This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json) Hash identifier: 1CZN1AAZwM7ha7QM4LOwIMkTaqtloMkOH8r6DLMgb+Q= Subject key identifier: 2F:CA:FD:73:0B:E5:26:EC:6C:5C:97:FA:D9:AB:74:30:9C:86:7C:CC Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d Certificate serial: 019B35A06606893A994092BCD28BFE167E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 08:01:02 +0000 Manifest this update: Fri 19 Dec 2025 08:01:02 +0000 Manifest next update: Sat 20 Dec 2025 08:01:02 +0000 Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: ywzM56ape1aU5VfJL06LuiD++HkaT23O2VaxsjKbJJk=) 2: hTYp4tVFk2Iv0MXe_TkiKDxhHf0.roa (hash: 6GO6BRanOpSP6VfdzTHxANKln0jgA0SAFTnzf0Z3Hfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:66:06:89:3a:99:40:92:bc:d2:8b:fe:16:7e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d Validity Not Before: Dec 19 08:01:02 2025 GMT Not After : Dec 20 08:01:02 2025 GMT Subject: CN=2fcafd730be526ec6c5c97fad9ab74309c867ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:1d:3f:a8:37:03:86:77:fc:f4:cd:a5:76: 0f:e7:8c:a6:33:3f:70:fb:db:f0:c6:0d:16:28:e5: dc:26:c2:76:0e:05:67:4b:fa:02:be:50:2b:20:2e: c4:86:79:27:ba:68:f6:41:65:e3:86:ab:fb:5b:b6: f4:0f:68:04:c7:7e:2f:97:9d:56:18:33:4a:ce:0a: d5:22:b9:80:e5:ec:a1:14:d9:a8:be:b8:91:b7:09: 59:31:c7:aa:11:fe:ed:6f:60:00:82:bd:7f:58:14: 3b:91:0e:4b:f6:b6:60:0c:90:f2:12:9b:6f:d6:32: 9c:5a:8d:83:2e:02:f1:80:90:12:da:6f:3f:6f:3c: 10:12:d8:3b:4d:98:26:2b:a6:21:7d:4c:12:85:c4: 61:71:c9:fe:00:a3:ff:97:27:27:55:fa:b6:0b:f5: de:cc:31:da:25:74:ee:55:c2:c2:53:77:7f:a5:48: 07:9b:79:3e:a7:be:3d:82:bd:3e:21:ce:f2:69:0f: cb:2d:ee:0f:64:0e:d2:42:01:9b:ee:c0:25:a4:ad: bd:d2:a6:e4:e9:8d:b5:2c:a6:af:bc:69:cd:3d:8b: cf:ba:35:f5:e4:66:48:cf:3d:aa:14:19:83:29:c4: d9:5d:c6:bb:f6:f8:c7:a4:cf:99:12:1a:e3:95:6e: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CA:FD:73:0B:E5:26:EC:6C:5C:97:FA:D9:AB:74:30:9C:86:7C:CC X509v3 Authority Key Identifier: keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:88:53:5b:c9:de:0e:cc:3e:89:72:aa:09:11:63:da:1a:d1: b4:74:da:5a:22:67:f0:8f:cd:05:89:1e:4e:12:f9:3a:fc:4d: 82:ba:5b:5e:fa:3f:26:56:6c:99:ea:24:93:17:e4:ed:f2:9e: 33:e0:06:33:dd:57:2c:77:7f:34:c3:90:d3:ae:df:8d:8f:d3: 49:25:af:e8:93:8a:81:f0:8c:ad:31:cb:a8:b0:94:2f:6b:81: d6:32:57:ec:20:13:63:40:45:c0:f3:49:e2:9b:29:fc:cb:04: 8c:a9:9f:b6:83:74:78:44:f2:98:14:ef:d9:4b:6c:f4:44:c9: 6c:d9:b2:d4:94:09:db:6b:80:97:42:fe:e0:c1:d0:58:08:b8: f1:79:26:34:11:a3:6e:7c:a0:35:bb:6a:95:f9:b8:c5:c7:04: cf:57:de:6b:6f:e0:4b:fa:e3:ec:24:3a:c4:ed:a0:65:99:24: 0b:e1:88:38:9f:37:cb:9f:fa:41:a2:f5:2e:ac:7d:ed:0f:db: 86:f9:90:9e:fa:51:f6:b3:7e:b2:8a:03:33:6b:77:e2:91:de: 46:1f:22:39:87:90:38:b1:9f:dc:fd:4b:67:43:cb:da:95:e4: 34:0f:36:9a:bb:c2:c3:b3:fb:ea:97:85:fb:c3:c3:13:0d:31: 5a:20:a7:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oGYGiTqZQJK80ov+Fn4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTYyYTMzZmQyMzQ4NzgxYWMxMjNhMTI3MjJhMDg2ZWU4 ZmJhN2QwHhcNMjUxMjE5MDgwMTAyWhcNMjUxMjIwMDgwMTAyWjAzMTEwLwYDVQQD EygyZmNhZmQ3MzBiZTUyNmVjNmM1Yzk3ZmFkOWFiNzQzMDljODY3Y2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtygdP6g3A4Z3/PTNpXYP54ymMz9w +9vwxg0WKOXcJsJ2DgVnS/oCvlArIC7Ehnknumj2QWXjhqv7W7b0D2gEx34vl51W GDNKzgrVIrmA5eyhFNmovriRtwlZMceqEf7tb2AAgr1/WBQ7kQ5L9rZgDJDyEptv 1jKcWo2DLgLxgJAS2m8/bzwQEtg7TZgmK6YhfUwShcRhccn+AKP/lycnVfq2C/Xe zDHaJXTuVcLCU3d/pUgHm3k+p749gr0+Ic7yaQ/LLe4PZA7SQgGb7sAlpK290qbk 6Y21LKavvGnNPYvPujX15GZIzz2qFBmDKcTZXca79vjHpM+ZEhrjlW4RCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/K/XML5SbsbFyX+tmrdDCchnzMMB8GA1UdIwQY MBaAFCeWKjP9I0h4GsEjoScioIbuj7p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQt YmI2YmZmZTY2ZmYzLzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQtYmI2YmZmZTY2ZmYz LzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIhTW8ne Dsw+iXKqCRFj2hrRtHTaWiJn8I/NBYkeThL5OvxNgrpbXvo/JlZsmeokkxfk7fKe M+AGM91XLHd/NMOQ067fjY/TSSWv6JOKgfCMrTHLqLCUL2uB1jJX7CATY0BFwPNJ 4psp/MsEjKmftoN0eETymBTv2Uts9ETJbNmy1JQJ22uAl0L+4MHQWAi48XkmNBGj bnygNbtqlfm4xccEz1fea2/gS/rj7CQ6xO2gZZkkC+GIOJ83y5/6QaL1Lqx97Q/b hvmQnvpR9rN+sooDM2t34pHeRh8iOYeQOLGf3P1LZ0PL2pXkNA82mrvCw7P76peF +8PDEw0xWiCnKg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:54 2025 by rpki-client