This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft File: fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json) Hash identifier: RTHExcJl66KKzzLTBSpGqfvW+fTwZ9OXEPDamERCsD4= Subject key identifier: 5A:44:EE:50:06:68:FF:A6:A4:A0:E6:E6:6C:BF:0E:46:DF:DF:B1:1F Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Certificate serial: 019B4B836A1D4552ABA7B1550E664D187AC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft Manifest number: 11CC Signing time: Tue 23 Dec 2025 14:01:02 +0000 Manifest this update: Tue 23 Dec 2025 14:01:02 +0000 Manifest next update: Wed 24 Dec 2025 14:01:02 +0000 Files and hashes: 1: Bb4Upmts5_u6jsKp_pTK9JEbd5w.roa (hash: /xAZrEK6lSJ0oZp7dB09JdfrnnnAZq0xrYuyvDE06Ps=) 2: L9AVUKjVgjcjBjCh3XKgvGTA1hk.roa (hash: MRdftqqKSbxUqqyJAk4X82kFe7zRmWPvMYuMjvwKsdI=) 3: QV4GiX-_NmB8bXeYFpiPeoYvPgs.roa (hash: ExzZIsYL5CpNKY2xKGueRJzqSweDgaHE92K03gK5p6M=) 4: T3OhLBOAw7e0wv44p_23R0s8qHo.roa (hash: 8DuBuaHSGCknynomXt614XNhRxVs83fH+JHNcKSNBiQ=) 5: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: du7dAjQeH2D+0cYT5tC3PvrEYLislkOJ37SCEEVk4HI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:6a:1d:45:52:ab:a7:b1:55:0e:66:4d:18:7a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Validity Not Before: Dec 23 14:01:02 2025 GMT Not After : Dec 24 14:01:02 2025 GMT Subject: CN=5a44ee500668ffa6a4a0e6e66cbf0e46dfdfb11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:bc:32:17:3e:31:1f:5e:6c:1b:2a:3b:5b: 9f:ac:a2:c8:31:1b:af:90:ba:43:13:2e:db:ba:57: cf:a9:f8:7a:8a:9f:d1:c0:28:d7:ae:7d:58:6d:fb: f6:d3:24:f2:4a:6d:45:2a:fc:fd:4d:fe:eb:9c:77: ba:c1:b9:89:da:c2:29:5e:c3:63:ac:cc:87:62:79: a1:d4:d7:d6:43:dc:5a:ab:be:1c:32:f5:b0:65:d0: c4:90:b9:72:45:1a:92:96:ae:c5:e1:19:c1:eb:e5: 7f:9f:21:7b:47:99:55:10:6f:18:b2:51:56:94:b0: ef:bc:b4:f5:45:a9:5c:04:35:0b:29:1d:37:67:8d: 1d:0d:94:0a:e2:a1:b0:82:32:d7:29:f7:b0:52:2f: e9:60:07:88:01:d4:66:7a:50:9a:17:c6:45:55:6a: 5d:59:b2:77:dd:0c:38:ad:21:4f:46:8d:3e:49:94: 09:a2:a0:b1:8d:13:3f:c8:5d:39:7c:28:28:cd:e2: f8:e8:8a:7d:84:c8:fe:31:4d:99:7c:aa:44:73:31: 2c:6e:8e:21:07:aa:da:82:78:80:9f:3c:ab:ee:bf: 7f:41:b0:07:c9:e1:74:86:93:37:98:10:a1:fd:44: 0c:c7:27:0e:86:8f:31:74:ba:86:c9:42:1f:0a:53: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:44:EE:50:06:68:FF:A6:A4:A0:E6:E6:6C:BF:0E:46:DF:DF:B1:1F X509v3 Authority Key Identifier: keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c4:a5:70:d1:66:1e:ca:d5:30:a4:2f:4c:e3:cb:0c:60:aa: 79:fc:31:7e:73:b8:6b:a8:d4:cf:51:b8:36:9a:c5:37:86:c2: 3f:ac:89:17:4f:6e:a0:19:0e:b4:3b:55:1d:50:a0:d6:1a:60: 06:c4:29:55:13:40:07:ec:9c:87:e0:b0:8c:37:86:0b:f0:55: 56:a4:1e:ef:5a:6d:d6:2b:d9:06:56:33:78:c1:b3:f5:6c:76: f1:5f:e0:42:c5:a2:c0:32:8e:8e:20:15:e2:28:13:c5:b1:52: 43:59:0f:1c:c3:83:e7:46:93:69:5e:04:aa:12:c5:90:b1:1b: 61:51:84:7c:90:ec:37:41:c5:92:c7:ec:dd:4c:ca:74:d6:3c: 8c:f0:6f:64:2a:76:b8:fb:a1:c0:07:ea:84:23:1e:ec:ec:17: 75:65:e2:c2:66:1f:0a:93:12:5d:d5:bf:b4:bb:00:8e:d7:4d: 93:d1:6b:ea:7e:17:10:7a:46:66:2b:89:3a:7d:38:38:ca:c9: 48:a5:26:04:82:6c:8a:d9:29:69:18:67:50:18:d9:76:7c:58: 8e:52:3b:94:89:28:c3:04:22:14:c8:60:40:30:78:c4:9e:d4: b6:49:a5:33:92:15:6e:07:c9:8a:31:88:9a:35:1e:61:1c:27: 70:af:d7:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg2odRVKrp7FVDmZNGHrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj ZDQ5ZTUwHhcNMjUxMjIzMTQwMTAyWhcNMjUxMjI0MTQwMTAyWjAzMTEwLwYDVQQD Eyg1YTQ0ZWU1MDA2NjhmZmE2YTRhMGU2ZTY2Y2JmMGU0NmRmZGZiMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlu8Mhc+MR9ebBsqO1ufrKLIMRuv kLpDEy7bulfPqfh6ip/RwCjXrn1Ybfv20yTySm1FKvz9Tf7rnHe6wbmJ2sIpXsNj rMyHYnmh1NfWQ9xaq74cMvWwZdDEkLlyRRqSlq7F4RnB6+V/nyF7R5lVEG8YslFW lLDvvLT1RalcBDULKR03Z40dDZQK4qGwgjLXKfewUi/pYAeIAdRmelCaF8ZFVWpd WbJ33Qw4rSFPRo0+SZQJoqCxjRM/yF05fCgozeL46Ip9hMj+MU2ZfKpEczEsbo4h B6ragniAnzyr7r9/QbAHyeF0hpM3mBCh/UQMxycOho8xdLqGyUIfClNn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpE7lAGaP+mpKDm5my/Dkbf37EfMB8GA1UdIwQY MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt YTQyZWM4Nzc2ZmJiLzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesSlcNFm HsrVMKQvTOPLDGCqefwxfnO4a6jUz1G4NprFN4bCP6yJF09uoBkOtDtVHVCg1hpg BsQpVRNAB+ych+CwjDeGC/BVVqQe71pt1ivZBlYzeMGz9Wx28V/gQsWiwDKOjiAV 4igTxbFSQ1kPHMOD50aTaV4EqhLFkLEbYVGEfJDsN0HFksfs3UzKdNY8jPBvZCp2 uPuhwAfqhCMe7OwXdWXiwmYfCpMSXdW/tLsAjtdNk9Fr6n4XEHpGZiuJOn04OMrJ SKUmBIJsitkpaRhnUBjZdnxYjlI7lIkowwQiFMhgQDB4xJ7UtkmlM5IVbgfJijGI mjUeYRwncK/X4w== -----END CERTIFICATE-----Generated at Tue Dec 23 15:21:24 2025 by rpki-client