This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json) Hash identifier: XK8aOdhXCjirRKRWfs48MTMxZiP9f0dCiJGWJ7nzSpI= Subject key identifier: CB:E1:F4:25:06:4F:0D:7E:D9:28:FC:5C:DF:69:16:A1:82:70:68:01 Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Certificate serial: 019B59AC8E1E4DC851D308272097A7CBB170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft Manifest number: 179C Signing time: Fri 26 Dec 2025 08:00:39 +0000 Manifest this update: Fri 26 Dec 2025 08:00:39 +0000 Manifest next update: Sat 27 Dec 2025 08:00:39 +0000 Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=) 2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: nbLWEtLfm3TOOidSQcuO1jzyYsi5B+e/iRl0gV9ioNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:8e:1e:4d:c8:51:d3:08:27:20:97:a7:cb:b1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Validity Not Before: Dec 26 08:00:39 2025 GMT Not After : Dec 27 08:00:39 2025 GMT Subject: CN=cbe1f425064f0d7ed928fc5cdf6916a182706801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:2d:6d:d0:9b:8e:8c:0b:f2:7b:e6:48:78: 1d:d2:5c:9e:3c:9a:ce:39:87:25:40:cf:bb:a8:72: 87:b6:27:31:39:41:cf:c2:0c:f8:61:50:19:33:42: 87:34:ab:12:3e:d5:bc:1d:2f:ba:52:1e:41:92:4e: 2e:78:25:3f:36:bd:95:76:55:91:3a:a1:1c:98:f3: 1c:e5:e0:4e:85:e9:57:2f:c4:d8:9c:55:92:72:a0: 26:35:8b:df:8a:d8:8c:f6:c6:7b:46:47:69:e1:e3: ed:0a:75:25:19:ae:51:b2:cb:89:9b:9e:f3:46:fc: 5a:41:cd:c9:ca:17:d7:dc:28:d2:e4:c8:c4:74:62: 99:1a:96:14:71:dc:1a:0e:e3:ea:b7:5e:be:63:bf: a4:d0:10:f9:90:64:92:da:42:26:96:13:66:35:a2: 42:00:ef:9c:96:3c:5c:1e:04:95:cb:f6:24:58:5e: 7a:b1:17:5f:97:75:c1:f3:5b:70:9e:49:61:c4:8e: e2:5c:f8:0a:fb:80:cc:44:b2:0b:d1:95:1b:55:b2: e6:0d:74:86:cf:d6:78:60:4b:d3:56:40:60:d1:8e: 64:d5:b6:57:1d:18:8b:71:bd:2d:aa:8d:af:ed:92: d2:b4:12:b5:2e:3f:d7:29:eb:0a:5b:41:ee:79:fd: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E1:F4:25:06:4F:0D:7E:D9:28:FC:5C:DF:69:16:A1:82:70:68:01 X509v3 Authority Key Identifier: keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d3:58:a4:a9:57:0a:30:de:0f:07:08:e7:98:9c:f2:75:0b: cd:52:41:29:8a:68:09:27:f4:ab:1b:42:46:e9:25:69:fc:1b: 23:4b:cd:58:a9:67:0e:cf:52:44:9a:c9:04:b5:c8:74:ac:ed: 2a:db:3b:c4:84:f2:6e:bc:c2:e2:5e:f0:44:6c:83:ec:5e:f8: bc:3a:88:a1:3a:43:e3:41:1c:03:88:b2:73:ed:c0:8a:fd:35: 9f:c9:c9:a8:9c:be:0b:e6:01:0e:91:d5:48:6a:4a:d2:b4:7c: a1:c8:64:07:2f:48:30:14:d4:a6:e0:cd:bb:c1:96:64:3c:ae: 33:e0:63:5c:01:b4:2c:82:b9:47:4f:ef:85:ab:d9:8b:3d:57: ed:2b:ed:b4:9a:e9:8c:3f:39:29:68:ca:c2:36:bd:3d:56:77: 5c:3a:ff:b0:ae:e9:1e:0b:3d:1b:00:48:da:5a:98:2f:7e:1d: ad:7d:36:48:b8:9c:17:72:db:f6:01:42:97:38:15:33:3f:6e: 0f:f8:72:88:28:86:a0:11:60:50:41:ae:82:41:4d:20:e1:3d: fb:31:8f:7a:08:5d:d3:a2:62:4a:40:2f:ec:36:09:2c:38:f1: 43:59:7c:2e:47:59:a9:47:fa:99:8a:0b:6f:ce:22:2b:c1:df: 5b:02:2c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrI4eTchR0wgnIJeny7FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTBmNmI3NWU5MTNmMjc4MmVkNTQ5ZWI3MjE3MmM1OWNj NDdhZjEwHhcNMjUxMjI2MDgwMDM5WhcNMjUxMjI3MDgwMDM5WjAzMTEwLwYDVQQD EyhjYmUxZjQyNTA2NGYwZDdlZDkyOGZjNWNkZjY5MTZhMTgyNzA2ODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsQtbdCbjowL8nvmSHgd0lyePJrO OYclQM+7qHKHticxOUHPwgz4YVAZM0KHNKsSPtW8HS+6Uh5Bkk4ueCU/Nr2VdlWR OqEcmPMc5eBOhelXL8TYnFWScqAmNYvfitiM9sZ7Rkdp4ePtCnUlGa5RssuJm57z RvxaQc3JyhfX3CjS5MjEdGKZGpYUcdwaDuPqt16+Y7+k0BD5kGSS2kImlhNmNaJC AO+cljxcHgSVy/YkWF56sRdfl3XB81twnklhxI7iXPgK+4DMRLIL0ZUbVbLmDXSG z9Z4YEvTVkBg0Y5k1bZXHRiLcb0tqo2v7ZLStBK1Lj/XKesKW0Huef3yhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvh9CUGTw1+2Sj8XN9pFqGCcGgBMB8GA1UdIwQY MBaAFI+Q9rdekT8ngu1UnrchcsWcxHrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQt YzFkMGFjYjc4MTlhLzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQtYzFkMGFjYjc4MTlh LzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdNYpKlX CjDeDwcI55ic8nULzVJBKYpoCSf0qxtCRuklafwbI0vNWKlnDs9SRJrJBLXIdKzt Kts7xITybrzC4l7wRGyD7F74vDqIoTpD40EcA4iyc+3Aiv01n8nJqJy+C+YBDpHV SGpK0rR8ochkBy9IMBTUpuDNu8GWZDyuM+BjXAG0LIK5R0/vhavZiz1X7SvttJrp jD85KWjKwja9PVZ3XDr/sK7pHgs9GwBI2lqYL34drX02SLicF3Lb9gFClzgVMz9u D/hyiCiGoBFgUEGugkFNIOE9+zGPeghd06JiSkAv7DYJLDjxQ1l8LkdZqUf6mYoL b84iK8HfWwIsKA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:03 2025 by rpki-client