This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json) Hash identifier: VrHa4Tl84ZiGss4nIPfp4YX2YgoN4z2glrzpT2yN8ZY= Subject key identifier: A6:3A:40:11:5B:20:14:2D:A9:2B:42:68:70:97:ED:2E:0D:DA:78:F9 Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96 Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96 Certificate serial: 019B5F77C5CBE5FF8757DB74D53710747AC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft Manifest number: 05C0 Signing time: Sat 27 Dec 2025 11:00:43 +0000 Manifest this update: Sat 27 Dec 2025 11:00:43 +0000 Manifest next update: Sun 28 Dec 2025 11:00:43 +0000 Files and hashes: 1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=) 2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: wjvy4NwWTVQtX+aMvDNUZ/lFzZf/uQQBMdPvsCMua9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:77:c5:cb:e5:ff:87:57:db:74:d5:37:10:74:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96 Validity Not Before: Dec 27 11:00:43 2025 GMT Not After : Dec 28 11:00:43 2025 GMT Subject: CN=a63a40115b20142da92b42687097ed2e0dda78f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:1c:7d:f3:c1:5f:b1:0a:59:95:4b:ed:a9: 40:9b:9e:95:b8:a0:96:de:63:23:9e:bf:b5:58:6e: 86:f6:ba:0b:82:ef:a9:20:c0:70:3b:a6:4a:db:2e: d3:30:df:9e:4f:05:81:7b:6a:b9:a2:5b:d8:1c:64: b8:aa:39:a9:11:54:45:39:7f:1e:14:aa:f4:5f:2a: 2f:cc:ad:9d:b4:e4:a8:fe:78:c6:dc:09:31:5d:c2: 35:42:39:d0:67:a3:36:e7:98:b0:b6:3e:bc:43:d8: 83:0e:63:40:98:21:de:71:4f:cd:de:c1:30:d1:1f: d1:3c:97:77:0f:0b:e8:f5:c3:a9:cc:28:6f:a9:38: 99:a4:e6:d1:9a:03:46:d9:c9:9e:62:c3:f8:4c:c4: a0:9f:e5:44:67:d4:63:83:a1:0a:c8:63:0b:c3:1f: 41:a2:30:01:75:9f:2b:b5:67:e1:29:5a:79:6e:8d: a3:a4:3d:fa:b1:d8:53:8d:17:56:9d:ca:99:67:11: 52:2b:cd:eb:98:4c:44:f5:ec:53:0e:7c:e1:f4:d9: ad:54:6b:ea:2d:f6:0f:c8:4c:ee:a3:22:b0:f5:8a: b4:fe:82:17:cc:19:4c:a9:d3:29:59:11:47:fb:d4: 34:99:4f:e0:a0:2b:67:ef:e8:7c:72:4b:a8:e1:87: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3A:40:11:5B:20:14:2D:A9:2B:42:68:70:97:ED:2E:0D:DA:78:F9 X509v3 Authority Key Identifier: keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:47:86:07:cd:a2:11:7f:9e:a7:d6:cf:a1:c8:b1:46:f2:10: e0:11:ee:0a:7b:93:a8:0c:9e:60:ec:38:58:df:37:ea:50:f8: aa:96:36:65:e0:fa:01:08:8d:5c:28:07:f8:0b:04:85:1b:dd: 6a:b2:fe:b9:31:a5:3a:12:35:54:79:b6:ef:1e:b5:1e:77:6a: f8:72:ce:45:38:d6:a6:44:12:6c:6d:db:db:40:58:d7:5f:3c: 85:6c:79:8a:c1:19:3a:05:3b:3a:44:cd:f0:68:f6:25:63:07: 21:bf:53:df:a2:05:d8:51:f2:05:ce:72:3f:1b:49:29:ae:93: 4c:42:26:d9:89:c3:db:d8:dd:e0:3b:8e:1e:91:0e:ea:82:b6: b7:5d:10:19:3a:48:94:13:39:4f:43:b6:fc:60:94:fd:ab:84: 75:2a:b1:4f:f9:4c:cf:3c:61:7f:96:1e:5f:17:86:57:57:bd: c4:59:5d:d9:9f:be:c5:39:51:8c:c1:25:87:64:08:19:1e:8f: ea:f3:4d:66:c4:4f:79:f7:02:d9:94:f8:a0:d4:c3:86:72:75: 66:41:36:6c:b4:30:8e:c6:43:f8:a7:b8:73:a1:09:ad:a1:12: 2c:f6:b4:11:a3:55:63:f5:7b:73:8a:8d:d4:cd:ed:70:ee:56: 21:e6:f2:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfd8XL5f+HV9t01TcQdHrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWVkMjE4OGRhOWVjYWRhMTE0OTE0NWFlZmE0OTcyNmZl MDFlOTYwHhcNMjUxMjI3MTEwMDQzWhcNMjUxMjI4MTEwMDQzWjAzMTEwLwYDVQQD EyhhNjNhNDAxMTViMjAxNDJkYTkyYjQyNjg3MDk3ZWQyZTBkZGE3OGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyscffPBX7EKWZVL7alAm56VuKCW 3mMjnr+1WG6G9roLgu+pIMBwO6ZK2y7TMN+eTwWBe2q5olvYHGS4qjmpEVRFOX8e FKr0XyovzK2dtOSo/njG3AkxXcI1QjnQZ6M255iwtj68Q9iDDmNAmCHecU/N3sEw 0R/RPJd3Dwvo9cOpzChvqTiZpObRmgNG2cmeYsP4TMSgn+VEZ9Rjg6EKyGMLwx9B ojABdZ8rtWfhKVp5bo2jpD36sdhTjRdWncqZZxFSK83rmExE9exTDnzh9NmtVGvq LfYPyEzuoyKw9Yq0/oIXzBlMqdMpWRFH+9Q0mU/goCtn7+h8ckuo4YdCmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY6QBFbIBQtqStCaHCX7S4N2nj5MB8GA1UdIwQY MBaAFI+e0hiNqeytoRSRRa76SXJv4B6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNGM3YzctNTdlZC00NWU2LTlmY2Yt ZTcyNDEwNDk3NDVhLzEvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lNGM3YzctNTdlZC00NWU2LTlmY2YtZTcyNDEwNDk3NDVh LzEvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0eGB82i EX+ep9bPocixRvIQ4BHuCnuTqAyeYOw4WN836lD4qpY2ZeD6AQiNXCgH+AsEhRvd arL+uTGlOhI1VHm27x61Hndq+HLORTjWpkQSbG3b20BY1188hWx5isEZOgU7OkTN 8Gj2JWMHIb9T36IF2FHyBc5yPxtJKa6TTEIm2YnD29jd4DuOHpEO6oK2t10QGTpI lBM5T0O2/GCU/auEdSqxT/lMzzxhf5YeXxeGV1e9xFld2Z++xTlRjMElh2QIGR6P 6vNNZsRPefcC2ZT4oNTDhnJ1ZkE2bLQwjsZD+Ke4c6EJraESLPa0EaNVY/V7c4qN 1M3tcO5WIebyRA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:55:45 2025 by rpki-client