This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json) Hash identifier: GrNiWDCLW5MHb0QRXGRVCU/IQ25HJfxN9Ezhsap3Gio= Subject key identifier: 65:E3:B7:F5:67:FD:37:2D:6A:77:66:CA:22:0E:DC:A9:E3:FF:F9:C5 Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Certificate serial: 019B38D80D270828C7F39734BA32521E22B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft Manifest number: 0E67 Signing time: Fri 19 Dec 2025 23:00:41 +0000 Manifest this update: Fri 19 Dec 2025 23:00:41 +0000 Manifest next update: Sat 20 Dec 2025 23:00:41 +0000 Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=) 2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: dw4vePcCAhdYyprPZrik6L+4qfQ+mlbwg65EXMQ9ZQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:0d:27:08:28:c7:f3:97:34:ba:32:52:1e:22:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Validity Not Before: Dec 19 23:00:41 2025 GMT Not After : Dec 20 23:00:41 2025 GMT Subject: CN=65e3b7f567fd372d6a7766ca220edca9e3fff9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:bf:df:f8:c2:1e:6f:56:59:ac:5b:e4:13: ef:da:db:58:36:5a:f6:a6:9a:2c:ca:1b:f1:8a:0f: 87:f4:dd:fe:9a:fc:03:8f:77:5d:8c:87:7d:3b:71: aa:26:a0:1c:2e:b1:a0:19:e9:18:ae:ae:36:ce:b3: 93:f1:2a:fd:c7:de:70:93:30:84:89:24:f8:62:c6: 7c:96:51:7f:72:e6:47:22:01:ec:0d:9f:9e:9e:59: b4:90:49:5b:02:79:17:a3:ac:fe:ce:ba:9e:59:ae: 28:a4:1a:f9:e5:01:8c:88:13:e2:f3:ec:f7:72:67: 66:4a:1d:ad:c1:31:43:05:b9:cc:2f:cb:39:3a:2d: 89:8e:1c:e2:08:34:e4:cd:a4:d1:3c:45:b5:02:ee: 13:1d:09:3f:28:23:5b:51:e3:41:6e:76:35:a7:e5: cb:59:9e:1e:82:cc:ec:15:42:74:e1:be:55:ec:33: 35:80:11:30:f4:a6:14:e2:85:46:3e:23:cd:91:ee: 6a:03:28:12:67:50:ff:c6:03:a4:0b:49:f7:ee:a9: 7c:fe:a2:3c:f4:64:03:09:ab:f0:aa:ff:8e:ec:29: b6:58:7d:dc:e1:3c:77:2b:51:94:a5:bb:c2:a1:2f: c0:ac:86:ac:2d:c6:ec:ae:64:b0:83:0e:f1:3d:2c: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E3:B7:F5:67:FD:37:2D:6A:77:66:CA:22:0E:DC:A9:E3:FF:F9:C5 X509v3 Authority Key Identifier: keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0f:8f:8c:99:f3:d3:fd:5f:1b:fc:ac:00:90:29:55:38:87: bd:27:cb:4a:04:5f:cd:95:45:ca:62:a1:05:1a:e5:25:73:ab: 5e:19:bc:0b:87:40:7f:92:12:cf:62:c2:df:fc:66:04:6d:4a: 72:7f:e4:fd:14:66:21:06:d7:fa:c9:7f:3c:53:54:d1:d9:99: 79:5c:4f:c0:26:01:a0:91:06:1f:dc:a8:30:48:66:8c:0e:43: a4:07:7c:b4:89:be:7d:45:fe:9f:1f:da:61:cd:e9:d1:b3:52: 92:ac:d4:6a:b1:e3:55:d6:6b:28:a8:ff:54:b2:7f:d0:ad:c1: 9f:3f:87:d1:f1:8b:b6:ec:ba:f3:c7:aa:58:eb:28:48:c7:c2: fe:e6:ee:1c:5a:78:01:1b:a2:d6:85:af:ea:21:5f:71:47:81: f2:71:a2:b5:41:3f:d5:95:6e:3b:f2:2b:88:85:fd:c1:0c:dc: e9:8f:fc:f7:af:cd:89:0c:4b:ed:b4:69:cb:ea:6e:47:e8:d7: 87:65:b1:64:ff:16:4d:95:66:cc:f9:f6:c9:be:d9:5a:96:67: 88:b6:58:39:29:23:37:c2:e1:1b:f5:0d:ae:16:72:0f:30:e7: 3a:be:d6:3a:86:d8:dc:73:6a:3c:02:99:0c:12:76:a6:e8:cf: 99:80:c4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42A0nCCjH85c0ujJSHiK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy Nzc5YTgwHhcNMjUxMjE5MjMwMDQxWhcNMjUxMjIwMjMwMDQxWjAzMTEwLwYDVQQD Eyg2NWUzYjdmNTY3ZmQzNzJkNmE3NzY2Y2EyMjBlZGNhOWUzZmZmOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqve/3/jCHm9WWaxb5BPv2ttYNlr2 pposyhvxig+H9N3+mvwDj3ddjId9O3GqJqAcLrGgGekYrq42zrOT8Sr9x95wkzCE iST4YsZ8llF/cuZHIgHsDZ+enlm0kElbAnkXo6z+zrqeWa4opBr55QGMiBPi8+z3 cmdmSh2twTFDBbnML8s5Oi2JjhziCDTkzaTRPEW1Au4THQk/KCNbUeNBbnY1p+XL WZ4egszsFUJ04b5V7DM1gBEw9KYU4oVGPiPNke5qAygSZ1D/xgOkC0n37ql8/qI8 9GQDCavwqv+O7Cm2WH3c4Tx3K1GUpbvCoS/ArIasLcbsrmSwgw7xPSw7NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXjt/Vn/TctandmyiIO3Knj//nFMB8GA1UdIwQY MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg+PjJnz 0/1fG/ysAJApVTiHvSfLSgRfzZVFymKhBRrlJXOrXhm8C4dAf5ISz2LC3/xmBG1K cn/k/RRmIQbX+sl/PFNU0dmZeVxPwCYBoJEGH9yoMEhmjA5DpAd8tIm+fUX+nx/a Yc3p0bNSkqzUarHjVdZrKKj/VLJ/0K3Bnz+H0fGLtuy688eqWOsoSMfC/ubuHFp4 ARui1oWv6iFfcUeB8nGitUE/1ZVuO/IriIX9wQzc6Y/896/NiQxL7bRpy+puR+jX h2WxZP8WTZVmzPn2yb7ZWpZniLZYOSkjN8LhG/UNrhZyDzDnOr7WOobY3HNqPAKZ DBJ2pujPmYDEpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:40:45 2025 by rpki-client