This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json) Hash identifier: rATcO2iceajOnpYXG9EKoHDK6EVhV/Jd4E3xCI6PIzU= Subject key identifier: C4:04:2A:6F:B7:B9:99:33:66:00:C5:AF:C6:71:57:72:41:0E:15:F9 Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Certificate serial: 019B0E5BFA192131ECF465455991751FB7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 17:01:07 +0000 Manifest this update: Thu 11 Dec 2025 17:01:07 +0000 Manifest next update: Fri 12 Dec 2025 17:01:07 +0000 Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=) 2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: p0EY19sJYmwXOA5/THCS/Rqv2FnMscKzBu3kVjHn/uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:fa:19:21:31:ec:f4:65:45:59:91:75:1f:b7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Validity Not Before: Dec 11 17:01:07 2025 GMT Not After : Dec 12 17:01:07 2025 GMT Subject: CN=c4042a6fb7b999336600c5afc6715772410e15f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:e1:0d:6b:81:66:74:37:b7:88:39:6d:00: da:3d:1e:f6:3e:2d:f1:c3:45:a8:0e:f1:a2:18:a9: 70:ce:6a:20:65:7d:e3:de:12:6c:67:39:ea:78:86: d0:38:c1:1a:2d:15:02:7e:c3:81:0e:7b:d3:c1:91: 84:ad:e7:9c:55:5d:1a:bf:c6:67:4c:cc:2f:b1:13: fe:44:67:0d:6e:a5:74:53:f7:06:9d:2f:91:b5:92: ba:92:bf:9c:1a:94:53:07:49:80:b9:e6:7a:ae:e4: 8e:a4:27:db:01:6d:9d:f2:47:8d:a1:66:02:3a:fd: 8e:de:aa:b1:aa:e0:df:92:c2:31:23:5c:08:d2:0b: d6:a2:f5:66:1d:f4:2b:7a:91:24:63:88:52:54:05: cf:65:0c:f4:f2:ef:cd:32:0c:ae:b8:dc:de:27:dd: 39:52:7b:2d:18:dc:c0:da:9e:54:00:bc:58:e2:ed: 2c:c4:95:90:4f:88:0f:0e:be:70:74:90:5d:cf:1d: c0:90:6e:34:3b:21:78:3b:56:79:85:ec:54:2a:5e: dd:6d:ea:e6:fa:84:e6:34:1c:cf:af:3a:38:0c:19: e7:db:98:2f:84:bd:a2:55:9c:0a:65:8c:ff:1f:d5: 6e:02:4c:75:b4:f6:fe:3a:a1:6d:b7:93:ad:47:44: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:04:2A:6F:B7:B9:99:33:66:00:C5:AF:C6:71:57:72:41:0E:15:F9 X509v3 Authority Key Identifier: keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:95:1e:e3:9c:34:29:fe:e8:1f:ba:08:a7:df:a8:cd:4c:2d: 2c:5e:ef:3d:3f:df:9a:7b:4d:d7:bf:a5:15:a0:6b:c1:4f:85: 6b:a9:bf:44:b1:71:6a:76:82:44:35:c6:d6:52:6f:a0:33:55: d8:35:b2:5b:16:bc:5b:cb:70:ea:33:e2:fe:49:df:0c:bf:25: ce:44:a1:cc:05:a8:de:be:ba:01:24:d0:2f:d2:ac:16:cd:37: 1d:e4:9a:b2:5e:a8:26:1f:af:d7:67:71:ec:19:9f:f8:36:f5: 24:1f:02:6b:55:f4:ac:f5:8b:f1:ec:d4:60:1a:52:80:64:9e: b9:02:20:1c:f7:1e:78:b8:82:28:54:42:ec:f7:f0:34:91:d0: 24:2d:c6:de:7a:b2:b8:a6:69:59:d6:e0:ff:00:8b:e5:0d:3a: 7f:a9:e0:23:57:b6:d3:15:82:1d:6b:c0:8f:05:73:b5:d4:66: 65:78:9d:b6:82:22:7e:79:71:c8:86:05:00:b6:a8:8c:44:1f: 8c:14:a2:ef:f7:0c:64:ed:af:76:22:3f:3f:a5:9c:a0:3e:84: 16:6b:35:ad:48:79:48:58:75:9e:bc:96:8c:a1:58:a5:77:66: 5f:d9:89:70:b0:f9:59:c8:47:27:c0:3f:d5:74:8b:27:70:c1: 02:01:13:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW/oZITHs9GVFWZF1H7fBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy Nzc5YTgwHhcNMjUxMjExMTcwMTA3WhcNMjUxMjEyMTcwMTA3WjAzMTEwLwYDVQQD EyhjNDA0MmE2ZmI3Yjk5OTMzNjYwMGM1YWZjNjcxNTc3MjQxMGUxNWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIDhDWuBZnQ3t4g5bQDaPR72Pi3x w0WoDvGiGKlwzmogZX3j3hJsZznqeIbQOMEaLRUCfsOBDnvTwZGEreecVV0av8Zn TMwvsRP+RGcNbqV0U/cGnS+RtZK6kr+cGpRTB0mAueZ6ruSOpCfbAW2d8keNoWYC Ov2O3qqxquDfksIxI1wI0gvWovVmHfQrepEkY4hSVAXPZQz08u/NMgyuuNzeJ905 UnstGNzA2p5UALxY4u0sxJWQT4gPDr5wdJBdzx3AkG40OyF4O1Z5hexUKl7dberm +oTmNBzPrzo4DBnn25gvhL2iVZwKZYz/H9VuAkx1tPb+OqFtt5OtR0ROrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQEKm+3uZkzZgDFr8ZxV3JBDhX5MB8GA1UdIwQY MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZUe45w0 Kf7oH7oIp9+ozUwtLF7vPT/fmntN17+lFaBrwU+Fa6m/RLFxanaCRDXG1lJvoDNV 2DWyWxa8W8tw6jPi/knfDL8lzkShzAWo3r66ASTQL9KsFs03HeSasl6oJh+v12dx 7Bmf+Db1JB8Ca1X0rPWL8ezUYBpSgGSeuQIgHPceeLiCKFRC7PfwNJHQJC3G3nqy uKZpWdbg/wCL5Q06f6ngI1e20xWCHWvAjwVztdRmZXidtoIifnlxyIYFALaojEQf jBSi7/cMZO2vdiI/P6WcoD6EFms1rUh5SFh1nryWjKFYpXdmX9mJcLD5WchHJ8A/ 1XSLJ3DBAgETbg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:21 2025 by rpki-client