This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json) Hash identifier: T1tqGeRcODnmNjyltlmMXqfZjhQtRnMa8Hc8/j83cMo= Subject key identifier: 8C:94:B1:9F:AB:F8:B9:2C:D9:42:82:DE:AD:12:0B:4F:A2:7D:10:7E Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05 Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205 Certificate serial: 019B1EE12943B0C02802D318A3A5D4F4C496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft Manifest number: 019B Signing time: Sun 14 Dec 2025 22:00:31 +0000 Manifest this update: Sun 14 Dec 2025 22:00:31 +0000 Manifest next update: Mon 15 Dec 2025 22:00:31 +0000 Files and hashes: 1: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: 2WaZ9N83ZFHAD/X3Tuy2gghjY9ekE51PEqQnNSNLhIA=) 2: lRoCCR7d7sV8zan-pzAzhXIb0yk.roa (hash: zsjWkEr7wbMEPevuos7iGWcpCUsff/MP3ODrwkUVgTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:29:43:b0:c0:28:02:d3:18:a3:a5:d4:f4:c4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205 Validity Not Before: Dec 14 22:00:31 2025 GMT Not After : Dec 15 22:00:31 2025 GMT Subject: CN=8c94b19fabf8b92cd94282dead120b4fa27d107e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:41:4d:1e:cf:71:de:b9:07:92:e2:90:fa: d7:23:01:5c:a0:b7:d1:0b:e5:08:b6:60:df:a3:fd: c3:12:68:b3:2e:6d:de:2f:99:af:20:a9:d4:20:7b: 04:12:19:f1:a4:44:e5:0a:63:63:ee:85:fb:cc:20: ab:da:5b:d3:dd:41:4e:ec:f3:9a:65:16:c7:d1:99: 38:5e:03:20:3d:0f:c9:1c:eb:f7:05:b7:93:d7:88: ab:10:29:55:fd:69:80:ba:de:80:46:5a:4b:a3:1b: ed:5f:99:01:01:8c:8b:3c:9e:f4:52:0a:10:0e:84: 22:81:d8:30:5b:e1:bd:b9:64:43:56:72:52:ad:12: 76:c9:34:3a:f8:26:9c:2c:b0:93:18:2c:21:a6:94: 6a:73:b1:90:f0:ec:3b:fc:e0:3d:25:35:67:5c:01: b6:a8:32:87:3b:8d:ad:a1:84:12:68:07:52:ca:89: c3:17:89:2c:6c:40:b0:e2:9c:f7:52:01:e3:88:2b: da:86:35:26:93:92:9c:9f:70:35:69:3b:56:b1:24: 9e:6a:9e:cf:55:0a:83:ad:eb:d7:30:5b:62:c0:ad: 68:ff:e8:3d:c5:35:93:4d:37:17:96:ff:23:14:21: e6:9d:f8:51:a9:42:33:d7:e3:80:98:c6:bf:02:70: ad:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:B1:9F:AB:F8:B9:2C:D9:42:82:DE:AD:12:0B:4F:A2:7D:10:7E X509v3 Authority Key Identifier: keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:36:1b:4a:d9:e0:ed:3e:29:b0:8a:75:f8:11:ff:fc:d6:fb: 62:16:c1:f7:c6:be:c2:00:cd:f1:09:98:48:28:af:5a:34:87: d7:f4:46:ee:08:b9:6f:c0:80:53:b5:f5:ae:63:f9:f2:79:b4: fa:01:b2:80:a0:7c:e8:97:42:34:9f:37:15:d1:8f:43:53:a6: ab:b2:36:f8:e5:62:ea:bc:79:25:9f:93:0d:cb:02:21:39:48: 32:7f:cb:0b:43:18:02:c8:2d:d0:48:c3:19:c3:87:d0:60:3e: 61:f3:35:09:78:02:6d:d8:76:b0:b7:2d:ec:3d:de:36:46:50: 0c:60:68:ee:19:f4:3e:b6:75:67:50:b2:35:9f:d3:e3:6b:60: d0:b2:b9:34:d8:79:4c:85:aa:d0:9e:b0:a3:6e:75:ce:0a:20: 94:3b:cd:d8:43:49:25:7f:48:9f:94:e4:00:59:35:0c:50:dd: 45:0b:ee:c6:46:4a:0c:cd:e1:fa:f6:32:02:89:8f:e1:4f:70: 35:5d:a1:91:e2:98:66:0c:ca:3d:c7:ae:33:5d:c9:01:cb:c0: d1:fa:65:e0:ad:79:bc:74:88:2b:e7:af:47:2b:ab:03:31:30: a2:17:b5:41:e4:4c:33:b6:13:d6:89:45:8c:da:41:29:70:2b: 56:31:b8:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4SlDsMAoAtMYo6XU9MSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0 ZTgyMDUwHhcNMjUxMjE0MjIwMDMxWhcNMjUxMjE1MjIwMDMxWjAzMTEwLwYDVQQD Eyg4Yzk0YjE5ZmFiZjhiOTJjZDk0MjgyZGVhZDEyMGI0ZmEyN2QxMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly1BTR7Pcd65B5LikPrXIwFcoLfR C+UItmDfo/3DEmizLm3eL5mvIKnUIHsEEhnxpETlCmNj7oX7zCCr2lvT3UFO7POa ZRbH0Zk4XgMgPQ/JHOv3BbeT14irEClV/WmAut6ARlpLoxvtX5kBAYyLPJ70UgoQ DoQigdgwW+G9uWRDVnJSrRJ2yTQ6+CacLLCTGCwhppRqc7GQ8Ow7/OA9JTVnXAG2 qDKHO42toYQSaAdSyonDF4ksbECw4pz3UgHjiCvahjUmk5Kcn3A1aTtWsSSeap7P VQqDrevXMFtiwK1o/+g9xTWTTTcXlv8jFCHmnfhRqUIz1+OAmMa/AnCtlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyUsZ+r+Lks2UKC3q0SC0+ifRB+MB8GA1UdIwQY MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2 LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjYbStng 7T4psIp1+BH//Nb7YhbB98a+wgDN8QmYSCivWjSH1/RG7gi5b8CAU7X1rmP58nm0 +gGygKB86JdCNJ83FdGPQ1Omq7I2+OVi6rx5JZ+TDcsCITlIMn/LC0MYAsgt0EjD GcOH0GA+YfM1CXgCbdh2sLct7D3eNkZQDGBo7hn0PrZ1Z1CyNZ/T42tg0LK5NNh5 TIWq0J6wo251zgoglDvN2ENJJX9In5TkAFk1DFDdRQvuxkZKDM3h+vYyAomP4U9w NV2hkeKYZgzKPceuM13JAcvA0fpl4K15vHSIK+evRyurAzEwohe1QeRMM7YT1olF jNpBKXArVjG4pQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:11:26 2025 by rpki-client