This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json) Hash identifier: 7NTVfPNjbVqgN0DlB++HvZMDTDzRhb8wU2hM3HiyP0M= Subject key identifier: 90:CF:D8:24:23:49:E3:82:0A:D5:29:41:2B:3D:9C:D7:A2:63:80:42 Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Certificate serial: 019AF163F6C0277E43E8C8D83F9B70CEF2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=) 2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: ZYwYgYP0bS0gHT8jp6T7impCs24a5MBiPh4JO0LpALk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f6:c0:27:7e:43:e8:c8:d8:3f:9b:70:ce:f2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=90cfd8242349e3820ad529412b3d9cd7a2638042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:3d:a2:21:b6:b9:38:74:30:db:a8:ca:60: 8b:07:22:d9:70:f1:46:fd:b1:1b:b0:60:b0:83:8c: 72:eb:90:86:63:2c:ad:af:39:15:62:14:4a:25:70: 30:5d:bd:a4:55:b3:d0:9c:04:d8:97:bf:7d:98:c3: 07:ee:e1:27:10:cc:4b:3b:67:27:e9:c0:5e:3a:3d: 4c:bb:68:3a:a1:54:29:44:ed:f8:40:93:e3:8c:13: fd:39:97:e8:9e:db:9d:65:33:55:82:c2:48:32:94: 41:84:ee:88:85:b2:7e:53:31:c3:36:5d:a9:48:8c: f6:4a:e6:2d:9f:01:d0:3c:34:43:e0:59:a7:67:bf: 9a:59:09:52:62:c0:7c:cf:df:89:c9:e8:b5:38:11: 80:db:e1:a7:f1:54:88:68:8f:44:5e:17:bc:c2:41: 4b:25:90:c6:31:e6:8c:a8:c5:46:7f:3d:6a:da:4f: b8:dd:77:00:c5:36:05:80:13:02:0a:f4:ce:0c:fb: 44:d7:28:fe:71:60:ce:f5:88:0a:29:f9:eb:f0:6a: 42:e4:fe:52:00:17:43:1e:d7:20:73:ba:ff:30:29: a7:f0:13:cf:2c:68:8c:b6:4d:85:41:c6:14:f2:66: 86:a3:06:a5:58:b2:4f:c4:ba:66:b5:3e:11:e8:da: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CF:D8:24:23:49:E3:82:0A:D5:29:41:2B:3D:9C:D7:A2:63:80:42 X509v3 Authority Key Identifier: keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:0f:14:b7:85:fd:7d:7d:69:96:71:36:43:93:a4:b9:24: 17:43:7b:c2:89:e2:d6:26:fe:5a:ce:7f:f0:f1:e2:0a:1e:8c: 54:6c:39:03:d9:2e:06:c5:07:aa:48:a1:06:4e:b3:6b:ae:35: 8d:cb:dd:7b:74:4f:88:91:3a:39:dc:83:cf:f3:04:14:3c:83: df:6b:9d:d5:76:27:db:d3:a1:52:28:c9:70:36:de:ec:37:15: a6:26:ac:bd:cb:6b:b4:06:bf:ef:bc:94:bb:b6:e2:e7:0a:ed: 34:3e:80:3d:0f:87:39:ab:73:5c:60:9a:e6:8e:9d:21:de:dd: 44:18:d2:cb:f5:50:2f:f0:5d:32:e4:e1:aa:78:5c:8a:9f:c5: ad:5e:8c:fb:f0:28:6c:7e:c7:21:5e:99:fc:65:b6:81:12:ca: c2:36:3d:64:e0:55:37:a3:e9:32:3b:6b:05:93:b7:ad:cf:27: 8e:68:0c:66:c4:93:4f:08:1c:6b:1b:ea:1c:10:f4:44:73:06: 4a:cb:9b:8d:25:d5:21:cb:dc:78:e2:22:f8:38:d8:eb:6b:69: ac:06:36:c5:fe:71:78:d8:b7:7e:5a:59:3f:52:38:b4:34:eb: 30:02:48:96:13:93:1d:8d:f1:87:b9:ce:a6:56:df:f8:2d:37: 89:6a:f7:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/bAJ35D6MjYP5twzvL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTBmNmI3NWU5MTNmMjc4MmVkNTQ5ZWI3MjE3MmM1OWNj NDdhZjEwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD Eyg5MGNmZDgyNDIzNDllMzgyMGFkNTI5NDEyYjNkOWNkN2EyNjM4MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplc9oiG2uTh0MNuoymCLByLZcPFG /bEbsGCwg4xy65CGYyytrzkVYhRKJXAwXb2kVbPQnATYl799mMMH7uEnEMxLO2cn 6cBeOj1Mu2g6oVQpRO34QJPjjBP9OZfontudZTNVgsJIMpRBhO6IhbJ+UzHDNl2p SIz2SuYtnwHQPDRD4FmnZ7+aWQlSYsB8z9+Jyei1OBGA2+Gn8VSIaI9EXhe8wkFL JZDGMeaMqMVGfz1q2k+43XcAxTYFgBMCCvTODPtE1yj+cWDO9YgKKfnr8GpC5P5S ABdDHtcgc7r/MCmn8BPPLGiMtk2FQcYU8maGowalWLJPxLpmtT4R6NojpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDP2CQjSeOCCtUpQSs9nNeiY4BCMB8GA1UdIwQY MBaAFI+Q9rdekT8ngu1UnrchcsWcxHrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQt YzFkMGFjYjc4MTlhLzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQtYzFkMGFjYjc4MTlh LzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjcPFLeF /X19aZZxNkOTpLkkF0N7woni1ib+Ws5/8PHiCh6MVGw5A9kuBsUHqkihBk6za641 jcvde3RPiJE6OdyDz/MEFDyD32ud1XYn29OhUijJcDbe7DcVpiasvctrtAa/77yU u7bi5wrtND6APQ+HOatzXGCa5o6dId7dRBjSy/VQL/BdMuThqnhcip/FrV6M+/Ao bH7HIV6Z/GW2gRLKwjY9ZOBVN6PpMjtrBZO3rc8njmgMZsSTTwgcaxvqHBD0RHMG SsubjSXVIcvceOIi+DjY62tprAY2xf5xeNi3flpZP1I4tDTrMAJIlhOTHY3xh7nO plbf+C03iWr3xw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:21 2025 by rpki-client