This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json) Hash identifier: o7GbJjssnHvQxmfdvZmKmC+f6Di6c6rfOciwIYDGDPk= Subject key identifier: 54:9F:7B:B6:4A:23:81:BC:33:47:D7:EF:9D:AC:11:CA:1B:F4:F8:95 Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722 Certificate serial: 019B3456E8C53C721700FCE90F46128F87CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft Manifest number: 0614 Signing time: Fri 19 Dec 2025 02:01:09 +0000 Manifest this update: Fri 19 Dec 2025 02:01:09 +0000 Manifest next update: Sat 20 Dec 2025 02:01:09 +0000 Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=) 2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: 2LmCE9oo97hC89xei76AqihbaXps20lHCyKo+xhIGC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e8:c5:3c:72:17:00:fc:e9:0f:46:12:8f:87:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722 Validity Not Before: Dec 19 02:01:09 2025 GMT Not After : Dec 20 02:01:09 2025 GMT Subject: CN=549f7bb64a2381bc3347d7ef9dac11ca1bf4f895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:00:25:11:58:5d:4d:15:4f:c5:1c:c0:f2: a0:19:38:2e:0e:d4:63:a8:96:3c:91:4e:a2:aa:9d: ff:6d:2c:ff:78:f8:e1:7c:83:34:05:10:61:03:5b: 81:d1:05:ff:52:dc:01:1b:ed:bf:a5:a0:b3:61:57: 9e:17:50:94:19:4b:d2:1d:d8:d3:97:41:19:2c:90: b1:f7:80:b9:1f:7c:d2:b6:ac:72:1b:55:9b:4b:75: b0:f4:d5:c8:56:fa:7d:15:91:30:1a:c9:36:ac:a2: e8:a7:19:f9:ef:e1:98:58:7a:4d:bc:93:df:7f:c6: 9b:b3:8a:49:4d:7f:b3:9f:44:49:cd:3f:df:7c:0c: 40:bf:69:47:ba:f1:7c:d5:c1:87:35:43:a8:45:7b: 70:21:2f:5a:93:78:90:98:25:21:44:4c:60:9b:b0: e6:ea:3b:0b:fa:26:84:58:e9:16:d8:76:9a:a6:b4: 6c:0e:9a:54:3d:a0:02:fc:b4:b7:41:75:37:a2:30: cd:e3:b8:fb:33:ea:e6:2d:f4:56:62:bc:e0:47:27: e1:1e:c0:c2:29:a3:d1:5b:ae:f9:a9:78:3f:4c:64: 20:80:e2:9c:dc:44:81:3f:a6:91:4d:b8:cf:60:67: 70:15:69:e4:07:e3:e8:3b:fc:79:14:54:14:87:b1: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9F:7B:B6:4A:23:81:BC:33:47:D7:EF:9D:AC:11:CA:1B:F4:F8:95 X509v3 Authority Key Identifier: keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3c:e1:ca:ce:da:27:bf:73:77:42:b7:21:af:33:c0:de:4f: 16:ea:e8:02:f4:bf:5f:2e:87:70:0e:6c:08:54:c7:bb:cc:6c: e1:25:e1:3c:ac:79:47:e9:b2:e1:ea:2c:bf:86:66:11:6b:1e: ec:b2:21:47:5b:57:d1:5d:b3:c6:55:cb:fc:ea:91:11:59:a6: 56:38:e5:b4:07:e5:c2:de:3d:c6:3d:ac:0e:14:a8:f6:20:bb: 18:9e:0a:f5:e4:ed:31:fa:89:31:31:38:fa:28:bd:53:01:13: fa:f7:f7:3d:a0:94:df:33:e6:ac:4a:93:03:6e:7d:22:62:e9: 8b:00:0c:1d:c8:2c:7e:55:ca:ec:c1:1b:5a:d2:c5:c2:e2:c6: 13:d1:9b:5a:db:14:6d:c1:03:2c:ac:42:0d:0e:26:04:3e:14: f1:0a:93:ee:ad:05:ee:46:9d:af:c9:c8:d3:c3:40:6e:9b:24: e4:3e:a1:c1:1e:b7:4b:ae:2e:f1:0a:2c:b4:0d:f0:55:13:31: bf:7f:73:24:f1:70:25:da:34:50:43:fd:6e:81:78:fe:a3:60: 49:2c:55:34:39:92:01:17:c8:cc:c1:06:e1:22:84:a9:07:78: 0b:18:f4:33:e1:db:bc:80:95:21:31:3e:e1:23:2c:b2:2f:14: e0:60:1e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VujFPHIXAPzpD0YSj4fMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTI1YmE1YTQxMDQ2Nzk2NDYzNGNmZjRhZmFkNzdhNTZk YTQ3MjIwHhcNMjUxMjE5MDIwMTA5WhcNMjUxMjIwMDIwMTA5WjAzMTEwLwYDVQQD Eyg1NDlmN2JiNjRhMjM4MWJjMzM0N2Q3ZWY5ZGFjMTFjYTFiZjRmODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj94AJRFYXU0VT8UcwPKgGTguDtRj qJY8kU6iqp3/bSz/ePjhfIM0BRBhA1uB0QX/UtwBG+2/paCzYVeeF1CUGUvSHdjT l0EZLJCx94C5H3zStqxyG1WbS3Ww9NXIVvp9FZEwGsk2rKLopxn57+GYWHpNvJPf f8abs4pJTX+zn0RJzT/ffAxAv2lHuvF81cGHNUOoRXtwIS9ak3iQmCUhRExgm7Dm 6jsL+iaEWOkW2HaaprRsDppUPaAC/LS3QXU3ojDN47j7M+rmLfRWYrzgRyfhHsDC KaPRW675qXg/TGQggOKc3ESBP6aRTbjPYGdwFWnkB+PoO/x5FFQUh7HxDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSfe7ZKI4G8M0fX752sEcob9PiVMB8GA1UdIwQY MBaAFP+SW6WkEEZ5ZGNM/0r613pW2kciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYt MjcyOTYwYmM0MzIyLzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYtMjcyOTYwYmM0MzIy LzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjzhys7a J79zd0K3Ia8zwN5PFuroAvS/Xy6HcA5sCFTHu8xs4SXhPKx5R+my4eosv4ZmEWse 7LIhR1tX0V2zxlXL/OqREVmmVjjltAflwt49xj2sDhSo9iC7GJ4K9eTtMfqJMTE4 +ii9UwET+vf3PaCU3zPmrEqTA259ImLpiwAMHcgsflXK7MEbWtLFwuLGE9GbWtsU bcEDLKxCDQ4mBD4U8QqT7q0F7kadr8nI08NAbpsk5D6hwR63S64u8QostA3wVRMx v39zJPFwJdo0UEP9boF4/qNgSSxVNDmSARfIzMEG4SKEqQd4Cxj0M+HbvICVITE+ 4SMssi8U4GAeGA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:03 2025 by rpki-client