This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft File: 05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json) Hash identifier: hxVfiWsu/6StFyaDA43wnAU+Dvv1Zz3/+G1TGMmUmQw= Subject key identifier: 9D:2E:EF:D0:59:67:33:80:79:72:42:F1:E4:12:87:A6:B8:03:25:75 Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03 Certificate issuer: /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003 Certificate serial: 019B6B449FE0EF9CC1FD9549522152620958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 18:00:17 +0000 Manifest this update: Mon 29 Dec 2025 18:00:17 +0000 Manifest next update: Tue 30 Dec 2025 18:00:17 +0000 Files and hashes: 1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: dq7vN7KjHkxFsgSjJ4HGOZNVG8RD3jatkms2OsdNj18=) 2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:44:9f:e0:ef:9c:c1:fd:95:49:52:21:52:62:09:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003 Validity Not Before: Dec 29 18:00:17 2025 GMT Not After : Dec 30 18:00:17 2025 GMT Subject: CN=9d2eefd059673380797242f1e41287a6b8032575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:d5:5c:0e:84:23:65:6e:08:87:ab:6f:11: 83:98:44:85:fe:2e:f3:e6:1f:41:f5:a0:12:2f:b3: f2:58:c8:98:1e:cd:e6:a6:0b:7c:e4:59:04:9c:cf: 22:24:6f:44:a0:ec:f0:2d:89:20:e4:a6:df:8a:b4: c9:34:7d:f3:b2:d9:dd:e3:61:11:e2:48:36:c2:f1: d6:cd:5d:bf:5f:90:6c:c7:db:64:97:35:c0:87:b9: 62:70:e8:9e:bf:98:fd:db:4a:83:31:09:5b:9c:0e: de:b9:d6:f3:43:41:f3:61:c5:01:6a:a5:a1:ba:e4: 9e:23:47:cb:fe:56:0e:33:bc:50:09:6a:f3:a4:69: 26:5c:44:e3:0e:f8:82:2f:e1:52:50:ce:4c:e0:b2: 72:80:bb:0f:f4:dc:da:39:d4:36:81:4b:21:21:55: 65:77:32:fa:23:d6:26:96:96:83:ef:63:f4:37:7f: ce:aa:cd:1a:bd:a7:68:3c:b6:72:7b:d6:23:5b:ca: 77:a1:fc:1c:e0:47:17:43:29:34:17:24:32:b8:02: b9:cb:da:59:b8:1b:41:3b:b5:a0:1c:df:08:64:75: cd:c4:d8:12:1b:c8:eb:4d:06:1a:39:7d:87:ae:73: 77:f3:a4:35:fb:0d:65:02:b0:fd:f3:86:7a:8b:00: 87:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2E:EF:D0:59:67:33:80:79:72:42:F1:E4:12:87:A6:B8:03:25:75 X509v3 Authority Key Identifier: keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5e:3e:c5:45:90:a6:02:0b:fb:1b:20:7b:05:28:a0:18:e7: db:c9:51:87:c9:ab:13:86:82:98:05:2c:05:34:1a:33:9f:40: e5:ac:f4:20:82:3a:49:51:a1:6c:96:2f:d7:55:f8:45:05:24: 2a:7f:28:c5:11:6e:62:72:4a:8a:0e:a2:55:ff:4c:3f:5e:30: 53:57:7b:56:e1:4e:71:c7:d1:82:e5:27:2e:7d:8a:7c:8d:59: be:bc:85:b5:dd:59:1c:d4:b0:37:6a:15:b9:21:6b:28:55:d3: 06:85:e3:1b:35:77:6c:5a:c4:c8:03:16:5f:ec:14:65:0f:62: 6b:ba:d4:2d:1b:8e:40:5e:f1:69:45:97:01:ea:f2:75:b8:90: 4a:3a:4c:d5:b1:43:bf:7b:ca:3c:6e:d8:ae:e6:0b:f7:8d:4d: ef:bf:59:e8:35:f2:3c:46:43:53:39:21:82:28:18:26:43:fd: c9:37:60:18:37:46:8b:c4:0d:23:9d:e8:3b:33:ce:20:21:94: d3:f4:e4:bc:10:44:e0:f2:46:86:bf:95:3e:82:d9:24:d9:92: 18:19:31:e0:f5:3c:fb:3b:5b:95:1b:15:4c:63:f3:05:0c:98: a4:6a:60:93:19:8d:18:dd:83:44:11:c8:63:cd:23:61:95:36: 52:fc:19:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRJ/g75zB/ZVJUiFSYglYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTJmOGZjOTg2ZTlmMWQzZTRiZjA1ZmNhOTY1OWEwODgx ZDcwMDMwHhcNMjUxMjI5MTgwMDE3WhcNMjUxMjMwMTgwMDE3WjAzMTEwLwYDVQQD Eyg5ZDJlZWZkMDU5NjczMzgwNzk3MjQyZjFlNDEyODdhNmI4MDMyNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyvVXA6EI2VuCIerbxGDmESF/i7z 5h9B9aASL7PyWMiYHs3mpgt85FkEnM8iJG9EoOzwLYkg5KbfirTJNH3zstnd42ER 4kg2wvHWzV2/X5Bsx9tklzXAh7licOiev5j920qDMQlbnA7eudbzQ0HzYcUBaqWh uuSeI0fL/lYOM7xQCWrzpGkmXETjDviCL+FSUM5M4LJygLsP9NzaOdQ2gUshIVVl dzL6I9YmlpaD72P0N3/Oqs0avadoPLZye9YjW8p3ofwc4EcXQyk0FyQyuAK5y9pZ uBtBO7WgHN8IZHXNxNgSG8jrTQYaOX2HrnN386Q1+w1lArD984Z6iwCHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0u79BZZzOAeXJC8eQSh6a4AyV1MB8GA1UdIwQY MBaAFNOS+PyYbp8dPkvwX8qWWaCIHXADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTkt MWJiNzE2NDI3Y2E5LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTktMWJiNzE2NDI3Y2E5 LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS14+xUWQ pgIL+xsgewUooBjn28lRh8mrE4aCmAUsBTQaM59A5az0III6SVGhbJYv11X4RQUk Kn8oxRFuYnJKig6iVf9MP14wU1d7VuFOccfRguUnLn2KfI1ZvryFtd1ZHNSwN2oV uSFrKFXTBoXjGzV3bFrEyAMWX+wUZQ9ia7rULRuOQF7xaUWXAerydbiQSjpM1bFD v3vKPG7YruYL941N779Z6DXyPEZDUzkhgigYJkP9yTdgGDdGi8QNI53oOzPOICGU 0/TkvBBE4PJGhr+VPoLZJNmSGBkx4PU8+ztblRsVTGPzBQyYpGpgkxmNGN2DRBHI Y80jYZU2UvwZWg== -----END CERTIFICATE-----Generated at Tue Dec 30 00:21:22 2025 by rpki-client