This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json) Hash identifier: PDAaAgC9ttvP+vFEPx5MoEXMYm4zBfmQ3Oev5a2MH4g= Subject key identifier: C2:6A:2D:C5:81:E0:9E:EF:CF:28:9A:BC:A2:53:7C:21:8A:A4:B3:56 Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Certificate serial: 019B1CBC5DCEB661185378536832547BD315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft Manifest number: 0AAA Signing time: Sun 14 Dec 2025 12:01:05 +0000 Manifest this update: Sun 14 Dec 2025 12:01:05 +0000 Manifest next update: Mon 15 Dec 2025 12:01:05 +0000 Files and hashes: 1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: a3N/jEd2hEAugHYgKeYooInQ58jnSy3XxXA1uT6k3fQ=) 2: KJRHlioCmueXrp8BQh01_p8EnRA.roa (hash: +sq9qLL3Z0LGHm3NSGDmnSZ0MO+ik5ZHfhd1GnM1VYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:5d:ce:b6:61:18:53:78:53:68:32:54:7b:d3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Validity Not Before: Dec 14 12:01:05 2025 GMT Not After : Dec 15 12:01:05 2025 GMT Subject: CN=c26a2dc581e09eefcf289abca2537c218aa4b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:1a:12:73:2f:1a:82:90:11:9a:e8:50:09: 03:b5:18:fc:aa:3c:d4:0f:35:19:9d:54:25:68:8b: b2:6b:a9:5c:e1:a9:d5:5a:c9:bd:db:03:5c:a8:c2: 3a:33:ee:e0:86:8b:a3:0f:1f:a8:07:2c:b5:20:c6: b7:54:40:2b:c7:43:ae:45:73:af:ec:8e:c3:91:29: 63:90:56:a4:61:ed:2c:7d:6a:d8:47:1c:3a:67:4d: 02:2b:c1:21:48:1c:51:40:be:2d:b7:58:0b:03:a5: 18:ef:4a:7f:68:bd:c4:19:a9:05:51:54:b3:be:31: 95:87:29:14:53:e3:e4:b3:0a:6b:09:bd:bb:b6:9f: f4:16:c1:94:d1:77:43:cc:c5:e2:07:85:79:25:cf: db:18:91:fa:f5:50:cf:42:f3:9e:f5:a5:a8:97:a3: 86:0c:ea:03:73:ee:0b:70:6e:80:cd:68:89:d8:86: e4:ca:88:76:56:19:e5:5a:ef:5c:c3:a8:b1:3c:e3: fd:6e:f7:5c:b5:c6:16:7c:ca:4b:01:1d:60:91:c6: f6:1e:5f:c3:b8:7e:9a:29:31:b3:87:45:2d:16:c0: a2:56:6b:54:ed:fe:8d:8f:0c:71:17:6e:61:c2:18: 99:37:15:4d:5d:7f:84:6f:4e:88:fe:04:2a:29:dc: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6A:2D:C5:81:E0:9E:EF:CF:28:9A:BC:A2:53:7C:21:8A:A4:B3:56 X509v3 Authority Key Identifier: keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:44:e0:08:ed:01:a6:68:b2:20:d6:c7:16:8a:fb:16:c4:f5: 1f:63:4b:e5:f6:74:ad:ed:13:12:32:5c:c7:79:7e:bc:1a:63: b7:21:5e:5d:57:e1:9a:2a:0a:16:66:e4:56:5e:bf:a9:6d:fd: 55:8c:53:ca:c3:39:e0:22:ff:e6:82:b1:dc:c7:fd:3c:d0:a4: f5:ec:cb:53:cd:b8:4b:37:98:e1:24:aa:7d:19:ed:b9:07:18: a8:5e:cc:2b:f6:7a:0f:28:dd:44:7b:32:65:1b:fc:fd:c7:80: 9b:2c:e3:e5:bf:39:a1:ae:27:ab:6f:dc:31:7f:d3:91:f0:61: 04:89:b1:51:80:05:03:b6:0e:12:0f:ab:ed:48:47:e9:5c:c8: bb:ce:61:75:90:f9:3d:1b:c7:86:f1:99:c5:81:17:9a:8a:ed: a4:b5:35:40:91:a0:3e:ba:9b:81:e6:97:88:3b:91:f1:f8:b6: 69:88:01:9d:73:7a:fb:43:e5:3b:ff:f8:65:94:d4:d9:17:30: 40:56:20:cf:ef:b3:dd:76:d3:50:7c:fd:a2:63:ba:a1:36:4b: 46:e5:38:ac:31:c9:74:ec:7c:8d:9f:61:26:a2:f2:df:ed:3f: 2e:8f:09:6e:76:5f:7c:23:5d:9f:84:8f:ea:f2:80:21:9f:a0: a5:c9:b7:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvF3OtmEYU3hTaDJUe9MVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZjI2MTM0ODMwZWUyMGRjMjI5ODZkYzhhNzM2NmQwOTcy YjI5MzAwHhcNMjUxMjE0MTIwMTA1WhcNMjUxMjE1MTIwMTA1WjAzMTEwLwYDVQQD EyhjMjZhMmRjNTgxZTA5ZWVmY2YyODlhYmNhMjUzN2MyMThhYTRiMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4aEnMvGoKQEZroUAkDtRj8qjzU DzUZnVQlaIuya6lc4anVWsm92wNcqMI6M+7ghoujDx+oByy1IMa3VEArx0OuRXOv 7I7DkSljkFakYe0sfWrYRxw6Z00CK8EhSBxRQL4tt1gLA6UY70p/aL3EGakFUVSz vjGVhykUU+PkswprCb27tp/0FsGU0XdDzMXiB4V5Jc/bGJH69VDPQvOe9aWol6OG DOoDc+4LcG6AzWiJ2Ibkyoh2VhnlWu9cw6ixPOP9bvdctcYWfMpLAR1gkcb2Hl/D uH6aKTGzh0UtFsCiVmtU7f6NjwxxF25hwhiZNxVNXX+Eb06I/gQqKdzdlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJqLcWB4J7vzyiavKJTfCGKpLNWMB8GA1UdIwQY MBaAFOfyYTSDDuINwimG3IpzZtCXKykwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAt YTc2MjkyZTIwNDU4LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAtYTc2MjkyZTIwNDU4 LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUTgCO0B pmiyINbHFor7FsT1H2NL5fZ0re0TEjJcx3l+vBpjtyFeXVfhmioKFmbkVl6/qW39 VYxTysM54CL/5oKx3Mf9PNCk9ezLU824SzeY4SSqfRntuQcYqF7MK/Z6DyjdRHsy ZRv8/ceAmyzj5b85oa4nq2/cMX/TkfBhBImxUYAFA7YOEg+r7UhH6VzIu85hdZD5 PRvHhvGZxYEXmortpLU1QJGgPrqbgeaXiDuR8fi2aYgBnXN6+0PlO//4ZZTU2Rcw QFYgz++z3XbTUHz9omO6oTZLRuU4rDHJdOx8jZ9hJqLy3+0/Lo8JbnZffCNdn4SP 6vKAIZ+gpcm3zg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:17:31 2025 by rpki-client