This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json) Hash identifier: kq+9Lkt5OpqEAuPd/4uufl5bmOBYFcY5DnTqCncoSkc= Subject key identifier: 79:E4:61:24:1E:E5:44:40:41:F1:D3:4F:B5:FD:7B:4C:4A:FA:B2:A7 Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Certificate serial: 019B31FA42287849B0B102303200BDDCAC27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft Manifest number: 146E Signing time: Thu 18 Dec 2025 15:00:43 +0000 Manifest this update: Thu 18 Dec 2025 15:00:43 +0000 Manifest next update: Fri 19 Dec 2025 15:00:43 +0000 Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=) 2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: +uAGTDf0b+cG5QWmlUlYCatXG/HkL92yqgNXjn1QGWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:42:28:78:49:b0:b1:02:30:32:00:bd:dc:ac:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Validity Not Before: Dec 18 15:00:43 2025 GMT Not After : Dec 19 15:00:43 2025 GMT Subject: CN=79e461241ee5444041f1d34fb5fd7b4c4afab2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:eb:0f:02:87:08:02:cd:0c:75:c6:01:c8: d5:1b:29:27:39:03:ae:51:8b:f2:25:9f:28:57:f5: e6:ef:60:d1:49:61:de:01:d8:90:e0:90:2d:d9:ea: 09:7a:89:59:b0:8e:9f:13:25:4c:5b:5c:54:4f:e0: af:cf:57:62:c2:dc:e4:ab:fa:90:8f:6c:0e:da:5e: 68:e1:d5:ad:cf:30:6f:32:83:ab:87:53:3c:48:1b: 55:f2:05:b1:14:3e:95:21:c6:8c:6d:a6:85:3b:56: 48:c5:39:5e:a5:2d:0c:75:df:89:45:cd:70:d5:ac: 19:53:1d:f9:14:22:4d:16:ee:44:78:4c:81:52:e8: 7d:aa:a2:b9:fc:54:3b:be:f0:a9:39:1d:2a:e1:57: aa:87:a1:e2:7e:99:9d:a4:60:84:ae:97:e5:22:61: ec:6f:ac:7d:b7:da:c2:44:71:a0:88:86:52:ab:07: 1c:ac:cb:c8:a2:b6:f6:02:c4:fd:f6:5a:ed:02:ce: c4:a6:61:dc:9d:73:f4:05:53:e8:41:ad:09:de:4c: 84:45:12:f8:6f:d8:47:11:fc:8c:bb:37:ee:7b:c7: 4c:34:f5:24:73:18:7a:7c:fa:4c:0d:ee:4b:9f:1c: 0e:81:14:db:ff:f5:d4:98:a0:e7:78:d7:1e:8a:41: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:61:24:1E:E5:44:40:41:F1:D3:4F:B5:FD:7B:4C:4A:FA:B2:A7 X509v3 Authority Key Identifier: keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:79:74:98:5d:dc:c0:1f:80:25:d8:af:69:d1:76:61:01:bf: 75:54:2c:c4:b6:0c:2b:25:2e:93:d3:f9:b9:50:a2:16:cb:c3: 91:d9:b4:23:60:db:a8:93:a8:ff:8a:ec:82:3e:26:ad:26:64: 73:aa:39:9e:4e:d5:c1:01:e7:8f:ad:15:e8:d5:95:27:96:a1: c3:98:0e:94:db:b7:3b:ae:3c:ae:c2:e9:a6:78:3c:43:03:28: b6:1c:4a:07:74:70:bb:72:23:73:1c:6a:9c:10:eb:39:91:7b: a1:8f:92:14:d5:d7:82:bd:71:80:4d:6b:66:16:41:e7:66:6e: 5a:b4:3f:3f:26:db:54:b1:43:90:3c:15:0a:64:8c:b8:77:5d: e8:d2:4f:07:53:66:7d:58:40:4f:fc:84:f7:66:44:61:dc:7d: ce:0a:f8:f8:1f:a3:ec:51:a4:b0:06:36:8c:cd:b2:25:09:5b: ee:89:54:45:24:1a:ab:6e:c9:f1:70:8b:90:21:a8:fe:87:fa: b9:82:f7:07:4d:46:af:15:98:ef:42:96:60:b2:5e:02:5c:b5: c3:e1:d2:02:a2:e7:69:e6:38:b1:85:8d:31:fe:e7:d8:5d:49: 6d:a6:74:0c:eb:0e:b1:f4:9e:d2:fe:34:71:03:51:36:cd:f2: d9:09:df:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+kIoeEmwsQIwMgC93KwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh OGU3OGQwHhcNMjUxMjE4MTUwMDQzWhcNMjUxMjE5MTUwMDQzWjAzMTEwLwYDVQQD Eyg3OWU0NjEyNDFlZTU0NDQwNDFmMWQzNGZiNWZkN2I0YzRhZmFiMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQLrDwKHCALNDHXGAcjVGyknOQOu UYvyJZ8oV/Xm72DRSWHeAdiQ4JAt2eoJeolZsI6fEyVMW1xUT+Cvz1diwtzkq/qQ j2wO2l5o4dWtzzBvMoOrh1M8SBtV8gWxFD6VIcaMbaaFO1ZIxTlepS0Mdd+JRc1w 1awZUx35FCJNFu5EeEyBUuh9qqK5/FQ7vvCpOR0q4Veqh6HifpmdpGCErpflImHs b6x9t9rCRHGgiIZSqwccrMvIorb2AsT99lrtAs7EpmHcnXP0BVPoQa0J3kyERRL4 b9hHEfyMuzfue8dMNPUkcxh6fPpMDe5LnxwOgRTb//XUmKDneNceikE4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnkYSQe5URAQfHTT7X9e0xK+rKnMB8GA1UdIwQY MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnl0mF3c wB+AJdivadF2YQG/dVQsxLYMKyUuk9P5uVCiFsvDkdm0I2DbqJOo/4rsgj4mrSZk c6o5nk7VwQHnj60V6NWVJ5ahw5gOlNu3O648rsLppng8QwMothxKB3Rwu3Ijcxxq nBDrOZF7oY+SFNXXgr1xgE1rZhZB52ZuWrQ/PybbVLFDkDwVCmSMuHdd6NJPB1Nm fVhAT/yE92ZEYdx9zgr4+B+j7FGksAY2jM2yJQlb7olURSQaq27J8XCLkCGo/of6 uYL3B01GrxWY70KWYLJeAly1w+HSAqLnaeY4sYWNMf7n2F1JbaZ0DOsOsfSe0v40 cQNRNs3y2Qnfwg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:31:39 2025 by rpki-client