This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json) Hash identifier: V6NOY9r4Ewx3gsBSP9h8I53LEOsE7JO8cV3Bwm+JfAc= Subject key identifier: 68:0B:F4:F6:90:D1:AD:A4:D0:EF:73:77:40:C9:C3:78:A4:A6:47:3B Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868 Certificate serial: 019B4EBB28E7C778F8FD9ED9E8A3A12972E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft Manifest number: 04E0 Signing time: Wed 24 Dec 2025 05:00:46 +0000 Manifest this update: Wed 24 Dec 2025 05:00:46 +0000 Manifest next update: Thu 25 Dec 2025 05:00:46 +0000 Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=) 2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: r+cOx26cKrP/5QQRZNXnNZzs5lnp3tk6Ru6DEH4xwZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:28:e7:c7:78:f8:fd:9e:d9:e8:a3:a1:29:72:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868 Validity Not Before: Dec 24 05:00:46 2025 GMT Not After : Dec 25 05:00:46 2025 GMT Subject: CN=680bf4f690d1ada4d0ef737740c9c378a4a6473b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:2b:6d:da:7a:f6:84:10:66:94:16:1b:cd: 5f:40:25:b8:7e:66:9c:11:c2:7d:4d:77:6d:94:bd: f4:dd:a4:78:4f:3c:44:73:82:ed:80:7f:9d:7a:70: 00:eb:ea:d9:5a:db:a5:e7:34:44:a1:68:b7:2a:d8: 29:73:86:e5:79:0d:c7:b3:01:21:fd:a5:dc:ed:60: e5:b1:ec:1a:4b:62:dd:76:8e:de:4e:75:57:09:f1: fc:d1:5d:3c:ee:79:0b:bb:76:0e:2b:82:cc:18:44: 18:bb:bd:b7:d2:46:16:80:79:43:85:4b:63:86:d8: 9b:05:39:e0:ac:b5:fb:56:6a:85:fa:ac:21:c5:07: 1d:6d:e8:a9:8e:aa:62:80:7b:8a:36:a6:ed:57:3b: 4d:37:0a:65:8d:46:96:02:e0:7d:32:f8:9a:a3:1c: f8:f0:84:f4:40:30:f7:48:2a:ac:32:0e:5e:ec:4c: 51:f9:81:4f:0b:0f:d2:87:4a:73:a5:1a:6a:60:b8: 17:bb:18:a6:84:c0:cd:5a:57:15:fc:61:78:34:f4: 50:9b:be:30:1b:71:d9:81:29:eb:1c:72:48:fd:b1: 44:18:32:2c:10:97:b8:cc:1e:78:59:ca:7a:d4:ce: fb:0a:0a:02:16:34:33:3e:2c:1f:f6:e5:56:96:9c: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0B:F4:F6:90:D1:AD:A4:D0:EF:73:77:40:C9:C3:78:A4:A6:47:3B X509v3 Authority Key Identifier: keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a9:48:24:cc:0f:e0:dc:a1:58:63:c0:e9:18:8d:92:ec:a8: a5:e3:23:fe:c4:5e:0b:66:0a:bc:71:ce:83:e2:d9:37:37:f8: f1:b6:42:79:87:fe:48:91:4b:32:43:a7:0a:79:1d:bf:78:9a: d6:f9:57:07:19:72:ec:6d:53:47:b8:f4:7a:d4:c9:51:4d:08: 18:41:02:55:f9:89:c6:66:ce:52:17:96:4b:7e:1f:c4:22:de: 06:b6:31:80:3c:4b:8c:78:9b:93:35:68:8a:dd:bf:ca:92:09: 20:e3:ca:38:98:90:c9:36:5e:ed:ac:12:2e:0a:a6:d4:cb:c6: a9:90:3e:8d:bd:57:82:3e:39:75:9c:06:48:06:0a:9a:61:54: dd:a2:c3:00:3e:4f:08:2d:76:d3:f6:85:37:17:3a:69:4b:97: fe:56:ed:72:8e:96:5c:4c:58:55:a5:51:eb:0f:9c:52:ba:65: 89:0d:07:93:e4:e0:dd:83:ce:96:c0:41:03:5a:6b:45:ba:5b: 3b:0a:db:94:4f:70:f9:d0:d5:3c:8d:86:b9:d5:a0:0b:4f:d5: 79:71:78:c1:8f:fd:fc:7e:a5:25:5f:b5:a5:bc:ad:5c:86:d0: 04:fa:0c:93:9d:5d:25:17:27:2e:5a:f9:4b:f4:4f:e6:5f:0d: 54:11:59:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuyjnx3j4/Z7Z6KOhKXLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw MmY4NjgwHhcNMjUxMjI0MDUwMDQ2WhcNMjUxMjI1MDUwMDQ2WjAzMTEwLwYDVQQD Eyg2ODBiZjRmNjkwZDFhZGE0ZDBlZjczNzc0MGM5YzM3OGE0YTY0NzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2krbdp69oQQZpQWG81fQCW4fmac EcJ9TXdtlL303aR4TzxEc4LtgH+denAA6+rZWtul5zREoWi3Ktgpc4bleQ3HswEh /aXc7WDlsewaS2Lddo7eTnVXCfH80V087nkLu3YOK4LMGEQYu7230kYWgHlDhUtj htibBTngrLX7VmqF+qwhxQcdbeipjqpigHuKNqbtVztNNwpljUaWAuB9Mviaoxz4 8IT0QDD3SCqsMg5e7ExR+YFPCw/Sh0pzpRpqYLgXuximhMDNWlcV/GF4NPRQm74w G3HZgSnrHHJI/bFEGDIsEJe4zB54Wcp61M77CgoCFjQzPiwf9uVWlpzFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgL9PaQ0a2k0O9zd0DJw3ikpkc7MB8GA1UdIwQY MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt ZTU4NGNkNWY4ZDExLzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqlIJMwP 4NyhWGPA6RiNkuyopeMj/sReC2YKvHHOg+LZNzf48bZCeYf+SJFLMkOnCnkdv3ia 1vlXBxly7G1TR7j0etTJUU0IGEECVfmJxmbOUheWS34fxCLeBrYxgDxLjHibkzVo it2/ypIJIOPKOJiQyTZe7awSLgqm1MvGqZA+jb1Xgj45dZwGSAYKmmFU3aLDAD5P CC120/aFNxc6aUuX/lbtco6WXExYVaVR6w+cUrpliQ0Hk+Tg3YPOlsBBA1prRbpb OwrblE9w+dDVPI2GudWgC0/VeXF4wY/9/H6lJV+1pbytXIbQBPoMk51dJRcnLlr5 S/RP5l8NVBFZDg== -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:36 2025 by rpki-client