This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json) Hash identifier: 8t6azV0GEOcDVfa2KqcDlRjquqYc9k5rfinS6AIzP1Y= Subject key identifier: A7:DF:F7:5B:92:B0:F5:EF:14:75:21:4B:A8:7C:CE:96:57:67:93:27 Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Certificate serial: 019AF1649A2620917E0D8A4411128B149752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 02:01:33 +0000 Manifest this update: Sat 06 Dec 2025 02:01:33 +0000 Manifest next update: Sun 07 Dec 2025 02:01:33 +0000 Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=) 2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: mlJhbjsVMkAokTfjUxN6HyiuCq82M4EfPiN+oXR9yuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:9a:26:20:91:7e:0d:8a:44:11:12:8b:14:97:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Validity Not Before: Dec 6 02:01:33 2025 GMT Not After : Dec 7 02:01:33 2025 GMT Subject: CN=a7dff75b92b0f5ef1475214ba87cce9657679327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:f4:7c:23:a4:05:00:b1:68:e2:8d:c2:09: 33:c5:49:07:d9:a7:d2:0a:f9:d4:e8:60:e5:6a:5f: 55:2e:03:8e:c6:88:f0:67:e1:34:d7:90:bc:13:fe: eb:84:a8:0b:96:31:90:69:49:90:8c:5e:0d:90:71: 0f:1c:75:53:08:3d:48:99:b5:0e:c2:9f:f4:61:b7: 85:df:01:33:39:8f:0c:79:b2:0d:3c:53:c6:ea:34: e9:ff:43:86:3c:a2:cf:55:b9:9e:bc:ec:18:ca:2a: d7:56:87:44:26:46:5d:28:9b:22:a9:1e:69:b0:79: a9:16:51:b3:45:ab:fd:f7:47:45:36:a0:3d:ea:0f: 70:ea:74:60:fa:6c:eb:51:7c:95:56:85:3a:25:aa: 1a:f2:0f:f3:b1:ad:17:69:9b:cc:66:31:51:fd:cc: a8:13:2b:2f:9c:bf:d8:63:cb:1f:47:62:19:5b:ec: b6:f2:ba:f8:2d:a2:2c:2c:08:19:2f:92:14:2f:a7: 25:f5:3f:06:0f:4b:e6:08:d7:f4:4f:80:3c:07:cb: ac:99:f1:4a:07:0a:d0:e0:c4:67:03:ad:1a:89:29: 0e:d8:11:03:59:82:3b:43:fa:70:30:ac:27:6b:95: 65:86:d5:77:4c:31:ae:d6:dd:7f:b9:89:2d:2a:0c: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DF:F7:5B:92:B0:F5:EF:14:75:21:4B:A8:7C:CE:96:57:67:93:27 X509v3 Authority Key Identifier: keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:85:d3:12:a2:42:a9:18:c1:bd:cd:95:97:a9:ce:41:23:6d: ac:f8:7c:a4:f5:68:67:67:a9:17:aa:62:b9:c8:37:20:31:4b: ad:e5:8e:dc:5a:20:2c:a5:f5:a1:bb:f6:9b:f8:c9:e8:de:bf: c8:7c:2c:1c:e4:cc:e0:04:bc:1c:23:2b:d5:c4:d5:66:c0:d3: 96:66:4a:73:8c:bc:a3:40:5f:49:41:d8:86:a3:bb:97:37:70: 8d:88:fd:71:06:23:40:3f:19:b5:be:c7:03:fd:2d:84:e7:c3: 24:91:bf:f5:31:f8:ba:5c:5a:d7:a5:aa:a3:38:d7:e4:59:fc: c7:a8:74:ec:27:32:43:9a:be:ad:fa:0c:7d:ab:55:f1:88:f1: 4a:10:5a:63:b0:92:95:23:5f:10:98:7c:19:1d:2c:e1:cc:ba: db:66:1f:72:52:17:ce:98:cb:9b:98:e2:72:30:71:0a:02:db: 68:ed:c0:b9:84:d6:52:12:df:7e:e2:53:2f:ad:d5:53:76:2a: 1d:e3:d6:b7:0f:35:07:65:b1:7d:3a:8b:bf:b2:60:28:2e:30: 5e:48:37:f5:82:fa:d8:3e:30:3c:25:c0:f8:58:36:e8:c5:b8: 30:b7:2c:a9:34:97:47:6c:88:e7:f9:fc:64:ab:0c:fb:e6:e4: 1f:65:24:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJomIJF+DYpEERKLFJdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy Nzc5YTgwHhcNMjUxMjA2MDIwMTMzWhcNMjUxMjA3MDIwMTMzWjAzMTEwLwYDVQQD EyhhN2RmZjc1YjkyYjBmNWVmMTQ3NTIxNGJhODdjY2U5NjU3Njc5MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyT0fCOkBQCxaOKNwgkzxUkH2afS CvnU6GDlal9VLgOOxojwZ+E015C8E/7rhKgLljGQaUmQjF4NkHEPHHVTCD1ImbUO wp/0YbeF3wEzOY8MebINPFPG6jTp/0OGPKLPVbmevOwYyirXVodEJkZdKJsiqR5p sHmpFlGzRav990dFNqA96g9w6nRg+mzrUXyVVoU6Jaoa8g/zsa0XaZvMZjFR/cyo EysvnL/YY8sfR2IZW+y28rr4LaIsLAgZL5IUL6cl9T8GD0vmCNf0T4A8B8usmfFK BwrQ4MRnA60aiSkO2BEDWYI7Q/pwMKwna5VlhtV3TDGu1t1/uYktKgyKQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKff91uSsPXvFHUhS6h8zpZXZ5MnMB8GA1UdIwQY MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIXTEqJC qRjBvc2Vl6nOQSNtrPh8pPVoZ2epF6piucg3IDFLreWO3FogLKX1obv2m/jJ6N6/ yHwsHOTM4AS8HCMr1cTVZsDTlmZKc4y8o0BfSUHYhqO7lzdwjYj9cQYjQD8Ztb7H A/0thOfDJJG/9TH4ulxa16WqozjX5Fn8x6h07CcyQ5q+rfoMfatV8YjxShBaY7CS lSNfEJh8GR0s4cy622YfclIXzpjLm5jicjBxCgLbaO3AuYTWUhLffuJTL63VU3Yq HePWtw81B2WxfTqLv7JgKC4wXkg39YL62D4wPCXA+Fg26MW4MLcsqTSXR2yI5/n8 ZKsM++bkH2Ukrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:13 2025 by rpki-client