This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json) Hash identifier: Pi2LUP/oOMMdv34sGJMOePtLAs79hoKOo212oWxurZQ= Subject key identifier: DD:88:25:14:CC:68:3E:5A:31:FB:84:DE:AF:1E:50:61:1E:38:7F:60 Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868 Certificate serial: 019AF2099FF41C886FE8FDA48485BCC1927C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft Manifest number: 04B0 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=) 2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: gKpzsrFk7gtFFL/khwGpc3YGogQa9DuSQ3L16A+fThs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9f:f4:1c:88:6f:e8:fd:a4:84:85:bc:c1:92:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868 Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=dd882514cc683e5a31fb84deaf1e50611e387f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:a0:12:c7:19:01:5a:13:6f:81:0d:82:21: e4:b5:8e:fd:07:5e:f4:f6:3a:1f:92:e9:49:cf:14: 8d:8d:7d:4f:f0:fe:a7:3a:52:09:0b:87:de:51:7a: d9:fd:bb:ba:23:bd:08:c8:6b:bd:7e:2f:49:9c:62: a4:48:e4:d7:1f:8a:00:e5:9a:f7:dc:34:9d:d3:0b: 54:ff:a7:c0:c4:39:c0:c0:14:18:da:57:28:ff:99: 3b:10:b3:84:f4:dc:db:59:03:41:ec:12:de:79:55: ad:44:89:77:e6:bd:41:b5:0d:be:6a:f1:d3:a0:33: 4d:5e:ca:d8:55:18:7d:e7:b7:1c:c9:6b:3e:dd:ee: 9a:42:c5:02:14:d3:3b:1c:5e:75:3e:54:c1:26:0a: c5:b9:10:0d:f8:3a:da:05:16:68:dc:f4:97:53:53: 55:7c:28:29:7e:94:13:ed:29:a0:42:75:6c:06:11: 0d:fa:ea:38:0e:18:6a:95:e1:7d:3a:21:e5:c8:ea: 64:d9:19:29:fc:e2:f1:39:94:13:44:25:84:fb:9f: ca:43:1b:06:a5:78:cd:e3:8c:1d:da:b8:f5:38:e4: e1:8e:8b:e5:00:52:9d:20:e5:18:80:70:22:6e:fd: c0:12:29:5c:4a:25:a4:98:82:61:22:be:fc:8a:73: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:25:14:CC:68:3E:5A:31:FB:84:DE:AF:1E:50:61:1E:38:7F:60 X509v3 Authority Key Identifier: keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e1:e7:fb:dd:16:65:9f:3e:90:a5:6c:41:f5:c7:f2:ec:c5: 40:c7:c4:dc:a9:a7:c9:fe:9e:d7:f3:56:1c:2a:00:a7:84:1f: 35:2f:2e:4c:f7:f0:fa:ec:55:5f:c1:36:21:2a:34:da:ab:5f: ab:24:41:14:1d:21:e4:9c:99:22:ac:2b:3c:f3:00:8d:44:7f: db:e4:83:cd:8b:af:d1:dc:d0:b5:99:54:2f:f3:2b:7c:b3:31: 2d:1a:46:41:97:3d:10:e3:6a:df:2b:d6:31:9c:f6:99:3d:64: 73:0b:02:4a:a2:06:68:51:41:30:59:57:c8:be:00:dd:ca:d3: e7:fb:00:23:f0:a2:3a:bd:4f:32:d0:ff:aa:12:b6:c9:91:e3: 11:84:ee:fa:10:74:84:7a:f9:b2:67:83:17:3d:09:dc:6f:32: 20:9e:57:f0:2e:73:43:2b:3b:8d:95:e8:16:5f:33:9e:bb:d5: 49:79:bf:8b:9a:37:df:d9:0a:34:de:d4:ae:f0:d6:d6:a4:38: 10:76:7a:81:e7:45:4d:0d:32:4f:5d:96:ed:d2:07:e3:b7:15: 83:b1:c9:29:e0:38:d0:7d:8e:91:3f:ef:59:39:6c:4f:e4:fc: ee:ef:d1:9e:6c:df:2e:91:64:6b:58:01:0d:bd:fd:9d:1e:89: ee:17:22:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ/0HIhv6P2khIW8wZJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw MmY4NjgwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EyhkZDg4MjUxNGNjNjgzZTVhMzFmYjg0ZGVhZjFlNTA2MTFlMzg3ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufWgEscZAVoTb4ENgiHktY79B170 9jofkulJzxSNjX1P8P6nOlIJC4feUXrZ/bu6I70IyGu9fi9JnGKkSOTXH4oA5Zr3 3DSd0wtU/6fAxDnAwBQY2lco/5k7ELOE9NzbWQNB7BLeeVWtRIl35r1BtQ2+avHT oDNNXsrYVRh957ccyWs+3e6aQsUCFNM7HF51PlTBJgrFuRAN+DraBRZo3PSXU1NV fCgpfpQT7SmgQnVsBhEN+uo4DhhqleF9OiHlyOpk2Rkp/OLxOZQTRCWE+5/KQxsG pXjN44wd2rj1OOThjovlAFKdIOUYgHAibv3AEilcSiWkmIJhIr78inOwDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2IJRTMaD5aMfuE3q8eUGEeOH9gMB8GA1UdIwQY MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt ZTU4NGNkNWY4ZDExLzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+Hn+90W ZZ8+kKVsQfXH8uzFQMfE3Kmnyf6e1/NWHCoAp4QfNS8uTPfw+uxVX8E2ISo02qtf qyRBFB0h5JyZIqwrPPMAjUR/2+SDzYuv0dzQtZlUL/MrfLMxLRpGQZc9EONq3yvW MZz2mT1kcwsCSqIGaFFBMFlXyL4A3crT5/sAI/CiOr1PMtD/qhK2yZHjEYTu+hB0 hHr5smeDFz0J3G8yIJ5X8C5zQys7jZXoFl8znrvVSXm/i5o339kKNN7UrvDW1qQ4 EHZ6gedFTQ0yT12W7dIH47cVg7HJKeA40H2OkT/vWTlsT+T87u/RnmzfLpFka1gB Db39nR6J7hcimg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:56 2025 by rpki-client