This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json) Hash identifier: obXBxJVURARoQF/M6lj8apiXjseVT6UX9n8I+NV/EiI= Subject key identifier: 9C:D0:83:98:AE:93:96:83:FE:21:0C:24:37:7E:B2:CD:A6:68:FF:21 Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee Certificate serial: 019AF0BF4E476B76A2014CF2D4C2EAC09487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft Manifest number: 1244 Signing time: Fri 05 Dec 2025 23:01:00 +0000 Manifest this update: Fri 05 Dec 2025 23:01:00 +0000 Manifest next update: Sat 06 Dec 2025 23:01:00 +0000 Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: rCwljGDvjd5qtmoQClG3RMjo5+Ak1Z0AmwBOToumEaY=) 2: WFOxXq8-woghob55sftxvTt6FdI.roa (hash: hwAy54H63vrYPhBgVny9CWYFBq69ABYXgCXp7pxF/eQ=) 3: nMthV73xKQot_nDw1BjaSeVp1wM.roa (hash: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4e:47:6b:76:a2:01:4c:f2:d4:c2:ea:c0:94:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee Validity Not Before: Dec 5 23:01:00 2025 GMT Not After : Dec 6 23:01:00 2025 GMT Subject: CN=9cd08398ae939683fe210c24377eb2cda668ff21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:06:e2:49:d4:9b:74:8b:bb:24:1d:49:25: f1:51:2e:b3:c7:f7:8e:00:8e:0f:a4:54:10:e5:a6: b5:cc:df:00:52:51:8f:4b:4a:b2:65:45:c5:ec:d6: 98:60:93:05:26:8b:54:2c:88:1f:6f:35:4b:9c:e6: f8:68:f7:0d:40:47:ab:b3:bd:f9:b9:aa:a1:f4:de: 65:e4:39:1c:58:34:47:cc:0d:10:be:49:1f:e0:64: f2:26:07:00:2d:65:60:2f:dd:c4:b3:e6:ba:05:68: b0:1e:be:0d:3c:d8:e8:52:29:e7:fa:1d:c5:fb:47: 44:67:a0:bd:9e:a5:2d:81:8c:00:94:a0:4f:0b:ef: 58:46:2b:2d:ec:4d:4d:47:8e:79:ae:a8:4d:5d:53: be:a1:fb:2e:60:27:4b:c5:e2:a4:d3:5b:a3:af:de: a1:02:08:0d:f5:07:47:95:d3:fb:df:57:e1:07:08: 01:c3:3d:6c:1f:e0:3f:d5:f3:34:4d:b7:64:39:97: 0a:c5:0a:02:58:9f:54:e5:bd:ee:59:9c:b6:10:4e: a2:82:4a:6e:20:76:e9:57:b5:56:43:23:49:61:3c: e3:73:13:85:30:38:34:56:d7:b0:5d:db:d4:a4:8a: e2:66:d7:35:8d:36:75:88:50:27:98:33:b2:e9:51: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:83:98:AE:93:96:83:FE:21:0C:24:37:7E:B2:CD:A6:68:FF:21 X509v3 Authority Key Identifier: keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e3:83:0e:dd:68:a4:a6:a2:e2:bf:04:e4:6d:f3:32:37:7e: 53:5d:5c:a5:ad:74:2b:f5:d5:3a:77:8d:96:fb:e4:f0:68:80: 49:af:65:fb:2c:34:74:00:ad:4a:22:7a:d6:35:6f:e7:68:e2: e6:4e:d7:6c:08:9f:75:af:4c:26:7e:44:21:1a:6d:b2:bd:b6: 4a:89:05:bd:89:c5:81:eb:d5:c1:57:87:a5:62:81:3e:e9:70: 82:23:01:a2:2e:b5:35:43:0e:c3:7d:9b:6d:8b:9c:2e:27:a5: f8:29:85:1a:3a:3e:de:74:58:68:c6:65:3a:99:c8:9a:c4:72: 8e:58:e5:c9:60:68:60:d1:a8:d3:d7:eb:7e:df:1c:e7:fb:08: fa:81:6f:22:4e:e0:3b:14:81:f1:14:88:f7:7a:81:3e:4f:38: af:4a:9d:dd:41:7d:08:de:8a:37:5f:85:48:4d:73:3d:da:a7: 65:a5:34:f2:2f:65:5a:55:5f:09:42:ef:87:12:aa:50:c0:75: 06:9f:3e:34:2b:f2:0c:bb:3b:85:09:0e:9f:45:2d:78:c5:8c: 77:fe:f0:d2:4e:38:d4:d1:31:42:ec:f7:45:dc:51:03:b7:38: c3:12:f9:05:56:f4:22:88:00:70:ea:0d:48:44:57:35:54:14: f1:d5:a4:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv05Ha3aiAUzy1MLqwJSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OTg0ZjhmMzZlYmY5ZjhmNTRjMTIxNzRmNDYzNjY0ZDdi MjNhZWUwHhcNMjUxMjA1MjMwMTAwWhcNMjUxMjA2MjMwMTAwWjAzMTEwLwYDVQQD Eyg5Y2QwODM5OGFlOTM5NjgzZmUyMTBjMjQzNzdlYjJjZGE2NjhmZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtwG4knUm3SLuyQdSSXxUS6zx/eO AI4PpFQQ5aa1zN8AUlGPS0qyZUXF7NaYYJMFJotULIgfbzVLnOb4aPcNQEers735 uaqh9N5l5DkcWDRHzA0Qvkkf4GTyJgcALWVgL93Es+a6BWiwHr4NPNjoUinn+h3F +0dEZ6C9nqUtgYwAlKBPC+9YRist7E1NR455rqhNXVO+ofsuYCdLxeKk01ujr96h AggN9QdHldP731fhBwgBwz1sH+A/1fM0TbdkOZcKxQoCWJ9U5b3uWZy2EE6igkpu IHbpV7VWQyNJYTzjcxOFMDg0VtewXdvUpIriZtc1jTZ1iFAnmDOy6VGKawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzQg5iuk5aD/iEMJDd+ss2maP8hMB8GA1UdIwQY MBaAFOSYT4826/n49UwSF09GNmTXsjruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgt ZGU3YmUxZTVjNzc2LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgtZGU3YmUxZTVjNzc2 LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+ODDt1o pKai4r8E5G3zMjd+U11cpa10K/XVOneNlvvk8GiASa9l+yw0dACtSiJ61jVv52ji 5k7XbAifda9MJn5EIRptsr22SokFvYnFgevVwVeHpWKBPulwgiMBoi61NUMOw32b bYucLiel+CmFGjo+3nRYaMZlOpnImsRyjljlyWBoYNGo09frft8c5/sI+oFvIk7g OxSB8RSI93qBPk84r0qd3UF9CN6KN1+FSE1zPdqnZaU08i9lWlVfCULvhxKqUMB1 Bp8+NCvyDLs7hQkOn0UteMWMd/7w0k441NExQuz3RdxRA7c4wxL5BVb0IogAcOoN SERXNVQU8dWk/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:55 2025 by rpki-client