This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json) Hash identifier: 5F6hd42dX17jJAV1SzlY/9XA5/eRDXm1LhzuPTbA+c4= Subject key identifier: 2D:CA:5A:C1:88:9B:74:1F:56:83:06:2F:1F:5A:FB:83:63:9B:32:0B Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4 Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4 Certificate serial: 019AF163E7A318DED193EA88CA257DC3D78F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft Manifest number: 0F34 Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: d3zGKlUSU9b4x8A6wPV2zh6t00BrwzlOjbUSzX3rMgg=) 2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e7:a3:18:de:d1:93:ea:88:ca:25:7d:c3:d7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=2dca5ac1889b741f5683062f1f5afb83639b320b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:17:83:c4:0e:40:43:85:b9:3f:17:95:40: 5b:d8:7c:77:3e:20:d7:9a:15:44:8e:a0:4b:79:e3: 9d:4e:84:19:d8:9a:4c:c8:38:8e:88:86:03:ae:0e: 34:4a:f5:0b:ad:1d:b5:e5:9e:fd:7e:62:b7:72:87: 90:82:0e:22:cd:fe:99:80:3e:d1:29:ef:e3:ef:89: c0:47:78:a6:eb:c4:fa:34:4b:1e:24:75:58:ca:c1: 77:bf:37:b4:9e:ba:8b:37:98:7c:df:a6:1f:56:1a: 97:2d:c9:9c:3e:2f:5f:91:a5:03:1f:ab:89:25:f5: 79:00:c3:4d:64:e7:66:ee:02:d2:04:79:9d:14:1c: 8a:08:f9:50:3c:45:16:a0:d9:91:ff:b3:19:bb:29: 3e:57:af:05:e9:5a:c3:29:f3:01:00:6e:b5:fc:24: 7b:ad:8e:9b:7d:8d:f3:52:fe:a2:2f:70:63:1c:9a: 32:18:18:5b:58:01:ae:06:b9:e7:52:92:25:75:e9: 66:6a:52:a3:60:87:c1:2c:0b:a3:09:b7:95:59:85: 74:a3:a2:df:9d:4d:d5:ad:a1:14:7c:3f:4d:e5:09: 1e:cb:4a:ab:4c:90:cf:e1:78:ff:2b:62:6e:25:93: 2e:51:8d:95:96:56:6f:74:76:b2:6f:3c:76:af:56: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:5A:C1:88:9B:74:1F:56:83:06:2F:1F:5A:FB:83:63:9B:32:0B X509v3 Authority Key Identifier: keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c5:c8:62:cb:f4:3d:2b:b5:7e:e2:92:76:8d:a0:e4:70:7c: 22:97:d0:f3:cd:87:ba:36:1c:df:da:1a:e9:d9:ac:5a:b6:25: 5f:4a:68:62:1b:e6:ee:c5:6d:3b:80:c3:f0:8a:27:1f:37:ec: 71:81:36:7e:f1:a5:40:c5:c2:4a:b4:2a:8e:cc:19:7e:95:1a: e1:aa:3f:b9:22:b8:b6:70:4b:8c:fc:aa:55:c6:4c:6d:be:fe: 17:34:5c:bb:5e:06:98:c3:ec:7d:e2:3a:4f:9a:91:38:bb:da: 72:6b:32:a3:72:9c:e5:79:82:ce:87:a8:3c:8e:96:d8:64:2e: 59:16:a7:7d:84:e2:ae:a0:47:cd:1b:6c:ca:f1:2c:1d:69:e4: b6:39:a8:03:92:65:41:64:55:21:2c:45:63:f8:f3:cf:c9:83: dd:e6:48:4c:24:cc:64:ca:ea:84:73:b3:04:cd:58:6d:80:a1: 03:9a:0f:ea:9e:da:b6:0c:2b:b4:b9:ba:fc:00:07:e9:f0:27: 05:77:62:2c:0a:a3:6c:cf:5f:eb:9a:c7:87:46:d7:64:1d:0e: e6:c7:9f:1c:cc:d7:90:5b:86:a3:41:74:ce:8e:ea:f7:49:10: f8:74:49:f2:43:f6:40:4e:11:18:0f:50:5c:c7:e0:c3:1e:97: 8f:5b:3b:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+ejGN7Rk+qIyiV9w9ePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5 MDYzZTQwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EygyZGNhNWFjMTg4OWI3NDFmNTY4MzA2MmYxZjVhZmI4MzYzOWIzMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNsXg8QOQEOFuT8XlUBb2Hx3PiDX mhVEjqBLeeOdToQZ2JpMyDiOiIYDrg40SvULrR215Z79fmK3coeQgg4izf6ZgD7R Ke/j74nAR3im68T6NEseJHVYysF3vze0nrqLN5h836YfVhqXLcmcPi9fkaUDH6uJ JfV5AMNNZOdm7gLSBHmdFByKCPlQPEUWoNmR/7MZuyk+V68F6VrDKfMBAG61/CR7 rY6bfY3zUv6iL3BjHJoyGBhbWAGuBrnnUpIldelmalKjYIfBLAujCbeVWYV0o6Lf nU3VraEUfD9N5Qkey0qrTJDP4Xj/K2JuJZMuUY2VllZvdHaybzx2r1YuuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3KWsGIm3QfVoMGLx9a+4NjmzILMB8GA1UdIwQY MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1 LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsXIYsv0 PSu1fuKSdo2g5HB8IpfQ882HujYc39oa6dmsWrYlX0poYhvm7sVtO4DD8IonHzfs cYE2fvGlQMXCSrQqjswZfpUa4ao/uSK4tnBLjPyqVcZMbb7+FzRcu14GmMPsfeI6 T5qROLvacmsyo3Kc5XmCzoeoPI6W2GQuWRanfYTirqBHzRtsyvEsHWnktjmoA5Jl QWRVISxFY/jzz8mD3eZITCTMZMrqhHOzBM1YbYChA5oP6p7atgwrtLm6/AAH6fAn BXdiLAqjbM9f65rHh0bXZB0O5sefHMzXkFuGo0F0zo7q90kQ+HRJ8kP2QE4RGA9Q XMfgwx6Xj1s7KQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:35 2025 by rpki-client