This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json) Hash identifier: 4y//ooOym27SPn9ADgs73jI6TcgglyMDlGKZJ3AfU/I= Subject key identifier: 7E:1F:B3:5E:C3:A8:2B:EC:70:D6:FF:3A:39:03:26:C1:10:AD:C9:4D Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3 Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3 Certificate serial: 019B50E083C1D4C1C16C42FC3D8783FEC123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft Manifest number: 0884 Signing time: Wed 24 Dec 2025 15:00:49 +0000 Manifest this update: Wed 24 Dec 2025 15:00:49 +0000 Manifest next update: Thu 25 Dec 2025 15:00:49 +0000 Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: A1e4EFpepz8KVFYo3+kFyA6PjjNUt2DeI26sHzQ2SSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:83:c1:d4:c1:c1:6c:42:fc:3d:87:83:fe:c1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3 Validity Not Before: Dec 24 15:00:49 2025 GMT Not After : Dec 25 15:00:49 2025 GMT Subject: CN=7e1fb35ec3a82bec70d6ff3a390326c110adc94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:76:e4:29:13:33:ff:92:cf:e0:ee:72:8e: 95:e4:38:48:50:ac:bb:f0:e5:d8:35:34:84:67:8a: 8a:9d:bd:0f:0b:65:f0:d7:c3:0c:35:56:40:0a:8b: 53:28:5b:a5:34:89:dd:fe:ff:cf:f9:e2:7c:14:e9: cf:e2:59:f7:2a:a5:df:63:a9:e1:d4:b4:4d:61:ea: cc:ca:e5:b1:40:ad:6d:6e:50:0b:66:d5:41:4a:d7: 66:58:bb:50:05:6e:b2:58:17:1c:9d:96:3d:b4:18: 29:4f:54:3a:34:24:19:3c:9a:68:bf:1f:1f:16:ee: 30:4e:71:b2:b2:8f:4c:c5:84:a8:b8:57:a9:c9:f6: 20:0e:b9:30:a6:1a:7f:84:31:f3:4b:0d:4b:1c:17: e8:09:db:24:23:28:68:90:2e:0b:39:46:f6:e5:5c: ba:9a:17:00:7a:72:cc:c0:6d:09:3a:24:62:83:59: 62:ab:17:7d:51:bb:73:18:90:1c:6d:a0:07:ed:7b: 76:67:92:20:b3:3b:d4:60:f7:9a:38:c5:81:79:0b: 5b:30:e7:bb:24:ac:85:f1:fb:a9:19:0c:16:c6:e5: c6:a3:b3:e3:0c:2f:f2:42:84:07:0f:ef:16:eb:4c: ba:53:cb:6a:b3:a8:e7:de:d8:9d:09:77:33:4a:ae: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1F:B3:5E:C3:A8:2B:EC:70:D6:FF:3A:39:03:26:C1:10:AD:C9:4D X509v3 Authority Key Identifier: keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:b3:63:48:c9:61:06:ce:86:a6:78:ef:09:83:63:64:bc: 4d:ab:f5:9f:f9:fa:6a:43:d4:1a:81:1e:91:5f:5d:fc:0b:96: e1:e7:c3:10:33:77:c0:54:a6:72:27:3a:34:f0:2b:68:4e:d1: 61:47:3c:b1:ae:f5:b1:22:de:7b:92:17:dd:05:fe:a0:27:bf: d8:83:60:5c:ec:ef:71:11:64:31:a5:d3:12:26:44:ff:5b:ff: 5a:f6:b1:02:9e:0a:de:72:e0:1c:da:5c:22:c3:a0:96:8c:87: 0f:31:a6:63:b2:01:a2:4f:0f:0e:77:9a:c9:32:fa:16:82:b7: f9:fd:46:28:dc:ee:9f:12:03:61:45:52:ef:08:d2:45:c2:d4: 15:7e:91:8d:56:c1:c4:d2:9b:98:79:82:91:e6:3b:13:96:b2: 35:47:0a:a7:e1:15:8a:56:44:2b:28:23:67:92:46:9c:a4:32: 33:42:d8:9b:74:ef:d1:db:48:23:24:0b:74:33:b4:1c:92:a9: fd:95:01:95:61:b0:05:c7:28:22:08:e6:a7:84:7d:be:f6:3d: 04:c2:0a:cf:a0:c0:85:44:87:4d:20:f3:54:0e:20:bd:96:53: c6:1b:ae:f7:84:79:95:67:b9:06:2b:99:f0:18:64:06:b6:e1: e9:a4:89:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4IPB1MHBbEL8PYeD/sEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OWZmMTlhZGQ0YmIyMTEyOWVlODgyMzE0YmU3M2NiNzhj Y2VkYjMwHhcNMjUxMjI0MTUwMDQ5WhcNMjUxMjI1MTUwMDQ5WjAzMTEwLwYDVQQD Eyg3ZTFmYjM1ZWMzYTgyYmVjNzBkNmZmM2EzOTAzMjZjMTEwYWRjOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybV25CkTM/+Sz+Duco6V5DhIUKy7 8OXYNTSEZ4qKnb0PC2Xw18MMNVZACotTKFulNInd/v/P+eJ8FOnP4ln3KqXfY6nh 1LRNYerMyuWxQK1tblALZtVBStdmWLtQBW6yWBccnZY9tBgpT1Q6NCQZPJpovx8f Fu4wTnGyso9MxYSouFepyfYgDrkwphp/hDHzSw1LHBfoCdskIyhokC4LOUb25Vy6 mhcAenLMwG0JOiRig1liqxd9UbtzGJAcbaAH7Xt2Z5IgszvUYPeaOMWBeQtbMOe7 JKyF8fupGQwWxuXGo7PjDC/yQoQHD+8W60y6U8tqs6jn3tidCXczSq4JzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4fs17DqCvscNb/OjkDJsEQrclNMB8GA1UdIwQY MBaAFOSf8ZrdS7IRKe6IIxS+c8t4zO2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDIt ZDZiMDU1ZGFiNDdiLzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDItZDZiMDU1ZGFiNDdi LzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuCzY0jJ YQbOhqZ47wmDY2S8Tav1n/n6akPUGoEekV9d/AuW4efDEDN3wFSmcic6NPAraE7R YUc8sa71sSLee5IX3QX+oCe/2INgXOzvcRFkMaXTEiZE/1v/WvaxAp4K3nLgHNpc IsOgloyHDzGmY7IBok8PDneayTL6FoK3+f1GKNzunxIDYUVS7wjSRcLUFX6RjVbB xNKbmHmCkeY7E5ayNUcKp+EVilZEKygjZ5JGnKQyM0LYm3Tv0dtIIyQLdDO0HJKp /ZUBlWGwBccoIgjmp4R9vvY9BMIKz6DAhUSHTSDzVA4gvZZTxhuu94R5lWe5BiuZ 8BhkBrbh6aSJWA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:27:32 2025 by rpki-client