This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json) Hash identifier: GxqnnlG7V0E00g+u/4Y0dyJ/0jXlS+DV/8W3JJvHyXg= Subject key identifier: 2A:BA:5C:52:D1:D8:CF:D4:35:98:C1:0A:77:BC:41:05:6C:23:57:64 Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96 Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96 Certificate serial: 019AF163FB0D92143DE57AC4C2630718AC97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft Manifest number: 0587 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=) 2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: r8hIe5cjFPq5dbG3eVyTiU7tdHbtzeLCGXrAFt66XAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fb:0d:92:14:3d:e5:7a:c4:c2:63:07:18:ac:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96 Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=2aba5c52d1d8cfd43598c10a77bc41056c235764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:88:05:92:68:46:ce:21:4f:59:15:01:51: 43:49:78:65:93:7a:b0:06:4f:03:fa:2c:c4:bb:d4: 9b:4c:65:2e:4c:75:81:ed:f1:f5:1e:03:45:0a:f0: a4:2b:0a:6b:8b:e7:25:e1:da:d9:5b:14:46:ae:a2: 46:2e:e8:bd:31:1e:a2:26:5d:86:2f:c3:1f:09:00: 86:da:43:46:65:1d:7f:32:f4:35:0b:a3:2e:67:c5: 1c:2d:75:dd:0e:34:fa:26:ae:86:0b:e1:2f:7f:ef: 87:4c:25:f9:b7:a1:db:c5:c8:58:61:66:cd:e7:9a: 2d:a7:f0:85:c6:35:d4:93:12:80:64:3b:71:e5:50: 81:54:41:9b:45:34:1b:f0:f3:d9:90:17:51:fe:a5: f0:9a:fd:c6:22:94:6d:ea:d8:c1:e6:a8:e8:ed:f1: 2d:06:a5:2e:fb:a2:19:aa:44:80:77:73:8b:88:41: 61:c1:91:21:ad:4b:7a:db:5a:c1:41:02:f1:63:c6: 28:23:a8:2f:e4:42:af:be:61:75:8b:63:8e:3d:81: 9a:52:43:5c:3c:7b:77:18:ab:34:51:a0:2d:83:28: 0a:ee:a7:ca:6c:5e:ed:e9:05:a9:45:bd:16:79:33: 84:74:cb:74:44:d0:48:71:d7:5a:c6:8f:2c:63:77: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BA:5C:52:D1:D8:CF:D4:35:98:C1:0A:77:BC:41:05:6C:23:57:64 X509v3 Authority Key Identifier: keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:83:e0:73:b1:32:18:88:37:a8:09:96:b7:4e:8e:03:ad:17: 0c:4c:32:b3:f9:0a:9a:76:82:4b:5e:bc:53:c2:ed:ca:73:8c: d8:92:a1:5d:d2:25:bb:b5:d4:eb:2b:6b:be:98:a8:d2:76:22: 4e:6d:d9:1f:9a:64:6b:bc:3e:36:c7:fc:00:6a:f7:01:75:15: c9:c3:3b:f0:58:1d:61:3a:55:4b:85:80:20:f6:d9:62:b8:8f: a6:88:bd:19:34:7f:c9:0b:ed:d7:1b:22:35:29:ce:4c:90:37: 2b:d2:25:2f:55:cb:19:94:99:66:61:75:9d:49:e6:21:02:fc: ca:19:96:c1:b3:64:7f:1f:ab:84:ab:3c:b9:44:e1:36:19:e2: 18:da:65:67:20:ed:93:f0:8c:e4:e9:68:ab:b4:d2:1a:ab:c8: 7a:e9:d1:dc:95:a2:db:20:a9:55:89:b2:2d:0a:d4:b3:e0:83: 9c:cf:98:0f:84:ec:67:f9:76:15:b2:d3:76:63:32:79:3e:25: dc:59:73:5f:6c:e1:ce:16:df:fc:14:84:d4:f7:8d:2e:7b:fc: 58:2f:ef:93:dd:f0:5f:a5:b5:20:ba:a1:c4:60:c0:1b:31:32: 38:9b:c1:18:ba:e6:d4:aa:d5:0f:59:e8:df:cb:cf:72:a4:a5: e3:b2:bc:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/sNkhQ95XrEwmMHGKyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWVkMjE4OGRhOWVjYWRhMTE0OTE0NWFlZmE0OTcyNmZl MDFlOTYwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EygyYWJhNWM1MmQxZDhjZmQ0MzU5OGMxMGE3N2JjNDEwNTZjMjM1NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kGIBZJoRs4hT1kVAVFDSXhlk3qw Bk8D+izEu9SbTGUuTHWB7fH1HgNFCvCkKwpri+cl4drZWxRGrqJGLui9MR6iJl2G L8MfCQCG2kNGZR1/MvQ1C6MuZ8UcLXXdDjT6Jq6GC+Evf++HTCX5t6HbxchYYWbN 55otp/CFxjXUkxKAZDtx5VCBVEGbRTQb8PPZkBdR/qXwmv3GIpRt6tjB5qjo7fEt BqUu+6IZqkSAd3OLiEFhwZEhrUt621rBQQLxY8YoI6gv5EKvvmF1i2OOPYGaUkNc PHt3GKs0UaAtgygK7qfKbF7t6QWpRb0WeTOEdMt0RNBIcddaxo8sY3cjewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq6XFLR2M/UNZjBCne8QQVsI1dkMB8GA1UdIwQY MBaAFI+e0hiNqeytoRSRRa76SXJv4B6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNGM3YzctNTdlZC00NWU2LTlmY2Yt ZTcyNDEwNDk3NDVhLzEvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lNGM3YzctNTdlZC00NWU2LTlmY2YtZTcyNDEwNDk3NDVh LzEvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4Pgc7Ey GIg3qAmWt06OA60XDEwys/kKmnaCS168U8LtynOM2JKhXdIlu7XU6ytrvpio0nYi Tm3ZH5pka7w+Nsf8AGr3AXUVycM78FgdYTpVS4WAIPbZYriPpoi9GTR/yQvt1xsi NSnOTJA3K9IlL1XLGZSZZmF1nUnmIQL8yhmWwbNkfx+rhKs8uUThNhniGNplZyDt k/CM5Oloq7TSGqvIeunR3JWi2yCpVYmyLQrUs+CDnM+YD4TsZ/l2FbLTdmMyeT4l 3FlzX2zhzhbf/BSE1PeNLnv8WC/vk93wX6W1ILqhxGDAGzEyOJvBGLrm1KrVD1no 38vPcqSl47K8mA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:43 2025 by rpki-client