This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json) Hash identifier: xyWNIdbY4aClXsAtciQLFWaCknrFKYc5pu4vbQ0UP1Y= Subject key identifier: 90:EA:17:75:5E:2C:E0:32:2F:65:15:8E:70:CF:24:94:50:7B:17:B6 Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4 Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4 Certificate serial: 019B3CEC4E1B5563E73AABE8DD4AECE36FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft Manifest number: 08BF Signing time: Sat 20 Dec 2025 18:01:17 +0000 Manifest this update: Sat 20 Dec 2025 18:01:17 +0000 Manifest next update: Sun 21 Dec 2025 18:01:17 +0000 Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: phKscCsZIaCou2dgeZ6yIzg/1w5BtyyYjQK2PWVqss0=) 2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:4e:1b:55:63:e7:3a:ab:e8:dd:4a:ec:e3:6f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4 Validity Not Before: Dec 20 18:01:17 2025 GMT Not After : Dec 21 18:01:17 2025 GMT Subject: CN=90ea17755e2ce0322f65158e70cf2494507b17b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:90:17:f6:f3:05:a5:47:9c:7e:65:13:95: 53:73:5e:7e:bb:bf:c9:eb:b3:73:d5:41:d3:2d:0d: 25:9a:06:5e:47:2b:4b:a4:4e:5d:fe:22:d4:9b:75: cd:13:14:11:ee:ae:73:20:7d:6d:a7:53:58:7b:b4: 87:21:25:1f:75:12:ac:96:ab:ac:b7:b2:54:4f:f5: 08:6d:b7:89:38:da:ec:32:4b:b7:76:ef:60:5f:fc: 19:68:45:81:6f:4d:de:99:e2:a6:13:3a:bf:9b:b3: 65:1f:56:20:d8:77:4f:fa:7f:b1:c2:94:c2:42:b8: 84:f3:6e:8b:aa:d0:ab:1f:86:44:03:92:63:b3:c4: e5:da:4c:54:1d:f1:a4:49:2e:15:f5:5f:95:5f:f8: a6:06:3c:04:f5:44:6f:cf:94:57:e6:81:a5:a3:1c: 41:39:f6:12:2c:f7:a4:11:45:c8:bf:b7:6d:2c:09: 3f:84:8c:f2:60:fc:10:db:d2:0e:9c:d3:36:65:c6: 80:51:2f:99:77:9a:37:bd:a3:19:29:fe:c5:4f:b2: 00:cb:df:4c:27:66:7e:1d:49:e9:b0:c1:d3:3d:a7: c8:da:df:a4:6b:e1:a3:ee:c2:07:34:03:2c:e5:ad: c3:fb:c5:b8:13:a1:61:1c:6f:47:a2:d7:34:84:c8: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:17:75:5E:2C:E0:32:2F:65:15:8E:70:CF:24:94:50:7B:17:B6 X509v3 Authority Key Identifier: keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:95:8b:3d:28:cc:06:d9:53:c0:53:e7:d8:c4:40:bf:6f:68: 44:91:91:3d:82:57:c2:c1:d5:a2:6c:b2:01:eb:8f:74:f2:db: 12:ad:95:f7:09:2c:1a:2f:36:bc:42:37:f0:2b:3c:da:a8:d7: 56:54:6a:d3:23:7d:1c:59:78:28:76:6b:6c:a0:46:77:be:70: b1:c8:11:17:f8:09:6e:d1:81:c0:7f:12:f1:c3:8f:af:08:5c: 2d:dc:91:de:ec:b2:7d:09:84:95:fc:a6:ff:6e:6c:11:14:80: f4:ad:bc:78:f3:5e:a1:4a:c5:de:e0:67:7f:e5:2a:db:56:36: 4f:b0:a7:13:f8:3e:7d:69:61:55:f7:42:d6:8e:35:60:67:46: a8:6e:4f:54:ad:25:db:37:e9:2d:41:e0:76:ae:b8:cd:73:66: 6e:04:52:f7:58:b6:4e:ab:4c:19:dc:32:da:9d:ab:5d:01:94: 52:f2:48:4a:7c:56:ea:72:d0:34:ee:2e:d9:ff:2f:bf:7b:68: 95:b5:ab:1a:5e:df:ad:a6:48:e3:aa:5f:f8:d1:64:8d:f0:3c: 39:d8:81:17:06:cc:54:17:67:5a:ce:f8:40:ea:55:2f:00:c5: 28:c8:c2:bc:89:db:ad:0e:bd:ec:c7:4e:4c:64:93:5d:50:2b: bf:24:1a:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87E4bVWPnOqvo3Urs42/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0 YjVjZTQwHhcNMjUxMjIwMTgwMTE3WhcNMjUxMjIxMTgwMTE3WjAzMTEwLwYDVQQD Eyg5MGVhMTc3NTVlMmNlMDMyMmY2NTE1OGU3MGNmMjQ5NDUwN2IxN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9aQF/bzBaVHnH5lE5VTc15+u7/J 67Nz1UHTLQ0lmgZeRytLpE5d/iLUm3XNExQR7q5zIH1tp1NYe7SHISUfdRKslqus t7JUT/UIbbeJONrsMku3du9gX/wZaEWBb03emeKmEzq/m7NlH1Yg2HdP+n+xwpTC QriE826LqtCrH4ZEA5Jjs8Tl2kxUHfGkSS4V9V+VX/imBjwE9URvz5RX5oGloxxB OfYSLPekEUXIv7dtLAk/hIzyYPwQ29IOnNM2ZcaAUS+Zd5o3vaMZKf7FT7IAy99M J2Z+HUnpsMHTPafI2t+ka+Gj7sIHNAMs5a3D+8W4E6FhHG9Hotc0hMgoJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDqF3VeLOAyL2UVjnDPJJRQexe2MB8GA1UdIwQY MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZWLPSjM BtlTwFPn2MRAv29oRJGRPYJXwsHVomyyAeuPdPLbEq2V9wksGi82vEI38Cs82qjX VlRq0yN9HFl4KHZrbKBGd75wscgRF/gJbtGBwH8S8cOPrwhcLdyR3uyyfQmElfym /25sERSA9K28ePNeoUrF3uBnf+Uq21Y2T7CnE/g+fWlhVfdC1o41YGdGqG5PVK0l 2zfpLUHgdq64zXNmbgRS91i2TqtMGdwy2p2rXQGUUvJISnxW6nLQNO4u2f8vv3to lbWrGl7fraZI46pf+NFkjfA8OdiBFwbMVBdnWs74QOpVLwDFKMjCvInbrQ697MdO TGSTXVArvyQaIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:25:08 2025 by rpki-client