This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json) Hash identifier: NUeqXpNwLFG5kOXam2d+gYK7v4L2kUuXJYnzJVTkQMM= Subject key identifier: 50:09:06:8E:2A:07:8C:DA:A0:0A:45:B9:89:1C:17:13:F9:62:AD:08 Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443 Certificate serial: 019B47385CEA5E597F0CA9CC9871EEF15360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft Manifest number: 12AF Signing time: Mon 22 Dec 2025 18:00:34 +0000 Manifest this update: Mon 22 Dec 2025 18:00:34 +0000 Manifest next update: Tue 23 Dec 2025 18:00:34 +0000 Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: VBSYcRhY2q++QnaKyDZbOlvIdsLZPPnmXod6TriDgfM=) 2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=) 3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:5c:ea:5e:59:7f:0c:a9:cc:98:71:ee:f1:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443 Validity Not Before: Dec 22 18:00:34 2025 GMT Not After : Dec 23 18:00:34 2025 GMT Subject: CN=5009068e2a078cdaa00a45b9891c1713f962ad08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:17:f9:e6:28:14:f6:9f:bb:75:8c:fa:a7:c9: 28:64:d9:f7:7c:6b:a7:71:76:2b:02:57:ae:17:85: d0:01:9b:49:26:38:45:03:11:80:21:3d:12:bc:16: 23:42:f8:6c:b7:af:88:dd:03:46:37:7f:5b:56:79: 78:62:00:ff:d2:59:c5:a8:1f:f9:bc:71:a8:01:19: 65:14:b4:6a:01:f1:60:9b:a0:d2:b8:eb:8f:54:8b: 65:38:9d:5d:c4:98:b2:d0:46:0a:7f:36:c3:35:f6: 57:07:4a:86:e1:a3:86:80:91:74:19:b2:37:df:8d: 30:ee:37:e6:e5:26:ee:62:6a:d1:1f:2a:88:4b:9f: 14:32:ce:32:3d:15:33:63:86:bc:4e:28:45:1e:ed: 34:57:ff:9a:c1:7a:f1:46:1b:a4:03:d1:66:bf:dc: d6:94:0a:40:31:9a:f0:69:4f:a3:5d:b6:6e:97:39: 11:a8:6b:df:d4:b5:0e:7d:6c:7f:d5:50:ef:86:e3: e6:9c:05:0a:e2:c5:8c:46:f2:cd:59:9e:c8:61:80: 9e:01:bb:c8:3d:06:7c:55:6a:5f:c1:15:ea:8c:3e: 62:c3:15:9d:8a:5a:f0:0b:3b:4b:a8:95:ba:4f:c9: 46:d1:37:fe:7e:a3:56:58:f2:c2:82:d0:9d:cd:b9: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:09:06:8E:2A:07:8C:DA:A0:0A:45:B9:89:1C:17:13:F9:62:AD:08 X509v3 Authority Key Identifier: keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:93:2d:63:59:fc:c7:9b:dc:74:96:a7:c9:c5:f3:f2:e2:72: 33:53:b3:ba:8c:7f:fb:0e:95:e9:52:7e:94:fb:b9:f0:cf:fd: 1d:71:12:8d:6b:2c:dd:a2:19:2c:ac:69:5d:a1:2d:0a:27:d8: 10:c0:d9:50:63:01:81:72:13:3f:be:12:15:87:7b:84:98:12: d2:74:f8:08:36:2b:9c:8a:96:45:56:09:52:c5:c2:17:1a:c1: 81:24:e2:5a:66:5a:01:1f:f3:7d:ae:26:6f:e3:34:0b:6f:20: 64:bf:3a:40:19:11:4e:6d:a0:27:22:2e:d2:26:f0:99:06:f8: 78:6e:63:a3:a8:76:2d:f1:bd:b2:bf:b0:b1:0c:25:a0:9f:ae: 99:01:72:cc:ca:b9:7d:e4:c4:2b:8b:ba:32:aa:61:45:72:b0: 77:f5:0f:2e:97:c1:91:99:13:44:3d:35:ad:29:42:c2:49:7f: d6:cf:b8:ac:29:13:37:a0:b8:b1:4a:79:ad:15:79:42:38:ac: d8:2f:45:05:f0:fa:f0:ca:40:b5:1d:bb:a7:c3:c2:1a:0f:10: d5:2b:67:63:d8:b4:7d:04:52:b0:24:79:4e:27:ff:36:d4:45: 06:7b:f8:3f:ce:a7:5c:fd:38:0f:18:5a:3b:e4:8f:d9:62:ce: 6f:69:b0:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOFzqXll/DKnMmHHu8VNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2 ZWY0NDMwHhcNMjUxMjIyMTgwMDM0WhcNMjUxMjIzMTgwMDM0WjAzMTEwLwYDVQQD Eyg1MDA5MDY4ZTJhMDc4Y2RhYTAwYTQ1Yjk4OTFjMTcxM2Y5NjJhZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhf55igU9p+7dYz6p8koZNn3fGun cXYrAleuF4XQAZtJJjhFAxGAIT0SvBYjQvhst6+I3QNGN39bVnl4YgD/0lnFqB/5 vHGoARllFLRqAfFgm6DSuOuPVItlOJ1dxJiy0EYKfzbDNfZXB0qG4aOGgJF0GbI3 340w7jfm5SbuYmrRHyqIS58UMs4yPRUzY4a8TihFHu00V/+awXrxRhukA9Fmv9zW lApAMZrwaU+jXbZulzkRqGvf1LUOfWx/1VDvhuPmnAUK4sWMRvLNWZ7IYYCeAbvI PQZ8VWpfwRXqjD5iwxWdilrwCztLqJW6T8lG0Tf+fqNWWPLCgtCdzbkzYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAJBo4qB4zaoApFuYkcFxP5Yq0IMB8GA1UdIwQY MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpMtY1n8 x5vcdJanycXz8uJyM1Ozuox/+w6V6VJ+lPu58M/9HXESjWss3aIZLKxpXaEtCifY EMDZUGMBgXITP74SFYd7hJgS0nT4CDYrnIqWRVYJUsXCFxrBgSTiWmZaAR/zfa4m b+M0C28gZL86QBkRTm2gJyIu0ibwmQb4eG5jo6h2LfG9sr+wsQwloJ+umQFyzMq5 feTEK4u6MqphRXKwd/UPLpfBkZkTRD01rSlCwkl/1s+4rCkTN6C4sUp5rRV5Qjis 2C9FBfD68MpAtR27p8PCGg8Q1StnY9i0fQRSsCR5Tif/NtRFBnv4P86nXP04Dxha O+SP2WLOb2mwgg== -----END CERTIFICATE-----Generated at Tue Dec 23 01:24:08 2025 by rpki-client