This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft File: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json) Hash identifier: C/FfLq9qFE1GTEGaAMehJ3+J/ftupdpvgMjBCxVh4T8= Subject key identifier: 5A:4D:12:6E:91:2B:F4:F8:16:FB:68:95:4B:75:61:99:82:05:A1:EC Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Certificate serial: 019AF276FF6BD37464645D8F41D510F75E6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa (hash: 8zleOD6aN/r+slAEa8mt1l5gM5SF8gtFDMiJe9eHZeU=) 2: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: ua44AMMVyqLj+STTwZ8FiLMmJbv4fgEClzm0ZWldPcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ff:6b:d3:74:64:64:5d:8f:41:d5:10:f7:5e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=5a4d126e912bf4f816fb68954b7561998205a1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:82:fd:74:58:c8:18:ec:7f:ad:bd:01:63: a0:cd:81:fe:6b:42:18:44:3b:36:ba:32:81:48:55: b2:17:59:d6:e9:1b:e5:df:7c:c4:82:63:65:8a:20: be:32:a2:40:4c:2e:93:10:a9:82:68:d5:02:50:6a: 55:be:48:67:a6:4b:a2:5a:0c:74:6d:ab:d6:d2:96: 52:57:00:8f:cc:ce:5f:48:c7:18:29:c2:9b:d4:90: 17:36:bf:d6:79:69:47:fd:28:83:23:5a:5f:82:0a: ca:00:7d:3b:3e:1e:70:fc:e5:9d:85:80:8c:23:49: b3:b0:33:d9:5c:41:c5:19:8a:55:19:ce:10:43:8a: 4f:3d:6e:d8:a0:62:20:ff:92:72:e8:0e:81:c2:34: fe:d2:6c:be:f2:32:de:65:fc:81:96:81:a1:85:92: 30:d2:cb:57:7a:74:7f:66:8f:65:59:73:1a:fe:1c: 5f:de:1a:87:fc:56:95:62:2b:b3:8c:52:dd:20:ac: e6:76:04:73:be:6a:55:ce:ce:2a:5a:40:7b:cd:63: 63:a7:11:db:46:86:60:60:37:84:82:12:d3:b5:8d: 10:59:7d:ab:25:c4:8f:23:c5:47:e9:e5:f8:c7:ee: 6a:c6:dc:06:e9:82:c9:64:05:95:f1:33:cc:00:ad: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4D:12:6E:91:2B:F4:F8:16:FB:68:95:4B:75:61:99:82:05:A1:EC X509v3 Authority Key Identifier: keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:f9:53:bb:0c:0b:70:aa:ee:f4:7e:21:dc:27:ce:aa:eb: 8a:2e:48:b1:52:0e:e1:10:64:f7:b0:9e:a3:94:66:14:5f:27: 1e:7a:fb:3f:98:f1:00:99:21:cf:58:9d:49:0c:d3:0c:e5:5d: ec:78:e1:42:8a:dc:2f:fe:28:4b:39:bb:19:e4:6f:b2:9d:12: c0:f9:26:8a:89:71:47:5f:93:2c:d5:21:ac:d7:a4:e1:42:fa: 0c:55:af:77:7b:6d:34:de:c7:57:be:35:46:52:8a:29:78:b9: 4b:8f:5d:47:07:b5:1b:1d:13:0a:f9:06:4e:16:25:ae:62:10: 38:2e:70:49:2f:01:af:ec:b1:3a:9c:f0:60:b1:0f:c4:4d:53: 35:9d:5f:15:90:f2:d4:1f:d2:b5:8e:61:e9:4c:01:d0:46:0c: 42:2c:fd:1d:e7:30:13:8a:f9:47:2f:29:4d:ab:bb:fb:eb:2f: 7e:39:e7:40:14:1b:88:83:54:bc:03:a0:4e:50:f7:12:61:47: 81:91:b7:6c:fa:ed:89:20:7f:18:42:b8:1e:08:4b:e6:6c:b4: 94:e2:05:48:c4:33:84:2a:2c:21:45:df:a6:c9:eb:3a:89:7a: 72:85:01:c2:77:47:51:e7:36:fd:46:61:57:23:b2:4b:8a:ba: 4b:54:dc:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv9r03RkZF2PQdUQ915tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTQ1NTYzOTViNDdiZjQzZTBkNWQ1NTZlN2UyNTViNmM4 YWNjYzIwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg1YTRkMTI2ZTkxMmJmNGY4MTZmYjY4OTU0Yjc1NjE5OTgyMDVhMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NKC/XRYyBjsf629AWOgzYH+a0IY RDs2ujKBSFWyF1nW6Rvl33zEgmNliiC+MqJATC6TEKmCaNUCUGpVvkhnpkuiWgx0 bavW0pZSVwCPzM5fSMcYKcKb1JAXNr/WeWlH/SiDI1pfggrKAH07Ph5w/OWdhYCM I0mzsDPZXEHFGYpVGc4QQ4pPPW7YoGIg/5Jy6A6BwjT+0my+8jLeZfyBloGhhZIw 0stXenR/Zo9lWXMa/hxf3hqH/FaVYiuzjFLdIKzmdgRzvmpVzs4qWkB7zWNjpxHb RoZgYDeEghLTtY0QWX2rJcSPI8VH6eX4x+5qxtwG6YLJZAWV8TPMAK09xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpNEm6RK/T4FvtolUt1YZmCBaHsMB8GA1UdIwQY MBaAFCeUVWOVtHv0Pg1dVW5+JVtsiszCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYt NzlkYTdhYWFhM2IyLzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYtNzlkYTdhYWFhM2Iy LzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdb5U7sM C3Cq7vR+Idwnzqrrii5IsVIO4RBk97Ceo5RmFF8nHnr7P5jxAJkhz1idSQzTDOVd 7HjhQorcL/4oSzm7GeRvsp0SwPkmiolxR1+TLNUhrNek4UL6DFWvd3ttNN7HV741 RlKKKXi5S49dRwe1Gx0TCvkGThYlrmIQOC5wSS8Br+yxOpzwYLEPxE1TNZ1fFZDy 1B/StY5h6UwB0EYMQiz9HecwE4r5Ry8pTau7++svfjnnQBQbiINUvAOgTlD3EmFH gZG3bPrtiSB/GEK4HghL5my0lOIFSMQzhCosIUXfpsnrOol6coUBwndHUec2/UZh VyOyS4q6S1TcjA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:47 2025 by rpki-client