This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft File: Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json) Hash identifier: ZWp0sRLpWxC4ossmmgc/1OvOC9u20qbMjPoAIqTujCo= Subject key identifier: FA:94:AF:E9:62:53:8E:C3:67:55:78:6B:2E:E6:97:0A:6D:91:77:08 Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Certificate serial: 019B3D90DBCEC06A6F9A84423FE82F2C6DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft Manifest number: 12B9 Signing time: Sat 20 Dec 2025 21:01:02 +0000 Manifest this update: Sat 20 Dec 2025 21:01:02 +0000 Manifest next update: Sun 21 Dec 2025 21:01:02 +0000 Files and hashes: 1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: SlzUdB2qcIvGJgTVu7loFFjwWXUXJpyCqGiCdCtfHwQ=) 2: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=) 3: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=) 4: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=) 5: ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa (hash: yTgovZsEnOISpJIgzu2owD01yBh+ryJFnZun9TCD92w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:db:ce:c0:6a:6f:9a:84:42:3f:e8:2f:2c:6d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Validity Not Before: Dec 20 21:01:02 2025 GMT Not After : Dec 21 21:01:02 2025 GMT Subject: CN=fa94afe962538ec36755786b2ee6970a6d917708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:db:07:b9:c1:c5:8d:7c:d4:0b:5f:a1:65: 4e:fc:76:59:2d:3c:76:77:a1:b4:c2:23:4c:99:80: 08:8b:4c:4c:e4:48:6e:10:43:87:fc:68:be:c8:4a: 56:46:75:c3:a8:7f:ad:74:8a:67:0b:5a:0d:3b:39: ab:b6:58:d9:84:0a:52:4a:34:8c:72:97:0c:54:1c: 1a:74:93:ea:d6:9f:ef:ee:f3:b0:99:b1:46:e1:df: f7:eb:64:50:c2:b1:c7:d7:a4:04:93:f1:eb:f9:80: d2:1f:20:b2:f6:5b:2c:b5:61:4d:31:dc:c5:65:64: 01:7e:f7:8d:d6:88:96:3a:16:1a:53:99:16:a0:c4: 9d:67:8f:97:7e:88:75:ae:40:c5:24:a0:73:30:37: 64:d0:af:f4:54:d4:55:39:2e:6b:b9:f2:df:21:ef: f8:f0:50:20:d3:ba:70:fd:0b:63:72:98:38:a0:ab: f2:d1:3e:66:07:ce:fd:01:11:fc:f9:d8:ad:d1:95: db:0e:05:92:c9:41:cc:49:d6:a4:fa:9b:70:73:27: a0:14:ca:c0:02:3c:6c:ca:35:08:da:3f:e9:e1:15: 27:ae:fe:8b:c4:83:73:b3:a7:97:d2:f7:fb:8b:f3: 18:e6:ec:fe:01:02:88:96:fc:b1:2e:20:d8:3b:85: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:94:AF:E9:62:53:8E:C3:67:55:78:6B:2E:E6:97:0A:6D:91:77:08 X509v3 Authority Key Identifier: keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:91:9d:d1:94:a1:b9:37:2f:a3:63:a3:e8:dc:b2:5f:7d:0a: ae:0b:16:e0:0f:b6:9c:30:3d:3e:90:8d:ba:bb:2e:1c:79:04: b6:b1:d2:29:9f:22:ce:48:f9:ab:29:b5:37:79:81:54:85:a2: 17:40:29:6c:a9:30:22:b7:37:4e:63:94:5f:51:47:b7:bb:06: 1c:39:4c:fa:b6:fe:b0:ee:59:c0:f2:fe:0f:08:d5:b6:51:16: b2:08:b4:bd:46:2d:08:22:a8:07:83:da:df:01:55:5e:4d:01: 63:12:e9:e9:84:27:cd:b6:3b:ae:18:93:fa:0d:ac:0e:e6:6e: 4b:23:3b:11:eb:88:e8:4d:b9:a5:56:d0:8e:cb:b6:be:8a:30: c5:e5:79:f3:7e:49:6e:95:de:87:97:01:1b:2e:49:1c:9b:5d: 24:29:25:ad:12:83:1f:2d:96:58:f5:47:f2:2f:7c:e8:3d:9d: 2e:6e:04:bb:1b:18:2e:57:b5:2b:8d:4f:e9:95:b8:c6:45:34: 0f:24:7d:27:cb:80:43:d1:77:4c:b9:64:41:87:2f:5d:95:5f: 34:9b:06:ea:62:01:1a:08:7c:d8:2b:6c:13:9c:27:02:2a:d5: 2b:87:33:7b:78:ae:77:af:b5:8a:81:64:b3:0b:fb:61:b9:5a: cd:ed:a1:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNvOwGpvmoRCP+gvLG25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YWU1NTFhZjBiYjVkNzk3N2VhNzNmNjg5NmYyNWYxZWNh MjhmOWQwHhcNMjUxMjIwMjEwMTAyWhcNMjUxMjIxMjEwMTAyWjAzMTEwLwYDVQQD EyhmYTk0YWZlOTYyNTM4ZWMzNjc1NTc4NmIyZWU2OTcwYTZkOTE3NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjTbB7nBxY181AtfoWVO/HZZLTx2 d6G0wiNMmYAIi0xM5EhuEEOH/Gi+yEpWRnXDqH+tdIpnC1oNOzmrtljZhApSSjSM cpcMVBwadJPq1p/v7vOwmbFG4d/362RQwrHH16QEk/Hr+YDSHyCy9lsstWFNMdzF ZWQBfveN1oiWOhYaU5kWoMSdZ4+Xfoh1rkDFJKBzMDdk0K/0VNRVOS5rufLfIe/4 8FAg07pw/Qtjcpg4oKvy0T5mB879ARH8+dit0ZXbDgWSyUHMSdak+ptwcyegFMrA AjxsyjUI2j/p4RUnrv6LxINzs6eX0vf7i/MY5uz+AQKIlvyxLiDYO4VTqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqUr+liU47DZ1V4ay7mlwptkXcIMB8GA1UdIwQY MBaAFCWuVRrwu115d+pz9olvJfHsoo+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjkt MjE0MmY4ZmI2NzZlLzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjktMjE0MmY4ZmI2NzZl LzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5Gd0ZSh uTcvo2Oj6NyyX30KrgsW4A+2nDA9PpCNursuHHkEtrHSKZ8izkj5qym1N3mBVIWi F0ApbKkwIrc3TmOUX1FHt7sGHDlM+rb+sO5ZwPL+DwjVtlEWsgi0vUYtCCKoB4Pa 3wFVXk0BYxLp6YQnzbY7rhiT+g2sDuZuSyM7EeuI6E25pVbQjsu2voowxeV5835J bpXeh5cBGy5JHJtdJCklrRKDHy2WWPVH8i986D2dLm4EuxsYLle1K41P6ZW4xkU0 DyR9J8uAQ9F3TLlkQYcvXZVfNJsG6mIBGgh82CtsE5wnAirVK4cze3iud6+1ioFk swv7Yblaze2hUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:43:19 2025 by rpki-client