This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json) Hash identifier: RaDFtXaiExtGBVrjqFpOXgsdurSmFiMvJ8WSmMfoCGA= Subject key identifier: 4B:DD:7A:53:07:B7:F3:13:6C:91:53:88:89:47:9B:6F:45:9D:26:C5 Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Certificate serial: 019B5CE48CE6FABD6B879A50F6D158C62628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 23:00:40 +0000 Manifest this update: Fri 26 Dec 2025 23:00:40 +0000 Manifest next update: Sat 27 Dec 2025 23:00:40 +0000 Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: Da2wZm333zHlZYjPFfOZOQrY8WiV2jUtQ+OCP0S2W68=) 2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:8c:e6:fa:bd:6b:87:9a:50:f6:d1:58:c6:26:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Validity Not Before: Dec 26 23:00:40 2025 GMT Not After : Dec 27 23:00:40 2025 GMT Subject: CN=4bdd7a5307b7f3136c91538889479b6f459d26c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:ec:2c:89:2b:5b:54:6f:61:38:cc:fc:3a: 25:dc:81:98:db:a8:fb:fa:cb:59:4b:2c:5b:69:df: 63:5b:92:49:33:06:3f:fe:8a:ce:b6:3f:4e:cb:55: d5:d9:5e:c8:c0:7b:6d:27:95:fe:6e:8e:b2:67:40: 83:97:b4:9c:40:62:50:42:f5:a4:9b:94:3d:0f:a4: 55:f7:b5:50:9a:3d:2d:13:90:8f:54:58:e4:84:ef: e2:ed:54:dc:fa:7e:91:24:94:35:29:20:f1:01:1f: a1:03:e8:c1:50:8b:06:ee:6f:5e:52:3a:cd:1c:62: 01:aa:c8:03:69:bb:34:6a:5b:bf:fa:57:7b:a6:39: 37:f8:15:56:b3:82:dc:1f:72:21:b4:28:aa:4f:64: 43:00:98:3e:fd:d4:09:fe:b7:c2:8d:73:66:d7:74: 73:b3:6b:37:df:a2:6d:66:a3:6d:01:38:4f:fd:01: 58:7b:b5:a8:b5:41:1f:de:85:88:d5:1f:b8:03:54: 33:96:40:f4:7f:7a:65:b3:75:0a:5f:40:01:e6:0c: ae:c8:8c:ec:f6:bb:b7:df:09:d6:b3:f3:3f:ee:07: 23:a5:a8:98:6c:e0:e7:16:bb:7a:57:21:b8:58:a1: ae:2e:1f:b0:47:99:ca:3e:c0:2f:0c:0a:6b:37:30: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DD:7A:53:07:B7:F3:13:6C:91:53:88:89:47:9B:6F:45:9D:26:C5 X509v3 Authority Key Identifier: keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0c:40:b3:e0:29:ff:d4:90:a5:16:8d:d6:0e:9d:76:73:aa: 84:02:a4:f6:92:dd:d3:12:4c:86:31:1f:b7:89:1a:04:ff:4f: 0b:df:db:94:78:b8:95:45:5c:d1:96:30:ba:0d:97:69:de:ee: c3:91:96:ca:88:71:4d:c3:9c:ea:da:40:69:22:93:db:10:50: 90:06:e0:30:78:45:41:7a:1d:b3:6c:09:b1:9a:3b:0b:c7:76: 91:a2:ad:a8:a6:f9:41:0c:89:b1:aa:3e:a1:e6:db:19:1b:28: 6d:16:a9:b6:c7:cb:c4:73:fa:bc:e0:8b:7e:4b:f9:24:da:2a: 1e:a1:f8:ef:ba:3b:e1:80:47:0b:5e:0f:67:ca:cb:3c:1d:cf: b7:22:80:41:a9:5b:d5:8d:1b:6b:bc:fc:98:98:26:10:5c:b1: fe:3f:5e:8f:bc:6d:02:f3:ad:07:b4:7b:d2:63:f0:86:52:eb: 97:7d:2f:6e:c8:85:16:f8:38:70:26:f1:a3:5c:04:4c:20:fa: a3:cc:42:29:44:56:72:cb:75:a8:cd:a0:3d:85:25:1c:17:2f: 10:bc:6b:72:26:f0:ff:93:7d:b1:0d:d2:b6:b0:91:48:f2:ca: 0a:7d:70:db:e5:3b:1f:c8:e7:81:f4:9e:86:a9:61:ca:17:8c: 5c:e9:44:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5Izm+r1rh5pQ9tFYxiYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGUxOWZjZWUyOWY3ZjEyZWYwNmM2MGY4NjYwZWQ3MDBm ZTkwYjkwHhcNMjUxMjI2MjMwMDQwWhcNMjUxMjI3MjMwMDQwWjAzMTEwLwYDVQQD Eyg0YmRkN2E1MzA3YjdmMzEzNmM5MTUzODg4OTQ3OWI2ZjQ1OWQyNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+bsLIkrW1RvYTjM/Dol3IGY26j7 +stZSyxbad9jW5JJMwY//orOtj9Oy1XV2V7IwHttJ5X+bo6yZ0CDl7ScQGJQQvWk m5Q9D6RV97VQmj0tE5CPVFjkhO/i7VTc+n6RJJQ1KSDxAR+hA+jBUIsG7m9eUjrN HGIBqsgDabs0alu/+ld7pjk3+BVWs4LcH3IhtCiqT2RDAJg+/dQJ/rfCjXNm13Rz s2s336JtZqNtAThP/QFYe7WotUEf3oWI1R+4A1QzlkD0f3pls3UKX0AB5gyuyIzs 9ru33wnWs/M/7gcjpaiYbODnFrt6VyG4WKGuLh+wR5nKPsAvDAprNzDfZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvdelMHt/MTbJFTiIlHm29FnSbFMB8GA1UdIwQY MBaAFOTeGfzuKffxLvBsYPhmDtcA/pC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODIt YjliNDQ3MzIwOGZkLzEvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODItYjliNDQ3MzIwOGZk LzEvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQxAs+Ap /9SQpRaN1g6ddnOqhAKk9pLd0xJMhjEft4kaBP9PC9/blHi4lUVc0ZYwug2Xad7u w5GWyohxTcOc6tpAaSKT2xBQkAbgMHhFQXods2wJsZo7C8d2kaKtqKb5QQyJsao+ oebbGRsobRaptsfLxHP6vOCLfkv5JNoqHqH477o74YBHC14PZ8rLPB3PtyKAQalb 1Y0ba7z8mJgmEFyx/j9ej7xtAvOtB7R70mPwhlLrl30vbsiFFvg4cCbxo1wETCD6 o8xCKURWcst1qM2gPYUlHBcvELxrcibw/5N9sQ3StrCRSPLKCn1w2+U7H8jngfSe hqlhyheMXOlEqw== -----END CERTIFICATE-----Generated at Sat Dec 27 07:24:34 2025 by rpki-client