This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft File: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json) Hash identifier: CuSQrztI4zZnOOak5UIGfdgIE8kw5lXsY2fSGbGGMVo= Subject key identifier: E8:58:BE:C3:11:48:60:41:A7:B8:3B:97:E2:F6:AF:C2:82:02:D1:1F Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Certificate serial: 019B0D80BCC3F1D4E0A0A42A96F8360BCE21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 13:01:39 +0000 Manifest this update: Thu 11 Dec 2025 13:01:39 +0000 Manifest next update: Fri 12 Dec 2025 13:01:39 +0000 Files and hashes: 1: F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa (hash: 8zleOD6aN/r+slAEa8mt1l5gM5SF8gtFDMiJe9eHZeU=) 2: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: kNr4dt+pbrUSk+ZZf5IF2mVFB33iIHOQaLd39BAxUBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:bc:c3:f1:d4:e0:a0:a4:2a:96:f8:36:0b:ce:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Validity Not Before: Dec 11 13:01:39 2025 GMT Not After : Dec 12 13:01:39 2025 GMT Subject: CN=e858bec311486041a7b83b97e2f6afc28202d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:ba:bb:fe:73:72:54:4d:39:9f:c8:b0:47: 2d:42:3d:8f:e2:42:30:e4:85:e0:b2:c0:08:d6:11: d6:c1:2e:34:95:9a:6d:af:a7:f2:d8:99:4a:a3:03: 20:9e:4b:83:78:4f:e5:af:23:ea:ea:23:06:34:76: a5:14:dd:cb:b0:43:34:3c:c4:cf:4a:06:ed:83:a3: 49:e0:44:3e:af:4d:8e:f1:0a:21:5b:c3:b1:91:69: 24:c0:ac:b7:da:3f:92:cd:6c:a5:c3:4c:b1:b4:f0: 08:a3:58:7b:4d:82:32:eb:91:44:de:19:96:2f:cf: 72:94:66:94:eb:61:37:03:12:26:05:70:89:36:06: 83:97:8e:4f:c9:c0:58:8b:00:89:11:89:0e:68:75: 92:93:c0:e7:0c:c7:80:af:a1:f2:c5:e2:4b:b4:ce: 88:95:92:d0:11:7b:06:4e:e3:f2:aa:0d:7d:76:59: 18:67:2b:90:28:20:5d:9f:17:d3:3b:59:81:46:88: 32:ee:26:35:b2:8f:c7:33:17:29:93:b0:05:bd:d9: 6c:08:2e:00:82:1e:08:94:e1:01:21:55:d6:ba:cb: 6f:52:d1:c8:20:a9:b0:4c:c7:93:18:17:93:1d:65: c1:88:c9:7f:4c:c5:b1:d8:22:09:23:89:27:46:33: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:BE:C3:11:48:60:41:A7:B8:3B:97:E2:F6:AF:C2:82:02:D1:1F X509v3 Authority Key Identifier: keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:89:e6:c0:c5:52:98:1a:68:05:e5:d1:0d:a4:a2:78:f2:f7: 46:ae:e5:3c:27:7b:d6:db:ad:11:84:4f:34:03:3f:71:60:d3: 2b:2f:10:06:9d:b1:8e:0a:1c:c0:a9:b8:fc:d9:67:7c:d9:dd: e3:49:9c:15:1e:c6:25:46:19:8b:ad:cd:0b:fc:92:fb:f9:3b: 16:74:c6:c5:6b:2e:e2:03:3c:85:f9:cd:04:7c:80:f2:7a:8d: 73:cb:48:3c:a3:33:70:99:c7:1c:82:c6:16:04:a0:34:e4:da: 2e:82:63:00:eb:c5:22:77:47:d3:37:8b:d0:00:ae:2c:8d:e2: 08:04:b0:51:c5:cb:b7:44:3a:0d:2a:2a:b4:34:8f:e8:7c:92: a8:0b:0a:3e:56:47:02:73:1f:69:d7:2d:e6:5d:af:72:a9:09: 5c:3c:15:5e:79:e1:01:64:10:5b:c7:41:c2:c1:1f:34:dc:02: 5a:af:5c:ee:c9:58:07:ea:60:ba:ff:d4:ad:8c:9a:e3:59:fa: fd:de:de:d7:72:d1:eb:08:7a:ad:f0:93:aa:ca:7a:5f:4a:fb: 1a:22:8e:31:67:fe:1f:81:88:a6:7d:c2:2c:d3:7e:2c:7c:b8: 7b:16:3c:03:6c:d5:4b:93:41:04:01:ad:d7:f3:39:79:97:67: 90:a2:ac:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgLzD8dTgoKQqlvg2C84hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTQ1NTYzOTViNDdiZjQzZTBkNWQ1NTZlN2UyNTViNmM4 YWNjYzIwHhcNMjUxMjExMTMwMTM5WhcNMjUxMjEyMTMwMTM5WjAzMTEwLwYDVQQD EyhlODU4YmVjMzExNDg2MDQxYTdiODNiOTdlMmY2YWZjMjgyMDJkMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ne6u/5zclRNOZ/IsEctQj2P4kIw 5IXgssAI1hHWwS40lZptr6fy2JlKowMgnkuDeE/lryPq6iMGNHalFN3LsEM0PMTP Sgbtg6NJ4EQ+r02O8QohW8OxkWkkwKy32j+SzWylw0yxtPAIo1h7TYIy65FE3hmW L89ylGaU62E3AxImBXCJNgaDl45PycBYiwCJEYkOaHWSk8DnDMeAr6HyxeJLtM6I lZLQEXsGTuPyqg19dlkYZyuQKCBdnxfTO1mBRogy7iY1so/HMxcpk7AFvdlsCC4A gh4IlOEBIVXWustvUtHIIKmwTMeTGBeTHWXBiMl/TMWx2CIJI4knRjPc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhYvsMRSGBBp7g7l+L2r8KCAtEfMB8GA1UdIwQY MBaAFCeUVWOVtHv0Pg1dVW5+JVtsiszCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYt NzlkYTdhYWFhM2IyLzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYtNzlkYTdhYWFhM2Iy LzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUInmwMVS mBpoBeXRDaSiePL3Rq7lPCd71tutEYRPNAM/cWDTKy8QBp2xjgocwKm4/NlnfNnd 40mcFR7GJUYZi63NC/yS+/k7FnTGxWsu4gM8hfnNBHyA8nqNc8tIPKMzcJnHHILG FgSgNOTaLoJjAOvFIndH0zeL0ACuLI3iCASwUcXLt0Q6DSoqtDSP6HySqAsKPlZH AnMfadct5l2vcqkJXDwVXnnhAWQQW8dBwsEfNNwCWq9c7slYB+pguv/UrYya41n6 /d7e13LR6wh6rfCTqsp6X0r7GiKOMWf+H4GIpn3CLNN+LHy4exY8A2zVS5NBBAGt 1/M5eZdnkKKs0Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:07:44 2025 by rpki-client