This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft File: jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json) Hash identifier: i+thI+4daLiQ3cfaZplYIBOiE81WQn7dKpszFiAecVk= Subject key identifier: 5F:10:96:E1:A5:61:1D:DF:E6:9B:7E:EC:66:C5:02:96:2C:68:BC:24 Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 Certificate issuer: /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Certificate serial: 019AF2090FEDB183F09274FE130225295A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft Manifest number: 1408 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=) 2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: AhbpHMu4ZiImQAKJsTxcsO4+YYoEGtWqULzswuJGo3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0f:ed:b1:83:f0:92:74:fe:13:02:25:29:5a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=5f1096e1a5611ddfe69b7eec66c502962c68bc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:f5:ca:96:07:86:9a:a3:b8:0c:a5:c0:87: 2a:b3:56:b6:f5:5e:35:17:8e:75:68:01:0e:6f:77: a7:5f:80:0a:6e:7e:17:91:50:99:78:69:88:ac:07: 61:c2:a8:ed:fe:2a:e0:3d:f4:c1:d2:50:70:28:83: 2a:d6:dd:10:72:07:5b:81:b0:f3:7c:60:16:93:bc: 7f:b1:a3:0e:31:75:53:fa:b8:e8:28:aa:1d:b0:30: c6:55:b5:64:91:7c:1c:d1:67:bc:ce:81:11:aa:79: cf:38:8c:a2:e8:c9:06:47:85:e4:61:5c:2c:fb:89: 94:9a:5b:98:89:91:ec:a5:a9:14:00:38:6e:f9:ef: 7f:d2:cb:b3:75:e9:07:19:0c:16:92:dc:d5:3f:df: aa:21:22:80:a2:fd:ec:ca:37:be:10:92:72:73:40: e1:49:06:88:b0:e0:fc:1a:29:d4:f2:a2:ee:42:45: 02:7b:a8:e8:bb:c0:3d:b2:08:6d:7c:66:6c:39:8b: 7c:bd:e3:4c:da:5a:1b:3d:75:9b:b1:41:d0:33:b3: 65:6c:cb:af:c7:e0:c4:c4:bd:7b:85:5f:d6:6b:9e: f4:04:d5:96:05:c6:6a:18:ae:35:ef:44:ee:a1:6b: 3b:b5:7b:90:29:ee:0e:e0:f8:c2:1f:56:16:6e:b7: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:10:96:E1:A5:61:1D:DF:E6:9B:7E:EC:66:C5:02:96:2C:68:BC:24 X509v3 Authority Key Identifier: keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:df:c1:42:96:6b:f1:1c:8c:5c:18:e5:5b:b8:6b:17:41:f0: f5:f0:18:d4:c6:90:04:cf:99:9c:d7:8a:8b:be:a1:23:1c:6c: ff:b2:2b:8e:23:2d:a3:82:16:50:17:a7:97:cd:e3:97:7c:ac: 2f:20:38:76:78:dc:6f:a3:72:74:22:4b:a7:34:ae:fc:19:95: 2e:78:d5:05:60:ba:d3:12:3a:11:72:cf:db:7f:73:39:3e:b9: 0e:fe:cc:c7:54:f1:09:f4:98:05:1f:18:a3:c3:59:2d:53:74: 78:83:69:2d:e2:ad:a1:c2:4e:08:e5:0a:3d:fd:fd:8a:c4:b8: df:97:38:da:c3:e6:c7:da:1b:2b:ab:de:c3:db:5f:bc:02:e7: 4e:f6:e4:7c:0a:03:9f:d7:2f:ac:22:db:21:8a:16:4b:55:08: 5c:46:5e:76:60:40:a5:01:a7:75:02:3f:7c:c4:77:36:a0:2d: 51:39:0d:c2:45:59:b4:70:c9:70:26:86:46:fd:7a:4c:d7:bb: 61:ac:61:2f:84:c9:52:df:f8:93:f6:a5:1e:8a:8e:55:62:d0: 07:2a:ff:c0:ec:0f:44:fc:63:a7:7f:80:a1:6c:f1:4c:ee:12: b3:3a:b1:3e:0d:78:10:4e:a3:0a:4e:72:69:13:70:ad:e2:3e: ed:0d:81:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ/tsYPwknT+EwIlKVqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2JhZDZhZTQ5MTY0M2QwNzVlMjFjYmE4NTllZjI4ZTI2 ZTNjNzkwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD Eyg1ZjEwOTZlMWE1NjExZGRmZTY5YjdlZWM2NmM1MDI5NjJjNjhiYzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHX1ypYHhpqjuAylwIcqs1a29V41 F451aAEOb3enX4AKbn4XkVCZeGmIrAdhwqjt/irgPfTB0lBwKIMq1t0QcgdbgbDz fGAWk7x/saMOMXVT+rjoKKodsDDGVbVkkXwc0We8zoERqnnPOIyi6MkGR4XkYVws +4mUmluYiZHspakUADhu+e9/0suzdekHGQwWktzVP9+qISKAov3syje+EJJyc0Dh SQaIsOD8GinU8qLuQkUCe6jou8A9sghtfGZsOYt8veNM2lobPXWbsUHQM7NlbMuv x+DExL17hV/Wa570BNWWBcZqGK4170TuoWs7tXuQKe4O4PjCH1YWbrfE1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8QluGlYR3f5pt+7GbFApYsaLwkMB8GA1UdIwQY MBaAFIw7rWrkkWQ9B14hy6hZ7yjibjx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2Mt NTBkODk1ZDRhZTIzLzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2MtNTBkODk1ZDRhZTIz LzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit/BQpZr 8RyMXBjlW7hrF0Hw9fAY1MaQBM+ZnNeKi76hIxxs/7IrjiMto4IWUBenl83jl3ys LyA4dnjcb6NydCJLpzSu/BmVLnjVBWC60xI6EXLP239zOT65Dv7Mx1TxCfSYBR8Y o8NZLVN0eINpLeKtocJOCOUKPf39isS435c42sPmx9obK6vew9tfvALnTvbkfAoD n9cvrCLbIYoWS1UIXEZedmBApQGndQI/fMR3NqAtUTkNwkVZtHDJcCaGRv16TNe7 YaxhL4TJUt/4k/alHoqOVWLQByr/wOwPRPxjp3+AoWzxTO4SszqxPg14EE6jCk5y aRNwreI+7Q2BXw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:36 2025 by rpki-client