This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json) Hash identifier: 0/seLHDNNt2WCUW0/1qkzoJ4lpBJScDzXy2ShNv9/90= Subject key identifier: 0F:AD:C4:B6:E6:C5:E4:47:A2:0D:5D:08:C0:5F:34:1A:FE:E2:95:68 Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71 Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471 Certificate serial: 019B34C5CB2F86AB37EBD3CB3F24BF85418B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:02:16 +0000 Manifest this update: Fri 19 Dec 2025 04:02:16 +0000 Manifest next update: Sat 20 Dec 2025 04:02:16 +0000 Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=) 2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: hU69DktN4Ec2fjjUS0CfHHepGAOqXGL8kZhO80ORMOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:cb:2f:86:ab:37:eb:d3:cb:3f:24:bf:85:41:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471 Validity Not Before: Dec 19 04:02:16 2025 GMT Not After : Dec 20 04:02:16 2025 GMT Subject: CN=0fadc4b6e6c5e447a20d5d08c05f341afee29568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:11:71:16:f7:f9:33:39:39:19:fd:e3:cf: e9:e1:ad:b4:ee:b6:03:f2:02:c4:fc:5d:2b:21:08: 8d:fc:74:2a:34:0e:63:d0:e0:9c:05:a3:65:98:c4: c2:d3:09:a4:4b:57:92:e3:49:54:fd:dc:0e:75:ae: 70:f3:eb:40:6c:b0:62:76:86:9d:8a:c3:19:d6:35: 6f:94:02:63:91:47:3b:5d:3a:49:ab:4d:ac:89:f6: 54:34:e4:75:d7:28:e3:2e:94:53:0c:41:49:5a:ae: 1c:9d:fb:2e:e2:9f:6a:e0:aa:0e:af:30:a7:a2:2e: e4:61:1a:88:c7:f2:a2:ad:e6:69:67:bb:2c:0c:2b: 35:b2:cf:df:a2:42:e5:85:ca:ea:ef:66:24:b3:65: b4:e1:d6:ef:91:7f:b6:62:95:15:ce:bb:dc:10:30: c5:12:b7:04:cd:e6:b1:3c:28:99:16:d7:b2:6b:56: 01:63:46:54:f9:9b:3b:4f:78:2f:3c:79:8a:b6:95: 72:ef:47:84:5a:3a:3d:6a:2a:d8:51:b7:73:f5:b4: e6:5d:2d:27:b8:60:97:c4:2c:8c:65:40:ec:55:22: 1a:a5:02:72:ba:07:a9:47:a1:5a:0c:ee:1a:e7:62: 90:47:3a:9a:e1:5a:2b:bd:4b:65:58:a6:db:98:0c: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AD:C4:B6:E6:C5:E4:47:A2:0D:5D:08:C0:5F:34:1A:FE:E2:95:68 X509v3 Authority Key Identifier: keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d2:2e:20:10:86:29:54:99:77:a2:07:bb:e5:80:6e:8e:bc: 23:28:50:ba:8f:02:9b:c9:46:29:b8:7a:a7:ce:d8:3a:28:69: 81:35:94:bd:25:37:63:c6:b0:d1:67:b4:0c:99:01:e4:06:aa: 12:c7:82:2f:b9:36:48:f0:92:0f:0c:98:09:62:c1:95:15:60: 58:8c:ff:eb:4b:1f:f2:ca:38:bd:2c:3e:8d:eb:38:78:e5:97: b2:0a:e5:dd:30:6a:0f:8b:5e:34:29:f8:89:bc:4c:2b:76:54: ad:ce:0b:b9:b6:f1:53:08:36:6f:c1:a5:96:08:bb:42:94:eb: b1:8e:f8:09:e2:3d:9f:f1:b6:84:6a:2f:b4:36:36:9b:22:f9: 70:e3:ec:ec:11:ce:60:73:94:27:a5:ad:47:4d:3e:07:08:5c: cf:79:6f:09:05:51:5f:d7:1d:44:b3:41:87:dc:72:b0:dd:7e: 39:03:40:ee:e1:d8:3c:53:85:02:51:b5:0f:e6:ab:79:58:74: 50:36:7d:b6:c2:1d:44:8d:72:fd:02:21:85:c1:11:5c:89:6d: 5f:44:f0:8c:10:fe:cb:7f:4c:8e:44:d3:05:25:0c:6b:ee:bc: b7:16:a3:a3:55:d2:02:31:d4:01:b6:6f:db:b7:bb:ec:f2:2c: 9f:f1:05:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcsvhqs369PLPyS/hUGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OWU0MjUyYmNiMjJlYTJjNmNmYjM5MjRjOGY4NGJkZGU3 YTc0NzEwHhcNMjUxMjE5MDQwMjE2WhcNMjUxMjIwMDQwMjE2WjAzMTEwLwYDVQQD EygwZmFkYzRiNmU2YzVlNDQ3YTIwZDVkMDhjMDVmMzQxYWZlZTI5NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM8RcRb3+TM5ORn948/p4a207rYD 8gLE/F0rIQiN/HQqNA5j0OCcBaNlmMTC0wmkS1eS40lU/dwOda5w8+tAbLBidoad isMZ1jVvlAJjkUc7XTpJq02sifZUNOR11yjjLpRTDEFJWq4cnfsu4p9q4KoOrzCn oi7kYRqIx/KireZpZ7ssDCs1ss/fokLlhcrq72Yks2W04dbvkX+2YpUVzrvcEDDF ErcEzeaxPCiZFteya1YBY0ZU+Zs7T3gvPHmKtpVy70eEWjo9airYUbdz9bTmXS0n uGCXxCyMZUDsVSIapQJyugepR6FaDO4a52KQRzqa4VorvUtlWKbbmAyolwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+txLbmxeRHog1dCMBfNBr+4pVoMB8GA1UdIwQY MBaAFESeQlK8si6ixs+zkkyPhL3eenRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMt NjhmMjE3NGM3OWVlLzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMtNjhmMjE3NGM3OWVl LzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtIuIBCG KVSZd6IHu+WAbo68IyhQuo8Cm8lGKbh6p87YOihpgTWUvSU3Y8aw0We0DJkB5Aaq EseCL7k2SPCSDwyYCWLBlRVgWIz/60sf8so4vSw+jes4eOWXsgrl3TBqD4teNCn4 ibxMK3ZUrc4LubbxUwg2b8Gllgi7QpTrsY74CeI9n/G2hGovtDY2myL5cOPs7BHO YHOUJ6WtR00+Bwhcz3lvCQVRX9cdRLNBh9xysN1+OQNA7uHYPFOFAlG1D+areVh0 UDZ9tsIdRI1y/QIhhcERXIltX0TwjBD+y39MjkTTBSUMa+68txajo1XSAjHUAbZv 27e77PIsn/EFTQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:17:17 2025 by rpki-client