:1a:94:86:fb:8c:10:af:01:1b:57:da:67:48: aa:ea:d0:0b:ad:19:a4:0f:89:b0:dd:cd:d8:89:b3:dc:62:cc: 64:5b:a4:45:a0:5a:13:da:9d:32:e1:83:71:a1:f3:ea:d7:5f: ff:b1:82:41:79:f8:b7:51:06:f1:c4:15:25:1f:41:4d:c1:8c: 11:cf:41:ac:2f:80:33:2d:bc:21:0f:69:91:63:7f:8f:6d:f4: 28:5f:c4:bd:ca:82:67:0f:65:c4:f3:bc:9a:3d:7c:bc:0b:bc: 41:58:fc:51:80:a6:ea:2b:cf:8b:10:6f:d9:83:6b:bd:8c:7f: 26:5c:4d:d7:36:61:da:5e:d5:a0:c4:ca:1d:02:a1:ea:be:3f: 60:0a:53:45:5a:45:d7:5b:11:76:f7:fb:52:c8:46:34:4f:7e: 8a:53:25:4c:4a:ba:c9:3c:c6:58:4e:bc:60:53:2f:dc:43:d4: 55:21:05:ac:a6:37:98:bb:57:7e:71:10:4d:d9:4c:6e:18:12: 79:b3:34:a8:49:f2:81:1b:ab:68:cd:e6:fd:e0:dd:6a:44:ac: 93:f3:c5:91:26:1a:a9:a8:f9:53:a8:fc:52:31:35:cd:cc:65: 4e:76:4b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmQDBMfquRYCaD4ApUtgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1 NWQxNGYwHhcNMjUxMjI1MTMwMDQ5WhcNMjUxMjI2MTMwMDQ5WjAzMTEwLwYDVQQD EygxMTJjZjk1ODY1ZTRiNmQzNTg2ZGYxYWU5YjMzZTMzM2Y5Y2RhZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpXA6MX6LACmUm9PSflSZQ86KhS+ LjnLIK0bMbpxDxXdR+z4xm+SJZmfcC4310LiwvXVzK2FpU0nIG9FHJtuTjn5bkmv W14dgpe5lN5YyeLj8qQTHUXaV711PTLEHBSchKPJBJ2RZxVYRV6i+x2VdLFM67Lb GdBgsIyOJRxbM+Jh3ue2k7JkggmShMSr9Fk/dEj1nE4t4hprtFXEINSBbv6utprj Pm2k9el84kfnDjbRHxL2ECgtDdWJ47r/lmbi6w5CqBdbTrWH+hm9lNvkuBLRDBK/ CTAZxEuUZ19Huhl3FNnKE1WB4Z5o7FIjBqdZbh0XG6Rlb5WAXdM2E+iMUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEs+Vhl5LbTWG3xrpsz4zP5za3qMB8GA1UdIwQY MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6qQPOnB SldlQNleHyRMZtrzq/ZS8YwalIb7jBCvARtX2mdIqurQC60ZpA+JsN3N2Imz3GLM ZFukRaBaE9qdMuGDcaHz6tdf/7GCQXn4t1EG8cQVJR9BTcGMEc9BrC+AMy28IQ9p kWN/j230KF/EvcqCZw9lxPO8mj18vAu8QVj8UYCm6ivPixBv2YNrvYx/JlxN1zZh 2l7VoMTKHQKh6r4/YApTRVpF11sRdvf7UshGNE9+ilMlTEq6yTzGWE68YFMv3EPU VSEFrKY3mLtXfnEQTdlMbhgSebM0qEnygRuraM3m/eDdakSsk/PFkSYaqaj5U6j8 UjE1zcxlTnZLCg== -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:26 2025 by rpki-client