This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json) Hash identifier: osntM7f1TYrqaVeU85/QbIjOjpMbzd/Pu6Ti0Yy6x3E= Subject key identifier: 04:37:8C:09:67:F0:6D:B3:93:F4:90:33:9C:83:2E:1E:C0:F3:BE:DF Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4 Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4 Certificate serial: 019B3EA31C686A94E90F2D8CAE004E8DCC69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft Manifest number: 0F5C Signing time: Sun 21 Dec 2025 02:00:35 +0000 Manifest this update: Sun 21 Dec 2025 02:00:35 +0000 Manifest next update: Mon 22 Dec 2025 02:00:35 +0000 Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: bd5zE8pYAp96CNS96DjFK/sqHOGRu4qh1kgmZpVPcGA=) 2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:1c:68:6a:94:e9:0f:2d:8c:ae:00:4e:8d:cc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4 Validity Not Before: Dec 21 02:00:35 2025 GMT Not After : Dec 22 02:00:35 2025 GMT Subject: CN=04378c0967f06db393f490339c832e1ec0f3bedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:55:d0:f9:b7:37:7b:c8:5d:e9:5f:16:6d: 9d:2d:7b:a8:12:4d:ee:59:cd:65:d3:07:53:53:4c: de:b1:85:da:24:d9:bd:a2:82:b9:af:10:5f:e6:eb: fe:ea:d5:a6:60:4e:dd:da:34:8b:69:c0:fd:07:e9: 7e:9f:9f:5d:51:0d:0c:17:d8:2c:d0:7f:02:22:51: fd:92:49:e2:b6:0f:e4:55:ec:37:10:62:6a:1b:72: 3e:b8:06:fa:e2:66:d0:20:88:b9:28:05:f2:ef:ea: 90:f6:fc:04:fb:e6:9a:b7:9f:61:87:9a:af:ad:f8: 29:66:7b:7c:90:43:2b:e3:37:e6:6d:79:18:d6:61: df:9e:ae:27:68:4a:f1:bd:9f:b0:10:0b:1b:35:99: 16:b3:e6:85:15:f4:e8:24:5d:4d:d9:aa:ee:f8:2b: 39:4a:17:da:0d:69:95:41:06:b5:0e:6b:dc:fd:06: dd:4b:2e:3e:29:6f:b4:e1:19:c9:49:33:35:f5:65: a9:5b:b6:ee:de:5a:c0:d6:b8:01:64:97:73:56:03: 0a:66:1c:b7:9c:73:13:c3:b1:8e:af:72:05:0c:e4: bc:73:ed:3d:fb:1d:d0:ca:29:c3:e7:5c:f1:fb:cc: 59:9b:5c:96:e9:9d:58:e4:88:f8:a6:59:b7:ae:cf: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:37:8C:09:67:F0:6D:B3:93:F4:90:33:9C:83:2E:1E:C0:F3:BE:DF X509v3 Authority Key Identifier: keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:93:0a:97:c3:28:ac:fb:94:26:f4:37:0a:63:03:52:3e:38: 84:58:4a:7e:16:73:44:ef:1e:75:c5:6d:38:af:ab:56:94:f5: 67:c2:64:77:2d:7d:9d:c6:31:46:88:f5:62:cb:bc:23:10:62: 5c:31:b5:fb:82:99:80:db:1c:0b:2d:de:9e:20:31:89:df:be: e2:b4:4e:be:d0:38:84:b7:a0:9f:34:de:a2:1b:d6:62:93:2d: 45:23:28:60:fa:29:81:e3:f8:3d:8d:f3:83:b8:74:28:97:12: 35:95:c6:85:26:dd:80:a2:57:85:7e:8f:79:16:28:54:39:19: 99:db:ac:84:59:8a:ac:14:8e:75:ab:ad:ba:ec:0b:3a:e3:fe: d9:e6:f5:0d:73:80:71:dc:6b:1a:7c:c6:70:03:65:e7:3d:a8: bc:7a:a6:2c:89:ec:dd:28:93:45:c3:ba:e3:59:38:2f:ef:4d: fa:24:af:2e:fa:39:89:c1:28:c7:5f:af:24:fd:5e:11:98:e4: b1:ec:06:75:b1:0d:be:45:03:0c:fe:52:de:5a:d2:0b:3a:35: b0:88:7f:05:77:5b:e2:fc:a9:4e:df:35:62:a8:de:a1:11:c8: 08:14:30:28:f7:ee:c7:1f:5d:65:35:8b:ac:6e:62:81:a9:53: 77:6b:6e:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxxoapTpDy2MrgBOjcxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5 MDYzZTQwHhcNMjUxMjIxMDIwMDM1WhcNMjUxMjIyMDIwMDM1WjAzMTEwLwYDVQQD EygwNDM3OGMwOTY3ZjA2ZGIzOTNmNDkwMzM5YzgzMmUxZWMwZjNiZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHBV0Pm3N3vIXelfFm2dLXuoEk3u Wc1l0wdTU0zesYXaJNm9ooK5rxBf5uv+6tWmYE7d2jSLacD9B+l+n59dUQ0MF9gs 0H8CIlH9kknitg/kVew3EGJqG3I+uAb64mbQIIi5KAXy7+qQ9vwE++aat59hh5qv rfgpZnt8kEMr4zfmbXkY1mHfnq4naErxvZ+wEAsbNZkWs+aFFfToJF1N2aru+Cs5 ShfaDWmVQQa1Dmvc/QbdSy4+KW+04RnJSTM19WWpW7bu3lrA1rgBZJdzVgMKZhy3 nHMTw7GOr3IFDOS8c+09+x3QyinD51zx+8xZm1yW6Z1Y5Ij4plm3rs8xeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ3jAln8G2zk/SQM5yDLh7A877fMB8GA1UdIwQY MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1 LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5MKl8Mo rPuUJvQ3CmMDUj44hFhKfhZzRO8edcVtOK+rVpT1Z8Jkdy19ncYxRoj1Ysu8IxBi XDG1+4KZgNscCy3eniAxid++4rROvtA4hLegnzTeohvWYpMtRSMoYPopgeP4PY3z g7h0KJcSNZXGhSbdgKJXhX6PeRYoVDkZmdushFmKrBSOdautuuwLOuP+2eb1DXOA cdxrGnzGcANl5z2ovHqmLIns3SiTRcO641k4L+9N+iSvLvo5icEox1+vJP1eEZjk sewGdbENvkUDDP5S3lrSCzo1sIh/BXdb4vypTt81YqjeoRHICBQwKPfuxx9dZTWL rG5igalTd2tucw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:20:27 2025 by rpki-client