This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json) Hash identifier: 8kequZUVlmaAEfk14eQ3XCF515RrZSDiEMffp2cIVOI= Subject key identifier: A0:BB:E2:EA:E0:EC:C1:80:24:FB:FE:AB:72:7B:EE:7F:F4:8D:48:B4 Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3 Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3 Certificate serial: 019AF23F99D53C64FDA149FF9D84BC090C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft Manifest number: 0853 Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: rda7WugeVpErj4XOByqrMwwakpGpLB6NETx2Xss3SX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:99:d5:3c:64:fd:a1:49:ff:9d:84:bc:09:0c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=a0bbe2eae0ecc18024fbfeab727bee7ff48d48b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:78:30:88:a7:4d:73:dd:f6:f8:05:24:bf: 40:b4:b3:c9:1a:b7:cd:ad:85:82:58:a4:70:d4:93: 11:7b:82:a1:36:53:09:7f:dd:33:26:e7:3c:08:16: a3:51:b1:91:f0:04:96:6e:2a:7b:4c:8f:f3:34:8a: 43:7d:87:f9:cb:0c:36:80:1c:76:c5:f6:ca:28:ca: 39:09:78:c5:ea:b6:a1:96:2a:c0:14:a1:5e:e4:9f: ca:c1:66:b7:5f:5f:75:d2:ae:c8:ef:a9:4c:43:6c: 2c:a8:92:cd:65:8d:a1:c4:02:70:ea:4a:7f:44:ed: 82:2a:ea:8c:36:c2:a3:92:6f:e5:31:26:22:c3:ad: db:7b:18:0d:90:d7:ba:a7:e2:f9:2a:bb:a5:81:e9: 59:55:e3:e7:40:0a:be:7c:d3:cf:95:ab:f3:21:67: 39:77:9e:81:a3:23:75:c3:62:9c:86:d8:f2:f5:1c: 1e:4e:5b:dc:2d:2f:b5:a0:7c:c0:5b:b0:2d:94:05: bc:b8:83:57:70:ad:af:b1:d2:17:72:7d:a4:4d:97: 20:e7:3d:bc:bc:53:25:51:79:92:6e:da:32:70:17: 43:55:61:08:59:28:aa:7b:7a:0f:1e:0c:f1:03:ad: 26:b3:b1:95:21:e1:63:90:7c:0e:a8:00:a6:e1:81: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BB:E2:EA:E0:EC:C1:80:24:FB:FE:AB:72:7B:EE:7F:F4:8D:48:B4 X509v3 Authority Key Identifier: keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6e:0d:14:2c:03:2d:7d:3a:ee:c3:68:58:be:1d:ee:3b:ae: 96:9c:50:8b:54:5b:21:55:b3:e6:ef:ac:c0:d9:59:c7:76:f9: 0f:53:75:81:ea:e1:ae:99:11:66:c7:cf:6d:78:c1:52:43:7c: f7:14:22:c2:04:b5:e9:30:2c:9f:b7:33:6a:05:a3:bd:cc:8f: 1e:73:b4:50:7a:ad:e8:c3:78:4e:fc:fb:dc:b3:54:23:f9:6a: 64:2a:ea:18:71:7f:a1:0f:02:70:2d:15:a3:e7:62:79:b5:33: e2:cd:d8:32:49:b5:95:8b:79:51:12:06:2c:e3:af:d9:16:ea: bd:c5:50:d4:e6:2a:e6:88:31:0c:d5:ec:89:6a:b2:a5:25:ca: 36:e2:2e:4f:3d:c0:c1:1f:38:ad:4d:a7:45:00:2a:a1:0e:58: 63:dd:6b:84:a3:55:11:2c:a2:51:12:65:4e:f1:e1:3f:c0:37: 47:a2:90:90:c9:aa:c6:7a:f2:dd:76:b3:73:ba:57:b3:03:d6: e5:5c:c6:4b:eb:f3:8c:d3:32:d4:87:2a:ce:d8:98:6d:6f:da: 35:ee:6d:d5:47:67:4c:a9:55:c9:3a:a8:14:33:08:db:b7:f6: 00:0e:f1:23:51:92:df:d6:be:1b:67:d9:f3:60:c0:82:00:a6: cb:bf:9f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5nVPGT9oUn/nYS8CQwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OWZmMTlhZGQ0YmIyMTEyOWVlODgyMzE0YmU3M2NiNzhj Y2VkYjMwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EyhhMGJiZTJlYWUwZWNjMTgwMjRmYmZlYWI3MjdiZWU3ZmY0OGQ0OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HV4MIinTXPd9vgFJL9AtLPJGrfN rYWCWKRw1JMRe4KhNlMJf90zJuc8CBajUbGR8ASWbip7TI/zNIpDfYf5yww2gBx2 xfbKKMo5CXjF6rahlirAFKFe5J/KwWa3X1910q7I76lMQ2wsqJLNZY2hxAJw6kp/ RO2CKuqMNsKjkm/lMSYiw63bexgNkNe6p+L5KrulgelZVePnQAq+fNPPlavzIWc5 d56BoyN1w2Kchtjy9RweTlvcLS+1oHzAW7AtlAW8uINXcK2vsdIXcn2kTZcg5z28 vFMlUXmSbtoycBdDVWEIWSiqe3oPHgzxA60ms7GVIeFjkHwOqACm4YGJPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC74urg7MGAJPv+q3J77n/0jUi0MB8GA1UdIwQY MBaAFOSf8ZrdS7IRKe6IIxS+c8t4zO2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDIt ZDZiMDU1ZGFiNDdiLzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDItZDZiMDU1ZGFiNDdi LzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW4NFCwD LX067sNoWL4d7juulpxQi1RbIVWz5u+swNlZx3b5D1N1gerhrpkRZsfPbXjBUkN8 9xQiwgS16TAsn7czagWjvcyPHnO0UHqt6MN4Tvz73LNUI/lqZCrqGHF/oQ8CcC0V o+diebUz4s3YMkm1lYt5URIGLOOv2RbqvcVQ1OYq5ogxDNXsiWqypSXKNuIuTz3A wR84rU2nRQAqoQ5YY91rhKNVESyiURJlTvHhP8A3R6KQkMmqxnry3Xazc7pXswPW 5VzGS+vzjNMy1IcqztiYbW/aNe5t1UdnTKlVyTqoFDMI27f2AA7xI1GS39a+G2fZ 82DAggCmy7+fog== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:27 2025 by rpki-client