This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json) Hash identifier: p76MFCWacDKxQH8ASR5SDXlnDF8HK5Sij0SuF6IGZ7o= Subject key identifier: 5C:45:EC:69:2E:47:33:3C:79:AA:93:C5:AE:92:75:40:EA:5D:20:79 Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff Certificate serial: 019B405C4A718D7734222C1B04206A51D3CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft Manifest number: 0E17 Signing time: Sun 21 Dec 2025 10:02:28 +0000 Manifest this update: Sun 21 Dec 2025 10:02:28 +0000 Manifest next update: Mon 22 Dec 2025 10:02:28 +0000 Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=) 2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: 0OQLwX4Ypmnz2SVQwIrPWlhjeYli8IfYpNtBoxAYLgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:4a:71:8d:77:34:22:2c:1b:04:20:6a:51:d3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff Validity Not Before: Dec 21 10:02:28 2025 GMT Not After : Dec 22 10:02:28 2025 GMT Subject: CN=5c45ec692e47333c79aa93c5ae927540ea5d2079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:79:90:02:5a:2b:18:8f:30:58:c8:af:68: 12:24:cc:47:14:87:91:67:f1:a3:dd:c2:ad:ce:a3: 42:86:c5:2d:fb:f1:a3:ce:f2:ab:a5:a3:9f:08:f4: 01:26:65:4c:33:19:ab:78:4d:56:12:46:36:01:8a: ac:54:52:87:2b:7f:99:62:27:49:07:a6:63:73:9a: dc:3f:bb:62:81:ad:b2:59:38:6d:38:e6:46:98:3a: 60:9a:6e:59:ff:1f:fb:cd:ca:b1:e2:fe:ab:c9:ba: a1:f9:6a:1c:16:03:a3:5a:57:36:a1:d9:8f:58:47: 35:7d:91:d3:59:59:08:40:a1:8b:ae:35:3e:19:1a: f1:7b:a9:8d:5c:3a:76:17:24:44:8f:35:b9:b3:f7: d1:bc:b3:72:6b:41:b3:00:1e:20:c7:da:29:2c:64: 07:e5:7d:51:af:10:cf:8f:4f:19:17:11:2e:4f:fa: 0d:4b:03:fb:69:2a:e8:6d:a9:48:cc:8e:bb:0f:c0: eb:ac:13:02:8d:39:94:99:9e:53:4d:06:5b:d1:8d: 55:60:06:7b:3c:eb:90:6f:f9:f7:09:45:a9:50:9e: 03:87:f7:17:d2:e6:f1:b8:59:f7:e7:4b:f6:ef:36: 45:e0:13:5d:94:45:4e:e2:32:d6:92:fa:41:b7:17: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:EC:69:2E:47:33:3C:79:AA:93:C5:AE:92:75:40:EA:5D:20:79 X509v3 Authority Key Identifier: keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e1:2d:ca:5e:54:b0:0d:33:2e:ea:92:a6:d0:c5:4c:ba:16: 3f:b6:5a:74:41:07:27:d5:30:9e:51:c7:1f:cb:8b:15:d5:2a: 7a:84:cd:84:14:f4:a5:6b:c1:5e:0c:ad:04:6d:a8:6c:2b:aa: 05:ba:ea:08:4c:2b:a6:59:58:45:ad:99:68:9b:9e:38:fd:05: d9:40:1e:ad:89:ad:7a:dc:0f:de:f1:66:b4:5a:08:44:04:b6: 7d:48:9c:25:c9:b2:15:d1:5a:89:ec:ed:e9:4d:46:e3:16:ce: ce:7e:5b:a2:7f:c0:7b:4e:e5:33:fd:0c:11:7d:26:8b:70:c4: 9d:69:a9:10:65:3d:fb:e3:9c:bc:86:44:d8:c1:93:33:82:c8: 15:be:3e:11:96:83:ad:7f:18:3f:c3:cc:01:05:8c:b6:ac:40: fb:72:79:72:a4:3f:16:fa:96:74:7c:78:fd:2d:1b:86:54:ba: b7:90:02:d3:bf:d2:f1:5a:65:1a:36:43:84:dd:55:9c:75:de: d7:81:60:c9:36:26:76:eb:3e:9f:86:c1:fa:f0:79:3a:88:27: 40:55:bc:90:e1:2d:c1:03:35:f7:b7:10:9c:f5:c7:a5:3a:5c: 2f:41:5a:a5:b0:8a:a3:6d:70:a2:fe:c7:87:e7:93:91:6b:a9: b7:90:3c:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXEpxjXc0IiwbBCBqUdPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGJkNjQ5MDczNjQ2YzFmNGMzYjAxY2FjYWE3MmUyMDll OWRhZmYwHhcNMjUxMjIxMTAwMjI4WhcNMjUxMjIyMTAwMjI4WjAzMTEwLwYDVQQD Eyg1YzQ1ZWM2OTJlNDczMzNjNzlhYTkzYzVhZTkyNzU0MGVhNWQyMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIx5kAJaKxiPMFjIr2gSJMxHFIeR Z/Gj3cKtzqNChsUt+/GjzvKrpaOfCPQBJmVMMxmreE1WEkY2AYqsVFKHK3+ZYidJ B6Zjc5rcP7tiga2yWThtOOZGmDpgmm5Z/x/7zcqx4v6rybqh+WocFgOjWlc2odmP WEc1fZHTWVkIQKGLrjU+GRrxe6mNXDp2FyREjzW5s/fRvLNya0GzAB4gx9opLGQH 5X1RrxDPj08ZFxEuT/oNSwP7aSrobalIzI67D8DrrBMCjTmUmZ5TTQZb0Y1VYAZ7 POuQb/n3CUWpUJ4Dh/cX0ubxuFn350v27zZF4BNdlEVO4jLWkvpBtxeJgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxF7GkuRzM8eaqTxa6SdUDqXSB5MB8GA1UdIwQY MBaAFGeL1kkHNkbB9MOwHKyqcuIJ6dr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2Ut ZWQ3OGNiNzY2NjFjLzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2UtZWQ3OGNiNzY2NjFj LzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuEtyl5U sA0zLuqSptDFTLoWP7ZadEEHJ9UwnlHHH8uLFdUqeoTNhBT0pWvBXgytBG2obCuq BbrqCEwrpllYRa2ZaJueOP0F2UAerYmtetwP3vFmtFoIRAS2fUicJcmyFdFaiezt 6U1G4xbOzn5bon/Ae07lM/0MEX0mi3DEnWmpEGU9++OcvIZE2MGTM4LIFb4+EZaD rX8YP8PMAQWMtqxA+3J5cqQ/FvqWdHx4/S0bhlS6t5AC07/S8VplGjZDhN1VnHXe 14FgyTYmdus+n4bB+vB5OognQFW8kOEtwQM197cQnPXHpTpcL0FapbCKo21wov7H h+eTkWupt5A8Ew== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:27 2025 by rpki-client