This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json) Hash identifier: 40ONTRM7i47HphSj4LgPG5JafTI0z3FlZBKmLjIpx50= Subject key identifier: A9:9D:B2:EF:0A:BD:1B:FC:84:58:AA:A7:4A:F6:F3:CC:7E:B7:6F:97 Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Certificate serial: 019B3AC69A71A0362DF220BDC784F21EAF9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 08:00:52 +0000 Manifest this update: Sat 20 Dec 2025 08:00:52 +0000 Manifest next update: Sun 21 Dec 2025 08:00:52 +0000 Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=) 2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: +Ha6OEa7V3mHZOYW9+C0s4ZpAu0zlXEW1rn1dOEPVls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:9a:71:a0:36:2d:f2:20:bd:c7:84:f2:1e:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Validity Not Before: Dec 20 08:00:52 2025 GMT Not After : Dec 21 08:00:52 2025 GMT Subject: CN=a99db2ef0abd1bfc8458aaa74af6f3cc7eb76f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:fd:b0:78:be:72:ce:85:50:b9:ee:5b:82: d6:b1:11:19:57:20:f4:35:8a:f3:82:fb:24:d4:03: 43:91:1e:17:e1:88:55:ce:f0:3c:d1:18:aa:ca:ab: 05:d9:7c:b2:8e:10:51:40:ad:7a:ce:23:cf:02:9f: 72:50:ba:37:55:a7:53:63:5a:7c:ab:4b:e1:16:cd: ed:87:45:ae:7b:63:bc:c8:85:5c:2a:49:9c:da:de: cb:f0:83:05:22:31:27:98:82:cc:8c:79:33:e0:f1: d3:d6:2b:8a:be:e9:c4:09:63:95:c5:de:cc:a7:40: f8:48:e3:d5:8c:ff:6f:88:9d:ae:03:8b:fb:f4:c4: 72:fd:f2:b7:02:ec:42:8e:27:db:45:62:df:df:87: 8e:83:ad:c8:d3:02:f4:1e:a1:bd:c1:95:b8:61:45: 42:87:34:e0:66:e3:5f:f9:ff:1b:e7:f7:63:4d:ef: f7:94:c8:f2:e5:87:a8:a0:59:66:c2:e8:8a:0b:44: 9a:30:7d:ad:ae:fa:c7:51:69:c9:7c:cb:40:9b:6d: 39:fc:54:87:90:ac:be:36:30:1c:4d:82:81:c7:b9: 0d:a6:34:52:0d:7f:87:a7:aa:9c:4c:e3:0a:9a:d8: 5c:ca:f9:9a:56:22:4a:ba:72:aa:c8:9e:a8:fa:a0: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:B2:EF:0A:BD:1B:FC:84:58:AA:A7:4A:F6:F3:CC:7E:B7:6F:97 X509v3 Authority Key Identifier: keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:af:8b:10:49:99:ab:55:7b:86:10:7b:55:d8:54:43:92:e6: c9:57:f6:2a:b5:ac:5f:7e:70:06:94:55:d8:5d:24:1a:5a:c0: 66:37:a5:eb:b3:83:b0:7b:44:42:3f:30:6e:d1:ac:90:8b:c2: 49:30:8a:fd:43:dd:a1:3c:15:d8:0e:ec:98:7c:54:58:bc:f5: 0a:b3:93:e0:b4:7c:c2:66:7d:b7:93:ac:28:42:93:43:b1:48: e2:1b:f2:86:a7:3b:66:ed:9d:31:d5:72:c2:aa:6a:96:59:f9: 9f:0b:3e:0d:7d:56:da:aa:9a:0e:f5:a6:b4:b9:66:ac:82:ad: 8f:99:b2:ef:59:e4:4b:c8:06:d4:de:f7:0b:5d:85:c5:c6:8a: 87:3e:55:3f:2e:94:f7:99:be:15:79:8d:e4:c2:80:90:73:1d: f5:8a:1f:f3:71:e5:85:8a:9f:31:6c:2d:b2:97:7d:57:81:86: db:51:8d:33:b7:2b:04:be:07:24:9a:29:e8:f1:71:da:66:2e: f6:aa:65:c7:b2:9f:e6:3f:ef:04:af:aa:24:75:b5:fb:a1:d8: 9e:b7:dc:e1:58:00:20:0b:cd:ca:54:30:45:25:7e:4e:75:9b: 56:f7:da:0a:ee:99:21:ec:c7:3b:3e:58:a3:e8:0e:85:e9:1f: 67:37:41:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xppxoDYt8iC9x4TyHq+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTBmNmI3NWU5MTNmMjc4MmVkNTQ5ZWI3MjE3MmM1OWNj NDdhZjEwHhcNMjUxMjIwMDgwMDUyWhcNMjUxMjIxMDgwMDUyWjAzMTEwLwYDVQQD EyhhOTlkYjJlZjBhYmQxYmZjODQ1OGFhYTc0YWY2ZjNjYzdlYjc2Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+f9sHi+cs6FULnuW4LWsREZVyD0 NYrzgvsk1ANDkR4X4YhVzvA80RiqyqsF2XyyjhBRQK16ziPPAp9yULo3VadTY1p8 q0vhFs3th0Wue2O8yIVcKkmc2t7L8IMFIjEnmILMjHkz4PHT1iuKvunECWOVxd7M p0D4SOPVjP9viJ2uA4v79MRy/fK3AuxCjifbRWLf34eOg63I0wL0HqG9wZW4YUVC hzTgZuNf+f8b5/djTe/3lMjy5YeooFlmwuiKC0SaMH2trvrHUWnJfMtAm205/FSH kKy+NjAcTYKBx7kNpjRSDX+Hp6qcTOMKmthcyvmaViJKunKqyJ6o+qANwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmdsu8KvRv8hFiqp0r288x+t2+XMB8GA1UdIwQY MBaAFI+Q9rdekT8ngu1UnrchcsWcxHrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQt YzFkMGFjYjc4MTlhLzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQtYzFkMGFjYjc4MTlh LzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK+LEEmZ q1V7hhB7VdhUQ5LmyVf2KrWsX35wBpRV2F0kGlrAZjel67ODsHtEQj8wbtGskIvC STCK/UPdoTwV2A7smHxUWLz1CrOT4LR8wmZ9t5OsKEKTQ7FI4hvyhqc7Zu2dMdVy wqpqlln5nws+DX1W2qqaDvWmtLlmrIKtj5my71nkS8gG1N73C12FxcaKhz5VPy6U 95m+FXmN5MKAkHMd9Yof83HlhYqfMWwtspd9V4GG21GNM7crBL4HJJop6PFx2mYu 9qplx7Kf5j/vBK+qJHW1+6HYnrfc4VgAIAvNylQwRSV+TnWbVvfaCu6ZIezHOz5Y o+gOhekfZzdB4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:47 2025 by rpki-client