This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json) Hash identifier: j0VhqnSVeNbmYeDRu1NmMhnVoJ82l4f9kj2U5XVrryI= Subject key identifier: 69:2B:71:F2:6A:3B:EA:42:A7:CF:F2:73:03:1C:DE:F3:1D:D6:45:92 Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Certificate serial: 019B4702269F6EDC34B2BA4CAD19F91EA7F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft Manifest number: 0DC6 Signing time: Mon 22 Dec 2025 17:01:21 +0000 Manifest this update: Mon 22 Dec 2025 17:01:21 +0000 Manifest next update: Tue 23 Dec 2025 17:01:21 +0000 Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=) 2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: 4jdbndNatyaap46mBzE4002rIIIGA3JKBeBBkxmwS9A=) 3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:26:9f:6e:dc:34:b2:ba:4c:ad:19:f9:1e:a7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Validity Not Before: Dec 22 17:01:21 2025 GMT Not After : Dec 23 17:01:21 2025 GMT Subject: CN=692b71f26a3bea42a7cff273031cdef31dd64592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:9f:36:9d:d2:db:df:3a:13:2a:32:f9:58: c9:3b:5e:ca:b4:1d:6f:f9:1b:dd:09:eb:e6:7d:63: 27:53:fe:7a:20:87:eb:f1:87:03:8f:c7:75:8b:71: 58:03:d4:32:38:87:4e:24:1a:8b:d5:a8:d4:91:97: 89:b0:b6:02:38:8c:bd:22:06:18:88:a1:9d:ae:33: 6f:3c:d4:b0:06:56:45:77:ca:f5:e6:a3:40:99:fc: a2:83:03:87:61:24:5e:31:97:da:55:3e:48:eb:fa: 47:6d:28:14:7b:ab:14:2a:01:3c:00:21:32:24:80: da:96:3c:3c:4d:0d:18:b7:ea:82:db:b2:d7:d5:ca: d3:52:a1:6c:22:f9:83:64:66:7a:0c:58:8d:18:1e: 68:d0:23:5b:5b:c2:a7:22:96:50:f9:48:91:f6:d5: e1:6c:09:5b:57:7a:32:1e:ca:48:a1:34:0f:cd:15: dd:36:18:de:c0:98:69:f4:93:dd:78:76:ba:f2:a6: b3:f0:f4:6c:53:ce:11:06:86:17:45:28:76:0a:bc: 26:59:7f:e2:09:53:3c:02:45:a2:23:ce:dc:d8:d9: b8:c9:91:5e:3d:a7:d8:73:72:59:2e:5b:91:15:83: b2:5a:21:aa:df:3c:77:55:c2:bf:a4:15:3e:12:58: 65:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2B:71:F2:6A:3B:EA:42:A7:CF:F2:73:03:1C:DE:F3:1D:D6:45:92 X509v3 Authority Key Identifier: keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cc:2f:04:0a:5b:48:54:5d:9d:f2:1a:fd:26:a1:c4:f8:1c: 99:e6:6d:b7:2d:72:f0:7d:2b:6a:25:4b:ea:db:76:0d:92:09: 80:3c:6d:aa:21:32:d4:dc:36:45:32:70:9d:03:68:72:9a:4f: 4d:ab:a0:b4:37:b6:bd:bb:88:bd:29:66:e9:7f:1b:89:ca:5c: 23:b1:39:f8:9a:3e:0b:99:01:82:b3:5b:87:3f:ca:fe:8d:0f: 79:da:24:06:70:73:6d:4f:8f:9f:26:d4:1e:3a:b9:99:67:1b: 2f:02:bb:9b:e3:d8:51:d0:d1:17:0b:67:fc:b8:43:a0:00:d4: e2:cc:72:fc:81:16:ab:44:db:aa:52:4b:a4:6f:02:3e:94:a0: b4:c2:5d:c4:32:67:a0:f9:b1:8c:4a:a4:17:5f:dc:83:00:9b: 32:ce:b9:dd:8e:46:b2:24:f4:cc:33:ba:81:6a:e0:cd:61:50: 3c:77:c9:ab:f0:8c:8c:13:5a:5c:7f:4d:8a:3f:83:21:a8:8e: 3d:e1:c9:05:18:33:fd:83:96:9f:34:6d:5b:da:8d:69:0c:9f: 67:f0:93:a3:76:96:19:e2:c8:02:4b:f1:5e:28:52:24:55:ed: 89:62:d6:69:98:94:7d:c4:af:2b:a6:c2:3d:b8:cc:0c:29:68: 29:ed:3c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAiafbtw0srpMrRn5Hqf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWE0NjcwMTQ2YWQ4ODBmMTRiYWRhNGIyNzYyYjYxM2Rk ZjFkMTgwHhcNMjUxMjIyMTcwMTIxWhcNMjUxMjIzMTcwMTIxWjAzMTEwLwYDVQQD Eyg2OTJiNzFmMjZhM2JlYTQyYTdjZmYyNzMwMzFjZGVmMzFkZDY0NTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9SfNp3S2986Eyoy+VjJO17KtB1v +RvdCevmfWMnU/56IIfr8YcDj8d1i3FYA9QyOIdOJBqL1ajUkZeJsLYCOIy9IgYY iKGdrjNvPNSwBlZFd8r15qNAmfyigwOHYSReMZfaVT5I6/pHbSgUe6sUKgE8ACEy JIDaljw8TQ0Yt+qC27LX1crTUqFsIvmDZGZ6DFiNGB5o0CNbW8KnIpZQ+UiR9tXh bAlbV3oyHspIoTQPzRXdNhjewJhp9JPdeHa68qaz8PRsU84RBoYXRSh2CrwmWX/i CVM8AkWiI87c2Nm4yZFePafYc3JZLluRFYOyWiGq3zx3VcK/pBU+ElhlnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkrcfJqO+pCp8/ycwMc3vMd1kWSMB8GA1UdIwQY MBaAFI+aRnAUatiA8UutpLJ2K2E93x0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEt N2NkNTA4ZjczMzY0LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEtN2NkNTA4ZjczMzY0 LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacwvBApb SFRdnfIa/SahxPgcmeZtty1y8H0raiVL6tt2DZIJgDxtqiEy1Nw2RTJwnQNocppP TaugtDe2vbuIvSlm6X8bicpcI7E5+Jo+C5kBgrNbhz/K/o0PedokBnBzbU+PnybU Hjq5mWcbLwK7m+PYUdDRFwtn/LhDoADU4sxy/IEWq0TbqlJLpG8CPpSgtMJdxDJn oPmxjEqkF1/cgwCbMs653Y5GsiT0zDO6gWrgzWFQPHfJq/CMjBNaXH9Nij+DIaiO PeHJBRgz/YOWnzRtW9qNaQyfZ/CTo3aWGeLIAkvxXihSJFXtiWLWaZiUfcSvK6bC PbjMDCloKe08kg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:10:45 2025 by rpki-client