This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft File: Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json) Hash identifier: y2Kll8GA8c6lFTP23/z3hcX2gFl8UaTgmSmYuuE2D8o= Subject key identifier: D5:05:B0:64:9B:AA:F5:C0:AA:D3:A4:AE:F6:47:B5:EB:C8:BB:63:A3 Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Certificate serial: 019B16F12B3FC6B2F8E2B897CB1CF4E377C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft Manifest number: 12A5 Signing time: Sat 13 Dec 2025 09:01:02 +0000 Manifest this update: Sat 13 Dec 2025 09:01:02 +0000 Manifest next update: Sun 14 Dec 2025 09:01:02 +0000 Files and hashes: 1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: 2VAzUbc/m3xIILKKcXkFxYrWg8YVxQX2QqtJPVU+z6E=) 2: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=) 3: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=) 4: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=) 5: ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa (hash: yTgovZsEnOISpJIgzu2owD01yBh+ryJFnZun9TCD92w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:f1:2b:3f:c6:b2:f8:e2:b8:97:cb:1c:f4:e3:77:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Validity Not Before: Dec 13 09:01:02 2025 GMT Not After : Dec 14 09:01:02 2025 GMT Subject: CN=d505b0649baaf5c0aad3a4aef647b5ebc8bb63a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:6e:e5:59:f8:91:9a:5e:c5:1d:96:d7:5d: d0:5d:18:fa:f5:4f:21:2f:7c:fa:58:19:c0:88:8e: 42:e3:e6:24:26:96:36:7b:1f:11:3f:b3:8e:b8:6c: 41:03:4f:bd:92:8b:e2:c0:b6:5c:ee:66:dd:1c:1f: 31:36:6d:c1:58:33:d3:d6:71:c8:85:eb:ee:6d:2c: 3a:46:49:f1:b3:7f:3a:f5:5a:58:28:82:c0:8b:82: 92:37:b0:e8:e5:da:9b:92:ef:92:13:fd:94:9d:93: ae:1e:ef:ed:24:66:9c:f0:d1:f3:93:4c:46:44:c3: 90:f5:30:c4:cd:90:23:0e:22:1a:f8:82:33:59:80: 4b:c2:33:e3:aa:e1:8b:9b:d9:57:7d:e2:d2:5d:eb: df:07:e7:25:12:35:25:bb:84:6c:a1:b5:62:f3:ed: b1:6e:76:36:fe:1b:d3:90:b4:1e:a6:59:a5:a2:95: c6:95:9a:df:1f:94:80:38:5a:f4:96:de:6a:5d:bd: 91:b1:11:86:80:3c:dd:52:01:9a:da:fa:19:c9:40: cc:d1:85:34:bb:0f:0d:c4:d2:f1:99:34:8f:47:52: bb:38:06:d1:15:e4:f4:30:eb:8a:cb:44:69:b9:e0: 90:b9:75:b1:c8:bc:92:f7:42:6a:4c:79:2e:dc:bc: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:05:B0:64:9B:AA:F5:C0:AA:D3:A4:AE:F6:47:B5:EB:C8:BB:63:A3 X509v3 Authority Key Identifier: keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ba:69:b9:88:78:2a:b0:fb:6a:9e:95:82:eb:2c:fe:40:ff: 1e:10:08:bd:40:16:f6:5a:5d:19:c5:fe:45:bf:12:1b:e4:29: ee:d3:e0:b7:1a:de:f7:36:ad:76:09:91:12:bd:7c:e4:14:b0: b1:43:0f:60:bc:a5:12:77:5a:aa:ed:4f:ae:6a:26:e3:8b:db: 81:75:1b:85:e1:e1:20:ad:d3:d1:87:53:68:47:53:89:75:24: e5:eb:22:b6:f9:36:0d:3d:6c:af:81:d7:44:db:b4:f9:5e:90: ab:f0:f3:02:06:39:00:68:63:9c:dc:2b:51:dc:1b:0f:9b:c9: 65:8d:3b:1d:0b:a9:54:28:4d:7d:2a:9d:b9:2b:91:2f:2f:7e: 95:c5:15:c9:c0:65:05:48:45:56:73:b5:72:16:4c:75:9b:36: 52:df:6f:48:5a:a9:d3:7d:87:b2:24:4b:1e:70:7c:c5:22:6a: 29:20:1c:da:7e:8a:a2:f9:2d:8e:3e:ae:22:02:ad:38:9c:5d: aa:11:3d:3c:09:e9:84:e9:a6:7a:1e:ca:73:c9:5a:70:01:bb: 5e:9b:64:10:36:85:bd:c5:eb:f8:b2:9f:53:5d:14:49:f6:71: d3:6e:bc:78:69:e1:8b:6f:5d:43:92:5f:ad:23:0e:83:42:63: 60:00:33:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsW8Ss/xrL44riXyxz043fIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YWU1NTFhZjBiYjVkNzk3N2VhNzNmNjg5NmYyNWYxZWNh MjhmOWQwHhcNMjUxMjEzMDkwMTAyWhcNMjUxMjE0MDkwMTAyWjAzMTEwLwYDVQQD EyhkNTA1YjA2NDliYWFmNWMwYWFkM2E0YWVmNjQ3YjVlYmM4YmI2M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubpu5Vn4kZpexR2W113QXRj69U8h L3z6WBnAiI5C4+YkJpY2ex8RP7OOuGxBA0+9koviwLZc7mbdHB8xNm3BWDPT1nHI hevubSw6Rknxs3869VpYKILAi4KSN7Do5dqbku+SE/2UnZOuHu/tJGac8NHzk0xG RMOQ9TDEzZAjDiIa+IIzWYBLwjPjquGLm9lXfeLSXevfB+clEjUlu4RsobVi8+2x bnY2/hvTkLQeplmlopXGlZrfH5SAOFr0lt5qXb2RsRGGgDzdUgGa2voZyUDM0YU0 uw8NxNLxmTSPR1K7OAbRFeT0MOuKy0RpueCQuXWxyLyS90JqTHku3LxZmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUFsGSbqvXAqtOkrvZHtevIu2OjMB8GA1UdIwQY MBaAFCWuVRrwu115d+pz9olvJfHsoo+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjkt MjE0MmY4ZmI2NzZlLzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjktMjE0MmY4ZmI2NzZl LzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLppuYh4 KrD7ap6Vguss/kD/HhAIvUAW9lpdGcX+Rb8SG+Qp7tPgtxre9zatdgmREr185BSw sUMPYLylEndaqu1Prmom44vbgXUbheHhIK3T0YdTaEdTiXUk5esitvk2DT1sr4HX RNu0+V6Qq/DzAgY5AGhjnNwrUdwbD5vJZY07HQupVChNfSqduSuRLy9+lcUVycBl BUhFVnO1chZMdZs2Ut9vSFqp032HsiRLHnB8xSJqKSAc2n6Kovktjj6uIgKtOJxd qhE9PAnphOmmeh7Kc8lacAG7XptkEDaFvcXr+LKfU10USfZx0268eGnhi29dQ5Jf rSMOg0JjYAAzZA== -----END CERTIFICATE-----Generated at Sat Dec 13 14:21:03 2025 by rpki-client