This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json) Hash identifier: x7+G9HOxEWblsuY37vpQ2YBqwgnkCeINDdiwG1MSWkw= Subject key identifier: F8:EC:B1:3C:3A:52:72:43:46:36:1A:B2:8E:36:B1:56:6E:A3:27:40 Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2 Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2 Certificate serial: 019B631F32265417704B32F22A4330626CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft Manifest number: 14C5 Signing time: Sun 28 Dec 2025 04:02:27 +0000 Manifest this update: Sun 28 Dec 2025 04:02:27 +0000 Manifest next update: Mon 29 Dec 2025 04:02:27 +0000 Files and hashes: 1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: v7LlVC5BCZz6f47S2Sk4Yco6w9KL0YuMbEKjTi6RDUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:32:26:54:17:70:4b:32:f2:2a:43:30:62:6c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2 Validity Not Before: Dec 28 04:02:27 2025 GMT Not After : Dec 29 04:02:27 2025 GMT Subject: CN=f8ecb13c3a52724346361ab28e36b1566ea32740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:91:16:d0:61:28:4a:49:84:d3:cf:4f:a3: 4e:c7:b6:62:7a:ea:ae:5f:13:be:c6:ab:86:5d:a1: b3:e6:1f:6a:bc:9a:69:72:48:f2:52:42:fb:e3:2e: 3e:93:75:6e:f8:cc:b4:71:f8:67:3d:d6:d0:b2:3f: ac:8a:09:d8:65:c7:f7:0f:f5:e6:20:a9:08:62:f1: 09:9c:8d:e9:77:c6:91:c0:1a:76:46:ed:60:8f:2a: 4c:fb:77:5d:d2:e2:aa:4d:a9:71:ce:5d:68:c9:21: f2:99:2d:fb:79:aa:de:47:0f:84:09:45:e5:99:0c: 64:9c:3a:05:bc:13:91:d7:0b:c6:df:13:da:56:7d: 37:e6:bf:8f:2e:fe:d3:85:58:11:38:44:7b:bf:36: 30:c1:ee:03:e8:83:a3:e9:b3:b9:23:14:89:c0:49: 31:d3:c3:b0:cf:e1:2e:27:65:99:75:bd:59:1c:69: c8:49:de:2a:a0:56:8d:32:2f:bd:85:38:d8:a6:da: d7:99:ed:cd:b2:29:af:67:4b:bd:22:16:a5:cd:d5: dc:4a:23:30:99:6c:39:f0:ed:18:6c:80:72:7f:c4: a4:bf:17:69:73:91:1d:21:5b:b4:d7:8c:a1:6d:aa: 10:33:a1:9f:78:18:e2:c5:c5:ce:0d:ae:68:99:d3: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EC:B1:3C:3A:52:72:43:46:36:1A:B2:8E:36:B1:56:6E:A3:27:40 X509v3 Authority Key Identifier: keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fe:77:f2:d2:34:59:d2:a5:78:dd:56:1a:57:20:d0:9c:24: 4e:b3:cc:e0:e8:df:91:fd:36:83:18:d2:54:f7:26:19:44:b8: ca:b3:b8:ba:d6:03:2d:01:73:80:ae:1b:f5:26:ca:aa:62:5c: 64:bc:90:9e:a6:a2:79:c9:5c:dd:10:b4:8c:8a:6d:69:4b:40: 0a:34:f6:a3:0d:7b:8d:0e:aa:d7:35:9a:e0:24:b0:fc:7a:8f: f9:69:4d:cb:05:53:a2:98:ae:b0:ad:a2:db:2f:5f:b7:d7:26: 83:ee:79:ad:ff:52:77:90:a0:07:15:1f:3f:ea:41:b7:ea:25: fc:ec:53:99:ec:72:91:21:3c:8b:d5:cd:35:2d:12:97:ac:11: e7:24:98:55:c1:c7:01:ea:6b:2e:a2:19:65:48:35:fe:c7:90: ec:49:cf:28:1c:8d:62:e5:34:e9:69:89:f9:b3:0c:ec:58:51: 86:0c:d3:5a:05:8a:3b:03:f8:e4:a0:f9:ee:c7:f7:0a:d1:f9: b9:1f:50:49:b8:d1:84:0b:96:68:07:29:5d:6e:31:4f:a4:57: 55:ad:6f:19:86:f6:3e:1d:71:11:81:69:c7:99:d9:c3:10:f3: 50:f9:9a:d2:87:e6:ea:6b:22:d4:34:09:a3:f6:dc:c0:9f:69: 81:2b:36:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHzImVBdwSzLyKkMwYmy4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OWQ0NGQ4ODEyNzVmY2EyYzBiNmIzZjdlY2VlMmQyMjIx NDZmZDIwHhcNMjUxMjI4MDQwMjI3WhcNMjUxMjI5MDQwMjI3WjAzMTEwLwYDVQQD EyhmOGVjYjEzYzNhNTI3MjQzNDYzNjFhYjI4ZTM2YjE1NjZlYTMyNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGyRFtBhKEpJhNPPT6NOx7Zieuqu XxO+xquGXaGz5h9qvJppckjyUkL74y4+k3Vu+My0cfhnPdbQsj+signYZcf3D/Xm IKkIYvEJnI3pd8aRwBp2Ru1gjypM+3dd0uKqTalxzl1oySHymS37eareRw+ECUXl mQxknDoFvBOR1wvG3xPaVn035r+PLv7ThVgROER7vzYwwe4D6IOj6bO5IxSJwEkx 08Owz+EuJ2WZdb1ZHGnISd4qoFaNMi+9hTjYptrXme3NsimvZ0u9IhalzdXcSiMw mWw58O0YbIByf8Skvxdpc5EdIVu014yhbaoQM6GfeBjixcXODa5omdPUeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjssTw6UnJDRjYaso42sVZuoydAMB8GA1UdIwQY MBaAFOSdRNiBJ1/KLAtrP37O4tIiFG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzkt YzMyZDEwYzdlYTFmLzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzktYzMyZDEwYzdlYTFm LzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOv538tI0 WdKleN1WGlcg0JwkTrPM4Ojfkf02gxjSVPcmGUS4yrO4utYDLQFzgK4b9SbKqmJc ZLyQnqaieclc3RC0jIptaUtACjT2ow17jQ6q1zWa4CSw/HqP+WlNywVTopiusK2i 2y9ft9cmg+55rf9Sd5CgBxUfP+pBt+ol/OxTmexykSE8i9XNNS0Sl6wR5ySYVcHH AeprLqIZZUg1/seQ7EnPKByNYuU06WmJ+bMM7FhRhgzTWgWKOwP45KD57sf3CtH5 uR9QSbjRhAuWaAcpXW4xT6RXVa1vGYb2Ph1xEYFpx5nZwxDzUPma0ofm6msi1DQJ o/bcwJ9pgSs2hw== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:15 2025 by rpki-client