This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json) Hash identifier: OSNScx2nvwvpAoEyQN9zUVB6FiHwBQp/5g7G1oD37Oc= Subject key identifier: CD:F7:46:1F:5A:5F:6D:50:76:0F:39:B5:B3:0D:24:AD:16:A9:02:B4 Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6 Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6 Certificate serial: 019AF46520DABD523C7CB915545EAA157254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:00:59 +0000 Manifest this update: Sat 06 Dec 2025 16:00:59 +0000 Manifest next update: Sun 07 Dec 2025 16:00:59 +0000 Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: i+okOXh4yhO6x7dxv1VqauVdQTnt3iaLk8NBDJCtLl0=) 2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:20:da:bd:52:3c:7c:b9:15:54:5e:aa:15:72:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6 Validity Not Before: Dec 6 16:00:59 2025 GMT Not After : Dec 7 16:00:59 2025 GMT Subject: CN=cdf7461f5a5f6d50760f39b5b30d24ad16a902b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:38:cd:ab:e8:2f:c0:3d:8e:5f:a3:ef:57: 1b:b1:95:c1:30:21:9a:1a:2d:09:5a:2f:78:27:23: 81:32:26:8e:55:a2:3d:55:f2:61:92:2a:a9:67:4f: f3:4e:28:22:7f:fa:e9:13:03:55:fc:f4:4e:5f:89: 67:25:81:07:a2:2c:19:3a:a8:84:7f:18:5a:22:9d: 45:36:51:d2:66:0e:34:f8:36:78:e8:fc:7e:46:d7: a3:37:b0:7e:0e:e4:17:e6:d3:80:9c:fc:11:49:2e: 63:0f:bb:10:e5:8c:dc:b8:3b:6c:91:1a:78:ad:2e: db:5c:b9:e7:f6:80:40:51:09:95:f5:df:1f:57:e3: 55:0d:5a:6b:fb:de:12:8e:8a:fc:3f:23:04:12:ba: ea:99:7a:f9:e0:74:0a:30:82:93:63:25:a7:ff:1b: f4:22:a9:c4:ac:43:f0:14:92:b3:6f:96:f8:d7:a7: 53:57:6f:65:7a:60:f5:af:5f:5c:34:bb:4d:43:21: e2:8b:01:89:35:55:d6:00:95:68:c0:17:33:44:0a: 57:67:0c:37:d4:db:6b:cb:be:3b:ba:8c:0b:50:75: 2f:85:43:77:58:b3:c1:34:7d:35:ce:02:cb:ae:56: e1:b6:5a:b8:30:26:44:ff:09:55:ec:63:77:23:4f: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F7:46:1F:5A:5F:6D:50:76:0F:39:B5:B3:0D:24:AD:16:A9:02:B4 X509v3 Authority Key Identifier: keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:24:ba:e5:42:70:1b:22:f9:ed:7a:12:98:1f:fa:93:d8:3f: a5:16:4c:c7:2a:e9:30:e8:3a:9c:fe:95:32:cb:6e:d1:51:17: 0c:88:69:0a:52:91:e4:c6:89:08:c6:bf:9e:ac:84:f4:59:ac: 7c:52:5d:ea:12:d2:fb:f0:63:4e:21:5d:ec:ff:9f:81:9e:fd: 04:8f:a5:8e:2e:d4:37:23:cc:5c:75:b7:ab:6f:47:83:9a:b4: 44:a3:56:3a:97:39:e9:7f:70:e0:53:0f:9b:3c:75:a6:81:d1: 6c:10:65:7c:dd:3b:ad:90:17:31:37:cd:82:6b:90:7a:ef:65: 3c:fd:7d:50:d5:cd:99:53:d9:1d:18:6b:58:e3:ae:d7:a0:4b: 69:4f:c8:ff:86:20:26:23:8e:6d:8f:e1:5b:0a:f9:11:9e:4b: 07:98:69:4c:59:e9:78:47:01:f7:40:2d:99:af:47:bd:51:6f: 43:81:4f:7c:8d:84:8f:c6:31:3a:03:e7:3f:d0:d8:8c:c8:8e: 02:8a:91:2c:a4:f1:e9:34:6c:9e:f7:04:a4:f2:18:f7:6e:d0: 35:5f:34:a4:89:d0:19:94:8f:0d:54:ea:54:41:b5:d3:b0:51: 28:00:67:d6:7e:c2:ef:ef:4a:5b:11:5b:73:d8:9d:b2:b0:af: e7:6f:66:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSDavVI8fLkVVF6qFXJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWJlODI0NzVkMjU4MDhlMjE0ZTlhNWNhMjc5MTM0N2Mx MWRhYjYwHhcNMjUxMjA2MTYwMDU5WhcNMjUxMjA3MTYwMDU5WjAzMTEwLwYDVQQD EyhjZGY3NDYxZjVhNWY2ZDUwNzYwZjM5YjViMzBkMjRhZDE2YTkwMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY84zavoL8A9jl+j71cbsZXBMCGa Gi0JWi94JyOBMiaOVaI9VfJhkiqpZ0/zTigif/rpEwNV/PROX4lnJYEHoiwZOqiE fxhaIp1FNlHSZg40+DZ46Px+RtejN7B+DuQX5tOAnPwRSS5jD7sQ5YzcuDtskRp4 rS7bXLnn9oBAUQmV9d8fV+NVDVpr+94Sjor8PyMEErrqmXr54HQKMIKTYyWn/xv0 IqnErEPwFJKzb5b416dTV29lemD1r19cNLtNQyHiiwGJNVXWAJVowBczRApXZww3 1Ntry747uowLUHUvhUN3WLPBNH01zgLLrlbhtlq4MCZE/wlV7GN3I09lMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM33Rh9aX21Qdg85tbMNJK0WqQK0MB8GA1UdIwQY MBaAFI+b6CR10lgI4hTppconkTR8Edq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lMTNiMWMtNzU1My00MmNmLWI4YzUt Y2ExMGE0ODhjNzE1LzEvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lMTNiMWMtNzU1My00MmNmLWI4YzUtY2ExMGE0ODhjNzE1 LzEvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiS65UJw GyL57XoSmB/6k9g/pRZMxyrpMOg6nP6VMstu0VEXDIhpClKR5MaJCMa/nqyE9Fms fFJd6hLS+/BjTiFd7P+fgZ79BI+lji7UNyPMXHW3q29Hg5q0RKNWOpc56X9w4FMP mzx1poHRbBBlfN07rZAXMTfNgmuQeu9lPP19UNXNmVPZHRhrWOOu16BLaU/I/4Yg JiOObY/hWwr5EZ5LB5hpTFnpeEcB90Atma9HvVFvQ4FPfI2Ej8YxOgPnP9DYjMiO AoqRLKTx6TRsnvcEpPIY927QNV80pInQGZSPDVTqVEG107BRKABn1n7C7+9KWxFb c9idsrCv529mtw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:12 2025 by rpki-client