This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft File: jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json) Hash identifier: 1r9F0FrdEJ85Fsrq+/RDmZc5JU6zGqAOw1sDDrzlmqI= Subject key identifier: 29:4C:96:09:D4:B8:03:AF:A7:00:F2:8C:55:23:5F:55:D1:05:A9:BA Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Certificate serial: 019B1ACE459171AB7D4D0919DCB8B2E699DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft Manifest number: 01D4 Signing time: Sun 14 Dec 2025 03:01:24 +0000 Manifest this update: Sun 14 Dec 2025 03:01:24 +0000 Manifest next update: Mon 15 Dec 2025 03:01:24 +0000 Files and hashes: 1: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=) 2: RsBRFW0brdHssKPUQSOMEanQNL8.roa (hash: kh/CbUN8p8XDXB2+pjKcCH50DNAToul6qsyjyLvsIbg=) 3: ZxM4wURmy8vS679u-WqAm5TpqRo.roa (hash: rBXB7y06bQsdKzgtd1Z8p6o286XkP+fDEEAT1wMN/OI=) 4: acQ6lYQTZtPRww8nQnrYG_NCvIc.roa (hash: iGzqEuditXbBC1KhmCdk/H/HOvF/nSKYsyWwNpzoQME=) 5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: kY0z704e8Y4/FlrqujowKiMBecNsckMQghDv/5n+8+M=) 6: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:ce:45:91:71:ab:7d:4d:09:19:dc:b8:b2:e6:99:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Validity Not Before: Dec 14 03:01:24 2025 GMT Not After : Dec 15 03:01:24 2025 GMT Subject: CN=294c9609d4b803afa700f28c55235f55d105a9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:14:1b:e5:74:b5:c9:74:e8:55:14:95:94:f3: cf:8b:cc:71:f0:61:54:71:01:68:be:f1:ff:98:5b: 02:d4:79:30:e7:47:6c:8f:79:fe:3e:e2:d1:7c:63: 8f:83:7f:4e:f3:f1:c5:2f:3d:38:cf:92:0f:a3:ba: 8d:34:1d:9c:c7:f8:ae:be:35:19:4e:55:e0:62:11: 41:f9:e8:d0:d4:bb:82:9e:28:46:89:77:80:40:59: 08:fd:9d:09:40:4e:b3:c8:9b:0d:49:d5:ae:01:97: 45:b5:75:29:f4:87:09:2c:b6:de:e4:0b:8a:46:d0: be:3a:13:06:78:93:e6:b1:cb:d6:95:19:da:8c:75: 37:29:11:59:c2:82:8a:c3:9f:a2:4f:28:c8:d9:0f: dd:c8:bb:0b:46:51:fb:fb:a8:44:8f:3f:2a:10:6d: fb:0e:1c:49:f7:31:7a:a6:65:28:fe:23:04:71:3c: 53:09:d2:e9:a0:18:8e:e3:d7:72:ab:7a:02:7a:0b: 56:90:13:85:8c:56:2a:a6:21:61:38:89:48:80:d0: 85:6e:9d:d4:a6:0b:f0:14:cd:f5:f1:6d:b8:99:e6: 1b:f2:63:76:dc:fd:8c:6a:0a:6f:66:b8:6a:ef:7e: 23:81:9d:10:e9:b9:bf:c3:9c:3e:1d:b3:06:1b:4c: 62:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:96:09:D4:B8:03:AF:A7:00:F2:8C:55:23:5F:55:D1:05:A9:BA X509v3 Authority Key Identifier: keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:85:04:c1:bf:1b:c9:9b:aa:7e:e8:df:cf:c6:19:76:9e:48: 63:ea:26:f3:8a:35:8c:5a:3a:86:df:c3:f7:16:ed:65:a8:db: 98:4c:4a:47:0c:52:f8:4d:74:b1:b3:53:ad:50:07:9a:f2:3a: 3d:e6:68:63:f1:99:14:ff:ee:71:ad:64:19:1d:2e:f2:3e:bf: 37:48:c6:f0:5d:06:50:70:96:71:d4:ee:20:cc:3e:b8:f6:30: 35:1a:06:50:aa:22:f5:ed:5f:bb:6c:5d:8c:5d:62:4f:03:77: 3d:59:91:89:1a:d7:62:29:cb:9a:bc:98:25:4b:ae:89:9f:a0: cb:f4:91:5e:4a:a5:c8:28:65:31:ef:92:a3:ef:06:e5:73:f6: a2:74:0c:59:84:1b:a5:15:70:77:40:15:62:8b:db:3a:f4:f0: b2:54:33:cf:1b:00:19:72:8b:08:c9:fc:2c:82:b0:df:97:c0: 76:4e:38:a3:91:87:a9:79:1a:87:1d:37:98:d5:ac:5a:cd:b7: a9:c4:de:d4:f2:0d:04:9d:51:e9:74:4d:6a:e9:23:ba:c0:1c: 05:df:dd:d3:71:8b:28:7e:94:58:cd:dc:43:40:c1:1d:d8:55: 81:b5:3f:80:91:be:14:5e:d4:5e:ef:ef:00:9d:93:ce:e2:20: a1:af:d9:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazkWRcat9TQkZ3Liy5pneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw OTg1ZjEwHhcNMjUxMjE0MDMwMTI0WhcNMjUxMjE1MDMwMTI0WjAzMTEwLwYDVQQD EygyOTRjOTYwOWQ0YjgwM2FmYTcwMGYyOGM1NTIzNWY1NWQxMDVhOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BQb5XS1yXToVRSVlPPPi8xx8GFU cQFovvH/mFsC1Hkw50dsj3n+PuLRfGOPg39O8/HFLz04z5IPo7qNNB2cx/iuvjUZ TlXgYhFB+ejQ1LuCnihGiXeAQFkI/Z0JQE6zyJsNSdWuAZdFtXUp9IcJLLbe5AuK RtC+OhMGeJPmscvWlRnajHU3KRFZwoKKw5+iTyjI2Q/dyLsLRlH7+6hEjz8qEG37 DhxJ9zF6pmUo/iMEcTxTCdLpoBiO49dyq3oCegtWkBOFjFYqpiFhOIlIgNCFbp3U pgvwFM318W24meYb8mN23P2MagpvZrhq734jgZ0Q6bm/w5w+HbMGG0xiGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClMlgnUuAOvpwDyjFUjX1XRBam6MB8GA1UdIwQY MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt NDk0NzEzYTk5NjNhLzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyoUEwb8b yZuqfujfz8YZdp5IY+om84o1jFo6ht/D9xbtZajbmExKRwxS+E10sbNTrVAHmvI6 PeZoY/GZFP/uca1kGR0u8j6/N0jG8F0GUHCWcdTuIMw+uPYwNRoGUKoi9e1fu2xd jF1iTwN3PVmRiRrXYinLmryYJUuuiZ+gy/SRXkqlyChlMe+So+8G5XP2onQMWYQb pRVwd0AVYovbOvTwslQzzxsAGXKLCMn8LIKw35fAdk44o5GHqXkahx03mNWsWs23 qcTe1PINBJ1R6XRNaukjusAcBd/d03GLKH6UWM3cQ0DBHdhVgbU/gJG+FF7UXu/v AJ2TzuIgoa/ZBQ== -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:18 2025 by rpki-client