This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json) Hash identifier: JTRtvqTGy9874zFJy3Plr6w5NEemqnbypQ3EvkAthyA= Subject key identifier: 5C:EE:6C:CB:11:4E:42:E0:6B:0B:74:14:FD:B0:58:84:AD:09:9E:22 Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443 Certificate serial: 019B3BA23970D096513BE95124528EDBA7D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft Manifest number: 12A9 Signing time: Sat 20 Dec 2025 12:00:45 +0000 Manifest this update: Sat 20 Dec 2025 12:00:45 +0000 Manifest next update: Sun 21 Dec 2025 12:00:45 +0000 Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: EEg6UaAZi+iTEZtDxWvkjsBCaN34GEVA5Ehgxk/19WM=) 2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=) 3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:39:70:d0:96:51:3b:e9:51:24:52:8e:db:a7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443 Validity Not Before: Dec 20 12:00:45 2025 GMT Not After : Dec 21 12:00:45 2025 GMT Subject: CN=5cee6ccb114e42e06b0b7414fdb05884ad099e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:05:a6:fa:c6:40:5c:99:4b:33:8f:5b:07: 48:9b:a3:5d:3e:5f:a1:68:39:47:4b:a5:9d:16:52: fe:92:b5:0a:a5:76:a3:d4:09:ae:f0:83:e3:7e:56: 4a:79:84:fa:0f:7d:be:ab:00:2b:da:03:75:73:1e: 59:61:40:9e:ad:45:de:86:7f:c0:ab:ba:d2:48:2a: bc:f9:17:2d:3d:9e:e2:20:b8:1d:b9:90:38:5d:31: eb:d2:6d:f3:f2:e0:21:de:c2:e0:9f:b9:bf:ae:75: 4c:ec:fd:97:1f:c4:6c:c4:b3:a7:93:0c:d4:c5:df: ee:68:6c:ad:91:bc:ee:a8:54:d1:eb:dd:0f:ef:22: 28:d3:30:ea:b1:d9:65:49:81:4d:41:8d:6c:a3:71: 1a:20:47:36:31:ee:9c:b5:f4:df:99:f0:96:59:29: d9:51:de:5b:eb:24:64:3c:22:e1:bc:00:8f:c2:d1: a7:86:bf:9b:f7:21:78:a5:5d:1a:f9:8a:87:a4:c4: 90:d2:f5:e4:6b:d9:06:df:29:5a:99:d2:c7:fc:82: 39:a0:a5:7e:85:40:65:93:65:6a:b7:9f:b5:e8:83: f3:ff:13:fb:8e:b5:30:0c:72:58:af:82:09:e5:80: bd:20:9c:ca:17:4b:f6:b4:c7:5e:f3:ed:59:da:63: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EE:6C:CB:11:4E:42:E0:6B:0B:74:14:FD:B0:58:84:AD:09:9E:22 X509v3 Authority Key Identifier: keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0c:69:84:9d:58:a7:34:bd:f4:49:03:3e:8b:80:40:aa:c9: 35:5d:35:82:46:41:af:be:66:a0:52:49:49:24:d3:59:b6:c0: 0e:b1:8c:1b:d3:6c:80:e9:fc:67:89:de:6c:ad:4a:1f:59:fe: 49:4e:7b:63:d1:60:81:1d:fc:f6:a7:a5:ee:44:b7:58:dc:c6: 9b:fe:c5:fe:3a:8a:a9:c9:1d:65:da:11:db:4c:19:43:83:0d: ea:ea:7d:5a:75:69:1c:ff:d0:61:b0:37:2f:bd:cf:82:85:49: c9:f7:91:e0:57:8c:c5:78:83:0c:7d:0e:ff:b3:1a:56:8f:97: 9d:d1:fa:15:65:ac:dd:a0:25:97:73:89:13:4c:1b:68:09:48: c8:fe:2d:d2:10:c1:79:d6:ad:17:f1:21:9d:12:47:17:7f:07: 61:8d:a0:dd:f9:67:7b:8b:df:8f:12:de:86:20:e4:72:7c:f5: 49:ea:c8:3d:38:c4:ed:07:e6:57:45:3f:8c:a4:4f:25:a2:8e: e8:64:5d:46:a9:86:03:d1:a6:1b:63:51:54:81:1e:e6:33:9d: 0c:3e:56:e6:36:12:6a:09:0d:48:37:7b:04:52:cc:54:88:9d: 2c:ea:c7:03:41:44:35:07:03:d9:19:36:91:7e:a5:cb:18:39: e8:62:0b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojlw0JZRO+lRJFKO26fWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2 ZWY0NDMwHhcNMjUxMjIwMTIwMDQ1WhcNMjUxMjIxMTIwMDQ1WjAzMTEwLwYDVQQD Eyg1Y2VlNmNjYjExNGU0MmUwNmIwYjc0MTRmZGIwNTg4NGFkMDk5ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFEFpvrGQFyZSzOPWwdIm6NdPl+h aDlHS6WdFlL+krUKpXaj1Amu8IPjflZKeYT6D32+qwAr2gN1cx5ZYUCerUXehn/A q7rSSCq8+RctPZ7iILgduZA4XTHr0m3z8uAh3sLgn7m/rnVM7P2XH8RsxLOnkwzU xd/uaGytkbzuqFTR690P7yIo0zDqsdllSYFNQY1so3EaIEc2Me6ctfTfmfCWWSnZ Ud5b6yRkPCLhvACPwtGnhr+b9yF4pV0a+YqHpMSQ0vXka9kG3ylamdLH/II5oKV+ hUBlk2Vqt5+16IPz/xP7jrUwDHJYr4IJ5YC9IJzKF0v2tMde8+1Z2mNF9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzubMsRTkLgawt0FP2wWIStCZ4iMB8GA1UdIwQY MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQxphJ1Y pzS99EkDPouAQKrJNV01gkZBr75moFJJSSTTWbbADrGMG9NsgOn8Z4nebK1KH1n+ SU57Y9FggR389qel7kS3WNzGm/7F/jqKqckdZdoR20wZQ4MN6up9WnVpHP/QYbA3 L73PgoVJyfeR4FeMxXiDDH0O/7MaVo+XndH6FWWs3aAll3OJE0wbaAlIyP4t0hDB edatF/EhnRJHF38HYY2g3flne4vfjxLehiDkcnz1SerIPTjE7QfmV0U/jKRPJaKO 6GRdRqmGA9GmG2NRVIEe5jOdDD5W5jYSagkNSDd7BFLMVIidLOrHA0FENQcD2Rk2 kX6lyxg56GILpw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:05:49 2025 by rpki-client