This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json) Hash identifier: nvEIUoHcvi+YyxK8EWcix5dPHGuRHgQBC5eJ5p4r/gk= Subject key identifier: 14:41:10:70:6E:0A:5D:29:D1:6A:9C:CB:A7:8C:B4:3B:C9:04:45:01 Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48 Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748 Certificate serial: 019B39464E5A52780D80D97FDCB3AD573617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft Manifest number: 1728 Signing time: Sat 20 Dec 2025 01:01:07 +0000 Manifest this update: Sat 20 Dec 2025 01:01:07 +0000 Manifest next update: Sun 21 Dec 2025 01:01:07 +0000 Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: 9v7x7P+BLj9BYvXGvuV2BqzFQGOKCyM0QFMqEVeip/s=) 2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:4e:5a:52:78:0d:80:d9:7f:dc:b3:ad:57:36:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748 Validity Not Before: Dec 20 01:01:07 2025 GMT Not After : Dec 21 01:01:07 2025 GMT Subject: CN=144110706e0a5d29d16a9ccba78cb43bc9044501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:64:64:b7:fd:23:ad:ab:1f:ac:e7:3c:92: 86:30:13:8d:1a:f3:11:49:0c:cb:09:dd:91:13:9d: c5:40:27:b5:dc:3d:0d:e5:9a:96:6d:6b:f3:5e:80: eb:14:48:78:3d:47:32:6a:43:71:5b:9c:1a:43:8a: 67:cd:98:d0:5e:2a:c4:c3:8c:8f:2b:29:ff:a6:65: 0d:bb:3b:15:3a:4e:d3:7f:9b:59:38:8a:62:04:5a: 8f:77:62:cc:17:df:c3:a0:2d:ad:55:09:f0:9f:86: ec:61:42:bb:07:d5:23:22:c7:9e:ee:d1:46:f0:eb: be:9d:02:34:b5:96:98:b0:55:9f:3b:58:4a:4f:86: 21:34:8b:bf:e5:e9:61:05:44:6d:32:0b:44:7c:fe: 27:5f:5f:2c:3c:10:45:24:84:bd:55:26:aa:5a:a9: 55:74:28:d7:e0:31:9c:63:c4:b7:5b:36:06:93:3f: a9:27:df:10:fe:fa:4e:f8:62:a5:3d:8e:fa:fa:bc: 16:d0:3f:0b:79:cc:c9:1a:f7:d1:80:f4:cf:ce:af: 9b:d5:30:f4:05:b1:e2:8b:26:20:ab:e1:fb:11:2f: ca:32:2d:78:42:9f:a9:3a:11:eb:af:5a:1f:c1:51: 0c:ee:9b:5f:ef:f2:f0:ec:7b:fd:5d:31:8f:7e:9f: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:10:70:6E:0A:5D:29:D1:6A:9C:CB:A7:8C:B4:3B:C9:04:45:01 X509v3 Authority Key Identifier: keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c7:4f:81:66:b9:b3:a4:0d:3a:6e:be:a0:38:c7:a9:2f:61: 2e:cf:99:b8:74:e2:a3:8e:10:90:2e:c9:c7:05:2e:3d:51:73: 83:08:f4:0b:7e:be:02:c0:9a:60:4f:d8:09:48:d6:12:7e:90: eb:f8:43:5b:89:40:dd:f8:4e:df:73:6b:28:64:10:d5:7e:59: d5:74:87:37:b6:e8:71:b5:ce:d1:5d:ae:26:65:4c:05:b9:8a: 45:8f:ba:28:c1:cf:39:5b:65:27:f3:36:74:b6:78:ec:09:52: 05:2e:13:89:08:f5:2b:6b:25:8f:ef:2b:ed:f4:f4:f7:b3:20: e1:5a:a4:85:da:85:c1:0a:4a:36:50:e8:e7:ae:2b:33:56:0d: 6a:fc:75:9c:d1:99:19:12:05:4a:57:ca:a5:8a:89:e5:4c:5b: 4a:98:59:9e:0b:62:82:6a:2a:da:63:6a:f8:2f:16:4a:da:19: cb:58:40:f0:91:18:8f:08:8d:52:40:2b:7f:7a:95:b4:8c:5d: f0:ac:1e:3b:f7:6f:61:d0:c3:54:2e:0b:91:de:02:2e:ce:4c: 58:4c:9e:06:4e:79:0c:d7:e4:12:8e:d5:66:fc:44:68:44:cd: f8:ad:8f:82:92:60:1b:f0:5a:ff:13:ae:a7:4e:91:53:f7:f2: 25:60:ad:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rk5aUngNgNl/3LOtVzYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2RmMTU1Yzg3YTU5MGFjMWU1Mzg1NDRjZjMzNTZlNGZj ODE3NDgwHhcNMjUxMjIwMDEwMTA3WhcNMjUxMjIxMDEwMTA3WjAzMTEwLwYDVQQD EygxNDQxMTA3MDZlMGE1ZDI5ZDE2YTljY2JhNzhjYjQzYmM5MDQ0NTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZBkZLf9I62rH6znPJKGMBONGvMR SQzLCd2RE53FQCe13D0N5ZqWbWvzXoDrFEh4PUcyakNxW5waQ4pnzZjQXirEw4yP Kyn/pmUNuzsVOk7Tf5tZOIpiBFqPd2LMF9/DoC2tVQnwn4bsYUK7B9UjIsee7tFG 8Ou+nQI0tZaYsFWfO1hKT4YhNIu/5elhBURtMgtEfP4nX18sPBBFJIS9VSaqWqlV dCjX4DGcY8S3WzYGkz+pJ98Q/vpO+GKlPY76+rwW0D8LeczJGvfRgPTPzq+b1TD0 BbHiiyYgq+H7ES/KMi14Qp+pOhHrr1ofwVEM7ptf7/Lw7Hv9XTGPfp9QfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRBEHBuCl0p0Wqcy6eMtDvJBEUBMB8GA1UdIwQY MBaAFOc98VXIelkKweU4VEzzNW5PyBdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQt ZGRkN2JmOTNkMzU2LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQtZGRkN2JmOTNkMzU2 LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8dPgWa5 s6QNOm6+oDjHqS9hLs+ZuHTio44QkC7JxwUuPVFzgwj0C36+AsCaYE/YCUjWEn6Q 6/hDW4lA3fhO33NrKGQQ1X5Z1XSHN7bocbXO0V2uJmVMBbmKRY+6KMHPOVtlJ/M2 dLZ47AlSBS4TiQj1K2slj+8r7fT097Mg4VqkhdqFwQpKNlDo564rM1YNavx1nNGZ GRIFSlfKpYqJ5UxbSphZngtigmoq2mNq+C8WStoZy1hA8JEYjwiNUkArf3qVtIxd 8KweO/dvYdDDVC4Lkd4CLs5MWEyeBk55DNfkEo7VZvxEaETN+K2PgpJgG/Ba/xOu p06RU/fyJWCtRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:40 2025 by rpki-client