This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json) Hash identifier: YJC8qQkUTjT8qaDB7IH4ZvA23UNlDY+08vGkBHVo5+Q= Subject key identifier: F5:F2:BC:E5:1F:27:1C:BC:D2:54:29:61:A2:7D:6C:73:A4:54:4B:A7 Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a Certificate serial: 019B239A34FF68BB5E13FCC6868C56D7CDE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft Manifest number: 052B Signing time: Mon 15 Dec 2025 20:01:07 +0000 Manifest this update: Mon 15 Dec 2025 20:01:07 +0000 Manifest next update: Tue 16 Dec 2025 20:01:07 +0000 Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=) 2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: 9jUpmkw1Ak7Rd5sEkkp05uWxoKUzHhZWky5QaBkHmsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:34:ff:68:bb:5e:13:fc:c6:86:8c:56:d7:cd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a Validity Not Before: Dec 15 20:01:07 2025 GMT Not After : Dec 16 20:01:07 2025 GMT Subject: CN=f5f2bce51f271cbcd2542961a27d6c73a4544ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:4b:34:d5:fa:58:7a:32:89:f6:94:a7:a9: 25:46:a0:b2:52:ef:98:08:54:65:6a:c1:35:fe:9d: b8:5a:fe:a0:dd:8e:37:89:3b:11:35:4a:5e:b6:67: d0:8a:df:82:57:e4:c2:f4:93:41:05:0d:8d:5e:20: 3c:47:7c:83:33:a1:92:6e:45:ae:0e:b1:96:92:d3: 6e:79:22:80:07:b3:87:86:a3:24:15:5f:bd:f2:ac: 17:56:fa:9c:54:8f:be:e2:23:48:92:a4:a4:2b:00: 97:57:07:92:c4:d6:66:2e:52:7f:82:da:81:7d:f5: 71:38:e2:dc:a3:e9:54:c1:6c:dd:75:58:a3:f7:06: 40:d7:90:8b:53:ff:17:80:ed:b7:fb:f2:96:e5:a6: 3a:b5:3d:de:d3:34:6c:74:8f:e6:45:5f:d3:5a:d0: 60:01:b0:33:be:4b:72:64:a0:90:57:e4:cb:cc:e5: da:fc:0c:97:fe:75:2f:98:2b:1e:e1:cb:47:06:ef: 1f:1e:fe:7e:0c:fe:d7:52:e1:17:d5:41:64:18:63: 49:55:88:70:b9:c3:24:5a:e9:e5:bb:a7:60:b8:68: 3d:6f:5a:15:98:39:a7:84:a1:43:21:1b:32:32:f6: 3f:7c:29:d6:b2:82:ad:36:f5:8e:bc:d6:35:a4:96: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F2:BC:E5:1F:27:1C:BC:D2:54:29:61:A2:7D:6C:73:A4:54:4B:A7 X509v3 Authority Key Identifier: keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:85:61:fd:56:52:cf:4c:e0:9f:cf:4e:8c:57:b2:b2:ec:a5: 18:71:8a:41:c9:d7:f7:91:28:62:f4:95:f2:2f:59:ac:b2:bf: 54:6c:fa:4e:18:1a:70:f4:fa:87:2b:78:35:fa:b3:70:01:7d: 53:b0:62:41:82:e7:fa:cc:5a:5f:3b:f8:23:3c:6a:69:e8:44: 67:2f:c0:e5:36:de:a6:e3:9e:64:0d:49:43:76:b3:12:41:be: 81:95:c1:12:88:d1:db:0b:80:80:e5:15:40:6e:09:84:4d:19: 27:16:29:f2:9b:c8:5e:83:f9:21:ac:5d:c7:a5:14:8e:03:88: 2e:87:f8:81:b8:f9:4d:4d:12:18:05:eb:59:44:94:b8:51:fd: 69:b1:e6:7d:ee:09:b5:c0:1b:38:55:f5:a9:2e:8a:5a:99:72: 51:e8:dd:59:15:ee:92:a3:62:a7:a9:6b:cc:81:53:d4:c5:83: 1f:24:5b:28:66:e6:95:65:67:f7:42:78:64:ad:9a:80:09:b3: 82:5e:99:f9:5b:b2:94:e5:f1:4c:0f:34:34:6b:af:27:a3:3c: ca:f2:74:ee:21:ab:40:3a:a5:e5:5f:f2:26:51:52:c8:cb:f1: 9f:33:a8:52:0f:43:86:1d:16:0f:90:9e:da:de:2c:7e:fe:77: 68:65:68:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmjT/aLteE/zGhoxW183hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWY4MjNhZjk5M2IzOTk1YzllNWZmNGMyMjhiZGY5OTQ1 MWZiOGEwHhcNMjUxMjE1MjAwMTA3WhcNMjUxMjE2MjAwMTA3WjAzMTEwLwYDVQQD EyhmNWYyYmNlNTFmMjcxY2JjZDI1NDI5NjFhMjdkNmM3M2E0NTQ0YmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+5LNNX6WHoyifaUp6klRqCyUu+Y CFRlasE1/p24Wv6g3Y43iTsRNUpetmfQit+CV+TC9JNBBQ2NXiA8R3yDM6GSbkWu DrGWktNueSKAB7OHhqMkFV+98qwXVvqcVI++4iNIkqSkKwCXVweSxNZmLlJ/gtqB ffVxOOLco+lUwWzddVij9wZA15CLU/8XgO23+/KW5aY6tT3e0zRsdI/mRV/TWtBg AbAzvktyZKCQV+TLzOXa/AyX/nUvmCse4ctHBu8fHv5+DP7XUuEX1UFkGGNJVYhw ucMkWunlu6dguGg9b1oVmDmnhKFDIRsyMvY/fCnWsoKtNvWOvNY1pJZtxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXyvOUfJxy80lQpYaJ9bHOkVEunMB8GA1UdIwQY MBaAFI+fgjr5k7OZXJ5f9MIovfmUUfuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEt MTUxMTY4OWMzYzhhLzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEtMTUxMTY4OWMzYzhh LzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYVh/VZS z0zgn89OjFeysuylGHGKQcnX95EoYvSV8i9ZrLK/VGz6ThgacPT6hyt4NfqzcAF9 U7BiQYLn+sxaXzv4IzxqaehEZy/A5TbepuOeZA1JQ3azEkG+gZXBEojR2wuAgOUV QG4JhE0ZJxYp8pvIXoP5Iaxdx6UUjgOILof4gbj5TU0SGAXrWUSUuFH9abHmfe4J tcAbOFX1qS6KWplyUejdWRXukqNip6lrzIFT1MWDHyRbKGbmlWVn90J4ZK2agAmz gl6Z+VuylOXxTA80NGuvJ6M8yvJ07iGrQDql5V/yJlFSyMvxnzOoUg9Dhh0WD5Ce 2t4sfv53aGVo4g== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:14 2025 by rpki-client