This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json) Hash identifier: K7lpZ+zyMQdu5rea9swyyLSD+yjGahc9YwDFW2+wiQg= Subject key identifier: D8:8F:8C:8E:95:01:C1:00:B6:26:07:07:A8:77:39:C6:88:A0:1D:EC Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8 Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8 Certificate serial: 019B3C7F2D1F2220A30786AB050333F15F10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft Manifest number: 0805 Signing time: Sat 20 Dec 2025 16:02:06 +0000 Manifest this update: Sat 20 Dec 2025 16:02:06 +0000 Manifest next update: Sun 21 Dec 2025 16:02:06 +0000 Files and hashes: 1: 3gd5yhd86K_T7jr5SxEq6WbDoig.roa (hash: ojHL5lyJlzOv7t+xWWNn1JpZWPbuIJXizb57Of8VZwQ=) 2: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: ERNDRcHsI50Q/AJXhhgRnfH2tL+rKHh4oFOEvdTzOOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:2d:1f:22:20:a3:07:86:ab:05:03:33:f1:5f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8 Validity Not Before: Dec 20 16:02:06 2025 GMT Not After : Dec 21 16:02:06 2025 GMT Subject: CN=d88f8c8e9501c100b6260707a87739c688a01dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:b1:d8:31:7b:66:69:b7:14:84:ea:ac:d3: e3:dd:d1:f8:6d:f0:ab:b3:c6:16:00:6d:08:bd:7c: d2:53:a6:83:ae:13:88:dc:59:1f:9f:13:30:07:19: b1:39:5e:9f:e4:06:ec:98:50:2a:b6:cf:a9:f3:fb: c8:a8:3c:e7:fc:14:a4:3c:70:41:5d:c4:d6:02:7b: ef:8d:23:1a:b3:64:40:c1:b8:8b:6b:37:06:c2:2e: b0:7c:b7:bb:8e:c7:b2:e0:e0:9c:60:a4:f6:98:15: 08:27:0f:97:03:88:54:d5:56:a5:92:62:41:b6:17: 89:a3:c4:c4:47:52:18:b7:23:74:cf:4e:63:6b:ab: 25:d9:5e:9a:aa:3b:03:3d:a9:bd:e2:3c:0c:45:46: 4d:53:a7:02:22:90:dc:b0:ff:f2:75:91:16:be:a8: 37:f5:56:04:10:12:4c:91:28:95:7a:78:74:fb:ad: f7:c9:9c:fc:4d:d9:bf:e0:8a:0f:33:e1:86:9e:d3: 5b:4b:55:99:88:5d:ca:cc:ca:de:8f:7c:11:cd:a0: 6c:0d:f2:df:cd:f5:d7:02:dd:47:95:8e:84:33:84: 26:d5:c0:4d:df:9c:bb:e0:8b:e9:82:32:c3:39:98: 31:6b:0b:2b:f3:30:90:18:37:f4:40:dc:eb:af:ca: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8F:8C:8E:95:01:C1:00:B6:26:07:07:A8:77:39:C6:88:A0:1D:EC X509v3 Authority Key Identifier: keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:cb:ca:23:ac:4a:df:ab:6a:8a:59:90:98:2a:17:3c:5f: e8:ca:35:f6:c8:cb:84:03:63:46:3f:d6:ce:b3:13:51:47:be: dc:e2:bd:76:3f:4b:f3:76:fd:d2:04:13:85:db:d5:41:49:e9: 19:f2:48:66:d8:cd:0a:6c:26:cb:61:0e:68:30:f3:fc:b1:17: c3:6a:10:d4:43:cb:b0:10:9a:1c:2e:96:4c:1d:d0:25:e3:81: f8:0e:12:e2:51:a9:50:a3:03:c1:07:c2:68:31:75:f0:cb:b9: 3a:79:f3:81:06:b5:2d:24:59:8f:49:ee:2a:23:b4:29:6c:17: 37:7c:e8:06:ba:b6:ab:d5:0a:ac:d9:e2:2a:1f:3d:b9:42:62: 8f:90:a2:bc:01:8b:66:ed:32:97:e8:b4:4a:69:fa:0d:00:b9: db:8d:54:f4:99:24:7e:d9:47:53:3b:8a:cd:ab:bd:d0:36:39: bb:62:d2:c6:92:65:f2:8f:b1:fd:41:0d:ba:5a:f0:f8:14:bc: b8:80:12:9b:b5:2a:d5:8a:68:79:2d:0e:04:fc:c1:18:6a:5e: bb:14:e1:e7:c9:a7:5c:57:41:65:61:08:01:3c:80:de:31:b3: f2:47:bc:2a:19:8c:34:34:77:43:1a:c8:d2:d8:95:8c:ca:bc: 7e:bb:ca:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fy0fIiCjB4arBQMz8V8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NmYzMWFkMTcwMWRmY2EyMWJiZjRhNjVlMDdmMjVjMWNm MmIyYzgwHhcNMjUxMjIwMTYwMjA2WhcNMjUxMjIxMTYwMjA2WjAzMTEwLwYDVQQD EyhkODhmOGM4ZTk1MDFjMTAwYjYyNjA3MDdhODc3MzljNjg4YTAxZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lSx2DF7Zmm3FITqrNPj3dH4bfCr s8YWAG0IvXzSU6aDrhOI3FkfnxMwBxmxOV6f5AbsmFAqts+p8/vIqDzn/BSkPHBB XcTWAnvvjSMas2RAwbiLazcGwi6wfLe7jsey4OCcYKT2mBUIJw+XA4hU1ValkmJB theJo8TER1IYtyN0z05ja6sl2V6aqjsDPam94jwMRUZNU6cCIpDcsP/ydZEWvqg3 9VYEEBJMkSiVenh0+633yZz8Tdm/4IoPM+GGntNbS1WZiF3KzMrej3wRzaBsDfLf zfXXAt1HlY6EM4Qm1cBN35y74IvpgjLDOZgxawsr8zCQGDf0QNzrr8pvnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiPjI6VAcEAtiYHB6h3OcaIoB3sMB8GA1UdIwQY MBaAFCZvMa0XAd/KIbv0pl4H8lwc8rLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzct MTBiZjc3YjIwZGFjLzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzctMTBiZjc3YjIwZGFj LzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACorLyiOs St+raopZkJgqFzxf6Mo19sjLhANjRj/WzrMTUUe+3OK9dj9L83b90gQThdvVQUnp GfJIZtjNCmwmy2EOaDDz/LEXw2oQ1EPLsBCaHC6WTB3QJeOB+A4S4lGpUKMDwQfC aDF18Mu5OnnzgQa1LSRZj0nuKiO0KWwXN3zoBrq2q9UKrNniKh89uUJij5CivAGL Zu0yl+i0Smn6DQC5241U9JkkftlHUzuKzau90DY5u2LSxpJl8o+x/UENulrw+BS8 uIASm7Uq1YpoeS0OBPzBGGpeuxTh58mnXFdBZWEIATyA3jGz8ke8KhmMNDR3QxrI 0tiVjMq8frvKzA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:49:04 2025 by rpki-client